@apifuse/provider-sdk 2.2.0-beta.25 → 2.2.0-beta.26

package/dist/declaration-validation.d.ts

@@ -0,0 +1,23 @@
+import { ProviderError } from "./errors.js";
+import type { ProviderDefinition } from "./types.js";
+export declare const DECLARATION_INVALID_CODE = "DECLARATION_INVALID";
+export declare const DECLARATION_RULE_IDS: {
+    readonly challengeShape: "credentials-challenge-shape";
+    readonly journeyExecutable: "health-journey-executable";
+    readonly schemaSerializable: "operation-schema-serializable";
+    readonly proxyExplicitPolicy: "proxy-explicit-policy";
+    readonly proxyVendorExclusive: "proxy-vendor-fields-exclusive";
+    readonly proxyNoMixedVendors: "proxy-no-mixed-vendors";
+    readonly proxySmartproxyGeo: "proxy-smartproxy-country-only";
+    readonly operationUpstreamProxy: "operation-upstream-proxy-unsupported";
+};
+export type DeclarationRuleId = (typeof DECLARATION_RULE_IDS)[keyof typeof DECLARATION_RULE_IDS];
+export type DeclarationViolation = {
+    ruleId: DeclarationRuleId;
+    path: string;
+    message: string;
+    fix: string;
+};
+export declare function declarationInvalidError(violations: readonly DeclarationViolation[]): ProviderError;
+/** Enforces declaration rules whose runtime behavior would otherwise fail open. */
+export declare function validateFailClosedDeclaration(provider: ProviderDefinition): void;

package/dist/declaration-validation.js

@@ -0,0 +1,159 @@
+import { describeSchema } from "./contract-serialization.js";
+import { ProviderError } from "./errors.js";
+export const DECLARATION_INVALID_CODE = "DECLARATION_INVALID";
+export const DECLARATION_RULE_IDS = {
+    challengeShape: "credentials-challenge-shape",
+    journeyExecutable: "health-journey-executable",
+    schemaSerializable: "operation-schema-serializable",
+    proxyExplicitPolicy: "proxy-explicit-policy",
+    proxyVendorExclusive: "proxy-vendor-fields-exclusive",
+    proxyNoMixedVendors: "proxy-no-mixed-vendors",
+    proxySmartproxyGeo: "proxy-smartproxy-country-only",
+    operationUpstreamProxy: "operation-upstream-proxy-unsupported",
+};
+export function declarationInvalidError(violations) {
+    const summary = violations
+        .map((violation) => `${violation.path} [${violation.ruleId}]: ${violation.message}`)
+        .join("\n");
+    return new ProviderError(`Provider declaration is invalid (${violations.length} violation${violations.length === 1 ? "" : "s"}).${summary ? `\n${summary}` : ""}`, {
+        code: DECLARATION_INVALID_CODE,
+        details: { violations: [...violations] },
+        fix: "Apply every violation's fix hint, then validate the declaration again.",
+    });
+}
+/** Enforces declaration rules whose runtime behavior would otherwise fail open. */
+export function validateFailClosedDeclaration(provider) {
+    const violations = [];
+    validateHealthDeclaration(provider, violations);
+    validateSchemaDeclaration(provider, violations);
+    validateProxyDeclaration(provider, violations);
+    validateOperationDeclaration(provider, violations);
+    if (violations.length > 0)
+        throw declarationInvalidError(violations);
+}
+function validateHealthDeclaration(provider, violations) {
+    for (const [index, journey] of (provider.healthJourneys ?? []).entries()) {
+        if (!journey || typeof journey !== "object")
+            continue;
+        if (typeof journey.run !== "function") {
+            const journeyPath = healthJourneyPath(journey, index);
+            violations.push({
+                ruleId: DECLARATION_RULE_IDS.journeyExecutable,
+                path: `${journeyPath}.run`,
+                message: "coversOperations cannot provide health coverage without executable run logic.",
+                fix: `Add an async run(ctx) implementation to ${journeyPath}.`,
+            });
+        }
+    }
+    // NOTE: healthCheck.cases[].enabled is intentionally NOT validated here.
+    // self-test.ts reports a gated case as status "skipped" with skipReason
+    // "disabled", so the skip is visible in results rather than silent — it is a
+    // supported conditional-execution feature, not a class-1 silent no-op.
+}
+function healthJourneyPath(journey, index) {
+    return typeof journey.id === "string" && journey.id.length > 0
+        ? `healthJourneys.${journey.id}`
+        : `healthJourneys[${index}]`;
+}
+function validateSchemaDeclaration(provider, violations) {
+    for (const [operationId, operation] of Object.entries(provider.operations ?? {})) {
+        const schemaEntries = [
+            [`operations.${operationId}.input`, operation.input],
+            [`operations.${operationId}.output`, operation.output],
+        ];
+        // SSE event schemas reach contract extraction the same way input/output do,
+        // so a transform-bearing event schema would abort extraction at runtime while
+        // passing declaration checks. Validate them under the same rule.
+        const transport = operation.transport;
+        if (transport?.kind === "sse") {
+            for (const [eventName, eventSchema] of Object.entries(transport.events ?? {})) {
+                schemaEntries.push([
+                    `operations.${operationId}.transport.events.${eventName}`,
+                    eventSchema,
+                ]);
+            }
+        }
+        for (const [path, schema] of schemaEntries) {
+            try {
+                describeSchema(schema);
+            }
+            catch (error) {
+                const reason = error instanceof Error ? error.message : String(error);
+                violations.push({
+                    ruleId: DECLARATION_RULE_IDS.schemaSerializable,
+                    path,
+                    message: `schema conversion to JSON Schema failed: ${reason}`,
+                    fix: `Replace unsupported constructs in ${path} so z.toJSONSchema() succeeds.`,
+                });
+            }
+        }
+    }
+}
+const MANAGED_PROXY_VENDORS = new Set(["smartproxy", "nodemaven"]);
+const STATIC_PROXY_VENDORS = new Set(["custom", "decodo"]);
+function validateProxyDeclaration(provider, violations) {
+    if (provider.proxy === true) {
+        violations.push({
+            ruleId: DECLARATION_RULE_IDS.proxyExplicitPolicy,
+            path: "proxy",
+            message: "proxy: true does not require resolvable proxy egress.",
+            fix: 'Replace proxy: true with an explicit policy such as proxy: { mode: "required", providers: ["smartproxy"] }.',
+        });
+        return;
+    }
+    if (!provider.proxy || typeof provider.proxy !== "object")
+        return;
+    const policy = provider.proxy;
+    const hasProvider = policy.provider !== undefined;
+    const hasProviders = policy.providers !== undefined;
+    if (hasProvider && hasProviders) {
+        violations.push({
+            ruleId: DECLARATION_RULE_IDS.proxyVendorExclusive,
+            path: "proxy",
+            message: "provider and providers are ambiguous when declared together.",
+            fix: "Keep either proxy.provider or proxy.providers, and remove the other field.",
+        });
+    }
+    const vendors = declaredProxyVendors(policy);
+    if (vendors.some((vendor) => MANAGED_PROXY_VENDORS.has(vendor)) &&
+        vendors.some((vendor) => STATIC_PROXY_VENDORS.has(vendor))) {
+        violations.push({
+            ruleId: DECLARATION_RULE_IDS.proxyNoMixedVendors,
+            path: hasProviders ? "proxy.providers" : "proxy.provider",
+            message: "managed and deprecated static proxy vendors cannot share a chain.",
+            fix: "Use only smartproxy/nodemaven vendors, or only deprecated static markers, in one policy.",
+        });
+    }
+    if (vendors.includes("smartproxy")) {
+        for (const field of ["subdivision", "city"]) {
+            if (policy.geo?.[field] === undefined)
+                continue;
+            const path = `proxy.geo.${field}`;
+            violations.push({
+                ruleId: DECLARATION_RULE_IDS.proxySmartproxyGeo,
+                path,
+                message: `smartproxy cannot honor ${field}-level geo targeting.`,
+                fix: `Remove ${path} or use a vendor chain that can honor it.`,
+            });
+        }
+    }
+}
+function declaredProxyVendors(policy) {
+    const vendors = [...(policy.providers ?? [])];
+    if (policy.provider !== undefined)
+        vendors.push(policy.provider);
+    return vendors;
+}
+function validateOperationDeclaration(provider, violations) {
+    for (const [operationId, operation] of Object.entries(provider.operations ?? {})) {
+        if (!operation.upstream?.proxy)
+            continue;
+        const path = `operations.${operationId}.upstream.proxy`;
+        violations.push({
+            ruleId: DECLARATION_RULE_IDS.operationUpstreamProxy,
+            path,
+            message: "operation-level proxy policy is not wired into operation execution.",
+            fix: `Remove ${path} and declare the effective policy at provider.proxy.`,
+        });
+    }
+}

package/dist/define.d.ts

@@ -9,7 +9,7 @@ interface ProviderImplementationProfile {
     visibility: "internal" | "operator";
 }
 export declare const VALID_PROVIDER_RESOLVER_VENDORS: readonly ["browser", "capsolver", "capmonster", "2captcha", "custom"];
-export declare const VALID_PROVIDER_CHALLENGE_KINDS: readonly ["turnstile", "recaptcha_v2", "recaptcha_v3", "hcaptcha", "cloudflare_interstitial", "aws_waf"];
+export declare const VALID_PROVIDER_CHALLENGE_KINDS: readonly ["turnstile", "recaptcha_v2", "recaptcha_v3", "hcaptcha", "cloudflare_interstitial", "aws_waf", "akamai_sec_cpt", "akamai_sensor"];
 type ProviderOperation = OperationDefinition<SchemaLike, SchemaLike>;
 type OperationConfig<TInput extends SchemaLike, TOutput extends SchemaLike> = Omit<OperationDefinition<TInput, TOutput>, "handler"> & {
     handler(ctx: Parameters<OperationDefinition<TInput, TOutput>["handler"]>[0], input: InferSchemaOutput<TInput>): OperationHandlerResult<InferSchemaOutput<TOutput>> | Promise<OperationHandlerResult<InferSchemaOutput<TOutput>>>;

package/dist/define.js

@@ -1,4 +1,5 @@
 import ms from "ms";
+import { validateFailClosedDeclaration } from "./declaration-validation.js";
 import { SDK_RUNTIME_OWNED_ERROR_CODES } from "./error-resolution.js";
 import { ProviderError, ValidationError } from "./errors.js";
 import { NativeEgressPolicyValidationError, validateNativeProviderConfig, } from "./native-egress-policy.js";
@@ -66,6 +67,8 @@ export const VALID_PROVIDER_CHALLENGE_KINDS = exhaustiveLiteralArray()([
     "hcaptcha",
     "cloudflare_interstitial",
     "aws_waf",
+    "akamai_sec_cpt",
+    "akamai_sensor",
 ]);
 const SMARTPROXY_APP_KEY_SECRET = "APIFUSE__PROXY__SMARTPROXY_APP_KEY";
 const NODEMAVEN_USERNAME_SECRET = "APIFUSE__PROXY__NODEMAVEN_USERNAME";
@@ -423,9 +426,15 @@ function validateProviderResolver(config) {
             fix: `Set resolver for provider "${config.id}" to { vendors: ["2captcha"], kinds: ["turnstile"] }.`,
         });
     }
-    rejectUnknownFields(resolver, new Set(["vendors", "kinds"]), "resolver", config.id);
+    rejectUnknownFields(resolver, new Set(["vendors", "kinds", "clientProfile"]), "resolver", config.id);
     validateResolverLiteralArray(resolver.vendors, "resolver.vendors", VALID_PROVIDER_RESOLVER_VENDORS, config.id);
     validateResolverLiteralArray(resolver.kinds, "resolver.kinds", VALID_PROVIDER_CHALLENGE_KINDS, config.id);
+    if (resolver.clientProfile !== undefined &&
+        (typeof resolver.clientProfile !== "string" || !resolver.clientProfile.trim())) {
+        throw new ValidationError(`Provider "${config.id}" has invalid resolver.clientProfile: must be a non-empty string.`, {
+            fix: `Set resolver.clientProfile for provider "${config.id}" to a transport-owned profile name.`,
+        });
+    }
 }
 function validateResolverLiteralArray(value, field, validValues, providerId) {
     if (!Array.isArray(value)) {
@@ -1616,7 +1625,7 @@ export function defineProvider(config) {
         });
     if (config.browser && config.runtime !== "browser")
         throw new ProviderError(`Provider "${config.id}" cannot define browser config unless runtime is "browser"`, { fix: 'Set runtime: "browser" or remove the browser config' });
-    return {
+    const provider = {
         id: config.id,
         version: config.version,
         runtime: config.runtime,
@@ -1645,4 +1654,6 @@ export function defineProvider(config) {
         healthProbe: config.healthProbe ?? config.healthMonitor,
         healthJourneys: config.healthJourneys,
     };
+    validateFailClosedDeclaration(provider);
+    return provider;
 }

package/dist/index.d.ts

@@ -3,7 +3,7 @@ export * from "./ceremonies/index.js";
 export * from "./choice-token.js";
 export type { ApiFuseConfig, BrowserConfig, ProxyProtocol, ProxyResolutionOptions, ProxyResolutionSource, ProxyVendorName, ResolvedProxyConfig, SessionConfig, } from "./config/loader.js";
 export { defineConfig, loadApiFuseConfig, resolveProxy } from "./config/loader.js";
-export { canonicalJson, digestProviderContract, extractProviderContract, type JsonPrimitive, type JsonValue, PROVIDER_CONTRACT_SCHEMA_VERSION, type ProviderContractOperation, type ProviderContractSnapshot, } from "./contract.js";
+export { canonicalJson, digestProviderContract, extractProviderContract, type JsonPrimitive, type JsonValue, OutputTextTrustProjectionError, PROVIDER_CONTRACT_SCHEMA_VERSION, type ProviderContractOperation, type ProviderContractSnapshot, } from "./contract.js";
 export { centered, delayed, defineHealthJourney, defineOperation, defineProvider, defineSmsOtpMatcher, defineStreamOperation, every, type ProviderConfig, } from "./define.js";
 export type { DevServerOptions } from "./dev.js";
 export { createDevServer, startDevServer } from "./dev.js";
@@ -30,13 +30,14 @@ export { type InstrumentationOptions, type InstrumentedProviderContext, wrapWith
 export { type PrevalidateResult, prevalidate } from "./runtime/prevalidate.js";
 export { getProviderBaseUrl } from "./runtime/provider.js";
 export { APIFUSE__CDP_POOL__URL, APIFUSE__RESOLVER__2CAPTCHA__API_KEY, APIFUSE__RESOLVER__CAPMONSTER__API_KEY, APIFUSE__RESOLVER__CAPSOLVER__API_KEY, APIFUSE__RESOLVER__TIMEOUT_MS, createResolverClientFromEnv, createUnsupportedResolverClient, DEFAULT_RESOLVER_TIMEOUT_MS, invalidateResolverSolution, type ResolverRuntimeOptions, } from "./runtime/resolver.js";
+export type { ResolverVendorTransport } from "./runtime/resolver-vendors/types.js";
 export { assertRequiredSecretsPresent, listMissingRequiredSecrets, MISSING_SECRET_CODE, } from "./runtime/secrets.js";
 export { createUnsupportedProviderRuntimeState, UnsupportedProviderStateError, } from "./runtime/state.js";
 export { createStealthClient } from "./runtime/stealth.js";
 export { APIFUSE__OCR__API_KEY_ENV, APIFUSE__OCR__BACKEND_ENV, APIFUSE__OCR__BASE_URL_ENV, APIFUSE__OCR__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__OCR__MODEL_ENV, CLOUDFLARE_ACCOUNT_ID_ENV, CLOUDFLARE_WORKERS_AI_OCR_BACKEND, createCloudflareWorkersAiOcrClient, createOcrClientFromEnv, createOpenAiCompatibleOcrClient, createUnsupportedOcrClient, DEFAULT_CLOUDFLARE_WORKERS_AI_OCR_MODEL, extractCaptchaCandidates, OPENAI_COMPATIBLE_OCR_BACKEND, } from "./runtime/ocr.js";
 export { APIFUSE__STT__BACKEND_ENV, APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__STT__MODEL_ENV, createSttClientFromEnv, createUnsupportedSttClient, extractVerificationCode, resolveSttPrompt, } from "./runtime/stt.js";
 export { type CreateTraceContextOptions, createTraceContext, type Span, type TraceContext, } from "./runtime/trace.js";
-export { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, z, } from "./schema.js";
+export { APIFUSE_TEXT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, AUTO_TRUSTED_ZOD_STRING_FORMATS, collectOutputTextTrust, collectSensitivePaths, describeKey, field, fields, findUnclassifiedOutputTextPaths, isSensitiveSchema, OutputTextTrustCollectionError, OutputTextTrustSchemaError, redactPayload, type OutputTextTrustMap, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, textTrust, type TextTrust, type TextTrustMetadata, z, } from "./schema.js";
 export { createServerApp, ERROR_OBSERVABILITY_HEADER, type ServeOptions, serve, } from "./server/index.js";
 export { getStealthProfile, listStealthProfiles } from "./stealth/profiles.js";
 export * from "./stream.js";

package/dist/index.js

@@ -3,7 +3,7 @@ export * from "./auth.js";
 export * from "./ceremonies/index.js";
 export * from "./choice-token.js";
 export { defineConfig, loadApiFuseConfig, resolveProxy } from "./config/loader.js";
-export { canonicalJson, digestProviderContract, extractProviderContract, PROVIDER_CONTRACT_SCHEMA_VERSION, } from "./contract.js";
+export { canonicalJson, digestProviderContract, extractProviderContract, OutputTextTrustProjectionError, PROVIDER_CONTRACT_SCHEMA_VERSION, } from "./contract.js";
 export { centered, delayed, defineHealthJourney, defineOperation, defineProvider, defineSmsOtpMatcher, defineStreamOperation, every, } from "./define.js";
 export { createDevServer, startDevServer } from "./dev.js";
 export * from "./errors.js";
@@ -33,7 +33,7 @@ export { createStealthClient } from "./runtime/stealth.js";
 export { APIFUSE__OCR__API_KEY_ENV, APIFUSE__OCR__BACKEND_ENV, APIFUSE__OCR__BASE_URL_ENV, APIFUSE__OCR__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__OCR__MODEL_ENV, CLOUDFLARE_ACCOUNT_ID_ENV, CLOUDFLARE_WORKERS_AI_OCR_BACKEND, createCloudflareWorkersAiOcrClient, createOcrClientFromEnv, createOpenAiCompatibleOcrClient, createUnsupportedOcrClient, DEFAULT_CLOUDFLARE_WORKERS_AI_OCR_MODEL, extractCaptchaCandidates, OPENAI_COMPATIBLE_OCR_BACKEND, } from "./runtime/ocr.js";
 export { APIFUSE__STT__BACKEND_ENV, APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__STT__MODEL_ENV, createSttClientFromEnv, createUnsupportedSttClient, extractVerificationCode, resolveSttPrompt, } from "./runtime/stt.js";
 export { createTraceContext, } from "./runtime/trace.js";
-export { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, sensitive, z, } from "./schema.js";
+export { APIFUSE_TEXT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, AUTO_TRUSTED_ZOD_STRING_FORMATS, collectOutputTextTrust, collectSensitivePaths, describeKey, field, fields, findUnclassifiedOutputTextPaths, isSensitiveSchema, OutputTextTrustCollectionError, OutputTextTrustSchemaError, redactPayload, sensitive, textTrust, z, } from "./schema.js";
 export { createServerApp, ERROR_OBSERVABILITY_HEADER, serve, } from "./server/index.js";
 export { getStealthProfile, listStealthProfiles } from "./stealth/profiles.js";
 export * from "./stream.js";

package/dist/lint.js

@@ -1,7 +1,84 @@
 import { SDK_RUNTIME_OWNED_ERROR_CODES, SDK_STATUS_MAPPED_PROVIDER_ERROR_CODES, } from "./error-resolution.js";
 import { lintPublicSchemaFieldNames } from "./public-schema-field-lint.js";
 import { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_SENSITIVE_META_KEY } from "./schema.js";
+// Operations that perform an auth-lifecycle action belong on the single
+// `auth.flow` interface, never on a provider operation:
+//   - entry (login / signin / authenticate) => auth.flow.start/continue
+//   - exit  (logout / signout / disconnect) => auth.flow.abort
+//
+// Matching works on `-`/`_` separated segments rather than a raw substring or a
+// leading anchor, so `shop-logout`, `shop_logout` and `user-sign-out-everywhere`
+// are all recognised: a domain prefix does not make the operation any less of an
+// auth-lifecycle action, and operation ids may use either separator.
+//
+// Vocabulary is split into two tiers because auth words collide with ordinary
+// domain verbs. Measured against the live fleet plus synthetic domain ids:
+//   - `authorize-payment`, `revoke-invitation`, `unlink-record`,
+//     `disconnect-device` are domain actions that never touch the connection
+//     credential, so these verbs are NOT matched as segments;
+//   - the same verbs as a complete operation id (`authorize`, `revoke`) do
+//     refer to the credential itself, so they are matched only in that form.
+// `exchange`, `callback`, `connect`, `session`, `token`, `credential`,
+// `password` and `otp` stay out entirely for the same reason.
+const AUTH_LIFECYCLE_SEGMENT_WORDS = new Set([
+    "login",
+    "logout",
+    "signin",
+    "signout",
+    "signup",
+    "authenticate",
+    "reauth",
+    "auth",
+]);
+// Ambiguous as a prefix, unambiguous when they are the whole operation id.
+const AUTH_LIFECYCLE_WHOLE_ID_WORDS = new Set([
+    "authorize",
+    "revoke",
+    "unlink",
+    "disconnect",
+]);
+// A verb stem followed by a direction word across two segments: `sign-out`,
+// `user_sign_up_flow`, and the spelled-out `log-in` / `shop-log-out` forms
+// (their fused equivalents `login`/`logout` live in the segment set above).
+// `sign` pairs match anywhere; `log` pairs match only at the END of the id,
+// because mid-id `log` is the noun in domain phrases measured against real
+// fleets (`audit-log-in-range`, `change-log-out-of-band` are reads of a log,
+// while `shop-log-out` is a logout).
+const AUTH_DIRECTION_PAIRS = new Map([
+    ["sign", { directions: new Set(["in", "out", "up"]), endOnly: false }],
+    ["log", { directions: new Set(["in", "out"]), endOnly: true }],
+]);
+// Legacy anchored form kept for token-plumbing words whose bare use is only
+// auth-related when it leads the operation id (`exchange-code`, `refresh`).
 const AUTH_OPERATION_ID_PATTERN = /^(?:auth[-_])?(?:login|exchange|continue|refresh|callback)(?:[-_]|$)/i;
+function isAuthLifecycleOperationId(operationId, authMode) {
+    const segments = operationId.toLowerCase().split(/[-_]+/).filter(Boolean);
+    if (segments.some((segment) => AUTH_LIFECYCLE_SEGMENT_WORDS.has(segment)))
+        return true;
+    // A verb stem + direction spread across two segments (`sign-out`,
+    // `sign_up`, `shop-log-out`); see AUTH_DIRECTION_PAIRS for positioning.
+    if (segments.some((segment, index) => {
+        const pair = AUTH_DIRECTION_PAIRS.get(segment);
+        if (pair === undefined || index + 1 >= segments.length)
+            return false;
+        if (!pair.directions.has(segments[index + 1]))
+            return false;
+        return pair.endOnly ? index + 2 === segments.length : true;
+    })) {
+        return true;
+    }
+    if (segments.length === 1 && AUTH_LIFECYCLE_WHOLE_ID_WORDS.has(segments[0])) {
+        return true;
+    }
+    // The legacy anchored pattern keeps its original scope. It matches ordinary
+    // domain ids such as `exchange-rates` and `refresh-catalog`, so extending it
+    // to `oauth2_proxied` would spread that behavior to providers it never
+    // applied to; proxied providers are covered by the segment tiers above.
+    if (authMode === "credentials" || authMode === "oauth2") {
+        return AUTH_OPERATION_ID_PATTERN.test(operationId);
+    }
+    return false;
+}
 function lintAllowedHosts(providerId, allowedHosts) {
     const prefix = providerId ? `Provider "${providerId}"` : "Provider";
     if (!allowedHosts) {
@@ -957,14 +1034,19 @@ export function lintProvider(provider, options = {}) {
     ];
     if (provider.operations) {
         const authMode = provider.auth?.mode;
-        if (authMode === "credentials" || authMode === "oauth2") {
+        // Every authenticated mode owns an auth.flow; `oauth2_proxied` was
+        // previously exempt, which let auth-lifecycle operations ship on
+        // proxied providers unchecked.
+        if (authMode === "credentials" ||
+            authMode === "oauth2" ||
+            authMode === "oauth2_proxied") {
             for (const operationKey of Object.keys(provider.operations)) {
-                if (AUTH_OPERATION_ID_PATTERN.test(operationKey)) {
+                if (isAuthLifecycleOperationId(operationKey, authMode)) {
                     diagnostics.push({
                         rule: "auth-operation-unsupported",
                         level: "error",
                         field: `operations.${operationKey}`,
-                        message: `Provider "${provider.id ?? "unknown"}" operation "${operationKey}" looks like a login/token/session exchange endpoint. Authenticated providers must expose login through the single auth.flow interface because Gateway persists only auth.flow complete turn data.credential as the connection credential. Move this logic into auth.flow.continue instead of a provider operation.`,
+                        message: `Provider "${provider.id ?? "unknown"}" operation "${operationKey}" performs an auth-lifecycle action (login, logout, token exchange or similar). Authenticated providers must expose the whole credential lifecycle through the single auth.flow interface because Gateway persists only auth.flow complete turn data.credential as the connection credential, and an operation that mutates the session outside that interface leaves the stored connection stale. Move sign-in logic into auth.flow.start/continue and sign-out/disconnect logic into auth.flow.abort (served by POST /auth/disconnect) instead of a provider operation.`,
                     });
                 }
             }

package/dist/provider.d.ts

@@ -6,7 +6,7 @@ export { centered, delayed, defineHealthJourney, defineOperation, defineProvider
 export { AuthError, HttpRedirectError, isProviderError, isSessionExpiredError, isTransportError, ProviderError, SessionExpiredError, TransportError, ValidationError, } from "./errors.js";
 export { getProviderLocalePath, providerLocaleKey, qualifyProviderLocaleKey, } from "./i18n/index.js";
 export { type CreateProviderChoiceContextOptions, createProviderChoiceContext, createTestProviderChoiceContext, PROVIDER_RUNTIME_CHOICE_TOKEN_MASTER_SECRET_ENV, } from "./runtime/choice.js";
-export { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, z, } from "./schema.js";
+export { APIFUSE_TEXT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, AUTO_TRUSTED_ZOD_STRING_FORMATS, collectOutputTextTrust, collectSensitivePaths, describeKey, field, fields, findUnclassifiedOutputTextPaths, isSensitiveSchema, OutputTextTrustCollectionError, OutputTextTrustSchemaError, redactPayload, type OutputTextTrustMap, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, textTrust, type TextTrust, type TextTrustMetadata, z, } from "./schema.js";
 export type { AuthAbortData, AuthAbortRetry, AuthFlowTerminalContext, AuthMode, AuthSafeData, AuthSafeJson, FlowContext, HealthCheckAssertionContext, HealthCheckCase, HealthCheckSuite, HealthCheckUnsupported, HealthJourneyDefinition, HealthJourneyEventContext, HealthJourneyManualTriggerPolicy, HealthJourneyRunContext, HealthJourneyRunResult, HealthScheduleRandomization, HttpRedirectFailureReason, HttpRedirectPolicy, HttpRedirectPolicyMode, HttpRetryOptions, HttpRetrySummary, InferSchemaOutput, NativeContext, NativeNetworkClient, NativeNetworkCloseReason, NativeNetworkConnection, NativeNetworkConnectInput, NativeNetworkConnectOptions, NativeNetworkDynamicGrantOptions, NativeNetworkEgressGrant, NativeProviderConfig, NativeProviderContext, NativeProxyDrainHandler, NativeProxyEgressInfo, NativeProxyExpiringEvent, NativeProxyExpiringReason, NativeTcpDynamicEgressRule, NativeTcpEgressGrant, NativeTcpEgressRule, NativeTcpPortRange, NativeTcpTlsMode, NativeTlsConnectOptions, OperationApprovalPolicy, OperationContractMetadata, OperationDefinition, OperationDocMeta, OperationErrorCode, ProviderErrorStatus, OperationInputExample, OperationLifecycle, OperationObservabilityConfig, OperationObservabilitySensitiveConfig, OperationRelationships, OperationRiskClass, OperationSensitivePath, OperationToolRouterMetadata, OperationTransport, ProviderAccessVisibility, ProviderChoiceBindingOptions, ProviderChoiceContext, ProviderChoiceIssueOptions, ProviderChoiceParseOptions, ProviderContext, ProviderDefinition, ProviderDeploymentOverrides, ProviderFileRef, ProviderFilesContext, ProviderLocale, ProviderLocaleKey, ProviderLocaleKeyInput, ProviderLogoProfile, ProviderProxyPolicy, ProxiedOAuthConfig, ProviderPublicConnectionMode, ProviderPublicProfile, ProviderResolvedFile, ProviderRuntimeState, ProviderStateDurationString, ProviderStateNamespace, ProviderSupportLevel, RedirectRunReason, SchemaLike, SmsOtpMatcherDefinition, StandardSchemaV1, StateCasResult, StateNamespaceOptions, StateNamespaceScope, StateValue, StateWriteOptions, } from "./types.js";
 export { createNativeNetworkClient, createEnvVendorCredentialResolver, deriveNativeCredentialAffinityKey, NativeEgressGrantExpiredError, NativeEgressNotDeclaredError, NativeIdleTimeoutError, NativeNetworkError, NativeProxyExpiredError, resolveNativeGatewayProxy, type NativeGatewayProxy, type NativeGatewayProxyResolutionInput, type NativeGatewayProxySkipReason, type NativeGatewayProxySynthesizer, type NativeGatewayProxySynthesisResult, type NativeGatewayProxySynthesisInput, type NativeNetworkClientOptions, type NativeNetworkErrorCode, type VendorCredentialLookup, type VendorCredentialResolver, } from "./runtime/native-network.js";
 export { HttpRetryAfterPolicy, HttpRetryDelayStrategy, HttpRetryJitter, HttpRetryPreset, HttpRetryUnsafeMethodPolicy, } from "./types.js";

package/dist/provider.js

@@ -5,6 +5,6 @@ export { centered, delayed, defineHealthJourney, defineOperation, defineProvider
 export { AuthError, HttpRedirectError, isProviderError, isSessionExpiredError, isTransportError, ProviderError, SessionExpiredError, TransportError, ValidationError, } from "./errors.js";
 export { getProviderLocalePath, providerLocaleKey, qualifyProviderLocaleKey, } from "./i18n/index.js";
 export { createProviderChoiceContext, createTestProviderChoiceContext, PROVIDER_RUNTIME_CHOICE_TOKEN_MASTER_SECRET_ENV, } from "./runtime/choice.js";
-export { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, sensitive, z, } from "./schema.js";
+export { APIFUSE_TEXT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, AUTO_TRUSTED_ZOD_STRING_FORMATS, collectOutputTextTrust, collectSensitivePaths, describeKey, field, fields, findUnclassifiedOutputTextPaths, isSensitiveSchema, OutputTextTrustCollectionError, OutputTextTrustSchemaError, redactPayload, sensitive, textTrust, z, } from "./schema.js";
 export { createNativeNetworkClient, createEnvVendorCredentialResolver, deriveNativeCredentialAffinityKey, NativeEgressGrantExpiredError, NativeEgressNotDeclaredError, NativeIdleTimeoutError, NativeNetworkError, NativeProxyExpiredError, resolveNativeGatewayProxy, } from "./runtime/native-network.js";
 export { HttpRetryAfterPolicy, HttpRetryDelayStrategy, HttpRetryJitter, HttpRetryPreset, HttpRetryUnsafeMethodPolicy, } from "./types.js";

package/dist/runtime/resolver-vendors/bindings.d.ts

@@ -1,8 +1,48 @@
 import type { ProviderChallenge } from "../../types.js";
 import type { ResolverIssuingIdentity } from "./types.js";
 export declare const RESOLVER_CHALLENGE_BINDINGS: {
-    readonly aws_waf: "portable";
-    readonly cloudflare_interstitial: "identity_scoped";
+    readonly turnstile: {
+        readonly cacheable: false;
+        readonly identityBinding: "none";
+        readonly directCacheable: false;
+    };
+    readonly recaptcha_v2: {
+        readonly cacheable: false;
+        readonly identityBinding: "none";
+        readonly directCacheable: false;
+    };
+    readonly recaptcha_v3: {
+        readonly cacheable: false;
+        readonly identityBinding: "none";
+        readonly directCacheable: false;
+    };
+    readonly hcaptcha: {
+        readonly cacheable: false;
+        readonly identityBinding: "none";
+        readonly directCacheable: false;
+    };
+    readonly cloudflare_interstitial: {
+        readonly cacheable: true;
+        readonly identityBinding: "identity_scoped";
+        readonly directCacheable: true;
+    };
+    readonly aws_waf: {
+        readonly cacheable: true;
+        readonly identityBinding: "portable";
+        readonly directCacheable: true;
+    };
+    readonly akamai_sec_cpt: {
+        readonly cacheable: true;
+        readonly identityBinding: "identity_scoped";
+        readonly directCacheable: false;
+    };
+    readonly akamai_sensor: {
+        readonly cacheable: true;
+        readonly identityBinding: "identity_scoped";
+        readonly directCacheable: false;
+    };
 };
+export declare function resolverChallengeIsCacheable(challenge: ProviderChallenge): boolean;
+export declare function resolverChallengeAllowsDirectCache(challenge: ProviderChallenge): boolean;
 export declare function resolverChallengeIsIdentityScoped(challenge: ProviderChallenge): boolean;
 export declare function resolverChallengeIssuingIdentity(challenge: ProviderChallenge, identity: ResolverIssuingIdentity): ResolverIssuingIdentity;

package/dist/runtime/resolver-vendors/bindings.js

@@ -1,14 +1,39 @@
+// An IP-bound artifact minted without any recorded egress identity is unsafe to
+// share. The Akamai kinds therefore reject direct caching, while Cloudflare
+// keeps its pre-existing direct-cache behavior pending measurement.
 export const RESOLVER_CHALLENGE_BINDINGS = {
-    aws_waf: "portable",
-    cloudflare_interstitial: "identity_scoped",
+    turnstile: { cacheable: false, identityBinding: "none", directCacheable: false },
+    recaptcha_v2: { cacheable: false, identityBinding: "none", directCacheable: false },
+    recaptcha_v3: { cacheable: false, identityBinding: "none", directCacheable: false },
+    hcaptcha: { cacheable: false, identityBinding: "none", directCacheable: false },
+    cloudflare_interstitial: {
+        cacheable: true,
+        identityBinding: "identity_scoped",
+        directCacheable: true,
+    },
+    aws_waf: { cacheable: true, identityBinding: "portable", directCacheable: true },
+    akamai_sec_cpt: {
+        cacheable: true,
+        identityBinding: "identity_scoped",
+        directCacheable: false,
+    },
+    akamai_sensor: {
+        cacheable: true,
+        identityBinding: "identity_scoped",
+        directCacheable: false,
+    },
 };
+export function resolverChallengeIsCacheable(challenge) {
+    return RESOLVER_CHALLENGE_BINDINGS[challenge.kind].cacheable;
+}
+export function resolverChallengeAllowsDirectCache(challenge) {
+    return RESOLVER_CHALLENGE_BINDINGS[challenge.kind].directCacheable;
+}
 export function resolverChallengeIsIdentityScoped(challenge) {
-    return (RESOLVER_CHALLENGE_BINDINGS[challenge.kind] ===
-        "identity_scoped");
+    return RESOLVER_CHALLENGE_BINDINGS[challenge.kind].identityBinding === "identity_scoped";
 }
 export function resolverChallengeIssuingIdentity(challenge, identity) {
-    const binding = RESOLVER_CHALLENGE_BINDINGS[challenge.kind];
-    if (binding === "portable") {
+    if (RESOLVER_CHALLENGE_BINDINGS[challenge.kind].identityBinding === "portable") {
         return { userAgent: identity.userAgent };
     }
     return identity;

package/dist/runtime/resolver-vendors/browser.d.ts

@@ -10,15 +10,11 @@ export interface BrowserResolverVendorOptions {
     readonly allowedHosts: readonly string[];
     readonly createClient?: BrowserClientFactory;
 }
-export type BrowserResolverSolution = Extract<ChallengeSolution, {
-    readonly form: "cookies";
-}> & {
-    /** Unix seconds from the cookie that proved the challenge cleared. */
-    readonly expires?: number;
-};
 export interface BrowserResolverVendorAdapter extends ResolverVendorAdapter {
     readonly id: "browser";
-    solve(challenge: ProviderChallenge, identity: ResolverIdentity | undefined, signal: AbortSignal, traceRecorder?: TraceRecorder): Promise<BrowserResolverSolution>;
+    solve(challenge: ProviderChallenge, identity: ResolverIdentity | undefined, signal: AbortSignal, traceRecorder?: TraceRecorder): Promise<Extract<ChallengeSolution, {
+        readonly form: "cookies";
+    }>>;
 }
 export declare function createBrowserResolverVendorAdapter(options: BrowserResolverVendorOptions): BrowserResolverVendorAdapter;
 export {};

package/dist/runtime/resolver-vendors/browser.js

@@ -1,6 +1,7 @@
-import { isProviderError, ProviderError } from "../../errors.js";
+import { isProviderError } from "../../errors.js";
 import { createBrowserClient } from "../browser.js";
 import { resolverChallengeIssuingIdentity } from "./bindings.js";
+import { assertResolverHostAllowed, normalizedResolverHostname } from "./hosts.js";
 import { ResolverVendorUnavailableError, } from "./types.js";
 const BROWSER_VENDOR_ID = "browser";
 const DEFAULT_COOKIE_POLL_INTERVAL_MS = 100;
@@ -94,32 +95,16 @@ async function abortableDelay(ms, signal) {
 function isSupportedKind(kind) {
     return Object.hasOwn(SUCCESS_COOKIE_NAMES, kind);
 }
-function normalizedHostname(hostname) {
-    return hostname.trim().toLowerCase().replace(/\.$/, "");
-}
-function assertChallengeHostAllowed(pageUrl, allowedHosts) {
-    const challengeHost = normalizedHostname(new URL(pageUrl).hostname);
-    const isAllowed = allowedHosts.some((host) => {
-        const declaredHost = normalizedHostname(host);
-        return declaredHost.length > 0 && !declaredHost.includes("*") && declaredHost === challengeHost;
-    });
-    if (isAllowed)
-        return;
-    throw new ProviderError(`Resolver challenge host "${challengeHost}" is not declared`, {
-        code: "RESOLVER_HOST_NOT_ALLOWED",
-        fix: "Add the exact challenge hostname to the provider's allowedHosts declaration.",
-    });
-}
 function cookieDomainSpecificity(cookie) {
-    return normalizedHostname(cookie.domain.replace(/^\./, "")).length;
+    return normalizedResolverHostname(cookie.domain.replace(/^\./, "")).length;
 }
 function isHostOnlyCookieFor(cookie, hostname) {
     return (!cookie.domain.startsWith(".") &&
-        normalizedHostname(cookie.domain) === normalizedHostname(hostname));
+        normalizedResolverHostname(cookie.domain) === normalizedResolverHostname(hostname));
 }
 function cookieAppliesToUrl(cookie, url) {
-    const cookieDomain = normalizedHostname(cookie.domain.replace(/^\./, ""));
-    const requestHostname = normalizedHostname(url.hostname);
+    const cookieDomain = normalizedResolverHostname(cookie.domain.replace(/^\./, ""));
+    const requestHostname = normalizedResolverHostname(url.hostname);
     const domainMatches = cookieDomain.length > 0 &&
         (requestHostname === cookieDomain ||
             (cookie.domain.startsWith(".") && requestHostname.endsWith(`.${cookieDomain}`)));
@@ -226,7 +211,7 @@ export function createBrowserResolverVendorAdapter(options) {
             if (!isSupportedKind(challenge.kind)) {
                 throw new TypeError(`Browser resolver does not support ${challenge.kind}`);
             }
-            assertChallengeHostAllowed(challenge.pageUrl, options.allowedHosts);
+            assertResolverHostAllowed(challenge.pageUrl, options.allowedHosts);
             const challengeKind = challenge.kind;
             callerSignal.throwIfAborted();
             const solveController = new AbortController();

package/dist/runtime/resolver-vendors/hosts.d.ts

@@ -0,0 +1,2 @@
+export declare function normalizedResolverHostname(hostname: string): string;
+export declare function assertResolverHostAllowed(targetUrl: string, allowedHosts: readonly string[]): void;

package/dist/runtime/resolver-vendors/hosts.js

@@ -0,0 +1,33 @@
+import { ProviderError } from "../../errors.js";
+export function normalizedResolverHostname(hostname) {
+    return hostname.trim().toLowerCase().replace(/\.$/, "");
+}
+export function assertResolverHostAllowed(targetUrl, allowedHosts) {
+    let targetUrlObject;
+    try {
+        targetUrlObject = new URL(targetUrl);
+    }
+    catch {
+        throw new ProviderError("Resolver target URL is invalid", {
+            code: "RESOLVER_HOST_NOT_ALLOWED",
+            fix: "Use a valid URL whose exact hostname appears in the provider's allowedHosts declaration.",
+        });
+    }
+    if (targetUrlObject.protocol !== "http:" && targetUrlObject.protocol !== "https:") {
+        throw new ProviderError(`Resolver target URL scheme "${targetUrlObject.protocol}" is not allowed`, {
+            code: "RESOLVER_HOST_NOT_ALLOWED",
+            fix: "Use an http or https URL whose exact hostname appears in the provider's allowedHosts declaration.",
+        });
+    }
+    const targetHost = normalizedResolverHostname(targetUrlObject.hostname);
+    const isAllowed = allowedHosts.some((host) => {
+        const declaredHost = normalizedResolverHostname(host);
+        return declaredHost.length > 0 && !declaredHost.includes("*") && declaredHost === targetHost;
+    });
+    if (isAllowed)
+        return;
+    throw new ProviderError(`Resolver target host "${targetHost}" is not declared`, {
+        code: "RESOLVER_HOST_NOT_ALLOWED",
+        fix: "Add the exact target hostname to the provider's allowedHosts declaration.",
+    });
+}