@apifuse/provider-sdk 2.2.0-beta.26 → 2.2.0-beta.27

package/dist/contract.js

@@ -1,9 +1,8 @@
 import { createHash } from "node:crypto";
 import { canonicalJson, compactObject, copyRecordWithout, toJsonValue, } from "./contract-json.js";
-import { describeSchema, OutputTextTrustProjectionError, serializeSmsMatcher, } from "./contract-serialization.js";
+import { describeSchema, serializeSmsMatcher } from "./contract-serialization.js";
 import { PROVIDER_CONTRACT_SCHEMA_VERSION, } from "./contract-types.js";
 export { canonicalJson, PROVIDER_CONTRACT_SCHEMA_VERSION, };
-export { OutputTextTrustProjectionError };
 export function extractProviderContract(provider) {
     const auth = extractAuth(provider.auth);
     const stealth = toJsonValue(provider.stealth);
@@ -61,7 +60,7 @@ function extractOperation(operationId, operation) {
     const relatedOperations = toJsonValue(operation.relatedOperations);
     const toolRouter = toJsonValue(operation.toolRouter);
     const observability = toJsonValue(operation.observability);
-    const transport = extractTransport(operation.transport, operationId);
+    const transport = extractTransport(operation.transport);
     const fixtures = toJsonValue(operation.fixtures);
     const upstream = toJsonValue(operation.upstream);
     const hints = toJsonValue(operation.hints);
@@ -70,7 +69,7 @@ function extractOperation(operationId, operation) {
     return {
         id: operationId,
         inputSchema: describeSchema(operation.input),
-        outputSchema: describeSchema(operation.output, { operationId, outputTextTrust: true }),
+        outputSchema: describeSchema(operation.output),
         ...(descriptionKey === undefined ? {} : { descriptionKey }),
         ...(docs === undefined ? {} : { docs }),
         ...(whenToUseKeys === undefined ? {} : { whenToUseKeys }),
@@ -106,7 +105,7 @@ function extractAuth(value) {
             : undefined,
     });
 }
-function extractTransport(value, operationId) {
+function extractTransport(value) {
     if (!value)
         return undefined;
     if (value.kind !== "sse")
@@ -115,10 +114,7 @@ function extractTransport(value, operationId) {
         ...copyRecordWithout(value, new Set(["events"])),
         events: Object.fromEntries(Object.entries(value.events)
             .sort(([leftId], [rightId]) => leftId.localeCompare(rightId))
-            .map(([eventName, schema]) => [
-            eventName,
-            describeSchema(schema, { eventName, operationId, outputTextTrust: true }),
-        ])),
+            .map(([eventName, schema]) => [eventName, describeSchema(schema)])),
     });
 }
 function extractHealthCheck(value) {

package/dist/index.d.ts

@@ -3,7 +3,7 @@ export * from "./ceremonies/index.js";
 export * from "./choice-token.js";
 export type { ApiFuseConfig, BrowserConfig, ProxyProtocol, ProxyResolutionOptions, ProxyResolutionSource, ProxyVendorName, ResolvedProxyConfig, SessionConfig, } from "./config/loader.js";
 export { defineConfig, loadApiFuseConfig, resolveProxy } from "./config/loader.js";
-export { canonicalJson, digestProviderContract, extractProviderContract, type JsonPrimitive, type JsonValue, OutputTextTrustProjectionError, PROVIDER_CONTRACT_SCHEMA_VERSION, type ProviderContractOperation, type ProviderContractSnapshot, } from "./contract.js";
+export { canonicalJson, digestProviderContract, extractProviderContract, type JsonPrimitive, type JsonValue, PROVIDER_CONTRACT_SCHEMA_VERSION, type ProviderContractOperation, type ProviderContractSnapshot, } from "./contract.js";
 export { centered, delayed, defineHealthJourney, defineOperation, defineProvider, defineSmsOtpMatcher, defineStreamOperation, every, type ProviderConfig, } from "./define.js";
 export type { DevServerOptions } from "./dev.js";
 export { createDevServer, startDevServer } from "./dev.js";
@@ -37,7 +37,7 @@ export { createStealthClient } from "./runtime/stealth.js";
 export { APIFUSE__OCR__API_KEY_ENV, APIFUSE__OCR__BACKEND_ENV, APIFUSE__OCR__BASE_URL_ENV, APIFUSE__OCR__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__OCR__MODEL_ENV, CLOUDFLARE_ACCOUNT_ID_ENV, CLOUDFLARE_WORKERS_AI_OCR_BACKEND, createCloudflareWorkersAiOcrClient, createOcrClientFromEnv, createOpenAiCompatibleOcrClient, createUnsupportedOcrClient, DEFAULT_CLOUDFLARE_WORKERS_AI_OCR_MODEL, extractCaptchaCandidates, OPENAI_COMPATIBLE_OCR_BACKEND, } from "./runtime/ocr.js";
 export { APIFUSE__STT__BACKEND_ENV, APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__STT__MODEL_ENV, createSttClientFromEnv, createUnsupportedSttClient, extractVerificationCode, resolveSttPrompt, } from "./runtime/stt.js";
 export { type CreateTraceContextOptions, createTraceContext, type Span, type TraceContext, } from "./runtime/trace.js";
-export { APIFUSE_TEXT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, AUTO_TRUSTED_ZOD_STRING_FORMATS, collectOutputTextTrust, collectSensitivePaths, describeKey, field, fields, findUnclassifiedOutputTextPaths, isSensitiveSchema, OutputTextTrustCollectionError, OutputTextTrustSchemaError, redactPayload, type OutputTextTrustMap, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, textTrust, type TextTrust, type TextTrustMetadata, z, } from "./schema.js";
+export { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, z, } from "./schema.js";
 export { createServerApp, ERROR_OBSERVABILITY_HEADER, type ServeOptions, serve, } from "./server/index.js";
 export { getStealthProfile, listStealthProfiles } from "./stealth/profiles.js";
 export * from "./stream.js";

package/dist/index.js

@@ -3,7 +3,7 @@ export * from "./auth.js";
 export * from "./ceremonies/index.js";
 export * from "./choice-token.js";
 export { defineConfig, loadApiFuseConfig, resolveProxy } from "./config/loader.js";
-export { canonicalJson, digestProviderContract, extractProviderContract, OutputTextTrustProjectionError, PROVIDER_CONTRACT_SCHEMA_VERSION, } from "./contract.js";
+export { canonicalJson, digestProviderContract, extractProviderContract, PROVIDER_CONTRACT_SCHEMA_VERSION, } from "./contract.js";
 export { centered, delayed, defineHealthJourney, defineOperation, defineProvider, defineSmsOtpMatcher, defineStreamOperation, every, } from "./define.js";
 export { createDevServer, startDevServer } from "./dev.js";
 export * from "./errors.js";
@@ -33,7 +33,7 @@ export { createStealthClient } from "./runtime/stealth.js";
 export { APIFUSE__OCR__API_KEY_ENV, APIFUSE__OCR__BACKEND_ENV, APIFUSE__OCR__BASE_URL_ENV, APIFUSE__OCR__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__OCR__MODEL_ENV, CLOUDFLARE_ACCOUNT_ID_ENV, CLOUDFLARE_WORKERS_AI_OCR_BACKEND, createCloudflareWorkersAiOcrClient, createOcrClientFromEnv, createOpenAiCompatibleOcrClient, createUnsupportedOcrClient, DEFAULT_CLOUDFLARE_WORKERS_AI_OCR_MODEL, extractCaptchaCandidates, OPENAI_COMPATIBLE_OCR_BACKEND, } from "./runtime/ocr.js";
 export { APIFUSE__STT__BACKEND_ENV, APIFUSE__STT__CLOUDFLARE_API_TOKEN_ENV, APIFUSE__STT__MODEL_ENV, createSttClientFromEnv, createUnsupportedSttClient, extractVerificationCode, resolveSttPrompt, } from "./runtime/stt.js";
 export { createTraceContext, } from "./runtime/trace.js";
-export { APIFUSE_TEXT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, AUTO_TRUSTED_ZOD_STRING_FORMATS, collectOutputTextTrust, collectSensitivePaths, describeKey, field, fields, findUnclassifiedOutputTextPaths, isSensitiveSchema, OutputTextTrustCollectionError, OutputTextTrustSchemaError, redactPayload, sensitive, textTrust, z, } from "./schema.js";
+export { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, sensitive, z, } from "./schema.js";
 export { createServerApp, ERROR_OBSERVABILITY_HEADER, serve, } from "./server/index.js";
 export { getStealthProfile, listStealthProfiles } from "./stealth/profiles.js";
 export * from "./stream.js";

package/dist/provider.d.ts

@@ -6,7 +6,7 @@ export { centered, delayed, defineHealthJourney, defineOperation, defineProvider
 export { AuthError, HttpRedirectError, isProviderError, isSessionExpiredError, isTransportError, ProviderError, SessionExpiredError, TransportError, ValidationError, } from "./errors.js";
 export { getProviderLocalePath, providerLocaleKey, qualifyProviderLocaleKey, } from "./i18n/index.js";
 export { type CreateProviderChoiceContextOptions, createProviderChoiceContext, createTestProviderChoiceContext, PROVIDER_RUNTIME_CHOICE_TOKEN_MASTER_SECRET_ENV, } from "./runtime/choice.js";
-export { APIFUSE_TEXT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, AUTO_TRUSTED_ZOD_STRING_FORMATS, collectOutputTextTrust, collectSensitivePaths, describeKey, field, fields, findUnclassifiedOutputTextPaths, isSensitiveSchema, OutputTextTrustCollectionError, OutputTextTrustSchemaError, redactPayload, type OutputTextTrustMap, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, textTrust, type TextTrust, type TextTrustMetadata, z, } from "./schema.js";
+export { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, type SensitiveFieldKind, type SensitiveFieldOptions, type SensitivePath, sensitive, z, } from "./schema.js";
 export type { AuthAbortData, AuthAbortRetry, AuthFlowTerminalContext, AuthMode, AuthSafeData, AuthSafeJson, FlowContext, HealthCheckAssertionContext, HealthCheckCase, HealthCheckSuite, HealthCheckUnsupported, HealthJourneyDefinition, HealthJourneyEventContext, HealthJourneyManualTriggerPolicy, HealthJourneyRunContext, HealthJourneyRunResult, HealthScheduleRandomization, HttpRedirectFailureReason, HttpRedirectPolicy, HttpRedirectPolicyMode, HttpRetryOptions, HttpRetrySummary, InferSchemaOutput, NativeContext, NativeNetworkClient, NativeNetworkCloseReason, NativeNetworkConnection, NativeNetworkConnectInput, NativeNetworkConnectOptions, NativeNetworkDynamicGrantOptions, NativeNetworkEgressGrant, NativeProviderConfig, NativeProviderContext, NativeProxyDrainHandler, NativeProxyEgressInfo, NativeProxyExpiringEvent, NativeProxyExpiringReason, NativeTcpDynamicEgressRule, NativeTcpEgressGrant, NativeTcpEgressRule, NativeTcpPortRange, NativeTcpTlsMode, NativeTlsConnectOptions, OperationApprovalPolicy, OperationContractMetadata, OperationDefinition, OperationDocMeta, OperationErrorCode, ProviderErrorStatus, OperationInputExample, OperationLifecycle, OperationObservabilityConfig, OperationObservabilitySensitiveConfig, OperationRelationships, OperationRiskClass, OperationSensitivePath, OperationToolRouterMetadata, OperationTransport, ProviderAccessVisibility, ProviderChoiceBindingOptions, ProviderChoiceContext, ProviderChoiceIssueOptions, ProviderChoiceParseOptions, ProviderContext, ProviderDefinition, ProviderDeploymentOverrides, ProviderFileRef, ProviderFilesContext, ProviderLocale, ProviderLocaleKey, ProviderLocaleKeyInput, ProviderLogoProfile, ProviderProxyPolicy, ProxiedOAuthConfig, ProviderPublicConnectionMode, ProviderPublicProfile, ProviderResolvedFile, ProviderRuntimeState, ProviderStateDurationString, ProviderStateNamespace, ProviderSupportLevel, RedirectRunReason, SchemaLike, SmsOtpMatcherDefinition, StandardSchemaV1, StateCasResult, StateNamespaceOptions, StateNamespaceScope, StateValue, StateWriteOptions, } from "./types.js";
 export { createNativeNetworkClient, createEnvVendorCredentialResolver, deriveNativeCredentialAffinityKey, NativeEgressGrantExpiredError, NativeEgressNotDeclaredError, NativeIdleTimeoutError, NativeNetworkError, NativeProxyExpiredError, resolveNativeGatewayProxy, type NativeGatewayProxy, type NativeGatewayProxyResolutionInput, type NativeGatewayProxySkipReason, type NativeGatewayProxySynthesizer, type NativeGatewayProxySynthesisResult, type NativeGatewayProxySynthesisInput, type NativeNetworkClientOptions, type NativeNetworkErrorCode, type VendorCredentialLookup, type VendorCredentialResolver, } from "./runtime/native-network.js";
 export { HttpRetryAfterPolicy, HttpRetryDelayStrategy, HttpRetryJitter, HttpRetryPreset, HttpRetryUnsafeMethodPolicy, } from "./types.js";

package/dist/provider.js

@@ -5,6 +5,6 @@ export { centered, delayed, defineHealthJourney, defineOperation, defineProvider
 export { AuthError, HttpRedirectError, isProviderError, isSessionExpiredError, isTransportError, ProviderError, SessionExpiredError, TransportError, ValidationError, } from "./errors.js";
 export { getProviderLocalePath, providerLocaleKey, qualifyProviderLocaleKey, } from "./i18n/index.js";
 export { createProviderChoiceContext, createTestProviderChoiceContext, PROVIDER_RUNTIME_CHOICE_TOKEN_MASTER_SECRET_ENV, } from "./runtime/choice.js";
-export { APIFUSE_TEXT_TRUST_META_KEY, APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, AUTO_TRUSTED_ZOD_STRING_FORMATS, collectOutputTextTrust, collectSensitivePaths, describeKey, field, fields, findUnclassifiedOutputTextPaths, isSensitiveSchema, OutputTextTrustCollectionError, OutputTextTrustSchemaError, redactPayload, sensitive, textTrust, z, } from "./schema.js";
+export { APIFUSE_DESCRIPTION_KEY_META_KEY, APIFUSE_REDACTION_MARKER, APIFUSE_SENSITIVE_KIND_META_KEY, APIFUSE_SENSITIVE_META_KEY, collectSensitivePaths, describeKey, field, fields, isSensitiveSchema, redactPayload, sensitive, z, } from "./schema.js";
 export { createNativeNetworkClient, createEnvVendorCredentialResolver, deriveNativeCredentialAffinityKey, NativeEgressGrantExpiredError, NativeEgressNotDeclaredError, NativeIdleTimeoutError, NativeNetworkError, NativeProxyExpiredError, resolveNativeGatewayProxy, } from "./runtime/native-network.js";
 export { HttpRetryAfterPolicy, HttpRetryDelayStrategy, HttpRetryJitter, HttpRetryPreset, HttpRetryUnsafeMethodPolicy, } from "./types.js";

package/dist/schema.d.ts

@@ -13,27 +13,7 @@ export declare function safeParseSchemaSync<TSchema extends SchemaLike>(schema:
 export declare const APIFUSE_SENSITIVE_META_KEY = "x-apifuse-sensitive";
 export declare const APIFUSE_SENSITIVE_KIND_META_KEY = "x-apifuse-sensitive-kind";
 export declare const APIFUSE_DESCRIPTION_KEY_META_KEY = "x-apifuse-description-key";
-export declare const APIFUSE_TEXT_TRUST_META_KEY = "x-apifuse-text-trust";
 export declare const APIFUSE_REDACTION_MARKER = "<redacted>";
-export type TextTrust = "trusted" | "untrusted";
-export interface TextTrustMetadata {
-    readonly v: 1;
-    readonly trust: TextTrust;
-    readonly carrier?: "container";
-}
-export type OutputTextTrustMap = Readonly<Record<string, TextTrust>>;
-/**
- * Auto-trusted output leaves are string-valued `z.literal()` / `z.enum()`,
- * patterns whose every top-level alternative is anchored at both ends and
- * whose bodies use only finite quantifiers, have a maximum match length of 32,
- * and contain only digits and safe punctuation in positive whitespace-free
- * character classes, literals/escapes, and ordinary or non-capturing groups,
- * plus the structurally constrained formats listed here. A brand is trusted
- * only when its underlying schema meets one of those rules. Letter-bearing
- * identifiers, length-only strings, and other formats (including email, URL,
- * base64, and JWT) are not trusted.
- */
-export declare const AUTO_TRUSTED_ZOD_STRING_FORMATS: readonly ["cidrv4", "cidrv6", "date", "datetime", "duration", "e164", "ipv4", "ipv6", "time"];
 export type SensitivePathSegment = string | "*";
 export type SensitivePath = readonly SensitivePathSegment[];
 export type SensitiveFieldKind = "api_key" | "authorization" | "cookie" | "credential" | "otp" | "password" | "payment_url" | "personal_data" | "phone" | "secret" | "token";
@@ -52,12 +32,9 @@ export interface SensitiveFieldOptions {
     description?: string;
 }
 export declare function describeKey<TSchema extends ZodType>(schema: TSchema, key: ProviderLocaleKey | string): TSchema;
-/** Attach output text-trust authoring metadata without changing validation. */
-export declare function textTrust<TSchema extends ZodType>(schema: TSchema, trust: TextTrust): TSchema;
 declare module "zod" {
     interface ZodType {
         describeKey(key: ProviderLocaleKey | string): this;
-        textTrust(trust: TextTrust): this;
     }
 }
 export declare function field<TSchema extends ZodType>(schema: TSchema, options?: SensitiveFieldOptions): TSchema;
@@ -92,46 +69,6 @@ export declare const fields: {
         description?: string;
     }) => ZodString;
 };
-export declare class OutputTextTrustSchemaError extends TypeError {
-    readonly code = "invalid_output_text_trust_schema";
-    constructor(value: unknown);
-}
-export declare class OutputTextTrustCollectionError extends Error {
-    readonly schemaPath: string;
-    readonly classification: "untrusted";
-    readonly code = "output_text_trust_collection_failed";
-    constructor(schemaPath: string, cause: unknown);
-}
-/**
- * Collect every textual leaf in a Zod output schema as a deterministic
- * schema-path-to-classification object. The path grammar is rooted at `$`:
- * object keys are `["key"]`, arrays and record values are `[*]`, tuple slots
- * are `[n]`, union/intersection alternatives are `<union:n>` / `<intersection:n>`,
- * record keys are `<record-key>`, and one bounded cycle expansion is marked
- * `<recursive>`.
- */
-export declare function collectOutputTextTrust(schema: ZodType): OutputTextTrustMap;
-/** Report textual output paths that lack a valid explicit or auto-derived classification. */
-export declare function findUnclassifiedOutputTextPaths(schema: ZodType): string[];
-/** @internal Used by contract JSON Schema projection. */
-export declare function resolveOutputTextTrust(schema: z.core.$ZodType, inheritedUntrusted?: boolean): TextTrust | undefined;
-/** @internal Resolve both projection states from one stable schema traversal. */
-export declare function resolveOutputTextTrustProjection(schema: z.core.$ZodType): {
-    readonly inherited: TextTrust;
-    readonly local: TextTrust;
-} | undefined;
-/** @internal Whether this node can bypass or mutate descendant validation guarantees. */
-export declare function invalidatesDescendantOutputTextAutoTrust(schema: z.core.$ZodType): boolean;
-/** @internal Run output projection without evaluating dynamic fallback callbacks. */
-export declare function suppressDynamicOutputFallbacksDuring<T>(project: () => T): T;
-/** @internal Whether this mutator has a static fallback that cannot contain text. */
-export declare function mutatorReturnIsProvablyNonText(schema: z.core.$ZodType): boolean;
-/** @internal Whether this mutator has a static array fallback. */
-export declare function mutatorUsesStaticArrayFallback(schema: z.core.$ZodType): boolean;
-/** @internal Whether this default or catch was authored with a callback. */
-export declare function hasDynamicOutputFallback(schema: z.core.$ZodType): boolean;
-/** @internal Used by contract JSON Schema projection. */
-export declare function inheritsUntrustedOutputTextTrust(schema: z.core.$ZodType): boolean;
 export declare function isSensitiveSchema(schema: unknown): boolean;
 export declare function collectSensitivePaths(schema: unknown): SensitivePath[];
 export declare function redactPayload(value: unknown, paths?: readonly SensitivePath[]): unknown;