@arbium/enterprise-agent-connect 0.1.2-dev.d2aa5ca → 0.2.1-dev.7b4e802

package/dist/packages/connector-kit/src/fetch.js

@@ -0,0 +1,44 @@
+import { ConnectError } from "./types.js";
+// How every coded connector reaches its app. A redirect is refused, never followed, so a token
+// or body cannot be carried to another host. A 429 means the app did not run the call, so when
+// its Retry-After is short the call is sent again (at most RETRIES times); a longer wait is
+// passed back as the 429.
+const RETRIES = 2;
+const MAX_WAIT_SECONDS = 10;
+const guarded = new WeakSet();
+const sleep = (seconds) => new Promise((r) => setTimeout(r, seconds * 1000));
+/** Seconds to wait from a Retry-After header (seconds or an HTTP date), or null. */
+export function retryAfter(header, now = Date.now()) {
+    if (!header)
+        return null;
+    const seconds = /^\d+$/.test(header.trim()) ? Number(header) : (Date.parse(header) - now) / 1000;
+    return Number.isFinite(seconds) ? Math.max(0, Math.ceil(seconds)) : null;
+}
+export function vendorFetch(name, fetchImpl = fetch, wait = sleep) {
+    if (guarded.has(fetchImpl))
+        return fetchImpl;
+    const safe = (async (input, init) => {
+        for (let attempt = 0;; attempt++) {
+            const res = await fetchImpl(input, { ...init, redirect: "manual" });
+            if (res.status >= 300 && res.status < 400) {
+                await res.body?.cancel();
+                throw new ConnectError(`${name} answered with a redirect (${res.status}), which is not followed. Check the address it was connected with.`);
+            }
+            const after = res.status === 429 ? retryAfter(res.headers.get("retry-after")) : null;
+            if (after === null || attempt >= RETRIES || after > MAX_WAIT_SECONDS)
+                return res;
+            await res.body?.cancel();
+            await wait(Math.max(after, 1));
+        }
+    });
+    guarded.add(safe);
+    return safe;
+}
+/** `${base}${path}`, refused when the path would leave base's origin (e.g. "@other.host"). */
+export function vendorUrl(base, path) {
+    const url = `${base}${path}`;
+    if (URL.parse(url)?.origin !== new URL(base).origin)
+        throw new Error(`Refused a call leaving ${new URL(base).host}`);
+    return url;
+}
+//# sourceMappingURL=fetch.js.map

package/dist/packages/connector-kit/src/fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAc,MAAM,YAAY,CAAC;AAEtD,+FAA+F;AAC/F,+FAA+F;AAC/F,4FAA4F;AAC5F,0BAA0B;AAE1B,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAS,CAAC;AACrC,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;AAErF,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,MAAqB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAChE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;IACjG,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,YAAmB,KAAK,EAAE,IAAI,GAAG,KAAK;IAC9E,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,KAA6B,EAAE,IAAkB,EAAE,EAAE;QACxE,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC1C,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBACzB,MAAM,IAAI,YAAY,CACpB,GAAG,IAAI,8BAA8B,GAAG,CAAC,MAAM,oEAAoE,CACpH,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACrF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,IAAI,OAAO,IAAI,KAAK,GAAG,gBAAgB;gBAAE,OAAO,GAAG,CAAC;YACjF,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAU,CAAC;IACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY;IAClD,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAC7B,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM;QACjD,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/packages/connector-kit/src/index.d.ts

@@ -1,5 +1,5 @@
 export { audited, Denied, json, listLimit, mapLimit, textLimit, toolsets, VendorFailed, type ToolContext, type Toolset, } from "./common.js";
-export type { Capability, Connector, ConnectorJson, ConnectorModule } from "./connector.js";
+export type { Capability, Connector, ConnectorContext, ConnectorJson, ConnectorModule, } from "./connector.js";
+export { retryAfter, vendorFetch, vendorUrl } from "./fetch.js";
 export { clientCredentials, vendorError } from "./oauth.js";
-export { ConnectError, type CheckInput, type Fetch, type Vendor, type VendorConnection, type VendorRequest, type VendorResponse, } from "./types.js";
-export type { Limits } from "../../server/src/store.js";
+export { ConnectError, type CheckInput, type Fetch, type Limits, type Vendor, type VendorConnection, type VendorRequest, type VendorResponse, } from "./types.js";

package/dist/packages/connector-kit/src/index.js

@@ -1,5 +1,6 @@
 // What a connector written outside this repo builds on: the server package's ./kit export.
 export { audited, Denied, json, listLimit, mapLimit, textLimit, toolsets, VendorFailed, } from "./common.js";
+export { retryAfter, vendorFetch, vendorUrl } from "./fetch.js";
 export { clientCredentials, vendorError } from "./oauth.js";
 export { ConnectError, } from "./types.js";
 //# sourceMappingURL=index.js.map

package/dist/packages/connector-kit/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/index.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,SAAS,EACT,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,GAGb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EACL,YAAY,GAOb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/index.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAE3F,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,SAAS,EACT,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,YAAY,GAGb,MAAM,aAAa,CAAC;AAQrB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EACL,YAAY,GAQb,MAAM,YAAY,CAAC"}

package/dist/packages/connector-kit/src/oauth.d.ts

@@ -4,9 +4,11 @@ type Credentials = {
     clientId: string;
     clientSecret: string;
     scope?: string;
+    clientAuth?: "body" | "basic";
+    audience?: string;
 };
 export declare function vendorError(data: unknown): string;
-export declare function clientCredentials(name: string, fetchImpl: Fetch): {
+export declare function clientCredentials(name: string, unguarded: Fetch): {
     signIn: (c: Credentials) => Promise<undefined>;
     token: (c: Credentials) => Promise<string>;
     forget: (c: Credentials) => void;

package/dist/packages/connector-kit/src/oauth.js

@@ -1,4 +1,5 @@
 import { createHash } from "node:crypto";
+import { vendorFetch, vendorUrl } from "./fetch.js";
 import { ConnectError, TokenCache, } from "./types.js";
 // FedEx: { errors: [{ code, message }] }; Dell and most others: { error, error_description }.
 export function vendorError(data) {
@@ -13,20 +14,29 @@ export function vendorError(data) {
     const text = d.error_description ?? d.message ?? d.error;
     return typeof text === "string" ? text.split(/\r?\n/)[0].slice(0, 300) : "";
 }
-export function clientCredentials(name, fetchImpl) {
+export function clientCredentials(name, unguarded) {
+    const fetchImpl = vendorFetch(name, unguarded);
     const tokens = new TokenCache();
     const key = (c) => createHash("sha256")
-        .update(`${c.tokenUrl}\n${c.clientId}\n${c.clientSecret}\n${c.scope ?? ""}`)
+        .update(`${c.tokenUrl}\n${c.clientId}\n${c.clientSecret}\n${c.scope ?? ""}\n${c.audience ?? ""}`)
         .digest("hex");
     async function mint(c) {
+        const basic = c.clientAuth === "basic";
+        // RFC 6749 2.3.1: each form-encoded before joining.
+        const form = (v) => encodeURIComponent(v).replace(/%20/g, "+");
+        const pair = Buffer.from(`${form(c.clientId)}:${form(c.clientSecret)}`).toString("base64");
         const res = await fetchImpl(c.tokenUrl, {
             method: "POST",
-            headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+            headers: {
+                "content-type": "application/x-www-form-urlencoded",
+                accept: "application/json",
+                ...(basic ? { authorization: `Basic ${pair}` } : {}),
+            },
             body: new URLSearchParams({
                 grant_type: "client_credentials",
-                client_id: c.clientId,
-                client_secret: c.clientSecret,
+                ...(basic ? {} : { client_id: c.clientId, client_secret: c.clientSecret }),
                 ...(c.scope ? { scope: c.scope } : {}),
+                ...(c.audience ? { audience: c.audience } : {}),
             }),
         });
         const raw = await res.text();
@@ -47,7 +57,7 @@ export function clientCredentials(name, fetchImpl) {
         // A string body (e.g. Jamf's Classic API XML) goes as is, under the request's own
         // content-type; anything else is JSON.
         const asIs = typeof request.body === "string";
-        const res = await fetchImpl(`${base}${request.path}`, {
+        const res = await fetchImpl(vendorUrl(base, request.path), {
             method: request.method,
             headers: {
                 authorization: `Bearer ${access}`,

package/dist/packages/connector-kit/src/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,UAAU,GAIX,MAAM,YAAY,CAAC;AASpB,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,MAAM,CAAC,GAAG,IAKT,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,CAAC,CAAC,MAAM;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC1D,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC;IACzD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAgB;IAC9D,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,CAAc,EAAE,EAAE,CAC7B,UAAU,CAAC,QAAQ,CAAC;SACjB,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;SAC3E,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnB,KAAK,UAAU,IAAI,CAAC,CAAc;QAChC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC5F,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,SAAS,EAAE,CAAC,CAAC,QAAQ;gBACrB,aAAa,EAAE,CAAC,CAAC,YAAY;gBAC7B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvC,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAqE,CAAC;QAC5F,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,yBAAyB,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YAC5E,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,EAAE;YAChD,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,uDAAuD,CAAC,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,MAAc,EAAE,OAAsB,EAAE,OAAO,GAAG,EAAE;QACpF,kFAAkF;QAClF,uCAAuC;QACvC,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE;YACpD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,OAAO;gBACV,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBACrF,GAAG,OAAO,CAAC,OAAO;aACnB;YACD,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI;oBACJ,CAAC,CAAE,OAAO,CAAC,IAAe;oBAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,sFAAsF;QACtF,MAAM,EAAE,CAAC,CAAc,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QAC1D,iFAAiF;QACjF,KAAK;QACL,MAAM,EAAE,CAAC,CAAc,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CACR,CAAc,EACd,IAAY,EACZ,OAAsB,EACtB,UAAkC,EAAE;YAEpC,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,UAAU,GAIX,MAAM,YAAY,CAAC;AAkBpB,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,MAAM,CAAC,GAAG,IAKT,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,CAAC,CAAC,MAAM;aACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC1D,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC;IACzD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAgB;IAC9D,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,CAAc,EAAE,EAAE,CAC7B,UAAU,CAAC,QAAQ,CAAC;SACjB,MAAM,CACL,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CACzF;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnB,KAAK,UAAU,IAAI,CAAC,CAAc;QAChC,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC;QACvC,oDAAoD;QACpD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrD;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;gBAC1E,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAqE,CAAC;QAC5F,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,yBAAyB,GAAG,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YAC5E,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,EAAE;YAChD,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,uDAAuD,CAAC,CAAC;QACzF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpE,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,MAAc,EAAE,OAAsB,EAAE,OAAO,GAAG,EAAE;QACpF,kFAAkF;QAClF,uCAAuC;QACvC,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;YACzD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,OAAO;gBACV,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBACrF,GAAG,OAAO,CAAC,OAAO;aACnB;YACD,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI;oBACJ,CAAC,CAAE,OAAO,CAAC,IAAe;oBAC1B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7B,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;SACzC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,sFAAsF;QACtF,MAAM,EAAE,CAAC,CAAc,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QAC1D,iFAAiF;QACjF,KAAK;QACL,MAAM,EAAE,CAAC,CAAc,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CACR,CAAc,EACd,IAAY,EACZ,OAAsB,EACtB,UAAkC,EAAE;YAEpC,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtB,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/packages/connector-kit/src/types.d.ts

@@ -1,4 +1,5 @@
 export type Fetch = typeof fetch;
+export type Limits = Record<string, string[] | string | Record<string, string>>;
 export type VendorConnection = {
     config: Record<string, string>;
     secret: Record<string, string>;
@@ -8,7 +9,8 @@ export type VendorRequest = {
     path: string;
     body?: unknown;
     headers?: Record<string, string>;
-    responseType?: "text";
+    responseType?: "text" | "bytes";
+    maxBytes?: number;
 };
 export type VendorResponse = {
     status: number;
@@ -32,6 +34,7 @@ export type Vendor = {
     checks?: Record<string, (connection: VendorConnection, input: CheckInput) => Promise<{
         values: string[];
         warning?: string;
+        labels?: Record<string, string>;
     }>>;
 };
 export type SiteAccess = {

package/dist/packages/connector-kit/src/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/types.ts"],"names":[],"mappings":"AAAA,yDAAyD;AAoGzD,gEAAgE;AAChE,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG;AAE1C,gEAAgE;AAChE,MAAM,OAAO,UAAU;IACrB,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;IAElE,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAyD;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC;QACxD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAClF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../packages/connector-kit/src/types.ts"],"names":[],"mappings":"AAAA,yDAAyD;AA4GzD,gEAAgE;AAChE,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG;AAE1C,gEAAgE;AAChE,MAAM,OAAO,UAAU;IACrB,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;IAElE,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,IAAyD;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC;QACxD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAClF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF"}

package/dist/packages/server/migrations/0008_internal_apps.sql

@@ -0,0 +1,16 @@
+-- An organization's own apps, added through the admin API: a connector.json (with an http,
+-- soap, odata or sql block) kept as written, run on the generic module of its kind. Never
+-- holds a secret: those are entered at connect time and sealed in connections.
+create table internal_apps (
+  organization_id uuid not null references organizations (id) on delete cascade,
+  id text not null check (id ~ '^[a-z0-9-]+$'),
+  definition jsonb not null,
+  created_by text not null,
+  created_at timestamptz not null default now(),
+  updated_by text not null,
+  updated_at timestamptz not null default now(),
+  primary key (organization_id, id)
+);
+alter table internal_apps enable row level security;
+alter table internal_apps force row level security;
+create policy service on internal_apps for all to current_user using (true) with check (true);

package/dist/packages/server/migrations/rollback/to-legacy.sql

@@ -12,6 +12,8 @@ drop view if exists public.agent_connect_agents, public.agent_connect_providers,
   public.agent_connect_teams_conversations, public.agent_connect_teams_events,
   public.agent_connect_teams_triggers, public.agent_connect_teams_runs,
   public.agent_connect_teams_spend;
+-- 0008: organizations' own apps, which 0.7.5 does not have.
+drop table agent_connect.internal_apps;
 -- 0007: app events and their triggers, which 0.7.5 does not have.
 drop table agent_connect.event_runs, agent_connect.event_triggers, agent_connect.app_events,
   agent_connect.event_subscriptions;