@channel.io/app-sdk-server 0.24.2 → 0.26.0

package/dist/__tests__/sanitize-for-logging.test.js

@@ -1,6 +1,72 @@
 import { describe, expect, it } from "vitest";
 import { sanitizeForLogging } from "../utils/sanitize-for-logging.js";
 describe("sanitizeForLogging", () => {
+    it("redacts OAuth resume nonces and redirect URLs that embed them", () => {
+        expect(sanitizeForLogging({
+            resumeUrl: "https://desk.example/return?oauthFlowNonce=secret",
+            resumeNonce: "secret",
+            oauth_flow_nonce: "secret",
+            result: {
+                type: "redirect",
+                url: "https://setup.example/?returnTo=https%3A%2F%2Fdesk.example%3FoauthFlowNonce%3Dsecret",
+            },
+            flowId: "flow-1",
+        })).toEqual({
+            resumeUrl: "[REDACTED]",
+            resumeNonce: "[REDACTED]",
+            oauth_flow_nonce: "[REDACTED]",
+            result: { type: "redirect", url: "[REDACTED]" },
+            flowId: "flow-1",
+        });
+    });
+    it.each(["oauth_flow_nonce", "oauth-flow-nonce", "OAuth_Flow_Nonce"])("redacts %s inside nested and encoded redirect URLs", (nonceKey) => {
+        const resumeUrl = `https://desk.example/return?${nonceKey}=secret`;
+        expect(sanitizeForLogging({
+            result: {
+                url: `https://setup.example/?returnTo=${encodeURIComponent(resumeUrl)}`,
+                returnTo: resumeUrl,
+            },
+        })).toEqual({
+            result: { url: "[REDACTED]", returnTo: "[REDACTED]" },
+        });
+    });
+    it("redacts space-separated nonce names in strings", () => {
+        expect(sanitizeForLogging({ url: "https://desk.example/?oauth flow nonce=secret" })).toEqual({
+            url: "[REDACTED]",
+        });
+    });
+    it.each([
+        "oauth%46lowNonce",
+        "oauth%5Fflow%5Fnonce",
+        "oauth%2Dflow%2Dnonce",
+        "oauth%20flow%20nonce",
+        "oauth+flow+nonce",
+        "oauth%2Bflow%2Bnonce",
+    ])("redacts encoded nonce name %s in direct and nested URLs", (nonceKey) => {
+        const resumeUrl = `https://desk.example/?${nonceKey}=secret`;
+        const redirectUrl = `https://setup.example/?returnTo=${encodeURIComponent(resumeUrl)}`;
+        expect(sanitizeForLogging({
+            url: resumeUrl,
+            nested: { returnTo: `https://outer.example/?next=${encodeURIComponent(redirectUrl)}` },
+        })).toEqual({ url: "[REDACTED]", nested: { returnTo: "[REDACTED]" } });
+    });
+    it("redacts encoded nonces even when another URL component has malformed escapes", () => {
+        expect(sanitizeForLogging({ url: "https://desk.example/?broken=%FF%&oauth%46lowNonce=secret" })).toEqual({ url: "[REDACTED]" });
+    });
+    it("redacts deeply encoded values without unbounded decoding", () => {
+        let url = "https://desk.example/?oauth%46lowNonce=secret";
+        for (let i = 0; i < 8; i++) {
+            url = encodeURIComponent(url);
+        }
+        expect(sanitizeForLogging({ url })).toEqual({ url: "[REDACTED]" });
+    });
+    it("preserves unrelated text and URLs, including malformed percent escapes", () => {
+        const value = {
+            url: "https://desk.example/?returnTo=https%3A%2F%2Fsetup.example%2Fdone&broken=%FF%",
+            message: "100% complete",
+        };
+        expect(sanitizeForLogging(value)).toEqual(value);
+    });
     it("should redact snake_case and kebab-case sensitive keys", () => {
         expect(sanitizeForLogging({
             access_token: "access-123",

package/dist/__tests__/sanitize-for-logging.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize-for-logging.test.js","sourceRoot":"","sources":["../../src/__tests__/sanitize-for-logging.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CACJ,kBAAkB,CAAC;YACjB,YAAY,EAAE,YAAY;YAC1B,eAAe,EAAE,aAAa;YAC9B,gBAAgB,EAAE,cAAc;YAChC,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,mBAAmB;YAClC,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CACH,CAAC,OAAO,CAAC;YACR,YAAY,EAAE,YAAY;YAC1B,eAAe,EAAE,YAAY;YAC7B,gBAAgB,EAAE,YAAY;YAC9B,OAAO,EAAE,YAAY;YACrB,aAAa,EAAE,YAAY;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CACJ,kBAAkB,CAAC;YACjB,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CACH,CAAC,OAAO,CAAC;YACR,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"sanitize-for-logging.test.js","sourceRoot":"","sources":["../../src/__tests__/sanitize-for-logging.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CACJ,kBAAkB,CAAC;YACjB,SAAS,EAAE,mDAAmD;YAC9D,WAAW,EAAE,QAAQ;YACrB,gBAAgB,EAAE,QAAQ;YAC1B,MAAM,EAAE;gBACN,IAAI,EAAE,UAAU;gBAChB,GAAG,EAAE,sFAAsF;aAC5F;YACD,MAAM,EAAE,QAAQ;SACjB,CAAC,CACH,CAAC,OAAO,CAAC;YACR,SAAS,EAAE,YAAY;YACvB,WAAW,EAAE,YAAY;YACzB,gBAAgB,EAAE,YAAY;YAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE;YAC/C,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CACnE,oDAAoD,EACpD,CAAC,QAAQ,EAAE,EAAE;QACX,MAAM,SAAS,GAAG,+BAA+B,QAAQ,SAAS,CAAC;QACnE,MAAM,CACJ,kBAAkB,CAAC;YACjB,MAAM,EAAE;gBACN,GAAG,EAAE,mCAAmC,kBAAkB,CAAC,SAAS,CAAC,EAAE;gBACvE,QAAQ,EAAE,SAAS;aACpB;SACF,CAAC,CACH,CAAC,OAAO,CAAC;YACR,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;SACtD,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,+CAA+C,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3F,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,kBAAkB;QAClB,sBAAsB;QACtB,sBAAsB;QACtB,sBAAsB;QACtB,kBAAkB;QAClB,sBAAsB;KACvB,CAAC,CAAC,yDAAyD,EAAE,CAAC,QAAQ,EAAE,EAAE;QACzE,MAAM,SAAS,GAAG,yBAAyB,QAAQ,SAAS,CAAC;QAC7D,MAAM,WAAW,GAAG,mCAAmC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QACvF,MAAM,CACJ,kBAAkB,CAAC;YACjB,GAAG,EAAE,SAAS;YACd,MAAM,EAAE,EAAE,QAAQ,EAAE,+BAA+B,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE;SACvF,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CACJ,kBAAkB,CAAC,EAAE,GAAG,EAAE,2DAA2D,EAAE,CAAC,CACzF,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,IAAI,GAAG,GAAG,+CAA+C,CAAC;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,KAAK,GAAG;YACZ,GAAG,EAAE,+EAA+E;YACpF,OAAO,EAAE,eAAe;SACzB,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CACJ,kBAAkB,CAAC;YACjB,YAAY,EAAE,YAAY;YAC1B,eAAe,EAAE,aAAa;YAC9B,gBAAgB,EAAE,cAAc;YAChC,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,mBAAmB;YAClC,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CACH,CAAC,OAAO,CAAC;YACR,YAAY,EAAE,YAAY;YAC1B,eAAe,EAAE,YAAY;YAC7B,gBAAgB,EAAE,YAAY;YAC9B,OAAO,EAAE,YAAY;YACrB,aAAa,EAAE,YAAY;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CACJ,kBAAkB,CAAC;YACjB,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CACH,CAAC,OAAO,CAAC;YACR,SAAS,EAAE,WAAW;YACtB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/decorators/extension-names.d.ts

@@ -1,3 +1,3 @@
-export declare const SDK_EXTENSION_NAMES: readonly ["oauth", "apikey", "config", "calendar", "messaging", "messenger", "command", "widget", "customtab", "hook", "polling", "store", "datasource", "commerce", "order", "wms", "userAuthorization", "alfTask", "notebook"];
+export declare const SDK_EXTENSION_NAMES: readonly ["oauth", "apikey", "config", "calendar", "messaging", "messenger", "command", "widget", "customtab", "hook", "polling", "store", "suggestion", "datasource", "commerce", "order", "wms", "userAuthorization", "alfTask", "notebook"];
 export type SdkExtensionName = (typeof SDK_EXTENSION_NAMES)[number];
 //# sourceMappingURL=extension-names.d.ts.map

package/dist/decorators/extension-names.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extension-names.d.ts","sourceRoot":"","sources":["../../src/decorators/extension-names.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,kOAoBtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"extension-names.d.ts","sourceRoot":"","sources":["../../src/decorators/extension-names.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,gPAqBtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC"}

package/dist/decorators/extension-names.js

@@ -11,6 +11,7 @@ export const SDK_EXTENSION_NAMES = [
     "hook",
     "polling",
     "store",
+    "suggestion",
     "datasource",
     "commerce",
     "order",

package/dist/decorators/extension-names.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-names.js","sourceRoot":"","sources":["../../src/decorators/extension-names.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,WAAW;IACX,WAAW;IACX,SAAS;IACT,QAAQ;IACR,WAAW;IACX,MAAM;IACN,SAAS;IACT,OAAO;IACP,YAAY;IACZ,UAAU;IACV,OAAO;IACP,KAAK;IACL,mBAAmB;IACnB,SAAS;IACT,UAAU;CACF,CAAC"}
+{"version":3,"file":"extension-names.js","sourceRoot":"","sources":["../../src/decorators/extension-names.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,WAAW;IACX,WAAW;IACX,SAAS;IACT,QAAQ;IACR,WAAW;IACX,MAAM;IACN,SAAS;IACT,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,UAAU;IACV,OAAO;IACP,KAAK;IACL,mBAAmB;IACnB,SAAS;IACT,UAAU;CACF,CAAC"}

package/dist/utils/sanitize-for-logging.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize-for-logging.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize-for-logging.ts"],"names":[],"mappings":"AAqBA,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,kBAAgB,GAAG,OAAO,CAwB9F"}
+{"version":3,"file":"sanitize-for-logging.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize-for-logging.ts"],"names":[],"mappings":"AA2CA,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,kBAAgB,GAAG,OAAO,CA6B9F"}

package/dist/utils/sanitize-for-logging.js

@@ -1,5 +1,6 @@
 const REDACTED_LOG_VALUE = "[REDACTED]";
 const CIRCULAR_LOG_VALUE = "[Circular]";
+const OAUTH_FLOW_NONCE_NAME = /oauth[-_ +]?flow[-_ +]?nonce/i;
 const SENSITIVE_LOG_KEYS = new Set([
     "secret",
     "appsecret",
@@ -13,14 +14,36 @@ const SENSITIVE_LOG_KEYS = new Set([
     "clientsecret",
     "password",
     "xaccesstoken",
+    "resumeurl",
+    "resumenonce",
+    "oauthflownonce",
 ]);
 function normalizeSensitiveLogKey(key) {
     return key.toLowerCase().replace(/[^a-z0-9]/g, "");
 }
+function shouldRedactOAuthFlowURL(value) {
+    for (let depth = 0; depth < 4; depth++) {
+        if (OAUTH_FLOW_NONCE_NAME.test(value)) {
+            return true;
+        }
+        // Decode bytes only for detection; malformed escapes must not stop masking.
+        const decoded = value.replace(/%([0-9a-f]{2})/gi, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
+        if (decoded === value) {
+            return false;
+        }
+        value = decoded;
+    }
+    // Bound work for deeply nested redirects and hide values we cannot fully inspect.
+    return OAUTH_FLOW_NONCE_NAME.test(value) || /%[0-9a-f]{2}/i.test(value);
+}
 export function sanitizeForLogging(value, key, seen = new WeakSet()) {
     if (key && SENSITIVE_LOG_KEYS.has(normalizeSensitiveLogKey(key))) {
         return REDACTED_LOG_VALUE;
     }
+    // Redirect destinations can embed the signed resume URL as an encoded query value.
+    if (typeof value === "string" && shouldRedactOAuthFlowURL(value)) {
+        return REDACTED_LOG_VALUE;
+    }
     if (Array.isArray(value)) {
         return value.map((item) => sanitizeForLogging(item, undefined, seen));
     }

package/dist/utils/sanitize-for-logging.js.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize-for-logging.js","sourceRoot":"","sources":["../../src/utils/sanitize-for-logging.ts"],"names":[],"mappings":"AAAA,MAAM,kBAAkB,GAAG,YAAY,CAAC;AACxC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AACxC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,QAAQ;IACR,WAAW;IACX,cAAc;IACd,aAAa;IACb,WAAW;IACX,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;IACR,eAAe;IACf,cAAc;IACd,UAAU;IACV,cAAc;CACf,CAAC,CAAC;AAEH,SAAS,wBAAwB,CAAC,GAAW;IAC3C,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,GAAY,EAAE,IAAI,GAAG,IAAI,OAAO,EAAE;IACnF,IAAI,GAAG,IAAI,kBAAkB,CAAC,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhB,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YACpD,QAAQ;YACR,kBAAkB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC;SAC/C,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"sanitize-for-logging.js","sourceRoot":"","sources":["../../src/utils/sanitize-for-logging.ts"],"names":[],"mappings":"AAAA,MAAM,kBAAkB,GAAG,YAAY,CAAC;AACxC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AACxC,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAC9D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,QAAQ;IACR,WAAW;IACX,cAAc;IACd,aAAa;IACb,WAAW;IACX,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;IACR,eAAe;IACf,cAAc;IACd,UAAU;IACV,cAAc;IACd,WAAW;IACX,aAAa;IACb,gBAAgB;CACjB,CAAC,CAAC;AAEH,SAAS,wBAAwB,CAAC,GAAW;IAC3C,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,4EAA4E;QAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE,CACnE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CACvC,CAAC;QACF,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,GAAG,OAAO,CAAC;IAClB,CAAC;IACD,kFAAkF;IAClF,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,GAAY,EAAE,IAAI,GAAG,IAAI,OAAO,EAAE;IACnF,IAAI,GAAG,IAAI,kBAAkB,CAAC,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,mFAAmF;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhB,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;YACpD,QAAQ;YACR,kBAAkB,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC;SAC/C,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@channel.io/app-sdk-server",
-  "version": "0.24.2",
+  "version": "0.26.0",
   "description": "NestJS server SDK for Channel.io apps",
   "type": "module",
   "main": "./dist/index.js",
@@ -25,7 +25,7 @@
     "protobufjs": "^8.7.1",
     "zod": "^3.24.1",
     "zod-to-json-schema": "^3.25.2",
-    "@channel.io/app-sdk-core": "0.24.2"
+    "@channel.io/app-sdk-core": "0.26.0"
   },
   "peerDependencies": {
     "@google-cloud/bigquery": "^8.3.1",