@keystrokehq/netsuite 0.1.0 → 0.1.3

package/dist/actions/o-auth2-authorize-system-domain.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-authorize-system-domain.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-authorize-system-domain.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2AuthorizeSystemDomainInput: z.ZodTypeAny = z.object({\n  nonce: z.string().describe(\"Optional string to associate a user session with an ID token; max length 256 characters.\").optional(),\n  scope: z.string().describe(\"Space-separated list of OAuth2 scopes. Valid values are 'openid' and 'email'. Use 'openid email' for both, or either one individually.\"),\n  state: z.string().describe(\"Opaque value to maintain state between request and callback; 22–1024 printable ASCII characters.\"),\n  prompt: z.enum([\"none\", \"login\", \"consent\", \"login consent\"]).describe(\"OAuth2 prompt behavior: 'none' (no consent screen), 'login' (force authentication), 'consent' (always show consent), or 'login consent' (both required).\").optional(),\n  client_id: z.string().describe(\"The integration record's client identifier.\"),\n  redirect_uri: z.string().describe(\"The exact callback URI registered in the integration record; must match registration.\"),\n  response_type: z.string().default(\"code\").describe(\"OAuth2 response type. Must be 'code'.\").optional(),\n  code_challenge: z.string().describe(\"PKCE code challenge, required for public clients; base64url(SHA256(code_verifier)), 43–128 characters.\").optional(),\n  code_challenge_method: z.string().describe(\"Method to derive code_challenge; only 'S256' is supported.\").optional(),\n}).describe(\"Request model for starting an OAuth2 authorization code flow on the NetSuite system domain.\");\nexport const NetsuiteOAuth2AuthorizeSystemDomainOutput: z.ZodTypeAny = z.object({\n  redirect_url: z.string().describe(\"The NetSuite authorization URL where the user should be redirected to authenticate and authorize the application. After authorization, NetSuite redirects back to the redirect_uri with the authorization code or error.\"),\n}).describe(\"Response model containing the redirect URL for OAuth2 authorization.\");\n\nexport const netsuiteOAuth2AuthorizeSystemDomain = action(\"NETSUITE_O_AUTH2_AUTHORIZE_SYSTEM_DOMAIN\", {\n  slug: \"netsuite-o-auth2-authorize-system-domain\",\n  name: \"OAuth2 Authorize System Domain\",\n  description: \"Initiates the OAuth2 authorization code flow using NetSuite's system domain endpoint. Returns the authorization URL where users should be redirected to authenticate and grant permissions. After user authorization, NetSuite redirects back to your redirect_uri with an authorization code. Use this when you don't know the specific NetSuite account ID or want to use the generic system domain.\",\n  input: NetsuiteOAuth2AuthorizeSystemDomainInput,\n  output: NetsuiteOAuth2AuthorizeSystemDomainOutput,\n});\n"],"mappings":";;;AAIA,MAAa,2CAAyDA,IAAAA,EAAE,OAAO;CAC7E,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0FAA0F,CAAC,CAAC,SAAS;CAChI,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,wIAAwI;CACnK,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,kGAAkG;CAC7H,QAAQA,IAAAA,EAAE,KAAK;EAAC;EAAQ;EAAS;EAAW;CAAe,CAAC,CAAC,CAAC,SAAS,0JAA0J,CAAC,CAAC,SAAS;CAC5O,WAAWA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,6CAA6C;CAC5E,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,uFAAuF;CACzH,eAAeA,IAAAA,EAAE,OAAO,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC,SAAS;CACrG,gBAAgBA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,wGAAwG,CAAC,CAAC,SAAS;CACvJ,uBAAuBA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,4DAA4D,CAAC,CAAC,SAAS;AACpH,CAAC,CAAC,CAAC,SAAS,6FAA6F;AACzG,MAAa,4CAA0DA,IAAAA,EAAE,OAAO,EAC9E,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0NAA0N,EAC9P,CAAC,CAAC,CAAC,SAAS,sEAAsE;AAElF,MAAa,sCAAsCC,eAAAA,OAAO,4CAA4C;CACpG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}
+{"version":3,"file":"o-auth2-authorize-system-domain.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-authorize-system-domain.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2AuthorizeSystemDomainInput = z.object({\n  nonce: z.string().describe(\"Optional string to associate a user session with an ID token; max length 256 characters.\").optional(),\n  scope: z.string().describe(\"Space-separated list of OAuth2 scopes. Valid values are 'openid' and 'email'. Use 'openid email' for both, or either one individually.\"),\n  state: z.string().describe(\"Opaque value to maintain state between request and callback; 22–1024 printable ASCII characters.\"),\n  prompt: z.enum([\"none\", \"login\", \"consent\", \"login consent\"]).describe(\"OAuth2 prompt behavior: 'none' (no consent screen), 'login' (force authentication), 'consent' (always show consent), or 'login consent' (both required).\").optional(),\n  client_id: z.string().describe(\"The integration record's client identifier.\"),\n  redirect_uri: z.string().describe(\"The exact callback URI registered in the integration record; must match registration.\"),\n  response_type: z.string().default(\"code\").describe(\"OAuth2 response type. Must be 'code'.\").optional(),\n  code_challenge: z.string().describe(\"PKCE code challenge, required for public clients; base64url(SHA256(code_verifier)), 43–128 characters.\").optional(),\n  code_challenge_method: z.string().describe(\"Method to derive code_challenge; only 'S256' is supported.\").optional(),\n}).describe(\"Request model for starting an OAuth2 authorization code flow on the NetSuite system domain.\");\nexport const NetsuiteOAuth2AuthorizeSystemDomainOutput = z.object({\n  redirect_url: z.string().describe(\"The NetSuite authorization URL where the user should be redirected to authenticate and authorize the application. After authorization, NetSuite redirects back to the redirect_uri with the authorization code or error.\").nullable(),\n}).passthrough().describe(\"Response model containing the redirect URL for OAuth2 authorization.\");\n\nexport const netsuiteOAuth2AuthorizeSystemDomain = action(\"NETSUITE_O_AUTH2_AUTHORIZE_SYSTEM_DOMAIN\", {\n  slug: \"netsuite-o-auth2-authorize-system-domain\",\n  name: \"OAuth2 Authorize System Domain\",\n  description: \"Initiates the OAuth2 authorization code flow using NetSuite's system domain endpoint. Returns the authorization URL where users should be redirected to authenticate and grant permissions. After user authorization, NetSuite redirects back to your redirect_uri with an authorization code. Use this when you don't know the specific NetSuite account ID or want to use the generic system domain.\",\n  input: NetsuiteOAuth2AuthorizeSystemDomainInput,\n  output: NetsuiteOAuth2AuthorizeSystemDomainOutput,\n});\n"],"mappings":";;;AAIA,MAAa,2CAA2CA,IAAAA,EAAE,OAAO;CAC/D,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0FAA0F,CAAC,CAAC,SAAS;CAChI,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,wIAAwI;CACnK,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,kGAAkG;CAC7H,QAAQA,IAAAA,EAAE,KAAK;EAAC;EAAQ;EAAS;EAAW;CAAe,CAAC,CAAC,CAAC,SAAS,0JAA0J,CAAC,CAAC,SAAS;CAC5O,WAAWA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,6CAA6C;CAC5E,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,uFAAuF;CACzH,eAAeA,IAAAA,EAAE,OAAO,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC,SAAS;CACrG,gBAAgBA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,wGAAwG,CAAC,CAAC,SAAS;CACvJ,uBAAuBA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,4DAA4D,CAAC,CAAC,SAAS;AACpH,CAAC,CAAC,CAAC,SAAS,6FAA6F;AACzG,MAAa,4CAA4CA,IAAAA,EAAE,OAAO,EAChE,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0NAA0N,CAAC,CAAC,SAAS,EACzQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,sEAAsE;AAEhG,MAAa,sCAAsCC,eAAAA,OAAO,4CAA4C;CACpG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}

package/dist/actions/o-auth2-authorize-system-domain.d.cts

@@ -1,9 +1,36 @@
 import { z } from "zod";
 
 //#region src/actions/o-auth2-authorize-system-domain.d.ts
-declare const NetsuiteOAuth2AuthorizeSystemDomainInput: z.ZodTypeAny;
-declare const NetsuiteOAuth2AuthorizeSystemDomainOutput: z.ZodTypeAny;
-declare const netsuiteOAuth2AuthorizeSystemDomain: import("@keystrokehq/action").WorkflowActionDefinition<unknown, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
+declare const NetsuiteOAuth2AuthorizeSystemDomainInput: z.ZodObject<{
+  nonce: z.ZodOptional<z.ZodString>;
+  scope: z.ZodString;
+  state: z.ZodString;
+  prompt: z.ZodOptional<z.ZodEnum<{
+    none: "none";
+    login: "login";
+    consent: "consent";
+    "login consent": "login consent";
+  }>>;
+  client_id: z.ZodString;
+  redirect_uri: z.ZodString;
+  response_type: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  code_challenge: z.ZodOptional<z.ZodString>;
+  code_challenge_method: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const NetsuiteOAuth2AuthorizeSystemDomainOutput: z.ZodObject<{
+  redirect_url: z.ZodNullable<z.ZodString>;
+}, z.core.$loose>;
+declare const netsuiteOAuth2AuthorizeSystemDomain: import("@keystrokehq/action").WorkflowActionDefinition<{
+  scope: string;
+  state: string;
+  client_id: string;
+  redirect_uri: string;
+  nonce?: string | undefined;
+  prompt?: "none" | "login" | "consent" | "login consent" | undefined;
+  response_type?: string | undefined;
+  code_challenge?: string | undefined;
+  code_challenge_method?: string | undefined;
+}, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
 //#endregion
 export { netsuiteOAuth2AuthorizeSystemDomain };
 //# sourceMappingURL=o-auth2-authorize-system-domain.d.cts.map

package/dist/actions/o-auth2-authorize-system-domain.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-authorize-system-domain.d.cts","names":[],"sources":["../../src/actions/o-auth2-authorize-system-domain.ts"],"mappings":";;;cAIa,wCAAA,EAA0C,CAAA,CAAE,UAUiD;AAAA,cAC7F,yCAAA,EAA2C,CAAA,CAAE,UAEyB;AAAA,cAEtE,mCAAA,gCAAmC,wBAAA,iDAAA,mBAAA,yCAAA,UAAA,4CAAA,UAAA"}
+{"version":3,"file":"o-auth2-authorize-system-domain.d.cts","names":[],"sources":["../../src/actions/o-auth2-authorize-system-domain.ts"],"mappings":";;;cAIa,wCAAA,EAAwC,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;cAWxC,yCAAA,EAAyC,CAAA,CAAA,SAAA;;;cAIzC,mCAAA,gCAAmC,wBAAA"}

package/dist/actions/o-auth2-authorize-system-domain.d.mts

@@ -1,9 +1,36 @@
 import { z } from "zod";
 
 //#region src/actions/o-auth2-authorize-system-domain.d.ts
-declare const NetsuiteOAuth2AuthorizeSystemDomainInput: z.ZodTypeAny;
-declare const NetsuiteOAuth2AuthorizeSystemDomainOutput: z.ZodTypeAny;
-declare const netsuiteOAuth2AuthorizeSystemDomain: import("@keystrokehq/action").WorkflowActionDefinition<unknown, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
+declare const NetsuiteOAuth2AuthorizeSystemDomainInput: z.ZodObject<{
+  nonce: z.ZodOptional<z.ZodString>;
+  scope: z.ZodString;
+  state: z.ZodString;
+  prompt: z.ZodOptional<z.ZodEnum<{
+    none: "none";
+    login: "login";
+    consent: "consent";
+    "login consent": "login consent";
+  }>>;
+  client_id: z.ZodString;
+  redirect_uri: z.ZodString;
+  response_type: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  code_challenge: z.ZodOptional<z.ZodString>;
+  code_challenge_method: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const NetsuiteOAuth2AuthorizeSystemDomainOutput: z.ZodObject<{
+  redirect_url: z.ZodNullable<z.ZodString>;
+}, z.core.$loose>;
+declare const netsuiteOAuth2AuthorizeSystemDomain: import("@keystrokehq/action").WorkflowActionDefinition<{
+  scope: string;
+  state: string;
+  client_id: string;
+  redirect_uri: string;
+  nonce?: string | undefined;
+  prompt?: "none" | "login" | "consent" | "login consent" | undefined;
+  response_type?: string | undefined;
+  code_challenge?: string | undefined;
+  code_challenge_method?: string | undefined;
+}, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
 //#endregion
 export { netsuiteOAuth2AuthorizeSystemDomain };
 //# sourceMappingURL=o-auth2-authorize-system-domain.d.mts.map

package/dist/actions/o-auth2-authorize-system-domain.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-authorize-system-domain.d.mts","names":[],"sources":["../../src/actions/o-auth2-authorize-system-domain.ts"],"mappings":";;;cAIa,wCAAA,EAA0C,CAAA,CAAE,UAUiD;AAAA,cAC7F,yCAAA,EAA2C,CAAA,CAAE,UAEyB;AAAA,cAEtE,mCAAA,gCAAmC,wBAAA,iDAAA,mBAAA,yCAAA,UAAA,4CAAA,UAAA"}
+{"version":3,"file":"o-auth2-authorize-system-domain.d.mts","names":[],"sources":["../../src/actions/o-auth2-authorize-system-domain.ts"],"mappings":";;;cAIa,wCAAA,EAAwC,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;cAWxC,yCAAA,EAAyC,CAAA,CAAA,SAAA;;;cAIzC,mCAAA,gCAAmC,wBAAA"}

package/dist/actions/o-auth2-authorize-system-domain.mjs

@@ -20,7 +20,7 @@ const netsuiteOAuth2AuthorizeSystemDomain = action("NETSUITE_O_AUTH2_AUTHORIZE_S
 		code_challenge: z.string().describe("PKCE code challenge, required for public clients; base64url(SHA256(code_verifier)), 43–128 characters.").optional(),
 		code_challenge_method: z.string().describe("Method to derive code_challenge; only 'S256' is supported.").optional()
 	}).describe("Request model for starting an OAuth2 authorization code flow on the NetSuite system domain."),
-	output: z.object({ redirect_url: z.string().describe("The NetSuite authorization URL where the user should be redirected to authenticate and authorize the application. After authorization, NetSuite redirects back to the redirect_uri with the authorization code or error.") }).describe("Response model containing the redirect URL for OAuth2 authorization.")
+	output: z.object({ redirect_url: z.string().describe("The NetSuite authorization URL where the user should be redirected to authenticate and authorize the application. After authorization, NetSuite redirects back to the redirect_uri with the authorization code or error.").nullable() }).passthrough().describe("Response model containing the redirect URL for OAuth2 authorization.")
 });
 //#endregion
 export { netsuiteOAuth2AuthorizeSystemDomain };

package/dist/actions/o-auth2-authorize-system-domain.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-authorize-system-domain.mjs","names":[],"sources":["../../src/actions/o-auth2-authorize-system-domain.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2AuthorizeSystemDomainInput: z.ZodTypeAny = z.object({\n  nonce: z.string().describe(\"Optional string to associate a user session with an ID token; max length 256 characters.\").optional(),\n  scope: z.string().describe(\"Space-separated list of OAuth2 scopes. Valid values are 'openid' and 'email'. Use 'openid email' for both, or either one individually.\"),\n  state: z.string().describe(\"Opaque value to maintain state between request and callback; 22–1024 printable ASCII characters.\"),\n  prompt: z.enum([\"none\", \"login\", \"consent\", \"login consent\"]).describe(\"OAuth2 prompt behavior: 'none' (no consent screen), 'login' (force authentication), 'consent' (always show consent), or 'login consent' (both required).\").optional(),\n  client_id: z.string().describe(\"The integration record's client identifier.\"),\n  redirect_uri: z.string().describe(\"The exact callback URI registered in the integration record; must match registration.\"),\n  response_type: z.string().default(\"code\").describe(\"OAuth2 response type. Must be 'code'.\").optional(),\n  code_challenge: z.string().describe(\"PKCE code challenge, required for public clients; base64url(SHA256(code_verifier)), 43–128 characters.\").optional(),\n  code_challenge_method: z.string().describe(\"Method to derive code_challenge; only 'S256' is supported.\").optional(),\n}).describe(\"Request model for starting an OAuth2 authorization code flow on the NetSuite system domain.\");\nexport const NetsuiteOAuth2AuthorizeSystemDomainOutput: z.ZodTypeAny = z.object({\n  redirect_url: z.string().describe(\"The NetSuite authorization URL where the user should be redirected to authenticate and authorize the application. After authorization, NetSuite redirects back to the redirect_uri with the authorization code or error.\"),\n}).describe(\"Response model containing the redirect URL for OAuth2 authorization.\");\n\nexport const netsuiteOAuth2AuthorizeSystemDomain = action(\"NETSUITE_O_AUTH2_AUTHORIZE_SYSTEM_DOMAIN\", {\n  slug: \"netsuite-o-auth2-authorize-system-domain\",\n  name: \"OAuth2 Authorize System Domain\",\n  description: \"Initiates the OAuth2 authorization code flow using NetSuite's system domain endpoint. Returns the authorization URL where users should be redirected to authenticate and grant permissions. After user authorization, NetSuite redirects back to your redirect_uri with an authorization code. Use this when you don't know the specific NetSuite account ID or want to use the generic system domain.\",\n  input: NetsuiteOAuth2AuthorizeSystemDomainInput,\n  output: NetsuiteOAuth2AuthorizeSystemDomainOutput,\n});\n"],"mappings":";;AAmBA,MAAa,sCAAsC,OAAO,4CAA4C;CACpG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAnBoE,EAAE,OAAO;EAC7E,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,0FAA0F,CAAC,CAAC,SAAS;EAChI,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,wIAAwI;EACnK,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,kGAAkG;EAC7H,QAAQ,EAAE,KAAK;GAAC;GAAQ;GAAS;GAAW;EAAe,CAAC,CAAC,CAAC,SAAS,0JAA0J,CAAC,CAAC,SAAS;EAC5O,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,6CAA6C;EAC5E,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,uFAAuF;EACzH,eAAe,EAAE,OAAO,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC,SAAS;EACrG,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS,wGAAwG,CAAC,CAAC,SAAS;EACvJ,uBAAuB,EAAE,OAAO,CAAC,CAAC,SAAS,4DAA4D,CAAC,CAAC,SAAS;CACpH,CAAC,CAAC,CAAC,SAAS,6FASH;CACP,QATqE,EAAE,OAAO,EAC9E,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,0NAA0N,EAC9P,CAAC,CAAC,CAAC,SAAS,sEAOF;AACV,CAAC"}
+{"version":3,"file":"o-auth2-authorize-system-domain.mjs","names":[],"sources":["../../src/actions/o-auth2-authorize-system-domain.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2AuthorizeSystemDomainInput = z.object({\n  nonce: z.string().describe(\"Optional string to associate a user session with an ID token; max length 256 characters.\").optional(),\n  scope: z.string().describe(\"Space-separated list of OAuth2 scopes. Valid values are 'openid' and 'email'. Use 'openid email' for both, or either one individually.\"),\n  state: z.string().describe(\"Opaque value to maintain state between request and callback; 22–1024 printable ASCII characters.\"),\n  prompt: z.enum([\"none\", \"login\", \"consent\", \"login consent\"]).describe(\"OAuth2 prompt behavior: 'none' (no consent screen), 'login' (force authentication), 'consent' (always show consent), or 'login consent' (both required).\").optional(),\n  client_id: z.string().describe(\"The integration record's client identifier.\"),\n  redirect_uri: z.string().describe(\"The exact callback URI registered in the integration record; must match registration.\"),\n  response_type: z.string().default(\"code\").describe(\"OAuth2 response type. Must be 'code'.\").optional(),\n  code_challenge: z.string().describe(\"PKCE code challenge, required for public clients; base64url(SHA256(code_verifier)), 43–128 characters.\").optional(),\n  code_challenge_method: z.string().describe(\"Method to derive code_challenge; only 'S256' is supported.\").optional(),\n}).describe(\"Request model for starting an OAuth2 authorization code flow on the NetSuite system domain.\");\nexport const NetsuiteOAuth2AuthorizeSystemDomainOutput = z.object({\n  redirect_url: z.string().describe(\"The NetSuite authorization URL where the user should be redirected to authenticate and authorize the application. After authorization, NetSuite redirects back to the redirect_uri with the authorization code or error.\").nullable(),\n}).passthrough().describe(\"Response model containing the redirect URL for OAuth2 authorization.\");\n\nexport const netsuiteOAuth2AuthorizeSystemDomain = action(\"NETSUITE_O_AUTH2_AUTHORIZE_SYSTEM_DOMAIN\", {\n  slug: \"netsuite-o-auth2-authorize-system-domain\",\n  name: \"OAuth2 Authorize System Domain\",\n  description: \"Initiates the OAuth2 authorization code flow using NetSuite's system domain endpoint. Returns the authorization URL where users should be redirected to authenticate and grant permissions. After user authorization, NetSuite redirects back to your redirect_uri with an authorization code. Use this when you don't know the specific NetSuite account ID or want to use the generic system domain.\",\n  input: NetsuiteOAuth2AuthorizeSystemDomainInput,\n  output: NetsuiteOAuth2AuthorizeSystemDomainOutput,\n});\n"],"mappings":";;AAmBA,MAAa,sCAAsC,OAAO,4CAA4C;CACpG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAnBsD,EAAE,OAAO;EAC/D,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,0FAA0F,CAAC,CAAC,SAAS;EAChI,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,wIAAwI;EACnK,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,kGAAkG;EAC7H,QAAQ,EAAE,KAAK;GAAC;GAAQ;GAAS;GAAW;EAAe,CAAC,CAAC,CAAC,SAAS,0JAA0J,CAAC,CAAC,SAAS;EAC5O,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,6CAA6C;EAC5E,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,uFAAuF;EACzH,eAAe,EAAE,OAAO,CAAC,CAAC,QAAQ,MAAM,CAAC,CAAC,SAAS,uCAAuC,CAAC,CAAC,SAAS;EACrG,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS,wGAAwG,CAAC,CAAC,SAAS;EACvJ,uBAAuB,EAAE,OAAO,CAAC,CAAC,SAAS,4DAA4D,CAAC,CAAC,SAAS;CACpH,CAAC,CAAC,CAAC,SAAS,6FASH;CACP,QATuD,EAAE,OAAO,EAChE,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,0NAA0N,CAAC,CAAC,SAAS,EACzQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,sEAOhB;AACV,CAAC"}

package/dist/actions/o-auth2-logout.cjs

@@ -4,9 +4,9 @@ let zod = require("zod");
 const NetsuiteOAuth2LogoutInput = zod.z.object({ id_token_hint: zod.z.string().describe("ID token to revoke; revokes its associated access and refresh tokens.") }).describe("Request model for revoking an ID token and its associated access and refresh tokens.");
 const NetsuiteOAuth2LogoutOutput = zod.z.object({
 	error: zod.z.string().describe("Error code or message if logout failed (e.g., 'invalid_token', 'unauthorized').").nullable().optional(),
-	success: zod.z.boolean().describe("True if the ID token and its related tokens were revoked successfully"),
+	success: zod.z.boolean().describe("True if the ID token and its related tokens were revoked successfully").nullable(),
 	status_code: zod.z.number().int().describe("HTTP status code from the logout endpoint (e.g., 200 for success, 400 for errors).").nullable().optional()
-}).describe("Response model indicating successful token revocation.");
+}).passthrough().describe("Response model indicating successful token revocation.");
 const netsuiteOAuth2Logout = require_action.action("NETSUITE_O_AUTH2_LOGOUT", {
 	slug: "netsuite-o-auth2-logout",
 	name: "OAuth2 Logout",

package/dist/actions/o-auth2-logout.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-logout.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-logout.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2LogoutInput: z.ZodTypeAny = z.object({\n  id_token_hint: z.string().describe(\"ID token to revoke; revokes its associated access and refresh tokens.\"),\n}).describe(\"Request model for revoking an ID token and its associated access and refresh tokens.\");\nexport const NetsuiteOAuth2LogoutOutput: z.ZodTypeAny = z.object({\n  error: z.string().describe(\"Error code or message if logout failed (e.g., 'invalid_token', 'unauthorized').\").nullable().optional(),\n  success: z.boolean().describe(\"True if the ID token and its related tokens were revoked successfully\"),\n  status_code: z.number().int().describe(\"HTTP status code from the logout endpoint (e.g., 200 for success, 400 for errors).\").nullable().optional(),\n}).describe(\"Response model indicating successful token revocation.\");\n\nexport const netsuiteOAuth2Logout = action(\"NETSUITE_O_AUTH2_LOGOUT\", {\n  slug: \"netsuite-o-auth2-logout\",\n  name: \"OAuth2 Logout\",\n  description: \"Tool to revoke an ID token and its associated access and refresh tokens. Use when ending an OAuth2 session to ensure credentials are invalidated.\",\n  input: NetsuiteOAuth2LogoutInput,\n  output: NetsuiteOAuth2LogoutOutput,\n});\n"],"mappings":";;;AAIA,MAAa,4BAA0CA,IAAAA,EAAE,OAAO,EAC9D,eAAeA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,uEAAuE,EAC5G,CAAC,CAAC,CAAC,SAAS,sFAAsF;AAClG,MAAa,6BAA2CA,IAAAA,EAAE,OAAO;CAC/D,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,iFAAiF,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAClI,SAASA,IAAAA,EAAE,QAAQ,CAAC,CAAC,SAAS,uEAAuE;CACrG,aAAaA,IAAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,oFAAoF,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AACnJ,CAAC,CAAC,CAAC,SAAS,wDAAwD;AAEpE,MAAa,uBAAuBC,eAAAA,OAAO,2BAA2B;CACpE,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}
+{"version":3,"file":"o-auth2-logout.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-logout.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2LogoutInput = z.object({\n  id_token_hint: z.string().describe(\"ID token to revoke; revokes its associated access and refresh tokens.\"),\n}).describe(\"Request model for revoking an ID token and its associated access and refresh tokens.\");\nexport const NetsuiteOAuth2LogoutOutput = z.object({\n  error: z.string().describe(\"Error code or message if logout failed (e.g., 'invalid_token', 'unauthorized').\").nullable().optional(),\n  success: z.boolean().describe(\"True if the ID token and its related tokens were revoked successfully\").nullable(),\n  status_code: z.number().int().describe(\"HTTP status code from the logout endpoint (e.g., 200 for success, 400 for errors).\").nullable().optional(),\n}).passthrough().describe(\"Response model indicating successful token revocation.\");\n\nexport const netsuiteOAuth2Logout = action(\"NETSUITE_O_AUTH2_LOGOUT\", {\n  slug: \"netsuite-o-auth2-logout\",\n  name: \"OAuth2 Logout\",\n  description: \"Tool to revoke an ID token and its associated access and refresh tokens. Use when ending an OAuth2 session to ensure credentials are invalidated.\",\n  input: NetsuiteOAuth2LogoutInput,\n  output: NetsuiteOAuth2LogoutOutput,\n});\n"],"mappings":";;;AAIA,MAAa,4BAA4BA,IAAAA,EAAE,OAAO,EAChD,eAAeA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,uEAAuE,EAC5G,CAAC,CAAC,CAAC,SAAS,sFAAsF;AAClG,MAAa,6BAA6BA,IAAAA,EAAE,OAAO;CACjD,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,iFAAiF,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAClI,SAASA,IAAAA,EAAE,QAAQ,CAAC,CAAC,SAAS,uEAAuE,CAAC,CAAC,SAAS;CAChH,aAAaA,IAAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,oFAAoF,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AACnJ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,wDAAwD;AAElF,MAAa,uBAAuBC,eAAAA,OAAO,2BAA2B;CACpE,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}

package/dist/actions/o-auth2-logout.d.cts

@@ -1,9 +1,17 @@
 import { z } from "zod";
 
 //#region src/actions/o-auth2-logout.d.ts
-declare const NetsuiteOAuth2LogoutInput: z.ZodTypeAny;
-declare const NetsuiteOAuth2LogoutOutput: z.ZodTypeAny;
-declare const netsuiteOAuth2Logout: import("@keystrokehq/action").WorkflowActionDefinition<unknown, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
+declare const NetsuiteOAuth2LogoutInput: z.ZodObject<{
+  id_token_hint: z.ZodString;
+}, z.core.$strip>;
+declare const NetsuiteOAuth2LogoutOutput: z.ZodObject<{
+  error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  success: z.ZodNullable<z.ZodBoolean>;
+  status_code: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$loose>;
+declare const netsuiteOAuth2Logout: import("@keystrokehq/action").WorkflowActionDefinition<{
+  id_token_hint: string;
+}, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
 //#endregion
 export { netsuiteOAuth2Logout };
 //# sourceMappingURL=o-auth2-logout.d.cts.map

package/dist/actions/o-auth2-logout.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-logout.d.cts","names":[],"sources":["../../src/actions/o-auth2-logout.ts"],"mappings":";;;cAIa,yBAAA,EAA2B,CAAA,CAAE,UAEyD;AAAA,cACtF,0BAAA,EAA4B,CAAA,CAAE,UAI0B;AAAA,cAExD,oBAAA,gCAAoB,wBAAA,iDAAA,mBAAA,yCAAA,UAAA,4CAAA,UAAA"}
+{"version":3,"file":"o-auth2-logout.d.cts","names":[],"sources":["../../src/actions/o-auth2-logout.ts"],"mappings":";;;cAIa,yBAAA,EAAyB,CAAA,CAAA,SAAA;;;cAGzB,0BAAA,EAA0B,CAAA,CAAA,SAAA;;;;;cAM1B,oBAAA,gCAAoB,wBAAA"}

package/dist/actions/o-auth2-logout.d.mts

@@ -1,9 +1,17 @@
 import { z } from "zod";
 
 //#region src/actions/o-auth2-logout.d.ts
-declare const NetsuiteOAuth2LogoutInput: z.ZodTypeAny;
-declare const NetsuiteOAuth2LogoutOutput: z.ZodTypeAny;
-declare const netsuiteOAuth2Logout: import("@keystrokehq/action").WorkflowActionDefinition<unknown, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
+declare const NetsuiteOAuth2LogoutInput: z.ZodObject<{
+  id_token_hint: z.ZodString;
+}, z.core.$strip>;
+declare const NetsuiteOAuth2LogoutOutput: z.ZodObject<{
+  error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  success: z.ZodNullable<z.ZodBoolean>;
+  status_code: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$loose>;
+declare const netsuiteOAuth2Logout: import("@keystrokehq/action").WorkflowActionDefinition<{
+  id_token_hint: string;
+}, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
 //#endregion
 export { netsuiteOAuth2Logout };
 //# sourceMappingURL=o-auth2-logout.d.mts.map

package/dist/actions/o-auth2-logout.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-logout.d.mts","names":[],"sources":["../../src/actions/o-auth2-logout.ts"],"mappings":";;;cAIa,yBAAA,EAA2B,CAAA,CAAE,UAEyD;AAAA,cACtF,0BAAA,EAA4B,CAAA,CAAE,UAI0B;AAAA,cAExD,oBAAA,gCAAoB,wBAAA,iDAAA,mBAAA,yCAAA,UAAA,4CAAA,UAAA"}
+{"version":3,"file":"o-auth2-logout.d.mts","names":[],"sources":["../../src/actions/o-auth2-logout.ts"],"mappings":";;;cAIa,yBAAA,EAAyB,CAAA,CAAA,SAAA;;;cAGzB,0BAAA,EAA0B,CAAA,CAAA,SAAA;;;;;cAM1B,oBAAA,gCAAoB,wBAAA"}

package/dist/actions/o-auth2-logout.mjs

@@ -7,9 +7,9 @@ const netsuiteOAuth2Logout = action("NETSUITE_O_AUTH2_LOGOUT", {
 	input: z.object({ id_token_hint: z.string().describe("ID token to revoke; revokes its associated access and refresh tokens.") }).describe("Request model for revoking an ID token and its associated access and refresh tokens."),
 	output: z.object({
 		error: z.string().describe("Error code or message if logout failed (e.g., 'invalid_token', 'unauthorized').").nullable().optional(),
-		success: z.boolean().describe("True if the ID token and its related tokens were revoked successfully"),
+		success: z.boolean().describe("True if the ID token and its related tokens were revoked successfully").nullable(),
 		status_code: z.number().int().describe("HTTP status code from the logout endpoint (e.g., 200 for success, 400 for errors).").nullable().optional()
-	}).describe("Response model indicating successful token revocation.")
+	}).passthrough().describe("Response model indicating successful token revocation.")
 });
 //#endregion
 export { netsuiteOAuth2Logout };

package/dist/actions/o-auth2-logout.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-logout.mjs","names":[],"sources":["../../src/actions/o-auth2-logout.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2LogoutInput: z.ZodTypeAny = z.object({\n  id_token_hint: z.string().describe(\"ID token to revoke; revokes its associated access and refresh tokens.\"),\n}).describe(\"Request model for revoking an ID token and its associated access and refresh tokens.\");\nexport const NetsuiteOAuth2LogoutOutput: z.ZodTypeAny = z.object({\n  error: z.string().describe(\"Error code or message if logout failed (e.g., 'invalid_token', 'unauthorized').\").nullable().optional(),\n  success: z.boolean().describe(\"True if the ID token and its related tokens were revoked successfully\"),\n  status_code: z.number().int().describe(\"HTTP status code from the logout endpoint (e.g., 200 for success, 400 for errors).\").nullable().optional(),\n}).describe(\"Response model indicating successful token revocation.\");\n\nexport const netsuiteOAuth2Logout = action(\"NETSUITE_O_AUTH2_LOGOUT\", {\n  slug: \"netsuite-o-auth2-logout\",\n  name: \"OAuth2 Logout\",\n  description: \"Tool to revoke an ID token and its associated access and refresh tokens. Use when ending an OAuth2 session to ensure credentials are invalidated.\",\n  input: NetsuiteOAuth2LogoutInput,\n  output: NetsuiteOAuth2LogoutOutput,\n});\n"],"mappings":";;AAaA,MAAa,uBAAuB,OAAO,2BAA2B;CACpE,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAbqD,EAAE,OAAO,EAC9D,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS,uEAAuE,EAC5G,CAAC,CAAC,CAAC,SAAS,sFAWH;CACP,QAXsD,EAAE,OAAO;EAC/D,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,iFAAiF,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EAClI,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,uEAAuE;EACrG,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,oFAAoF,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACnJ,CAAC,CAAC,CAAC,SAAS,wDAOF;AACV,CAAC"}
+{"version":3,"file":"o-auth2-logout.mjs","names":[],"sources":["../../src/actions/o-auth2-logout.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2LogoutInput = z.object({\n  id_token_hint: z.string().describe(\"ID token to revoke; revokes its associated access and refresh tokens.\"),\n}).describe(\"Request model for revoking an ID token and its associated access and refresh tokens.\");\nexport const NetsuiteOAuth2LogoutOutput = z.object({\n  error: z.string().describe(\"Error code or message if logout failed (e.g., 'invalid_token', 'unauthorized').\").nullable().optional(),\n  success: z.boolean().describe(\"True if the ID token and its related tokens were revoked successfully\").nullable(),\n  status_code: z.number().int().describe(\"HTTP status code from the logout endpoint (e.g., 200 for success, 400 for errors).\").nullable().optional(),\n}).passthrough().describe(\"Response model indicating successful token revocation.\");\n\nexport const netsuiteOAuth2Logout = action(\"NETSUITE_O_AUTH2_LOGOUT\", {\n  slug: \"netsuite-o-auth2-logout\",\n  name: \"OAuth2 Logout\",\n  description: \"Tool to revoke an ID token and its associated access and refresh tokens. Use when ending an OAuth2 session to ensure credentials are invalidated.\",\n  input: NetsuiteOAuth2LogoutInput,\n  output: NetsuiteOAuth2LogoutOutput,\n});\n"],"mappings":";;AAaA,MAAa,uBAAuB,OAAO,2BAA2B;CACpE,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAbuC,EAAE,OAAO,EAChD,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS,uEAAuE,EAC5G,CAAC,CAAC,CAAC,SAAS,sFAWH;CACP,QAXwC,EAAE,OAAO;EACjD,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,iFAAiF,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EAClI,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,uEAAuE,CAAC,CAAC,SAAS;EAChH,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,oFAAoF,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACnJ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,wDAOhB;AACV,CAAC"}

package/dist/actions/o-auth2-revoke-refresh-token.cjs

@@ -7,9 +7,9 @@ const NetsuiteOAuth2RevokeRefreshTokenInput = zod.z.object({
 }).describe("Request parameters for revoking a NetSuite OAuth2 refresh token.\n\nSupports both confidential clients (with Basic auth from metadata) and public clients\n(with client_id in request body).");
 const NetsuiteOAuth2RevokeRefreshTokenOutput = zod.z.object({
 	error: zod.z.string().describe("Error code or message when revocation fails. Common values: 'invalid_request' (malformed token), 'invalid_client' (bad credentials), 'unsupported_token_type' (wrong token type).").nullable().optional(),
-	success: zod.z.boolean().describe("True if the refresh token was successfully revoked; False if revocation failed."),
+	success: zod.z.boolean().describe("True if the refresh token was successfully revoked; False if revocation failed.").nullable(),
 	status_code: zod.z.number().int().describe("HTTP status code from NetSuite's revocation endpoint. 200 indicates success, 400+ indicates an error condition.").nullable().optional()
-}).describe("Response indicating the result of the token revocation operation.\n\nOn success, returns success=True with status_code=200.\nOn failure, returns success=False with error details and the HTTP status code.");
+}).passthrough().describe("Response indicating the result of the token revocation operation.\n\nOn success, returns success=True with status_code=200.\nOn failure, returns success=False with error details and the HTTP status code.");
 const netsuiteOAuth2RevokeRefreshToken = require_action.action("NETSUITE_O_AUTH2_REVOKE_REFRESH_TOKEN", {
 	slug: "netsuite-o-auth2-revoke-refresh-token",
 	name: "Revoke OAuth2 Refresh Token",

package/dist/actions/o-auth2-revoke-refresh-token.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-revoke-refresh-token.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-revoke-refresh-token.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2RevokeRefreshTokenInput: z.ZodTypeAny = z.object({\n  token: z.string().describe(\"The OAuth2 refresh token (JWT format) to revoke. Once revoked, this token and its associated access tokens become invalid.\"),\n  client_id: z.string().describe(\"OAuth2 client ID for public clients. When provided, skips Basic authentication and sends client_id in the request body instead. Leave empty for confidential clients that use metadata credentials.\").optional(),\n}).describe(\"Request parameters for revoking a NetSuite OAuth2 refresh token.\\n\\nSupports both confidential clients (with Basic auth from metadata) and public clients\\n(with client_id in request body).\");\nexport const NetsuiteOAuth2RevokeRefreshTokenOutput: z.ZodTypeAny = z.object({\n  error: z.string().describe(\"Error code or message when revocation fails. Common values: 'invalid_request' (malformed token), 'invalid_client' (bad credentials), 'unsupported_token_type' (wrong token type).\").nullable().optional(),\n  success: z.boolean().describe(\"True if the refresh token was successfully revoked; False if revocation failed.\"),\n  status_code: z.number().int().describe(\"HTTP status code from NetSuite's revocation endpoint. 200 indicates success, 400+ indicates an error condition.\").nullable().optional(),\n}).describe(\"Response indicating the result of the token revocation operation.\\n\\nOn success, returns success=True with status_code=200.\\nOn failure, returns success=False with error details and the HTTP status code.\");\n\nexport const netsuiteOAuth2RevokeRefreshToken = action(\"NETSUITE_O_AUTH2_REVOKE_REFRESH_TOKEN\", {\n  slug: \"netsuite-o-auth2-revoke-refresh-token\",\n  name: \"Revoke OAuth2 Refresh Token\",\n  description: \"Revokes a NetSuite OAuth2 refresh token and all associated access tokens, immediately invalidating them. Use this when: - A user logs out and you want to invalidate their session tokens - Credentials are compromised and need immediate revocation - Decommissioning an integration or removing access - Cleaning up test tokens after development Note: This is a destructive operation - revoked tokens cannot be reused.\",\n  input: NetsuiteOAuth2RevokeRefreshTokenInput,\n  output: NetsuiteOAuth2RevokeRefreshTokenOutput,\n});\n"],"mappings":";;;AAIA,MAAa,wCAAsDA,IAAAA,EAAE,OAAO;CAC1E,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,4HAA4H;CACvJ,WAAWA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,qMAAqM,CAAC,CAAC,SAAS;AACjP,CAAC,CAAC,CAAC,SAAS,8LAA8L;AAC1M,MAAa,yCAAuDA,IAAAA,EAAE,OAAO;CAC3E,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,mLAAmL,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpO,SAASA,IAAAA,EAAE,QAAQ,CAAC,CAAC,SAAS,iFAAiF;CAC/G,aAAaA,IAAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,iHAAiH,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AAChL,CAAC,CAAC,CAAC,SAAS,6MAA6M;AAEzN,MAAa,mCAAmCC,eAAAA,OAAO,yCAAyC;CAC9F,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}
+{"version":3,"file":"o-auth2-revoke-refresh-token.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-revoke-refresh-token.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2RevokeRefreshTokenInput = z.object({\n  token: z.string().describe(\"The OAuth2 refresh token (JWT format) to revoke. Once revoked, this token and its associated access tokens become invalid.\"),\n  client_id: z.string().describe(\"OAuth2 client ID for public clients. When provided, skips Basic authentication and sends client_id in the request body instead. Leave empty for confidential clients that use metadata credentials.\").optional(),\n}).describe(\"Request parameters for revoking a NetSuite OAuth2 refresh token.\\n\\nSupports both confidential clients (with Basic auth from metadata) and public clients\\n(with client_id in request body).\");\nexport const NetsuiteOAuth2RevokeRefreshTokenOutput = z.object({\n  error: z.string().describe(\"Error code or message when revocation fails. Common values: 'invalid_request' (malformed token), 'invalid_client' (bad credentials), 'unsupported_token_type' (wrong token type).\").nullable().optional(),\n  success: z.boolean().describe(\"True if the refresh token was successfully revoked; False if revocation failed.\").nullable(),\n  status_code: z.number().int().describe(\"HTTP status code from NetSuite's revocation endpoint. 200 indicates success, 400+ indicates an error condition.\").nullable().optional(),\n}).passthrough().describe(\"Response indicating the result of the token revocation operation.\\n\\nOn success, returns success=True with status_code=200.\\nOn failure, returns success=False with error details and the HTTP status code.\");\n\nexport const netsuiteOAuth2RevokeRefreshToken = action(\"NETSUITE_O_AUTH2_REVOKE_REFRESH_TOKEN\", {\n  slug: \"netsuite-o-auth2-revoke-refresh-token\",\n  name: \"Revoke OAuth2 Refresh Token\",\n  description: \"Revokes a NetSuite OAuth2 refresh token and all associated access tokens, immediately invalidating them. Use this when: - A user logs out and you want to invalidate their session tokens - Credentials are compromised and need immediate revocation - Decommissioning an integration or removing access - Cleaning up test tokens after development Note: This is a destructive operation - revoked tokens cannot be reused.\",\n  input: NetsuiteOAuth2RevokeRefreshTokenInput,\n  output: NetsuiteOAuth2RevokeRefreshTokenOutput,\n});\n"],"mappings":";;;AAIA,MAAa,wCAAwCA,IAAAA,EAAE,OAAO;CAC5D,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,4HAA4H;CACvJ,WAAWA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,qMAAqM,CAAC,CAAC,SAAS;AACjP,CAAC,CAAC,CAAC,SAAS,8LAA8L;AAC1M,MAAa,yCAAyCA,IAAAA,EAAE,OAAO;CAC7D,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,mLAAmL,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpO,SAASA,IAAAA,EAAE,QAAQ,CAAC,CAAC,SAAS,iFAAiF,CAAC,CAAC,SAAS;CAC1H,aAAaA,IAAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,iHAAiH,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AAChL,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,6MAA6M;AAEvO,MAAa,mCAAmCC,eAAAA,OAAO,yCAAyC;CAC9F,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}

package/dist/actions/o-auth2-revoke-refresh-token.d.cts

@@ -1,9 +1,19 @@
 import { z } from "zod";
 
 //#region src/actions/o-auth2-revoke-refresh-token.d.ts
-declare const NetsuiteOAuth2RevokeRefreshTokenInput: z.ZodTypeAny;
-declare const NetsuiteOAuth2RevokeRefreshTokenOutput: z.ZodTypeAny;
-declare const netsuiteOAuth2RevokeRefreshToken: import("@keystrokehq/action").WorkflowActionDefinition<unknown, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
+declare const NetsuiteOAuth2RevokeRefreshTokenInput: z.ZodObject<{
+  token: z.ZodString;
+  client_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const NetsuiteOAuth2RevokeRefreshTokenOutput: z.ZodObject<{
+  error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  success: z.ZodNullable<z.ZodBoolean>;
+  status_code: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$loose>;
+declare const netsuiteOAuth2RevokeRefreshToken: import("@keystrokehq/action").WorkflowActionDefinition<{
+  token: string;
+  client_id?: string | undefined;
+}, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
 //#endregion
 export { netsuiteOAuth2RevokeRefreshToken };
 //# sourceMappingURL=o-auth2-revoke-refresh-token.d.cts.map

package/dist/actions/o-auth2-revoke-refresh-token.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-revoke-refresh-token.d.cts","names":[],"sources":["../../src/actions/o-auth2-revoke-refresh-token.ts"],"mappings":";;;cAIa,qCAAA,EAAuC,CAAA,CAAE,UAGqJ;AAAA,cAC9L,sCAAA,EAAwC,CAAA,CAAE,UAImK;AAAA,cAE7M,gCAAA,gCAAgC,wBAAA,iDAAA,mBAAA,yCAAA,UAAA,4CAAA,UAAA"}
+{"version":3,"file":"o-auth2-revoke-refresh-token.d.cts","names":[],"sources":["../../src/actions/o-auth2-revoke-refresh-token.ts"],"mappings":";;;cAIa,qCAAA,EAAqC,CAAA,CAAA,SAAA;;;;cAIrC,sCAAA,EAAsC,CAAA,CAAA,SAAA;;;;;cAMtC,gCAAA,gCAAgC,wBAAA"}

package/dist/actions/o-auth2-revoke-refresh-token.d.mts

@@ -1,9 +1,19 @@
 import { z } from "zod";
 
 //#region src/actions/o-auth2-revoke-refresh-token.d.ts
-declare const NetsuiteOAuth2RevokeRefreshTokenInput: z.ZodTypeAny;
-declare const NetsuiteOAuth2RevokeRefreshTokenOutput: z.ZodTypeAny;
-declare const netsuiteOAuth2RevokeRefreshToken: import("@keystrokehq/action").WorkflowActionDefinition<unknown, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
+declare const NetsuiteOAuth2RevokeRefreshTokenInput: z.ZodObject<{
+  token: z.ZodString;
+  client_id: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const NetsuiteOAuth2RevokeRefreshTokenOutput: z.ZodObject<{
+  error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  success: z.ZodNullable<z.ZodBoolean>;
+  status_code: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$loose>;
+declare const netsuiteOAuth2RevokeRefreshToken: import("@keystrokehq/action").WorkflowActionDefinition<{
+  token: string;
+  client_id?: string | undefined;
+}, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
 //#endregion
 export { netsuiteOAuth2RevokeRefreshToken };
 //# sourceMappingURL=o-auth2-revoke-refresh-token.d.mts.map

package/dist/actions/o-auth2-revoke-refresh-token.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-revoke-refresh-token.d.mts","names":[],"sources":["../../src/actions/o-auth2-revoke-refresh-token.ts"],"mappings":";;;cAIa,qCAAA,EAAuC,CAAA,CAAE,UAGqJ;AAAA,cAC9L,sCAAA,EAAwC,CAAA,CAAE,UAImK;AAAA,cAE7M,gCAAA,gCAAgC,wBAAA,iDAAA,mBAAA,yCAAA,UAAA,4CAAA,UAAA"}
+{"version":3,"file":"o-auth2-revoke-refresh-token.d.mts","names":[],"sources":["../../src/actions/o-auth2-revoke-refresh-token.ts"],"mappings":";;;cAIa,qCAAA,EAAqC,CAAA,CAAA,SAAA;;;;cAIrC,sCAAA,EAAsC,CAAA,CAAA,SAAA;;;;;cAMtC,gCAAA,gCAAgC,wBAAA"}

package/dist/actions/o-auth2-revoke-refresh-token.mjs

@@ -10,9 +10,9 @@ const netsuiteOAuth2RevokeRefreshToken = action("NETSUITE_O_AUTH2_REVOKE_REFRESH
 	}).describe("Request parameters for revoking a NetSuite OAuth2 refresh token.\n\nSupports both confidential clients (with Basic auth from metadata) and public clients\n(with client_id in request body)."),
 	output: z.object({
 		error: z.string().describe("Error code or message when revocation fails. Common values: 'invalid_request' (malformed token), 'invalid_client' (bad credentials), 'unsupported_token_type' (wrong token type).").nullable().optional(),
-		success: z.boolean().describe("True if the refresh token was successfully revoked; False if revocation failed."),
+		success: z.boolean().describe("True if the refresh token was successfully revoked; False if revocation failed.").nullable(),
 		status_code: z.number().int().describe("HTTP status code from NetSuite's revocation endpoint. 200 indicates success, 400+ indicates an error condition.").nullable().optional()
-	}).describe("Response indicating the result of the token revocation operation.\n\nOn success, returns success=True with status_code=200.\nOn failure, returns success=False with error details and the HTTP status code.")
+	}).passthrough().describe("Response indicating the result of the token revocation operation.\n\nOn success, returns success=True with status_code=200.\nOn failure, returns success=False with error details and the HTTP status code.")
 });
 //#endregion
 export { netsuiteOAuth2RevokeRefreshToken };

package/dist/actions/o-auth2-revoke-refresh-token.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-revoke-refresh-token.mjs","names":[],"sources":["../../src/actions/o-auth2-revoke-refresh-token.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2RevokeRefreshTokenInput: z.ZodTypeAny = z.object({\n  token: z.string().describe(\"The OAuth2 refresh token (JWT format) to revoke. Once revoked, this token and its associated access tokens become invalid.\"),\n  client_id: z.string().describe(\"OAuth2 client ID for public clients. When provided, skips Basic authentication and sends client_id in the request body instead. Leave empty for confidential clients that use metadata credentials.\").optional(),\n}).describe(\"Request parameters for revoking a NetSuite OAuth2 refresh token.\\n\\nSupports both confidential clients (with Basic auth from metadata) and public clients\\n(with client_id in request body).\");\nexport const NetsuiteOAuth2RevokeRefreshTokenOutput: z.ZodTypeAny = z.object({\n  error: z.string().describe(\"Error code or message when revocation fails. Common values: 'invalid_request' (malformed token), 'invalid_client' (bad credentials), 'unsupported_token_type' (wrong token type).\").nullable().optional(),\n  success: z.boolean().describe(\"True if the refresh token was successfully revoked; False if revocation failed.\"),\n  status_code: z.number().int().describe(\"HTTP status code from NetSuite's revocation endpoint. 200 indicates success, 400+ indicates an error condition.\").nullable().optional(),\n}).describe(\"Response indicating the result of the token revocation operation.\\n\\nOn success, returns success=True with status_code=200.\\nOn failure, returns success=False with error details and the HTTP status code.\");\n\nexport const netsuiteOAuth2RevokeRefreshToken = action(\"NETSUITE_O_AUTH2_REVOKE_REFRESH_TOKEN\", {\n  slug: \"netsuite-o-auth2-revoke-refresh-token\",\n  name: \"Revoke OAuth2 Refresh Token\",\n  description: \"Revokes a NetSuite OAuth2 refresh token and all associated access tokens, immediately invalidating them. Use this when: - A user logs out and you want to invalidate their session tokens - Credentials are compromised and need immediate revocation - Decommissioning an integration or removing access - Cleaning up test tokens after development Note: This is a destructive operation - revoked tokens cannot be reused.\",\n  input: NetsuiteOAuth2RevokeRefreshTokenInput,\n  output: NetsuiteOAuth2RevokeRefreshTokenOutput,\n});\n"],"mappings":";;AAcA,MAAa,mCAAmC,OAAO,yCAAyC;CAC9F,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAdiE,EAAE,OAAO;EAC1E,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,4HAA4H;EACvJ,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,qMAAqM,CAAC,CAAC,SAAS;CACjP,CAAC,CAAC,CAAC,SAAS,8LAWH;CACP,QAXkE,EAAE,OAAO;EAC3E,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,mLAAmL,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACpO,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,iFAAiF;EAC/G,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,iHAAiH,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAChL,CAAC,CAAC,CAAC,SAAS,6MAOF;AACV,CAAC"}
+{"version":3,"file":"o-auth2-revoke-refresh-token.mjs","names":[],"sources":["../../src/actions/o-auth2-revoke-refresh-token.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2RevokeRefreshTokenInput = z.object({\n  token: z.string().describe(\"The OAuth2 refresh token (JWT format) to revoke. Once revoked, this token and its associated access tokens become invalid.\"),\n  client_id: z.string().describe(\"OAuth2 client ID for public clients. When provided, skips Basic authentication and sends client_id in the request body instead. Leave empty for confidential clients that use metadata credentials.\").optional(),\n}).describe(\"Request parameters for revoking a NetSuite OAuth2 refresh token.\\n\\nSupports both confidential clients (with Basic auth from metadata) and public clients\\n(with client_id in request body).\");\nexport const NetsuiteOAuth2RevokeRefreshTokenOutput = z.object({\n  error: z.string().describe(\"Error code or message when revocation fails. Common values: 'invalid_request' (malformed token), 'invalid_client' (bad credentials), 'unsupported_token_type' (wrong token type).\").nullable().optional(),\n  success: z.boolean().describe(\"True if the refresh token was successfully revoked; False if revocation failed.\").nullable(),\n  status_code: z.number().int().describe(\"HTTP status code from NetSuite's revocation endpoint. 200 indicates success, 400+ indicates an error condition.\").nullable().optional(),\n}).passthrough().describe(\"Response indicating the result of the token revocation operation.\\n\\nOn success, returns success=True with status_code=200.\\nOn failure, returns success=False with error details and the HTTP status code.\");\n\nexport const netsuiteOAuth2RevokeRefreshToken = action(\"NETSUITE_O_AUTH2_REVOKE_REFRESH_TOKEN\", {\n  slug: \"netsuite-o-auth2-revoke-refresh-token\",\n  name: \"Revoke OAuth2 Refresh Token\",\n  description: \"Revokes a NetSuite OAuth2 refresh token and all associated access tokens, immediately invalidating them. Use this when: - A user logs out and you want to invalidate their session tokens - Credentials are compromised and need immediate revocation - Decommissioning an integration or removing access - Cleaning up test tokens after development Note: This is a destructive operation - revoked tokens cannot be reused.\",\n  input: NetsuiteOAuth2RevokeRefreshTokenInput,\n  output: NetsuiteOAuth2RevokeRefreshTokenOutput,\n});\n"],"mappings":";;AAcA,MAAa,mCAAmC,OAAO,yCAAyC;CAC9F,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAdmD,EAAE,OAAO;EAC5D,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,4HAA4H;EACvJ,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,qMAAqM,CAAC,CAAC,SAAS;CACjP,CAAC,CAAC,CAAC,SAAS,8LAWH;CACP,QAXoD,EAAE,OAAO;EAC7D,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,mLAAmL,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACpO,SAAS,EAAE,QAAQ,CAAC,CAAC,SAAS,iFAAiF,CAAC,CAAC,SAAS;EAC1H,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,iHAAiH,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAChL,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,6MAOhB;AACV,CAAC"}

package/dist/actions/o-auth2-token-authorization-code.cjs

@@ -15,7 +15,7 @@ const NetsuiteOAuth2TokenAuthorizationCodeOutput = zod.z.object({
 	token_type: zod.z.string().describe("Token type for API requests. Always 'bearer' (case-insensitive).").nullable().optional(),
 	access_token: zod.z.string().describe("JWT access token for authenticating NetSuite API requests. Valid for 60 minutes. Use in Authorization header as 'Bearer {access_token}'.").nullable().optional(),
 	refresh_token: zod.z.string().describe("JWT refresh token for obtaining new access tokens when they expire. Valid for 7 days by default (configurable in integration record). Store securely.").nullable().optional()
-}).describe("Response model for OAuth2 token exchange containing access tokens, refresh tokens, and error details.\nOn success, contains tokens for API authentication. On failure, contains error code.");
+}).passthrough().describe("Response model for OAuth2 token exchange containing access tokens, refresh tokens, and error details.\nOn success, contains tokens for API authentication. On failure, contains error code.");
 const netsuiteOAuth2TokenAuthorizationCode = require_action.action("NETSUITE_O_AUTH2_TOKEN_AUTHORIZATION_CODE", {
 	slug: "netsuite-o-auth2-token-authorization-code",
 	name: "Exchange OAuth2 Authorization Code for Tokens",

package/dist/actions/o-auth2-token-authorization-code.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-token-authorization-code.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-token-authorization-code.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2TokenAuthorizationCodeInput: z.ZodTypeAny = z.object({\n  code: z.string().describe(\"Authorization code received from the OAuth2 authorization endpoint callback. This code is single-use and expires quickly (typically within 5-10 minutes).\"),\n  client_id: z.string().describe(\"Client ID from the NetSuite integration record. Required only when client credentials are not provided in metadata (public client flow).\").optional(),\n  grant_type: z.string().default(\"authorization_code\").describe(\"OAuth2 grant type. Always 'authorization_code' for this flow.\").optional(),\n  redirect_uri: z.string().describe(\"Redirect URI that must exactly match the one used in the authorization request and registered in the NetSuite integration record. Mismatches will cause the request to fail.\"),\n  code_verifier: z.string().describe(\"PKCE code verifier (43-128 character random string) used to generate the code_challenge in the initial authorization request. Required for security.\"),\n}).describe(\"Request model for exchanging an OAuth2 authorization code for access and refresh tokens.\\nUse this after the user completes authorization through the NetSuite OAuth2 flow.\");\nexport const NetsuiteOAuth2TokenAuthorizationCodeOutput: z.ZodTypeAny = z.object({\n  error: z.string().describe(\"OAuth2 error code when request fails. Common values: 'invalid_grant' (invalid/expired code), 'invalid_client' (bad credentials), 'invalid_request' (malformed request), 'unauthorized_client' (client not authorized).\").nullable().optional(),\n  id_token: z.string().describe(\"JWT ID token containing user identity claims (OpenID Connect). Valid for 3 hours. Optional, returned only for OpenID Connect flows.\").nullable().optional(),\n  expires_in: z.number().int().describe(\"Access token lifetime in seconds. Always 3600 (60 minutes) for NetSuite.\").nullable().optional(),\n  token_type: z.string().describe(\"Token type for API requests. Always 'bearer' (case-insensitive).\").nullable().optional(),\n  access_token: z.string().describe(\"JWT access token for authenticating NetSuite API requests. Valid for 60 minutes. Use in Authorization header as 'Bearer {access_token}'.\").nullable().optional(),\n  refresh_token: z.string().describe(\"JWT refresh token for obtaining new access tokens when they expire. Valid for 7 days by default (configurable in integration record). Store securely.\").nullable().optional(),\n}).describe(\"Response model for OAuth2 token exchange containing access tokens, refresh tokens, and error details.\\nOn success, contains tokens for API authentication. On failure, contains error code.\");\n\nexport const netsuiteOAuth2TokenAuthorizationCode = action(\"NETSUITE_O_AUTH2_TOKEN_AUTHORIZATION_CODE\", {\n  slug: \"netsuite-o-auth2-token-authorization-code\",\n  name: \"Exchange OAuth2 Authorization Code for Tokens\",\n  description: \"Exchange an OAuth2 authorization code for access and refresh tokens using the NetSuite token endpoint. This is the second step in the OAuth2 authorization code flow with PKCE: 1. User authorizes via OAuth2AuthorizeAccountDomain or OAuth2AuthorizeSystemDomain 2. User is redirected to your redirect_uri with authorization code 3. Use THIS action to exchange the code for tokens 4. Use access_token to make API requests, refresh_token to get new access tokens Supports both confidential clients (client secret in metadata) and public clients (no secret). PKCE (code_verifier) is required for security.\",\n  input: NetsuiteOAuth2TokenAuthorizationCodeInput,\n  output: NetsuiteOAuth2TokenAuthorizationCodeOutput,\n});\n"],"mappings":";;;AAIA,MAAa,4CAA0DA,IAAAA,EAAE,OAAO;CAC9E,MAAMA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,2JAA2J;CACrL,WAAWA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0IAA0I,CAAC,CAAC,SAAS;CACpL,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,QAAQ,oBAAoB,CAAC,CAAC,SAAS,+DAA+D,CAAC,CAAC,SAAS;CACxI,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,8KAA8K;CAChN,eAAeA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,sJAAsJ;AAC3L,CAAC,CAAC,CAAC,SAAS,6KAA6K;AACzL,MAAa,6CAA2DA,IAAAA,EAAE,OAAO;CAC/E,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,wNAAwN,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzQ,UAAUA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,qIAAqI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzL,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,0EAA0E,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACtI,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,kEAAkE,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACxH,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0IAA0I,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAClM,eAAeA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,uJAAuJ,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AAClN,CAAC,CAAC,CAAC,SAAS,6LAA6L;AAEzM,MAAa,uCAAuCC,eAAAA,OAAO,6CAA6C;CACtG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}
+{"version":3,"file":"o-auth2-token-authorization-code.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-token-authorization-code.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2TokenAuthorizationCodeInput = z.object({\n  code: z.string().describe(\"Authorization code received from the OAuth2 authorization endpoint callback. This code is single-use and expires quickly (typically within 5-10 minutes).\"),\n  client_id: z.string().describe(\"Client ID from the NetSuite integration record. Required only when client credentials are not provided in metadata (public client flow).\").optional(),\n  grant_type: z.string().default(\"authorization_code\").describe(\"OAuth2 grant type. Always 'authorization_code' for this flow.\").optional(),\n  redirect_uri: z.string().describe(\"Redirect URI that must exactly match the one used in the authorization request and registered in the NetSuite integration record. Mismatches will cause the request to fail.\"),\n  code_verifier: z.string().describe(\"PKCE code verifier (43-128 character random string) used to generate the code_challenge in the initial authorization request. Required for security.\"),\n}).describe(\"Request model for exchanging an OAuth2 authorization code for access and refresh tokens.\\nUse this after the user completes authorization through the NetSuite OAuth2 flow.\");\nexport const NetsuiteOAuth2TokenAuthorizationCodeOutput = z.object({\n  error: z.string().describe(\"OAuth2 error code when request fails. Common values: 'invalid_grant' (invalid/expired code), 'invalid_client' (bad credentials), 'invalid_request' (malformed request), 'unauthorized_client' (client not authorized).\").nullable().optional(),\n  id_token: z.string().describe(\"JWT ID token containing user identity claims (OpenID Connect). Valid for 3 hours. Optional, returned only for OpenID Connect flows.\").nullable().optional(),\n  expires_in: z.number().int().describe(\"Access token lifetime in seconds. Always 3600 (60 minutes) for NetSuite.\").nullable().optional(),\n  token_type: z.string().describe(\"Token type for API requests. Always 'bearer' (case-insensitive).\").nullable().optional(),\n  access_token: z.string().describe(\"JWT access token for authenticating NetSuite API requests. Valid for 60 minutes. Use in Authorization header as 'Bearer {access_token}'.\").nullable().optional(),\n  refresh_token: z.string().describe(\"JWT refresh token for obtaining new access tokens when they expire. Valid for 7 days by default (configurable in integration record). Store securely.\").nullable().optional(),\n}).passthrough().describe(\"Response model for OAuth2 token exchange containing access tokens, refresh tokens, and error details.\\nOn success, contains tokens for API authentication. On failure, contains error code.\");\n\nexport const netsuiteOAuth2TokenAuthorizationCode = action(\"NETSUITE_O_AUTH2_TOKEN_AUTHORIZATION_CODE\", {\n  slug: \"netsuite-o-auth2-token-authorization-code\",\n  name: \"Exchange OAuth2 Authorization Code for Tokens\",\n  description: \"Exchange an OAuth2 authorization code for access and refresh tokens using the NetSuite token endpoint. This is the second step in the OAuth2 authorization code flow with PKCE: 1. User authorizes via OAuth2AuthorizeAccountDomain or OAuth2AuthorizeSystemDomain 2. User is redirected to your redirect_uri with authorization code 3. Use THIS action to exchange the code for tokens 4. Use access_token to make API requests, refresh_token to get new access tokens Supports both confidential clients (client secret in metadata) and public clients (no secret). PKCE (code_verifier) is required for security.\",\n  input: NetsuiteOAuth2TokenAuthorizationCodeInput,\n  output: NetsuiteOAuth2TokenAuthorizationCodeOutput,\n});\n"],"mappings":";;;AAIA,MAAa,4CAA4CA,IAAAA,EAAE,OAAO;CAChE,MAAMA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,2JAA2J;CACrL,WAAWA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0IAA0I,CAAC,CAAC,SAAS;CACpL,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,QAAQ,oBAAoB,CAAC,CAAC,SAAS,+DAA+D,CAAC,CAAC,SAAS;CACxI,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,8KAA8K;CAChN,eAAeA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,sJAAsJ;AAC3L,CAAC,CAAC,CAAC,SAAS,6KAA6K;AACzL,MAAa,6CAA6CA,IAAAA,EAAE,OAAO;CACjE,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,wNAAwN,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzQ,UAAUA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,qIAAqI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACzL,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,0EAA0E,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACtI,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,kEAAkE,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACxH,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0IAA0I,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAClM,eAAeA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,uJAAuJ,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AAClN,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,6LAA6L;AAEvN,MAAa,uCAAuCC,eAAAA,OAAO,6CAA6C;CACtG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}

package/dist/actions/o-auth2-token-authorization-code.d.cts

@@ -1,9 +1,28 @@
 import { z } from "zod";
 
 //#region src/actions/o-auth2-token-authorization-code.d.ts
-declare const NetsuiteOAuth2TokenAuthorizationCodeInput: z.ZodTypeAny;
-declare const NetsuiteOAuth2TokenAuthorizationCodeOutput: z.ZodTypeAny;
-declare const netsuiteOAuth2TokenAuthorizationCode: import("@keystrokehq/action").WorkflowActionDefinition<unknown, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
+declare const NetsuiteOAuth2TokenAuthorizationCodeInput: z.ZodObject<{
+  code: z.ZodString;
+  client_id: z.ZodOptional<z.ZodString>;
+  grant_type: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  redirect_uri: z.ZodString;
+  code_verifier: z.ZodString;
+}, z.core.$strip>;
+declare const NetsuiteOAuth2TokenAuthorizationCodeOutput: z.ZodObject<{
+  error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  id_token: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  expires_in: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+  token_type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  access_token: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  refresh_token: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$loose>;
+declare const netsuiteOAuth2TokenAuthorizationCode: import("@keystrokehq/action").WorkflowActionDefinition<{
+  code: string;
+  redirect_uri: string;
+  code_verifier: string;
+  client_id?: string | undefined;
+  grant_type?: string | undefined;
+}, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
 //#endregion
 export { netsuiteOAuth2TokenAuthorizationCode };
 //# sourceMappingURL=o-auth2-token-authorization-code.d.cts.map

package/dist/actions/o-auth2-token-authorization-code.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-token-authorization-code.d.cts","names":[],"sources":["../../src/actions/o-auth2-token-authorization-code.ts"],"mappings":";;;cAIa,yCAAA,EAA2C,CAAA,CAAE,UAMgI;AAAA,cAC7K,0CAAA,EAA4C,CAAA,CAAE,UAO+I;AAAA,cAE7L,oCAAA,gCAAoC,wBAAA,iDAAA,mBAAA,yCAAA,UAAA,4CAAA,UAAA"}
+{"version":3,"file":"o-auth2-token-authorization-code.d.cts","names":[],"sources":["../../src/actions/o-auth2-token-authorization-code.ts"],"mappings":";;;cAIa,yCAAA,EAAyC,CAAA,CAAA,SAAA;;;;;;;cAOzC,0CAAA,EAA0C,CAAA,CAAA,SAAA;;;;;;;;cAS1C,oCAAA,gCAAoC,wBAAA"}

package/dist/actions/o-auth2-token-authorization-code.d.mts

@@ -1,9 +1,28 @@
 import { z } from "zod";
 
 //#region src/actions/o-auth2-token-authorization-code.d.ts
-declare const NetsuiteOAuth2TokenAuthorizationCodeInput: z.ZodTypeAny;
-declare const NetsuiteOAuth2TokenAuthorizationCodeOutput: z.ZodTypeAny;
-declare const netsuiteOAuth2TokenAuthorizationCode: import("@keystrokehq/action").WorkflowActionDefinition<unknown, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
+declare const NetsuiteOAuth2TokenAuthorizationCodeInput: z.ZodObject<{
+  code: z.ZodString;
+  client_id: z.ZodOptional<z.ZodString>;
+  grant_type: z.ZodOptional<z.ZodDefault<z.ZodString>>;
+  redirect_uri: z.ZodString;
+  code_verifier: z.ZodString;
+}, z.core.$strip>;
+declare const NetsuiteOAuth2TokenAuthorizationCodeOutput: z.ZodObject<{
+  error: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  id_token: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  expires_in: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+  token_type: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  access_token: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+  refresh_token: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$loose>;
+declare const netsuiteOAuth2TokenAuthorizationCode: import("@keystrokehq/action").WorkflowActionDefinition<{
+  code: string;
+  redirect_uri: string;
+  code_verifier: string;
+  client_id?: string | undefined;
+  grant_type?: string | undefined;
+}, unknown, import("@keystrokehq/shared").ResolvedCredentials<readonly [import("@keystrokehq/shared").Credential]>, readonly [import("@keystrokehq/shared").Credential]>;
 //#endregion
 export { netsuiteOAuth2TokenAuthorizationCode };
 //# sourceMappingURL=o-auth2-token-authorization-code.d.mts.map

package/dist/actions/o-auth2-token-authorization-code.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-token-authorization-code.d.mts","names":[],"sources":["../../src/actions/o-auth2-token-authorization-code.ts"],"mappings":";;;cAIa,yCAAA,EAA2C,CAAA,CAAE,UAMgI;AAAA,cAC7K,0CAAA,EAA4C,CAAA,CAAE,UAO+I;AAAA,cAE7L,oCAAA,gCAAoC,wBAAA,iDAAA,mBAAA,yCAAA,UAAA,4CAAA,UAAA"}
+{"version":3,"file":"o-auth2-token-authorization-code.d.mts","names":[],"sources":["../../src/actions/o-auth2-token-authorization-code.ts"],"mappings":";;;cAIa,yCAAA,EAAyC,CAAA,CAAA,SAAA;;;;;;;cAOzC,0CAAA,EAA0C,CAAA,CAAA,SAAA;;;;;;;;cAS1C,oCAAA,gCAAoC,wBAAA"}

package/dist/actions/o-auth2-token-authorization-code.mjs

@@ -18,7 +18,7 @@ const netsuiteOAuth2TokenAuthorizationCode = action("NETSUITE_O_AUTH2_TOKEN_AUTH
 		token_type: z.string().describe("Token type for API requests. Always 'bearer' (case-insensitive).").nullable().optional(),
 		access_token: z.string().describe("JWT access token for authenticating NetSuite API requests. Valid for 60 minutes. Use in Authorization header as 'Bearer {access_token}'.").nullable().optional(),
 		refresh_token: z.string().describe("JWT refresh token for obtaining new access tokens when they expire. Valid for 7 days by default (configurable in integration record). Store securely.").nullable().optional()
-	}).describe("Response model for OAuth2 token exchange containing access tokens, refresh tokens, and error details.\nOn success, contains tokens for API authentication. On failure, contains error code.")
+	}).passthrough().describe("Response model for OAuth2 token exchange containing access tokens, refresh tokens, and error details.\nOn success, contains tokens for API authentication. On failure, contains error code.")
 });
 //#endregion
 export { netsuiteOAuth2TokenAuthorizationCode };

package/dist/actions/o-auth2-token-authorization-code.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-token-authorization-code.mjs","names":[],"sources":["../../src/actions/o-auth2-token-authorization-code.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2TokenAuthorizationCodeInput: z.ZodTypeAny = z.object({\n  code: z.string().describe(\"Authorization code received from the OAuth2 authorization endpoint callback. This code is single-use and expires quickly (typically within 5-10 minutes).\"),\n  client_id: z.string().describe(\"Client ID from the NetSuite integration record. Required only when client credentials are not provided in metadata (public client flow).\").optional(),\n  grant_type: z.string().default(\"authorization_code\").describe(\"OAuth2 grant type. Always 'authorization_code' for this flow.\").optional(),\n  redirect_uri: z.string().describe(\"Redirect URI that must exactly match the one used in the authorization request and registered in the NetSuite integration record. Mismatches will cause the request to fail.\"),\n  code_verifier: z.string().describe(\"PKCE code verifier (43-128 character random string) used to generate the code_challenge in the initial authorization request. Required for security.\"),\n}).describe(\"Request model for exchanging an OAuth2 authorization code for access and refresh tokens.\\nUse this after the user completes authorization through the NetSuite OAuth2 flow.\");\nexport const NetsuiteOAuth2TokenAuthorizationCodeOutput: z.ZodTypeAny = z.object({\n  error: z.string().describe(\"OAuth2 error code when request fails. Common values: 'invalid_grant' (invalid/expired code), 'invalid_client' (bad credentials), 'invalid_request' (malformed request), 'unauthorized_client' (client not authorized).\").nullable().optional(),\n  id_token: z.string().describe(\"JWT ID token containing user identity claims (OpenID Connect). Valid for 3 hours. Optional, returned only for OpenID Connect flows.\").nullable().optional(),\n  expires_in: z.number().int().describe(\"Access token lifetime in seconds. Always 3600 (60 minutes) for NetSuite.\").nullable().optional(),\n  token_type: z.string().describe(\"Token type for API requests. Always 'bearer' (case-insensitive).\").nullable().optional(),\n  access_token: z.string().describe(\"JWT access token for authenticating NetSuite API requests. Valid for 60 minutes. Use in Authorization header as 'Bearer {access_token}'.\").nullable().optional(),\n  refresh_token: z.string().describe(\"JWT refresh token for obtaining new access tokens when they expire. Valid for 7 days by default (configurable in integration record). Store securely.\").nullable().optional(),\n}).describe(\"Response model for OAuth2 token exchange containing access tokens, refresh tokens, and error details.\\nOn success, contains tokens for API authentication. On failure, contains error code.\");\n\nexport const netsuiteOAuth2TokenAuthorizationCode = action(\"NETSUITE_O_AUTH2_TOKEN_AUTHORIZATION_CODE\", {\n  slug: \"netsuite-o-auth2-token-authorization-code\",\n  name: \"Exchange OAuth2 Authorization Code for Tokens\",\n  description: \"Exchange an OAuth2 authorization code for access and refresh tokens using the NetSuite token endpoint. This is the second step in the OAuth2 authorization code flow with PKCE: 1. User authorizes via OAuth2AuthorizeAccountDomain or OAuth2AuthorizeSystemDomain 2. User is redirected to your redirect_uri with authorization code 3. Use THIS action to exchange the code for tokens 4. Use access_token to make API requests, refresh_token to get new access tokens Supports both confidential clients (client secret in metadata) and public clients (no secret). PKCE (code_verifier) is required for security.\",\n  input: NetsuiteOAuth2TokenAuthorizationCodeInput,\n  output: NetsuiteOAuth2TokenAuthorizationCodeOutput,\n});\n"],"mappings":";;AAoBA,MAAa,uCAAuC,OAAO,6CAA6C;CACtG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OApBqE,EAAE,OAAO;EAC9E,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,2JAA2J;EACrL,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,0IAA0I,CAAC,CAAC,SAAS;EACpL,YAAY,EAAE,OAAO,CAAC,CAAC,QAAQ,oBAAoB,CAAC,CAAC,SAAS,+DAA+D,CAAC,CAAC,SAAS;EACxI,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,8KAA8K;EAChN,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS,sJAAsJ;CAC3L,CAAC,CAAC,CAAC,SAAS,6KAcH;CACP,QAdsE,EAAE,OAAO;EAC/E,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,wNAAwN,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACzQ,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS,qIAAqI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACzL,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,0EAA0E,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACtI,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,kEAAkE,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACxH,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,0IAA0I,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EAClM,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS,uJAAuJ,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAClN,CAAC,CAAC,CAAC,SAAS,6LAOF;AACV,CAAC"}
+{"version":3,"file":"o-auth2-token-authorization-code.mjs","names":[],"sources":["../../src/actions/o-auth2-token-authorization-code.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2TokenAuthorizationCodeInput = z.object({\n  code: z.string().describe(\"Authorization code received from the OAuth2 authorization endpoint callback. This code is single-use and expires quickly (typically within 5-10 minutes).\"),\n  client_id: z.string().describe(\"Client ID from the NetSuite integration record. Required only when client credentials are not provided in metadata (public client flow).\").optional(),\n  grant_type: z.string().default(\"authorization_code\").describe(\"OAuth2 grant type. Always 'authorization_code' for this flow.\").optional(),\n  redirect_uri: z.string().describe(\"Redirect URI that must exactly match the one used in the authorization request and registered in the NetSuite integration record. Mismatches will cause the request to fail.\"),\n  code_verifier: z.string().describe(\"PKCE code verifier (43-128 character random string) used to generate the code_challenge in the initial authorization request. Required for security.\"),\n}).describe(\"Request model for exchanging an OAuth2 authorization code for access and refresh tokens.\\nUse this after the user completes authorization through the NetSuite OAuth2 flow.\");\nexport const NetsuiteOAuth2TokenAuthorizationCodeOutput = z.object({\n  error: z.string().describe(\"OAuth2 error code when request fails. Common values: 'invalid_grant' (invalid/expired code), 'invalid_client' (bad credentials), 'invalid_request' (malformed request), 'unauthorized_client' (client not authorized).\").nullable().optional(),\n  id_token: z.string().describe(\"JWT ID token containing user identity claims (OpenID Connect). Valid for 3 hours. Optional, returned only for OpenID Connect flows.\").nullable().optional(),\n  expires_in: z.number().int().describe(\"Access token lifetime in seconds. Always 3600 (60 minutes) for NetSuite.\").nullable().optional(),\n  token_type: z.string().describe(\"Token type for API requests. Always 'bearer' (case-insensitive).\").nullable().optional(),\n  access_token: z.string().describe(\"JWT access token for authenticating NetSuite API requests. Valid for 60 minutes. Use in Authorization header as 'Bearer {access_token}'.\").nullable().optional(),\n  refresh_token: z.string().describe(\"JWT refresh token for obtaining new access tokens when they expire. Valid for 7 days by default (configurable in integration record). Store securely.\").nullable().optional(),\n}).passthrough().describe(\"Response model for OAuth2 token exchange containing access tokens, refresh tokens, and error details.\\nOn success, contains tokens for API authentication. On failure, contains error code.\");\n\nexport const netsuiteOAuth2TokenAuthorizationCode = action(\"NETSUITE_O_AUTH2_TOKEN_AUTHORIZATION_CODE\", {\n  slug: \"netsuite-o-auth2-token-authorization-code\",\n  name: \"Exchange OAuth2 Authorization Code for Tokens\",\n  description: \"Exchange an OAuth2 authorization code for access and refresh tokens using the NetSuite token endpoint. This is the second step in the OAuth2 authorization code flow with PKCE: 1. User authorizes via OAuth2AuthorizeAccountDomain or OAuth2AuthorizeSystemDomain 2. User is redirected to your redirect_uri with authorization code 3. Use THIS action to exchange the code for tokens 4. Use access_token to make API requests, refresh_token to get new access tokens Supports both confidential clients (client secret in metadata) and public clients (no secret). PKCE (code_verifier) is required for security.\",\n  input: NetsuiteOAuth2TokenAuthorizationCodeInput,\n  output: NetsuiteOAuth2TokenAuthorizationCodeOutput,\n});\n"],"mappings":";;AAoBA,MAAa,uCAAuC,OAAO,6CAA6C;CACtG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OApBuD,EAAE,OAAO;EAChE,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,2JAA2J;EACrL,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,0IAA0I,CAAC,CAAC,SAAS;EACpL,YAAY,EAAE,OAAO,CAAC,CAAC,QAAQ,oBAAoB,CAAC,CAAC,SAAS,+DAA+D,CAAC,CAAC,SAAS;EACxI,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,8KAA8K;EAChN,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS,sJAAsJ;CAC3L,CAAC,CAAC,CAAC,SAAS,6KAcH;CACP,QAdwD,EAAE,OAAO;EACjE,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,wNAAwN,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACzQ,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS,qIAAqI,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACzL,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,0EAA0E,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACtI,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,kEAAkE,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EACxH,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS,0IAA0I,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;EAClM,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS,uJAAuJ,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAClN,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,6LAOhB;AACV,CAAC"}

package/dist/actions/o-auth2-token-client-credentials.cjs

@@ -11,7 +11,7 @@ const NetsuiteOAuth2TokenClientCredentialsOutput = zod.z.object({
 	expires_in: zod.z.number().int().describe("Token lifetime in seconds.").nullable().optional(),
 	token_type: zod.z.string().describe("Token type; always 'bearer'.").nullable().optional(),
 	access_token: zod.z.string().describe("Access token in JWT format; valid for a limited period.").nullable().optional()
-}).describe("Response model for OAuth2 token obtained via client credentials.\nIncludes optional error field to capture authorization server errors.");
+}).passthrough().describe("Response model for OAuth2 token obtained via client credentials.\nIncludes optional error field to capture authorization server errors.");
 const netsuiteOAuth2TokenClientCredentials = require_action.action("NETSUITE_O_AUTH2_TOKEN_CLIENT_CREDENTIALS", {
 	slug: "netsuite-o-auth2-token-client-credentials",
 	name: "OAuth2 Token Client Credentials",

package/dist/actions/o-auth2-token-client-credentials.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"o-auth2-token-client-credentials.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-token-client-credentials.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2TokenClientCredentialsInput: z.ZodTypeAny = z.object({\n  grant_type: z.string().default(\"client_credentials\").describe(\"Grant type for OAuth2 client credentials flow (must be 'client_credentials').\").optional(),\n  client_assertion: z.string().describe(\"JWT assertion token signed with the integration's private key.\"),\n  client_assertion_type: z.string().default(\"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\").describe(\"Client assertion type indicating a JWT bearer grant.\").optional(),\n}).describe(\"Request model for obtaining an OAuth2 access token via client credentials (JWT assertion).\");\nexport const NetsuiteOAuth2TokenClientCredentialsOutput: z.ZodTypeAny = z.object({\n  error: z.string().describe(\"Error code/message returned by the authorization server.\").nullable().optional(),\n  expires_in: z.number().int().describe(\"Token lifetime in seconds.\").nullable().optional(),\n  token_type: z.string().describe(\"Token type; always 'bearer'.\").nullable().optional(),\n  access_token: z.string().describe(\"Access token in JWT format; valid for a limited period.\").nullable().optional(),\n}).describe(\"Response model for OAuth2 token obtained via client credentials.\\nIncludes optional error field to capture authorization server errors.\");\n\nexport const netsuiteOAuth2TokenClientCredentials = action(\"NETSUITE_O_AUTH2_TOKEN_CLIENT_CREDENTIALS\", {\n  slug: \"netsuite-o-auth2-token-client-credentials\",\n  name: \"OAuth2 Token Client Credentials\",\n  description: \"Tool to obtain an OAuth2 access token via client credentials grant. Use when authenticating to NetSuite APIs with a JWT-based client credentials flow.\",\n  input: NetsuiteOAuth2TokenClientCredentialsInput,\n  output: NetsuiteOAuth2TokenClientCredentialsOutput,\n});\n"],"mappings":";;;AAIA,MAAa,4CAA0DA,IAAAA,EAAE,OAAO;CAC9E,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,QAAQ,oBAAoB,CAAC,CAAC,SAAS,+EAA+E,CAAC,CAAC,SAAS;CACxJ,kBAAkBA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,gEAAgE;CACtG,uBAAuBA,IAAAA,EAAE,OAAO,CAAC,CAAC,QAAQ,wDAAwD,CAAC,CAAC,SAAS,sDAAsD,CAAC,CAAC,SAAS;AAChL,CAAC,CAAC,CAAC,SAAS,4FAA4F;AACxG,MAAa,6CAA2DA,IAAAA,EAAE,OAAO;CAC/E,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0DAA0D,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC3G,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,4BAA4B,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACxF,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,8BAA8B,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpF,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,yDAAyD,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AACnH,CAAC,CAAC,CAAC,SAAS,yIAAyI;AAErJ,MAAa,uCAAuCC,eAAAA,OAAO,6CAA6C;CACtG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}
+{"version":3,"file":"o-auth2-token-client-credentials.cjs","names":["z","action"],"sources":["../../src/actions/o-auth2-token-client-credentials.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { action } from \"../action\";\n\nexport const NetsuiteOAuth2TokenClientCredentialsInput = z.object({\n  grant_type: z.string().default(\"client_credentials\").describe(\"Grant type for OAuth2 client credentials flow (must be 'client_credentials').\").optional(),\n  client_assertion: z.string().describe(\"JWT assertion token signed with the integration's private key.\"),\n  client_assertion_type: z.string().default(\"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\").describe(\"Client assertion type indicating a JWT bearer grant.\").optional(),\n}).describe(\"Request model for obtaining an OAuth2 access token via client credentials (JWT assertion).\");\nexport const NetsuiteOAuth2TokenClientCredentialsOutput = z.object({\n  error: z.string().describe(\"Error code/message returned by the authorization server.\").nullable().optional(),\n  expires_in: z.number().int().describe(\"Token lifetime in seconds.\").nullable().optional(),\n  token_type: z.string().describe(\"Token type; always 'bearer'.\").nullable().optional(),\n  access_token: z.string().describe(\"Access token in JWT format; valid for a limited period.\").nullable().optional(),\n}).passthrough().describe(\"Response model for OAuth2 token obtained via client credentials.\\nIncludes optional error field to capture authorization server errors.\");\n\nexport const netsuiteOAuth2TokenClientCredentials = action(\"NETSUITE_O_AUTH2_TOKEN_CLIENT_CREDENTIALS\", {\n  slug: \"netsuite-o-auth2-token-client-credentials\",\n  name: \"OAuth2 Token Client Credentials\",\n  description: \"Tool to obtain an OAuth2 access token via client credentials grant. Use when authenticating to NetSuite APIs with a JWT-based client credentials flow.\",\n  input: NetsuiteOAuth2TokenClientCredentialsInput,\n  output: NetsuiteOAuth2TokenClientCredentialsOutput,\n});\n"],"mappings":";;;AAIA,MAAa,4CAA4CA,IAAAA,EAAE,OAAO;CAChE,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,QAAQ,oBAAoB,CAAC,CAAC,SAAS,+EAA+E,CAAC,CAAC,SAAS;CACxJ,kBAAkBA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,gEAAgE;CACtG,uBAAuBA,IAAAA,EAAE,OAAO,CAAC,CAAC,QAAQ,wDAAwD,CAAC,CAAC,SAAS,sDAAsD,CAAC,CAAC,SAAS;AAChL,CAAC,CAAC,CAAC,SAAS,4FAA4F;AACxG,MAAa,6CAA6CA,IAAAA,EAAE,OAAO;CACjE,OAAOA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,0DAA0D,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC3G,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,4BAA4B,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACxF,YAAYA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,8BAA8B,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpF,cAAcA,IAAAA,EAAE,OAAO,CAAC,CAAC,SAAS,yDAAyD,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AACnH,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,yIAAyI;AAEnK,MAAa,uCAAuCC,eAAAA,OAAO,6CAA6C;CACtG,MAAM;CACN,MAAM;CACN,aAAa;CACb,OAAO;CACP,QAAQ;AACV,CAAC"}