@membranehq/sdk 0.28.1 → 0.28.2

package/dist/bundle.d.ts

@@ -25,24 +25,42 @@ interface LogRecord {
     data?: any;
 }
 
-interface MembraneClientOptions {
-    token?: string;
-    fetchToken?: () => Promise<string>;
+interface BaseClientOptions {
     credentials?: any;
     fetchCredentials?: () => Promise<any>;
     apiUri?: string;
     uiUri?: string;
+}
+interface TokenBasedClientOptions extends BaseClientOptions {
+    token?: string;
+    fetchToken?: () => Promise<string>;
+    workspaceKey?: never;
+    workspaceSecret?: never;
+    tenantKey?: never;
     accessToken?: string;
 }
+interface WorkspaceCredentialClientOptions extends BaseClientOptions {
+    token?: never;
+    fetchToken?: never;
+    workspaceKey: string;
+    workspaceSecret: string;
+    tenantKey: string;
+    accessToken?: never;
+}
+type MembraneClientOptions = TokenBasedClientOptions | WorkspaceCredentialClientOptions;
 declare class MembraneApiClient {
     apiUri: string;
     uiUri: string;
     token?: string;
     protected fetchToken?: () => Promise<string>;
     private logs;
+    private _workspaceKey?;
+    private _workspaceSecret?;
+    private _tenantKey?;
     constructor(options?: MembraneClientOptions);
     setCredentials(credentials: any): Promise<any>;
     getToken(): Promise<string>;
+    private mintToken;
     get<T = any>(uri: string, queryParams?: Record<string, any>, options?: AxiosRequestConfig): Promise<T>;
     post<T = any>(uri: string, data?: any, options?: AxiosRequestConfig): Promise<T>;
     put<T = any>(uri: string, data?: any, options?: AxiosRequestConfig): Promise<T>;
@@ -129,7 +147,8 @@ declare enum WorkspaceElementState {
     CLIENT_ACTION_REQUIRED = "CLIENT_ACTION_REQUIRED",
     CONFIGURATION_ERROR = "CONFIGURATION_ERROR",
     SETUP_FAILED = "SETUP_FAILED",
-    READY = "READY"
+    READY = "READY",
+    DISCONNECTING = "DISCONNECTING"
 }
 
 interface BaseElementInstance {
@@ -370,6 +389,7 @@ declare const CreateConnectionRequest: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     authOptionKey: z.ZodOptional<z.ZodString>;
+    key: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     integrationId: z.ZodOptional<z.ZodString>;
     integrationUuid: z.ZodOptional<z.ZodString>;
     integrationKey: z.ZodOptional<z.ZodString>;
@@ -389,6 +409,7 @@ declare const UpdateConnectionRequest: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
     authOptionKey: z.ZodOptional<z.ZodString>;
+    key: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     integrationId: z.ZodOptional<z.ZodString>;
     integrationUuid: z.ZodOptional<z.ZodString>;
     integrationKey: z.ZodOptional<z.ZodString>;
@@ -409,11 +430,13 @@ declare const ConnectionSelector: z.ZodObject<{
     integrationKey: z.ZodOptional<z.ZodString>;
     integrationId: z.ZodOptional<z.ZodString>;
     connectionId: z.ZodOptional<z.ZodString>;
+    connectionKey: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 type ConnectionSelector = z.infer<typeof ConnectionSelector>;
 declare const ConnectionApiResponse: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
+    key: z.ZodOptional<z.ZodString>;
     isTest: z.ZodOptional<z.ZodBoolean>;
     connected: z.ZodOptional<z.ZodBoolean>;
     disconnected: z.ZodOptional<z.ZodBoolean>;
@@ -521,6 +544,7 @@ declare const ConnectPayload: z.ZodObject<{
     connectorKey: z.ZodOptional<z.ZodString>;
     connectorVersion: z.ZodOptional<z.ZodString>;
     connectionId: z.ZodOptional<z.ZodString>;
+    connectionKey: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
     input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     connectionParameters: z.ZodOptional<z.ZodAny>;
@@ -539,6 +563,7 @@ declare const ConnectUIOptions: z.ZodObject<{
     integrationKey: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
     intent: z.ZodOptional<z.ZodString>;
+    connectionKey: z.ZodOptional<z.ZodString>;
     authOptionKey: z.ZodOptional<z.ZodString>;
     connectorParameters: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     connectorId: z.ZodOptional<z.ZodString>;
@@ -798,6 +823,7 @@ declare const FindActionsQuery: z.ZodObject<{
     integrationKey: z.ZodOptional<z.ZodString>;
     integrationId: z.ZodOptional<z.ZodString>;
     connectionId: z.ZodOptional<z.ZodString>;
+    connectionKey: z.ZodOptional<z.ZodString>;
     instanceKey: z.ZodOptional<z.ZodString>;
     search: z.ZodOptional<z.ZodString>;
     limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
@@ -942,6 +968,7 @@ declare class ActionAccessor<RunInput = any, RunOutput = any> extends ElementAcc
     run(input?: RunInput, options?: {
         integrationKey?: string;
         connectionId?: string;
+        connectionKey?: string;
     }): Promise<ActionRunResponse<RunOutput>>;
 }
 declare class IntegrationLevelActionAccessor extends IntegrationLevelElementAccessor<ActionApiResponse, UpdateActionRequest> {
@@ -3633,6 +3660,7 @@ declare const FlowRunApiResponse: z.ZodObject<{
     connection: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
         isTest: z.ZodOptional<z.ZodBoolean>;
         connected: z.ZodOptional<z.ZodBoolean>;
         disconnected: z.ZodOptional<z.ZodBoolean>;
@@ -3837,6 +3865,7 @@ declare const FindFlowRunsResponse: z.ZodObject<{
         connection: z.ZodOptional<z.ZodObject<{
             id: z.ZodString;
             name: z.ZodString;
+            key: z.ZodOptional<z.ZodString>;
             isTest: z.ZodOptional<z.ZodBoolean>;
             connected: z.ZodOptional<z.ZodBoolean>;
             disconnected: z.ZodOptional<z.ZodBoolean>;
@@ -4191,6 +4220,7 @@ declare const FlowApiResponse: z.ZodObject<{
     connection: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
         isTest: z.ZodOptional<z.ZodBoolean>;
         connected: z.ZodOptional<z.ZodBoolean>;
         disconnected: z.ZodOptional<z.ZodBoolean>;
@@ -4316,6 +4346,7 @@ declare const FindFlowsQuery: z.ZodObject<{
         integration: "integration";
         universal: "universal";
     }>>;
+    connectionKey: z.ZodOptional<z.ZodString>;
     universalParentId: z.ZodOptional<z.ZodString>;
     tenantId: z.ZodOptional<z.ZodString>;
     flowId: z.ZodOptional<z.ZodString>;
@@ -4875,6 +4906,7 @@ declare const DataSourceApiResponse: z.ZodObject<{
     connection: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
         isTest: z.ZodOptional<z.ZodBoolean>;
         connected: z.ZodOptional<z.ZodBoolean>;
         disconnected: z.ZodOptional<z.ZodBoolean>;
@@ -5083,6 +5115,7 @@ declare const FindDataSourcesQuery: z.ZodObject<{
         integration: "integration";
         universal: "universal";
     }>>;
+    connectionKey: z.ZodOptional<z.ZodString>;
     universalParentId: z.ZodOptional<z.ZodString>;
     tenantId: z.ZodOptional<z.ZodString>;
     dataSourceId: z.ZodOptional<z.ZodString>;
@@ -5238,6 +5271,9 @@ declare const UpdateIntegrationRequest: z.ZodObject<{
 type UpdateIntegrationRequest = z.infer<typeof UpdateIntegrationRequest>;
 declare const FindIntegrationsQuery: z.ZodObject<{
     appUuid: z.ZodOptional<z.ZodString>;
+    connectors: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    externalApps: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    websearch: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
     cursor: z.ZodOptional<z.ZodString>;
     search: z.ZodOptional<z.ZodString>;
@@ -5297,6 +5333,7 @@ declare const IntegrationApiResponse: z.ZodObject<{
     connection: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
         isTest: z.ZodOptional<z.ZodBoolean>;
         connected: z.ZodOptional<z.ZodBoolean>;
         disconnected: z.ZodOptional<z.ZodBoolean>;
@@ -5360,6 +5397,7 @@ declare const FindPackagesQuery: z.ZodObject<{
     integrationKey: z.ZodOptional<z.ZodString>;
     integrationId: z.ZodOptional<z.ZodString>;
     connectionId: z.ZodOptional<z.ZodString>;
+    connectionKey: z.ZodOptional<z.ZodString>;
     instanceKey: z.ZodOptional<z.ZodString>;
     search: z.ZodOptional<z.ZodString>;
     limit: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
@@ -5807,6 +5845,7 @@ declare const FieldMappingApiResponse: z.ZodObject<{
     connection: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
         isTest: z.ZodOptional<z.ZodBoolean>;
         connected: z.ZodOptional<z.ZodBoolean>;
         disconnected: z.ZodOptional<z.ZodBoolean>;
@@ -5913,6 +5952,7 @@ declare const FindFieldMappingsQuery: z.ZodObject<{
         integration: "integration";
         universal: "universal";
     }>>;
+    connectionKey: z.ZodOptional<z.ZodString>;
     universalParentId: z.ZodOptional<z.ZodString>;
     tenantId: z.ZodOptional<z.ZodString>;
     fieldMappingId: z.ZodOptional<z.ZodString>;
@@ -6369,6 +6409,7 @@ declare const ExternalEventSubscriptionApiResponse: z.ZodObject<{
     connection: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
         isTest: z.ZodOptional<z.ZodBoolean>;
         connected: z.ZodOptional<z.ZodBoolean>;
         disconnected: z.ZodOptional<z.ZodBoolean>;
@@ -6620,6 +6661,7 @@ declare class ConnectionAccessor {
         createdAt: string;
         updatedAt: string;
         userId: string;
+        key?: string | undefined;
         isTest?: boolean | undefined;
         connected?: boolean | undefined;
         disconnected?: boolean | undefined;
@@ -6857,6 +6899,7 @@ declare class IntegrationAccessor extends ElementAccessor<IntegrationApiResponse
         createdAt: string;
         updatedAt: string;
         userId: string;
+        key?: string | undefined;
         isTest?: boolean | undefined;
         connected?: boolean | undefined;
         disconnected?: boolean | undefined;

package/dist/bundle.js

@@ -20675,6 +20675,7 @@
 	            ? {
 	                integrationKey: options.integrationKey,
 	                connectionId: options.connectionId,
+	                connectionKey: options.connectionKey,
 	            }
 	            : {};
 	        return this.options.client.post(this.getPath('run'), { input }, { params: queryParams });
@@ -22259,6 +22260,7 @@
 	    WorkspaceElementState["CONFIGURATION_ERROR"] = "CONFIGURATION_ERROR";
 	    WorkspaceElementState["SETUP_FAILED"] = "SETUP_FAILED";
 	    WorkspaceElementState["READY"] = "READY";
+	    WorkspaceElementState["DISCONNECTING"] = "DISCONNECTING";
 	})(WorkspaceElementState || (WorkspaceElementState = {}));
 	var WorkspaceElementDependencyType;
 	(function (WorkspaceElementDependencyType) {
@@ -22377,6 +22379,11 @@
 	        filterTitle: 'Connection',
 	        referenceElementType: WorkspaceElementType.Connection,
 	    }),
+	    connectionKey: string$1()
+	        .optional()
+	        .meta({
+	        hidden: true,
+	    }),
 	    instanceKey: string$1()
 	        .optional()
 	        .meta({
@@ -22942,7 +22949,7 @@
 	    }
 	}
 	async function createOrUpdateConnection(options) {
-	    const { client, connectionId, integrationKey, integrationId, connectorId, connectorVersion, name, input, connectorParameters, allowMultipleConnections, authOptionKey, connectionRequestId, apiUri, redirectUri, onPopupClosed, } = options !== null && options !== void 0 ? options : {};
+	    const { client, connectionId, connectionKey, integrationKey, integrationId, connectorId, connectorVersion, name, input, connectorParameters, allowMultipleConnections, authOptionKey, connectionRequestId, apiUri, redirectUri, onPopupClosed, } = options !== null && options !== void 0 ? options : {};
 	    let connectionType = await detectConnectionType(options);
 	    if (redirectUri) {
 	        connectionType = ConnectionType.REDIRECT;
@@ -22960,6 +22967,7 @@
 	            connectorId,
 	            connectorVersion,
 	            connectionId,
+	            connectionKey,
 	            name,
 	            authOptionKey,
 	            allowMultipleConnections,
@@ -26605,7 +26613,7 @@
 	  Response,
 	}))(utils$1.global);
 
-	const { ReadableStream: ReadableStream$1, TextEncoder } = utils$1.global;
+	const { ReadableStream: ReadableStream$1, TextEncoder: TextEncoder$1 } = utils$1.global;
 
 	const test = (fn, ...args) => {
 	  try {
@@ -26637,11 +26645,11 @@
 
 	  const encodeText =
 	    isFetchSupported &&
-	    (typeof TextEncoder === 'function'
+	    (typeof TextEncoder$1 === 'function'
 	      ? (
 	          (encoder) => (str) =>
 	            encoder.encode(str)
-	        )(new TextEncoder())
+	        )(new TextEncoder$1())
 	      : async (str) => new Uint8Array(await new Request(str).arrayBuffer()));
 
 	  const supportsRequestStream =
@@ -28172,6 +28180,9 @@
 	    apiUri: string$1().nullish(),
 	    uiUri: string$1().nullish(),
 	    accessToken: string$1().nullish(),
+	    workspaceKey: string$1().nullish(),
+	    workspaceSecret: string$1().nullish(),
+	    tenantKey: string$1().nullish(),
 	})
 	    .strict();
 	function validateClientOptions(options) {
@@ -28186,6 +28197,8 @@
 	    }
 	}
 	const REFETCH_EXPIRATION_THRESHOLD = 10 * 1000;
+	const TOKEN_TTL_SECONDS = 3600;
+	const TOKEN_MINT_THRESHOLD_SECONDS = 60;
 	function decodeToken(token) {
 	    if (token.startsWith('pat-')) {
 	        return null;
@@ -28200,11 +28213,25 @@
 	    constructor(options = {}) {
 	        this.logs = [];
 	        validateClientOptions(options);
-	        const { uiUri, apiUri, accessToken, token, fetchToken, fetchCredentials, credentials } = options;
+	        const { uiUri, apiUri, fetchCredentials, credentials } = options;
 	        this.apiUri = apiUri !== null && apiUri !== void 0 ? apiUri : DEFAULT_API_URI;
 	        this.uiUri = uiUri !== null && uiUri !== void 0 ? uiUri : DEFAULT_UI_URI;
-	        this.token = token !== null && token !== void 0 ? token : accessToken;
-	        this.fetchToken = fetchToken;
+	        if ('workspaceSecret' in options && options.workspaceSecret) {
+	            if (typeof window !== 'undefined') {
+	                throw new Error('MembraneClient: workspaceSecret must not be used in browser code. ' +
+	                    'The workspace secret is a server-side credential that would be exposed to end users if included in a browser bundle.');
+	            }
+	            this._workspaceKey = options.workspaceKey;
+	            this._workspaceSecret = options.workspaceSecret;
+	            this._tenantKey = options.tenantKey;
+	        }
+	        else {
+	            const token = 'token' in options ? options.token : undefined;
+	            const accessToken = 'accessToken' in options ? options.accessToken : undefined;
+	            const fetchToken = 'fetchToken' in options ? options.fetchToken : undefined;
+	            this.token = token !== null && token !== void 0 ? token : accessToken;
+	            this.fetchToken = fetchToken;
+	        }
 	        if (fetchCredentials) {
 	            void fetchCredentials().then((c) => this.setCredentials(c));
 	        }
@@ -28216,6 +28243,9 @@
 	        return this.patch('/self', { credentials });
 	    }
 	    async getToken() {
+	        if (this._workspaceSecret) {
+	            return this.mintToken();
+	        }
 	        if (this.fetchToken) {
 	            if (!this.token) {
 	                this.token = await this.fetchToken();
@@ -28236,6 +28266,38 @@
 	        decodeToken(this.token);
 	        return this.token;
 	    }
+	    async mintToken() {
+	        if (this.token) {
+	            const payload = decodeToken(this.token);
+	            if (payload === null || payload === void 0 ? void 0 : payload.exp) {
+	                const remainingSeconds = payload.exp - Math.floor(Date.now() / 1000);
+	                if (remainingSeconds > TOKEN_MINT_THRESHOLD_SECONDS) {
+	                    return this.token;
+	                }
+	            }
+	        }
+	        const payload = {
+	            id: this._tenantKey,
+	            iss: this._workspaceKey,
+	            exp: Math.floor(Date.now() / 1000) + TOKEN_TTL_SECONDS,
+	        };
+	        const header = { alg: 'HS256', typ: 'JWT' };
+	        const encoder = new TextEncoder();
+	        const toB64Url = (bytes) => {
+	            let s = '';
+	            for (let i = 0; i < bytes.length; i++)
+	                s += String.fromCharCode(bytes[i]);
+	            return btoa(s).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+	        };
+	        const headerB64 = toB64Url(encoder.encode(JSON.stringify(header)));
+	        const payloadB64 = toB64Url(encoder.encode(JSON.stringify(payload)));
+	        const input = `${headerB64}.${payloadB64}`;
+	        const key = await crypto.subtle.importKey('raw', encoder.encode(this._workspaceSecret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+	        const signatureBuffer = await crypto.subtle.sign('HMAC', key, encoder.encode(input));
+	        const signature = toB64Url(new Uint8Array(signatureBuffer));
+	        this.token = `${input}.${signature}`;
+	        return this.token;
+	    }
 	    async get(uri, queryParams, options) {
 	        if (queryParams) {
 	            uri += `${uri.includes('?') ? '&' : '?'}${new URLSearchParams(omitBy(queryParams, isEmptyValue)).toString()}`;
@@ -28434,6 +28496,7 @@
 	    name: string$1().optional(),
 	    meta: record(string$1(), any()).optional(),
 	    authOptionKey: string$1().optional(),
+	    key: string$1().min(1).max(100).optional().nullable(),
 	    integrationId: string$1().optional(),
 	    integrationUuid: string$1().optional(),
 	    integrationKey: string$1().optional(),
@@ -28456,6 +28519,7 @@
 	const BaseConnection = BaseWorkspaceElement.extend({
 	    ...TenantLayerElement.shape,
 	    name: string$1(),
+	    key: string$1().optional(),
 	    isTest: boolean$1().optional(),
 	    connected: boolean$1().optional(),
 	    disconnected: boolean$1().optional().describe('[DEPRECATED] Use `connected` instead.'),
@@ -29613,6 +29677,7 @@
 	    integrationKey: string$1().optional(),
 	    integrationId: string$1().optional(),
 	    connectionId: string$1().optional(),
+	    connectionKey: string$1().optional(),
 	});
 	const ConnectionApiResponse = BaseConnection.extend({
 	    user: BaseCustomer.optional(),
@@ -29656,6 +29721,7 @@
 	    connectorKey: string$1().optional(),
 	    connectorVersion: string$1().optional(),
 	    connectionId: string$1().optional(),
+	    connectionKey: string$1().min(1).max(100).optional(),
 	    name: string$1().optional(),
 	    input: record(string$1(), unknown()).optional(),
 	    connectionParameters: any().optional().describe('[INTERNAL] Deprecated: Use input instead'),