@mesh-tech/mesh-cli 0.12.2 → 0.12.4

package/dist/bin/mesh.js

@@ -3398,11 +3398,16 @@ var init_hub_roles = __esm({
 
 // libs/api-registry/src/index.ts
 import { z as z2 } from "zod";
-var apiSurfaceSchema, apiRegistryEntrySchema, integrationStatusSchema;
+var rateLimitSpecSchema, rateLimitDefaultsSchema, apiSurfaceSchema, apiRegistryEntrySchema, integrationStatusSchema;
 var init_src2 = __esm({
   "libs/api-registry/src/index.ts"() {
     "use strict";
     init_hub_roles();
+    rateLimitSpecSchema = z2.object({
+      rps: z2.number().int().min(1),
+      burst: z2.number().int().min(1)
+    });
+    rateLimitDefaultsSchema = z2.record(z2.string().min(1), rateLimitSpecSchema);
     apiSurfaceSchema = z2.object({
       http: z2.object({ url: z2.string().min(1) }).optional(),
       nexus: z2.object({ endpoint: z2.string().min(1), taskQueue: z2.string().min(1) }).optional()
@@ -3421,7 +3426,8 @@ var init_src2 = __esm({
       // The consumer schema strips unknown keys, so a producer-side field that is
       // not mirrored here never reaches a consumer — mirror every addition.
       status: z2.object({ url: z2.string().min(1) }).optional(),
-      appVersion: z2.string().min(1).optional()
+      appVersion: z2.string().min(1).optional(),
+      rateLimits: rateLimitDefaultsSchema.optional()
     });
     integrationStatusSchema = z2.object({
       contract: z2.literal("v1"),
@@ -3438,6 +3444,7 @@ var init_src2 = __esm({
       coreModeSource: z2.string().optional(),
       enabledOps: z2.array(z2.string()),
       credentialsWired: z2.boolean(),
+      rateLimits: rateLimitDefaultsSchema.optional(),
       startedAt: z2.string().min(1)
     });
   }
@@ -3602,7 +3609,9 @@ async function reconcileHubRedirectUris(pat, projectId, app) {
     .../* @__PURE__ */ new Set([
       ...cfg.postLogoutRedirectUris ?? [],
       `http://localhost:${hubPort()}`,
-      `http://localhost:${DEFAULT_HUB_PORT}`
+      `http://localhost:${hubPort()}/`,
+      `http://localhost:${DEFAULT_HUB_PORT}`,
+      `http://localhost:${DEFAULT_HUB_PORT}/`
     ])
   ];
   if (redirectUris.length === (cfg.redirectUris ?? []).length && postLogoutRedirectUris.length === (cfg.postLogoutRedirectUris ?? []).length) {
@@ -3643,7 +3652,14 @@ async function ensureHubApp(pat, projectId) {
     name: HUB_APP_NAME,
     redirectUris: [.../* @__PURE__ */ new Set([hubRedirectUri(), HUB_DEFAULT_REDIRECT_URI])],
     postLogoutRedirectUris: [
-      .../* @__PURE__ */ new Set([`http://localhost:${hubPort()}`, `http://localhost:${DEFAULT_HUB_PORT}`])
+      // Both slash forms — see reconcileHubRedirectUris; Zitadel exact-matches
+      // and the Hub's /logout sends the trailing-slash form.
+      .../* @__PURE__ */ new Set([
+        `http://localhost:${hubPort()}`,
+        `http://localhost:${hubPort()}/`,
+        `http://localhost:${DEFAULT_HUB_PORT}`,
+        `http://localhost:${DEFAULT_HUB_PORT}/`
+      ])
     ],
     responseTypes: ["OIDC_RESPONSE_TYPE_CODE"],
     grantTypes: ["OIDC_GRANT_TYPE_AUTHORIZATION_CODE", "OIDC_GRANT_TYPE_REFRESH_TOKEN"],