@middlewr/contracts 0.0.28 → 0.0.30

package/dist/esm/index.js

@@ -39,9 +39,12 @@ var LinkAnalyticsQuerySchema = z.object({
 import { z as z2 } from "zod";
 var ApiKeySchema = z2.object({
   id: z2.string().uuid(),
-  user_id: z2.string().uuid(),
+  owner_type: z2.enum(["user", "workspace"]),
+  owner_id: z2.string().uuid(),
+  created_by_id: z2.string().uuid().nullable(),
   name: z2.string(),
   key_prefix: z2.string(),
+  permissions: z2.number().int().nullable(),
   last_used_at: z2.coerce.date().nullable(),
   created_at: z2.coerce.date(),
   updated_at: z2.coerce.date().nullable()
@@ -52,6 +55,13 @@ var CreateApiKeyInputSchema = z2.object({
 var CreateApiKeyResponseSchema = ApiKeySchema.extend({
   key: z2.string()
 });
+var CreateWorkspaceApiKeyInputSchema = z2.object({
+  name: z2.string().min(1).max(255),
+  permissions: z2.number().int().min(1)
+});
+var CreateWorkspaceApiKeyResponseSchema = ApiKeySchema.extend({
+  key: z2.string()
+});
 
 // src/billing.schema.ts
 import { z as z3 } from "zod";
@@ -109,6 +119,10 @@ var UserIdParamSchema = z4.object({
 var ApiKeyIdParamSchema = z4.object({
   api_key_id: z4.string().uuid()
 });
+var WorkspaceApiKeyIdParamSchema = z4.object({
+  workspace_id: z4.string().uuid(),
+  api_key_id: z4.string().uuid()
+});
 var TokenParamSchema = z4.object({
   token: z4.string()
 });
@@ -185,7 +199,38 @@ var DestinationNodeSchema = z6.object({
   position: PositionSchema,
   url: z6.string().url()
 });
-var RuleGraphNodeSchema = z6.discriminatedUnion("type", [ConditionNodeSchema, SplitNodeSchema, DestinationNodeSchema]);
+var FORBIDDEN_HEADERS = ["set-cookie", "authorization", "host", "transfer-encoding"];
+var TransformNodeSchema = z6.object({
+  id: z6.string(),
+  type: z6.literal("transform"),
+  position: PositionSchema,
+  transforms: z6.object({
+    query_params: z6.array(
+      z6.object({
+        key: z6.string().min(1),
+        value: z6.string(),
+        mode: z6.enum(["set", "append"])
+      })
+    ).optional(),
+    redirect_status: z6.union([z6.literal(301), z6.literal(302), z6.literal(307), z6.literal(308)]).optional(),
+    response_headers: z6.array(
+      z6.object({
+        key: z6.string().min(1).refine((k) => !FORBIDDEN_HEADERS.includes(k.toLowerCase()), {
+          message: "This header is not allowed"
+        }),
+        value: z6.string().regex(/^[^\r\n]*$/, "Header value must not contain newlines"),
+        mode: z6.enum(["set", "append"])
+      })
+    ).optional()
+  }),
+  next: z6.string().nullable()
+});
+var RuleGraphNodeSchema = z6.discriminatedUnion("type", [
+  ConditionNodeSchema,
+  SplitNodeSchema,
+  DestinationNodeSchema,
+  TransformNodeSchema
+]);
 var RuleGraphSchema = z6.object({
   entry: z6.string(),
   nodes: z6.record(z6.string(), RuleGraphNodeSchema)
@@ -449,6 +494,11 @@ var apiKeysContract = {
   list: oc.route({ method: "GET", path: "/api/api-keys" }).output(z11.array(ApiKeySchema)),
   delete: oc.route({ method: "DELETE", path: "/api/api-keys/{api_key_id}" }).input(ApiKeyIdParamSchema).output(z11.void())
 };
+var workspaceApiKeysContract = {
+  create: oc.route({ method: "POST", path: "/api/workspaces/{workspace_id}/api-keys" }).input(WorkspaceIdParamSchema.merge(CreateWorkspaceApiKeyInputSchema)).output(CreateWorkspaceApiKeyResponseSchema),
+  list: oc.route({ method: "GET", path: "/api/workspaces/{workspace_id}/api-keys" }).input(WorkspaceIdParamSchema).output(z11.array(ApiKeySchema)),
+  delete: oc.route({ method: "DELETE", path: "/api/workspaces/{workspace_id}/api-keys/{api_key_id}" }).input(WorkspaceApiKeyIdParamSchema).output(z11.void())
+};
 var workspacesContract = {
   create: oc.route({ method: "POST", path: "/api/workspaces" }).input(CreateWorkspaceInputSchema).output(WorkspaceSchema),
   list: oc.route({ method: "GET", path: "/api/workspaces" }).output(z11.array(WorkspaceWithCountSchema)),
@@ -506,6 +556,7 @@ var contract = {
   analytics: analyticsContract,
   users: usersContract,
   apiKeys: apiKeysContract,
+  workspaceApiKeys: workspaceApiKeysContract,
   workspaces: workspacesContract,
   invitations: invitationsContract,
   links: linksContract,
@@ -529,6 +580,8 @@ export {
   CreateInvitationInputSchema,
   CreateLinkInputSchema,
   CreateTagInputSchema,
+  CreateWorkspaceApiKeyInputSchema,
+  CreateWorkspaceApiKeyResponseSchema,
   CreateWorkspaceInputSchema,
   CustomerPortalSchema,
   DomainIdParamSchema,
@@ -559,6 +612,7 @@ export {
   UpdateWorkspaceInputSchema,
   UserIdParamSchema,
   UserSchema,
+  WorkspaceApiKeyIdParamSchema,
   WorkspaceIdParamSchema,
   WorkspaceInvitationSchema,
   WorkspaceMemberSchema,
@@ -575,5 +629,6 @@ export {
   linksContract,
   tagsContract,
   usersContract,
+  workspaceApiKeysContract,
   workspacesContract
 };

package/dist/esm/links.schema.d.ts

@@ -124,6 +124,33 @@ export declare const LinkSchema: z.ZodObject<{
                 y: z.ZodNumber;
             }, z.core.$strip>;
             url: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            type: z.ZodLiteral<"transform">;
+            position: z.ZodObject<{
+                x: z.ZodNumber;
+                y: z.ZodNumber;
+            }, z.core.$strip>;
+            transforms: z.ZodObject<{
+                query_params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodString;
+                    value: z.ZodString;
+                    mode: z.ZodEnum<{
+                        set: "set";
+                        append: "append";
+                    }>;
+                }, z.core.$strip>>>;
+                redirect_status: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
+                response_headers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodString;
+                    value: z.ZodString;
+                    mode: z.ZodEnum<{
+                        set: "set";
+                        append: "append";
+                    }>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
+            next: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>], "type">>;
     }, z.core.$strip>>>;
     tags: z.ZodArray<z.ZodObject<{
@@ -228,6 +255,33 @@ export declare const CreateLinkInputSchema: z.ZodObject<{
                 y: z.ZodNumber;
             }, z.core.$strip>;
             url: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            type: z.ZodLiteral<"transform">;
+            position: z.ZodObject<{
+                x: z.ZodNumber;
+                y: z.ZodNumber;
+            }, z.core.$strip>;
+            transforms: z.ZodObject<{
+                query_params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodString;
+                    value: z.ZodString;
+                    mode: z.ZodEnum<{
+                        set: "set";
+                        append: "append";
+                    }>;
+                }, z.core.$strip>>>;
+                redirect_status: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
+                response_headers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodString;
+                    value: z.ZodString;
+                    mode: z.ZodEnum<{
+                        set: "set";
+                        append: "append";
+                    }>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
+            next: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>], "type">>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
@@ -325,6 +379,33 @@ export declare const UpdateLinkInputSchema: z.ZodObject<{
                 y: z.ZodNumber;
             }, z.core.$strip>;
             url: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            type: z.ZodLiteral<"transform">;
+            position: z.ZodObject<{
+                x: z.ZodNumber;
+                y: z.ZodNumber;
+            }, z.core.$strip>;
+            transforms: z.ZodObject<{
+                query_params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodString;
+                    value: z.ZodString;
+                    mode: z.ZodEnum<{
+                        set: "set";
+                        append: "append";
+                    }>;
+                }, z.core.$strip>>>;
+                redirect_status: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
+                response_headers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    key: z.ZodString;
+                    value: z.ZodString;
+                    mode: z.ZodEnum<{
+                        set: "set";
+                        append: "append";
+                    }>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>;
+            next: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>], "type">>;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
@@ -462,6 +543,33 @@ export declare const PaginatedLinksSchema: z.ZodObject<{
                     y: z.ZodNumber;
                 }, z.core.$strip>;
                 url: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                id: z.ZodString;
+                type: z.ZodLiteral<"transform">;
+                position: z.ZodObject<{
+                    x: z.ZodNumber;
+                    y: z.ZodNumber;
+                }, z.core.$strip>;
+                transforms: z.ZodObject<{
+                    query_params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        key: z.ZodString;
+                        value: z.ZodString;
+                        mode: z.ZodEnum<{
+                            set: "set";
+                            append: "append";
+                        }>;
+                    }, z.core.$strip>>>;
+                    redirect_status: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
+                    response_headers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        key: z.ZodString;
+                        value: z.ZodString;
+                        mode: z.ZodEnum<{
+                            set: "set";
+                            append: "append";
+                        }>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>;
+                next: z.ZodNullable<z.ZodString>;
             }, z.core.$strip>], "type">>;
         }, z.core.$strip>>>;
         tags: z.ZodArray<z.ZodObject<{

package/dist/esm/links.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"links.schema.d.ts","sourceRoot":"","sources":["../../src/links.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;iBAU/B,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BrB,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiC5B,CAAC;AAEP,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC5B,CAAC;AAMP,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe5B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAM/B,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;iBAYxB,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC"}
+{"version":3,"file":"links.schema.d.ts","sourceRoot":"","sources":["../../src/links.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;iBAU/B,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BrB,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiC5B,CAAC;AAEP,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkC5B,CAAC;AAMP,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe5B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAM/B,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;iBAYxB,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC"}

package/dist/esm/rules.schema.d.ts

@@ -44,6 +44,33 @@ export declare const RuleGraphNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         y: z.ZodNumber;
     }, z.core.$strip>;
     url: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    id: z.ZodString;
+    type: z.ZodLiteral<"transform">;
+    position: z.ZodObject<{
+        x: z.ZodNumber;
+        y: z.ZodNumber;
+    }, z.core.$strip>;
+    transforms: z.ZodObject<{
+        query_params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            value: z.ZodString;
+            mode: z.ZodEnum<{
+                set: "set";
+                append: "append";
+            }>;
+        }, z.core.$strip>>>;
+        redirect_status: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
+        response_headers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            value: z.ZodString;
+            mode: z.ZodEnum<{
+                set: "set";
+                append: "append";
+            }>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>;
+    next: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>], "type">;
 export declare const RuleGraphSchema: z.ZodNullable<z.ZodObject<{
     entry: z.ZodString;
@@ -92,6 +119,33 @@ export declare const RuleGraphSchema: z.ZodNullable<z.ZodObject<{
             y: z.ZodNumber;
         }, z.core.$strip>;
         url: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        type: z.ZodLiteral<"transform">;
+        position: z.ZodObject<{
+            x: z.ZodNumber;
+            y: z.ZodNumber;
+        }, z.core.$strip>;
+        transforms: z.ZodObject<{
+            query_params: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodString;
+                mode: z.ZodEnum<{
+                    set: "set";
+                    append: "append";
+                }>;
+            }, z.core.$strip>>>;
+            redirect_status: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<301>, z.ZodLiteral<302>, z.ZodLiteral<307>, z.ZodLiteral<308>]>>;
+            response_headers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodString;
+                mode: z.ZodEnum<{
+                    set: "set";
+                    append: "append";
+                }>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>;
+        next: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>], "type">>;
 }, z.core.$strip>>;
 //# sourceMappingURL=rules.schema.d.ts.map

package/dist/esm/rules.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rules.schema.d.ts","sourceRoot":"","sources":["../../src/rules.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA8CxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAA8F,CAAC;AAE/H,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASb,CAAC"}
+{"version":3,"file":"rules.schema.d.ts","sourceRoot":"","sources":["../../src/rules.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiFxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAK9B,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@middlewr/contracts",
-    "version": "0.0.28",
+    "version": "0.0.30",
     "type": "module",
     "main": "./dist/cjs/index.js",
     "module": "./dist/esm/index.js",

package/src/api-keys.schema.ts

@@ -2,9 +2,12 @@ import { z } from 'zod';
 
 export const ApiKeySchema = z.object({
     id: z.string().uuid(),
-    user_id: z.string().uuid(),
+    owner_type: z.enum(['user', 'workspace']),
+    owner_id: z.string().uuid(),
+    created_by_id: z.string().uuid().nullable(),
     name: z.string(),
     key_prefix: z.string(),
+    permissions: z.number().int().nullable(),
     last_used_at: z.coerce.date().nullable(),
     created_at: z.coerce.date(),
     updated_at: z.coerce.date().nullable(),
@@ -17,3 +20,12 @@ export const CreateApiKeyInputSchema = z.object({
 export const CreateApiKeyResponseSchema = ApiKeySchema.extend({
     key: z.string(),
 });
+
+export const CreateWorkspaceApiKeyInputSchema = z.object({
+    name: z.string().min(1).max(255),
+    permissions: z.number().int().min(1),
+});
+
+export const CreateWorkspaceApiKeyResponseSchema = ApiKeySchema.extend({
+    key: z.string(),
+});

package/src/common.schema.ts

@@ -37,6 +37,11 @@ export const ApiKeyIdParamSchema = z.object({
     api_key_id: z.string().uuid(),
 });
 
+export const WorkspaceApiKeyIdParamSchema = z.object({
+    workspace_id: z.string().uuid(),
+    api_key_id: z.string().uuid(),
+});
+
 export const TokenParamSchema = z.object({
     token: z.string(),
 });

package/src/index.ts

@@ -3,7 +3,13 @@ import { oc } from '@orpc/contract';
 import { z } from 'zod';
 
 import { AnalyticsOutputSchema, AnalyticsQuerySchema } from './analytics.schema';
-import { ApiKeySchema, CreateApiKeyInputSchema, CreateApiKeyResponseSchema } from './api-keys.schema';
+import {
+    ApiKeySchema,
+    CreateApiKeyInputSchema,
+    CreateApiKeyResponseSchema,
+    CreateWorkspaceApiKeyInputSchema,
+    CreateWorkspaceApiKeyResponseSchema,
+} from './api-keys.schema';
 import { BillingStatusSchema, CheckoutSessionSchema, CreateCheckoutInputSchema, CustomerPortalSchema } from './billing.schema';
 import {
     ApiKeyIdParamSchema,
@@ -13,6 +19,7 @@ import {
     MemberIdParamSchema,
     TagIdParamSchema,
     TokenParamSchema,
+    WorkspaceApiKeyIdParamSchema,
     WorkspaceIdParamSchema,
 } from './common.schema';
 import { CreateDomainInputSchema, DomainSchema, UpdateDomainInputSchema } from './domains.schema';
@@ -89,6 +96,24 @@ export const apiKeysContract = {
     delete: oc.route({ method: 'DELETE', path: '/api/api-keys/{api_key_id}' }).input(ApiKeyIdParamSchema).output(z.void()),
 };
 
+// Workspace API Keys contract
+export const workspaceApiKeysContract = {
+    create: oc
+        .route({ method: 'POST', path: '/api/workspaces/{workspace_id}/api-keys' })
+        .input(WorkspaceIdParamSchema.merge(CreateWorkspaceApiKeyInputSchema))
+        .output(CreateWorkspaceApiKeyResponseSchema),
+
+    list: oc
+        .route({ method: 'GET', path: '/api/workspaces/{workspace_id}/api-keys' })
+        .input(WorkspaceIdParamSchema)
+        .output(z.array(ApiKeySchema)),
+
+    delete: oc
+        .route({ method: 'DELETE', path: '/api/workspaces/{workspace_id}/api-keys/{api_key_id}' })
+        .input(WorkspaceApiKeyIdParamSchema)
+        .output(z.void()),
+};
+
 // Workspaces contract
 export const workspacesContract = {
     create: oc.route({ method: 'POST', path: '/api/workspaces' }).input(CreateWorkspaceInputSchema).output(WorkspaceSchema),
@@ -275,6 +300,7 @@ export const contract = {
     analytics: analyticsContract,
     users: usersContract,
     apiKeys: apiKeysContract,
+    workspaceApiKeys: workspaceApiKeysContract,
     workspaces: workspacesContract,
     invitations: invitationsContract,
     links: linksContract,

package/src/rules.schema.ts

@@ -44,7 +44,47 @@ const DestinationNodeSchema = z.object({
     url: z.string().url(),
 });
 
-export const RuleGraphNodeSchema = z.discriminatedUnion('type', [ConditionNodeSchema, SplitNodeSchema, DestinationNodeSchema]);
+const FORBIDDEN_HEADERS = ['set-cookie', 'authorization', 'host', 'transfer-encoding'];
+
+const TransformNodeSchema = z.object({
+    id: z.string(),
+    type: z.literal('transform'),
+    position: PositionSchema,
+    transforms: z.object({
+        query_params: z
+            .array(
+                z.object({
+                    key: z.string().min(1),
+                    value: z.string(),
+                    mode: z.enum(['set', 'append']),
+                }),
+            )
+            .optional(),
+        redirect_status: z.union([z.literal(301), z.literal(302), z.literal(307), z.literal(308)]).optional(),
+        response_headers: z
+            .array(
+                z.object({
+                    key: z
+                        .string()
+                        .min(1)
+                        .refine((k) => !FORBIDDEN_HEADERS.includes(k.toLowerCase()), {
+                            message: 'This header is not allowed',
+                        }),
+                    value: z.string().regex(/^[^\r\n]*$/, 'Header value must not contain newlines'),
+                    mode: z.enum(['set', 'append']),
+                }),
+            )
+            .optional(),
+    }),
+    next: z.string().nullable(),
+});
+
+export const RuleGraphNodeSchema = z.discriminatedUnion('type', [
+    ConditionNodeSchema,
+    SplitNodeSchema,
+    DestinationNodeSchema,
+    TransformNodeSchema,
+]);
 
 export const RuleGraphSchema = z
     .object({