@oomol-lab/open-flow 0.1.0-beta.51 → 0.1.0-beta.53

package/dist/common/integration-trigger.js

@@ -9369,6 +9369,24 @@ var managed = object({
 			action: text,
 			connectionId: text.optional()
 		}),
+		object({
+			kind: literal("openapi"),
+			sourceUrl: text,
+			method: text,
+			path: text,
+			serverUrl: text,
+			document: json,
+			auth: array(object({
+				id: text,
+				type: _enum([
+					"bearer",
+					"basic",
+					"apiKey"
+				]),
+				name: text.optional(),
+				in: _enum(["header", "query"]).optional()
+			}))
+		}),
 		object({
 			kind: literal("llm"),
 			mode: _enum(["chat", "json"])
@@ -9789,6 +9807,11 @@ var shapes = {
 		before: text.optional(),
 		value: text.optional()
 	},
+	"task.openapi.set": {
+		taskId: text,
+		before: managed,
+		value: managed
+	},
 	"task.agent.set": {
 		taskId: text,
 		before: managed,

package/dist/common/mcp.js

@@ -5877,6 +5877,15 @@ var runStatuses = [
 //#region src/execution/common/wait.ts
 /** Shared by decision entry points, the editor, and durable decision storage. */
 var waitCommentSchema = string$1().trim().refine((value) => [...value].length <= 2e3, "Wait comment must contain at most 2,000 Unicode code points.").nullable().optional();
+//#endregion
+//#region src/openapi/common/authBindings.ts
+/** Never allow credentials to enter a Revision as literal node inputs. */
+function assertOpenApiAuthBindings(document) {
+	for (const graph of [document.graph, ...Object.values(document.subflows).map((subflow) => subflow.graph)]) for (const node of Object.values(graph.nodes)) {
+		if (node.kind != "task" || node.taskId == null || document.tasks[node.taskId]?.executor.kind != "openapi") continue;
+		for (const [handle, mapping] of Object.entries(node.inputs)) if (handle.startsWith("auth.") && (mapping.kind == "value" || mapping.kind == "sources" && mapping.sources.some((source) => source.kind == "flow"))) throw new TypeError("OpenAPI authentication accepts deployment variables and upstream outputs only.");
+	}
+}
 function checkJsonDepth(value, depth = 0) {
 	if (depth > 64) throw new TypeError("Value exceeds the maximum JSON depth.");
 	if (value != null && typeof value == "object") for (const child of Object.values(value)) checkJsonDepth(child, depth + 1);
@@ -6007,6 +6016,24 @@ var managed = object({
 			action: text,
 			connectionId: text.optional()
 		}),
+		object({
+			kind: literal("openapi"),
+			sourceUrl: text,
+			method: text,
+			path: text,
+			serverUrl: text,
+			document: json$2,
+			auth: array(object({
+				id: text,
+				type: _enum([
+					"bearer",
+					"basic",
+					"apiKey"
+				]),
+				name: text.optional(),
+				in: _enum(["header", "query"]).optional()
+			}))
+		}),
 		object({
 			kind: literal("llm"),
 			mode: _enum(["chat", "json"])
@@ -6273,6 +6300,7 @@ function decodeRevisionContent(value) {
 	checkJsonDepth(value);
 	const content = revision.parse(value);
 	checkErrorModelVersion(content);
+	assertOpenApiAuthBindings(content.document);
 	return content;
 }
 var shapes = {
@@ -6434,6 +6462,11 @@ var shapes = {
 		before: text.optional(),
 		value: text.optional()
 	},
+	"task.openapi.set": {
+		taskId: text,
+		before: managed,
+		value: managed
+	},
 	"task.agent.set": {
 		taskId: text,
 		before: managed,
@@ -6638,14 +6671,19 @@ function accessPermissions(value) {
 	exact(source, [
 		"actionIds",
 		"allActions",
+		"triggerIds",
+		"allTriggers",
 		"configured",
 		"proxy"
 	]);
-	if (!Array.isArray(source.actionIds) || typeof source.allActions != "boolean" || typeof source.configured != "boolean" || typeof source.proxy != "boolean") return invalidResponse();
+	if (!Array.isArray(source.triggerIds) || typeof source.allTriggers != "boolean" || !Array.isArray(source.actionIds) || typeof source.allActions != "boolean" || typeof source.configured != "boolean" || typeof source.proxy != "boolean") return invalidResponse();
 	const actionIds = source.actionIds.map(string);
-	if (new Set(actionIds).size != actionIds.length || source.allActions != (actionIds.length == 0) || source.proxy != (source.allActions && !source.configured)) return invalidResponse();
+	const triggerIds = source.triggerIds.map(string);
+	if (new Set(actionIds).size != actionIds.length || source.allActions && actionIds.length != 0 || new Set(triggerIds).size != triggerIds.length || source.allTriggers && triggerIds.length != 0 || source.proxy && (!source.allActions || !source.allTriggers || source.configured)) return invalidResponse();
 	return {
 		actionIds,
+		triggerIds,
+		allTriggers: source.allTriggers,
 		allActions: source.allActions,
 		configured: source.configured,
 		proxy: source.proxy
@@ -10193,6 +10231,7 @@ function flow$1(value) {
 			revisionId: string(target.revisionId)
 		} },
 		createdAt: string(source.createdAt),
+		...source.connectorTeamId == null ? {} : { connectorTeamId: string(source.connectorTeamId) },
 		draftRevisionId: string(source.draftRevisionId),
 		flowId: string(source.flowId),
 		name: string(source.name),
@@ -10774,7 +10813,7 @@ function decodeRunEvent(value) {
 			switch (kind) {
 				case "node.started": {
 					const nodeKind = payload.nodeKind;
-					if (nodeKind !== void 0 && nodeKind !== "approval" && nodeKind !== "condition" && nodeKind !== "connector" && nodeKind !== "javascript" && nodeKind !== "llm" && nodeKind !== "agent" && nodeKind !== "subflow" && nodeKind !== "value" && nodeKind !== "wait") return invalidResponse();
+					if (nodeKind !== void 0 && nodeKind !== "approval" && nodeKind !== "condition" && nodeKind !== "connector" && nodeKind !== "javascript" && nodeKind !== "openapi" && nodeKind !== "llm" && nodeKind !== "agent" && nodeKind !== "subflow" && nodeKind !== "value" && nodeKind !== "wait") return invalidResponse();
 					return {
 						...base,
 						kind,
@@ -10883,6 +10922,18 @@ var ControlClient = class {
 	constructor(requestControl) {
 		this.requestControl = requestControl;
 	}
+	async loadOpenApiDocument(url, signal) {
+		const result = record(await this.request("/v1/openapi/document", {
+			method: "POST",
+			body: JSON.stringify({
+				url,
+				version: 1
+			}),
+			signal
+		}));
+		if (result.version != 1) return invalidResponse();
+		return jsonValue(result.document);
+	}
 	async listFlows(options = {}) {
 		const parameters = new URLSearchParams();
 		if (options.cursor != null) parameters.set("cursor", options.cursor);

package/dist/common/openapi.d.ts

@@ -0,0 +1,53 @@
+import type { JsonValue, ManagedTaskDefinition } from '../browser/flow-change.js';
+type ObjectValue = {
+    [key: string]: JsonValue;
+};
+export interface OpenApiAuth {
+    readonly id: string;
+    readonly type: 'bearer' | 'basic' | 'apiKey';
+    readonly name?: string;
+    readonly in?: 'header' | 'query';
+}
+export interface OpenApiExecutor {
+    readonly kind: 'openapi';
+    readonly sourceUrl: string;
+    readonly method: string;
+    readonly path: string;
+    readonly serverUrl: string;
+    readonly document: JsonValue;
+    readonly auth: readonly OpenApiAuth[];
+}
+export interface OpenApiOperation {
+    readonly method: string;
+    readonly path: string;
+    readonly label: string;
+    readonly tag: string;
+}
+export declare function object(value: unknown): ObjectValue;
+export declare function httpUrl(value: string, base?: string): string;
+export declare function parseOpenApi(value: unknown): ObjectValue;
+export declare function listOperations(documentValue: JsonValue): OpenApiOperation[];
+export declare function servers(value: JsonValue, path: string, method: string): readonly ObjectValue[];
+export declare function serverAddress(server: ObjectValue, sourceUrl: string, variables?: Readonly<Record<string, string>>): string;
+export declare function securityOptions(value: JsonValue, path: string, method: string): readonly {
+    label: string;
+    auth?: readonly OpenApiAuth[];
+    error?: string;
+}[];
+export declare function snapshot(documentValue: JsonValue, path: string, method: string): JsonValue;
+export declare function authHandles(auth: readonly OpenApiAuth[]): string[];
+export declare function openApiTask(config: OpenApiExecutor, name?: string): ManagedTaskDefinition;
+export interface OpenApiFieldIssue {
+    readonly field: 'sourceUrl' | 'operation' | 'serverUrl';
+    readonly message: string;
+}
+/** The canvas validator and property panel share the same configuration contract. */
+export declare function openApiFieldIssues(task: ManagedTaskDefinition): OpenApiFieldIssue[];
+export declare function openApiIssues(task: ManagedTaskDefinition): string[];
+export declare function selectOperation(value: JsonValue, sourceUrl: string, path: string, method: string): OpenApiExecutor;
+export declare function buildRequest(config: OpenApiExecutor, input: Readonly<Record<string, JsonValue>>): {
+    url: string;
+    init: RequestInit;
+};
+export declare function parseResponse(config: OpenApiExecutor, status: number, headers: Headers, text: string): Record<string, JsonValue>;
+export {};