npm - @rawdash/connector-workos - Versions diffs - 0.27.0 → 0.28.2 - Mend

@rawdash/connector-workos 0.27.0 → 0.28.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/index.js.map +1 -1
package/package.json +4 -4

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../../../connector-shared/src/errors.ts","../../../connector-shared/src/retry.ts","../../../connector-shared/src/version.ts","../../../connector-shared/src/request.ts","../../../connector-shared/src/rate-limit.ts","../../../connector-shared/src/map-concurrent.ts","../../../connector-shared/src/sanitize.ts","../../../connector-shared/src/epoch.ts","../../../connector-shared/src/pagination.ts","../../../connector-shared/src/logger.ts","../src/workos.ts","../src/index.ts"],"sourcesContent":["import type { HttpResponse } from './types';\n\nexport type HttpErrorKind =\n \| 'transient'\n \| 'rate_limit'\n \| 'auth'\n \| 'upstream_bug'\n \| 'client_bug';\n\nexport abstract class HttpClientError extends Error {\n abstract readonly kind: HttpErrorKind;\n readonly response?: HttpResponse;\n\n constructor(message: string, response?: HttpResponse) {\n super(message);\n this.name = new.target.name;\n this.response = response;\n }\n}\n\nexport class TransientError extends HttpClientError {\n readonly kind = 'transient' as const;\n}\n\nexport class RateLimitError extends HttpClientError {\n readonly kind = 'rate_limit' as const;\n readonly retryAfter?: Date;\n\n constructor(message: string, response?: HttpResponse, retryAfter?: Date) {\n super(message, response);\n this.retryAfter = retryAfter;\n }\n}\n\nexport class AuthError extends HttpClientError {\n readonly kind = 'auth' as const;\n}\n\nexport class UpstreamBugError extends HttpClientError {\n readonly kind = 'upstream_bug' as const;\n}\n\nexport class ClientBugError extends HttpClientError {\n readonly kind = 'client_bug' as const;\n}\n\nexport function classifyStatus(status: number): HttpErrorKind {\n if (status === 429) {\n return 'rate_limit';\n }\n if (status === 401 \|\| status === 403) {\n return 'auth';\n }\n if (status === 408) {\n return 'transient';\n }\n if (status >= 500) {\n return 'upstream_bug';\n }\n if (status >= 400) {\n return 'client_bug';\n }\n return 'client_bug';\n}\n\nexport function errorForStatus(\n message: string,\n response: HttpResponse,\n retryAfter?: Date,\n): HttpClientError {\n const kind = classifyStatus(response.status);\n switch (kind) {\n case 'rate_limit':\n return new RateLimitError(message, response, retryAfter);\n case 'auth':\n return new AuthError(message, response);\n case 'transient':\n return new TransientError(message, response);\n case 'upstream_bug':\n return new UpstreamBugError(message, response);\n case 'client_bug':\n return new ClientBugError(message, response);\n }\n}\n","import { HttpClientError, RateLimitError, TransientError } from './errors';\n\nexport interface RetryPolicy {\n maxAttempts?: number;\n initialDelayMs?: number;\n maxDelayMs?: number;\n retryOn?: (status: number \| null, err?: Error) => boolean;\n}\n\nexport const defaultRetryOn = (status: number \| null, err?: Error): boolean => {\n if (err instanceof RateLimitError) {\n return true;\n }\n if (err instanceof TransientError) {\n return true;\n }\n if (status === null) {\n return err instanceof Error && !(err instanceof HttpClientError);\n }\n if (status === 408 \|\| status === 429) {\n return true;\n }\n if (status >= 500) {\n return true;\n }\n return false;\n};\n\nexport function backoffDelayMs(\n attempt: number,\n policy: Required<Pick<RetryPolicy, 'initialDelayMs' \| 'maxDelayMs'>>,\n): number {\n const base = policy.initialDelayMs * 2 ** attempt;\n const jitter = base * 0.25 * Math.random();\n return Math.min(base + jitter, policy.maxDelayMs);\n}\n\nexport function parseRetryAfter(\n headerValue: string \| null,\n now: Date = new Date(),\n): Date \| undefined {\n if (!headerValue) {\n return undefined;\n }\n const trimmed = headerValue.trim();\n if (/^\\d+$/.test(trimmed)) {\n return new Date(now.getTime() + Number(trimmed) * 1000);\n }\n const parsed = Date.parse(trimmed);\n if (Number.isNaN(parsed)) {\n return undefined;\n }\n return new Date(parsed);\n}\n\nexport function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n if (signal?.aborted) {\n return Promise.reject(signal.reason ?? new Error('Aborted'));\n }\n return new Promise<void>((resolve, reject) => {\n const onAbort = () => {\n clearTimeout(timer);\n reject(signal!.reason ?? new Error('Aborted'));\n };\n const timer = setTimeout(() => {\n signal?.removeEventListener('abort', onAbort);\n resolve();\n }, ms);\n signal?.addEventListener('abort', onAbort, { once: true });\n });\n}\n","export const HTTP_CLIENT_VERSION = '0.0.0';\n\nexport const DEFAULT_USER_AGENT = `rawdash-connector/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n\nexport function connectorUserAgent(connectorId: string): string {\n return `rawdash-connector-${connectorId}/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n}\n","import {\n AuthError,\n ClientBugError,\n HttpClientError,\n RateLimitError,\n TransientError,\n UpstreamBugError,\n errorForStatus,\n} from './errors';\nimport { defaultRetryOn, parseRetryAfter, sleep } from './retry';\nimport type { FetchLike, HttpMethod, HttpRequest, HttpResponse } from './types';\nimport { DEFAULT_USER_AGENT } from './version';\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_ATTEMPTS = 3;\nconst DEFAULT_INITIAL_DELAY_MS = 1000;\nconst DEFAULT_MAX_DELAY_MS = 60_000;\nconst OBSERVER_TIMEOUT_MS = 250;\n\nexport interface RequestObservation {\n url: string;\n method: HttpMethod;\n status: number;\n resource: string;\n requestId: string;\n body: unknown;\n}\n\nexport type RequestObserver = (\n event: RequestObservation,\n) => void \| Promise<void>;\n\nexport interface RequestOptions {\n fetch?: FetchLike;\n observer?: RequestObserver;\n resource: string;\n requestId?: string;\n}\n\nasync function notifyObserver(\n observer: RequestObserver,\n event: RequestObservation,\n): Promise<void> {\n let result: void \| Promise<void>;\n try {\n result = observer(event);\n } catch (err) {\n console.warn('[connector-shared] request observer threw:', err);\n return;\n }\n if (!(result instanceof Promise)) {\n return;\n }\n const guarded = result.catch((err) => {\n console.warn('[connector-shared] request observer rejected:', err);\n });\n let timer: ReturnType<typeof setTimeout> \| undefined;\n const timeout = new Promise<void>((resolve) => {\n timer = setTimeout(resolve, OBSERVER_TIMEOUT_MS);\n });\n try {\n await Promise.race([guarded, timeout]);\n } finally {\n if (timer) {\n clearTimeout(timer);\n }\n }\n}\n\nfunction newRequestId(): string {\n const c = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n if (c?.randomUUID) {\n return c.randomUUID();\n }\n return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;\n}\n\nfunction mergeHeaders(\n defaults: Record<string, string>,\n overrides: Record<string, string> \| undefined,\n): Record<string, string> {\n const merged: Record<string, string> = {};\n for (const [k, v] of Object.entries(defaults)) {\n merged[k.toLowerCase()] = v;\n }\n if (overrides) {\n for (const [k, v] of Object.entries(overrides)) {\n merged[k.toLowerCase()] = v;\n }\n }\n return merged;\n}\n\nfunction linkTimeoutSignal(\n parent: AbortSignal \| undefined,\n timeoutMs: number,\n): { signal: AbortSignal; cancel: () => void } {\n const controller = new AbortController();\n const onParentAbort = () => {\n controller.abort(parent?.reason);\n };\n if (parent) {\n if (parent.aborted) {\n controller.abort(parent.reason);\n } else {\n parent.addEventListener('abort', onParentAbort, { once: true });\n }\n }\n const timer = setTimeout(() => {\n controller.abort(new Error(`Request timed out after ${timeoutMs}ms`));\n }, timeoutMs);\n return {\n signal: controller.signal,\n cancel: () => {\n clearTimeout(timer);\n if (parent) {\n parent.removeEventListener('abort', onParentAbort);\n }\n },\n };\n}\n\nasync function readBody(res: Response, parseJson: boolean): Promise<unknown> {\n if (res.status === 204 \|\| res.status === 205) {\n return null;\n }\n const contentType = res.headers.get('content-type') ?? '';\n if (parseJson && contentType.includes('application/json')) {\n const text = await res.text();\n if (text.length === 0) {\n return null;\n }\n return JSON.parse(text);\n }\n return res.text();\n}\n\nexport async function request<T = unknown>(\n req: HttpRequest,\n options: RequestOptions,\n): Promise<HttpResponse<T>> {\n const fetchImpl: FetchLike = options.fetch ?? (globalThis.fetch as FetchLike);\n const retry = req.retry ?? {};\n const maxAttempts = retry.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;\n const initialDelayMs = retry.initialDelayMs ?? DEFAULT_INITIAL_DELAY_MS;\n const maxDelayMs = retry.maxDelayMs ?? DEFAULT_MAX_DELAY_MS;\n const retryOn = retry.retryOn ?? defaultRetryOn;\n const timeoutMs = req.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n const parseJson = req.parseJson ?? true;\n\n const headers = mergeHeaders(\n {\n 'User-Agent': DEFAULT_USER_AGENT,\n Accept: 'application/json',\n },\n req.headers,\n );\n\n let lastErr: Error \| undefined;\n\n for (let attempt = 0; attempt < maxAttempts; attempt++) {\n req.signal?.throwIfAborted();\n\n const { signal, cancel } = linkTimeoutSignal(req.signal, timeoutMs);\n let res: Response;\n try {\n res = await fetchImpl(req.url, {\n method: req.method ?? 'GET',\n headers,\n body: req.body as RequestInit['body'],\n signal,\n });\n } catch (err) {\n cancel();\n if (req.signal?.aborted) {\n throw req.signal.reason ?? err;\n }\n const error = err instanceof Error ? err : new Error(String(err));\n lastErr = error;\n if (attempt < maxAttempts - 1 && retryOn(null, error)) {\n const delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n await sleep(delay, req.signal);\n continue;\n }\n throw new TransientError(error.message);\n }\n cancel();\n\n const body = await readBody(res, parseJson);\n const httpResponse: HttpResponse<T> = {\n status: res.status,\n headers: res.headers,\n body: body as T,\n };\n if (req.rateLimit) {\n const state = req.rateLimit.parse(res.headers);\n if (state) {\n httpResponse.rateLimitState = state;\n }\n }\n\n if (options.observer) {\n await notifyObserver(options.observer, {\n url: req.url,\n method: req.method ?? 'GET',\n status: res.status,\n resource: options.resource,\n requestId: options.requestId ?? newRequestId(),\n body,\n });\n }\n\n if (res.ok) {\n return httpResponse;\n }\n\n const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n const message = `HTTP ${res.status} ${res.statusText} for ${req.method ?? 'GET'} ${req.url}`;\n const err = errorForStatus(message, httpResponse, retryAfter);\n\n if (\n attempt < maxAttempts - 1 &&\n retryOn(res.status, err) &&\n !(err instanceof AuthError) &&\n !(err instanceof ClientBugError)\n ) {\n lastErr = err;\n let delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n if (err instanceof RateLimitError && retryAfter) {\n const wait = retryAfter.getTime() - Date.now();\n if (wait > 0) {\n delay = Math.min(wait, maxDelayMs);\n }\n }\n await sleep(delay, req.signal);\n continue;\n }\n\n throw err;\n }\n\n throw lastErr ?? new UpstreamBugError('Exhausted retry attempts');\n}\n\nfunction computeDelay(\n attempt: number,\n initialDelayMs: number,\n maxDelayMs: number,\n): number {\n const base = initialDelayMs * 2 ** attempt;\n const jitter = base * 0.25 * Math.random();\n return Math.min(base + jitter, maxDelayMs);\n}\n\nexport { HttpClientError };\n","export interface RateLimitState {\n remaining: number;\n resetAt: Date;\n}\n\nexport interface RateLimitPolicy {\n parse(headers: Headers): RateLimitState \| null;\n}\n\nexport interface StandardRateLimitPolicyConfig {\n remainingHeader: string;\n resetHeader: string;\n resetUnit: 's' \| 'ms';\n resetFallbackMs?: number;\n}\n\nexport function standardRateLimitPolicy(\n config: StandardRateLimitPolicyConfig,\n): RateLimitPolicy {\n const { remainingHeader, resetHeader, resetUnit, resetFallbackMs } = config;\n const multiplier = resetUnit === 's' ? 1000 : 1;\n return {\n parse(h) {\n const remainingRaw = h.get(remainingHeader);\n if (remainingRaw === null \|\| remainingRaw.trim() === '') {\n return null;\n }\n const remaining = Number(remainingRaw);\n if (!Number.isFinite(remaining)) {\n return null;\n }\n const resetRaw = h.get(resetHeader);\n if (resetRaw === null) {\n if (resetFallbackMs === undefined) {\n return null;\n }\n return {\n remaining,\n resetAt: new Date(Date.now() + resetFallbackMs),\n };\n }\n if (resetRaw.trim() === '') {\n return null;\n }\n const reset = Number(resetRaw);\n if (!Number.isFinite(reset) \|\| reset < 0) {\n return null;\n }\n const resetMs = reset * multiplier;\n if (!Number.isFinite(resetMs)) {\n return null;\n }\n return { remaining, resetAt: new Date(resetMs) };\n },\n };\n}\n","export async function mapWithConcurrency<T, R>(\n items: readonly T[],\n concurrency: number,\n fn: (item: T, index: number) => Promise<R>,\n): Promise<R[]> {\n const results = new Array<R>(items.length);\n if (items.length === 0) {\n return results;\n }\n const normalized = Number.isFinite(concurrency) ? Math.floor(concurrency) : 1;\n const limit = Math.max(1, Math.min(normalized, items.length));\n let next = 0;\n let failed = false;\n\n async function worker(): Promise<void> {\n while (!failed) {\n const i = next++;\n if (i >= items.length) {\n return;\n }\n try {\n results[i] = await fn(items[i]!, i);\n } catch (err) {\n failed = true;\n throw err;\n }\n }\n }\n\n const workers: Promise<void>[] = [];\n for (let w = 0; w < limit; w++) {\n workers.push(worker());\n }\n await Promise.all(workers);\n return results;\n}\n","export interface SanitizeAllowedUrlOptions {\n url: string \| null;\n host: string;\n pathname: string;\n protocol?: 'https:' \| 'http:';\n}\n\nexport function sanitizeAllowedUrl(\n options: SanitizeAllowedUrlOptions,\n): string \| null {\n const { url, host, pathname, protocol = 'https:' } = options;\n if (url === null) {\n return null;\n }\n try {\n const u = new URL(url);\n if (u.protocol !== protocol \|\| u.host !== host \|\| u.pathname !== pathname) {\n return null;\n }\n return u.toString();\n } catch {\n return null;\n }\n}\n","export type EpochUnit = 'ms' \| 's' \| 'iso';\n\nexport function parseEpoch(\n value: number \| string \| null \| undefined,\n unit: EpochUnit,\n): number \| null {\n if (value === null \|\| value === undefined) {\n return null;\n }\n if (unit === 'iso') {\n if (typeof value !== 'string') {\n return null;\n }\n const ms = new Date(value).getTime();\n return Number.isFinite(ms) ? ms : null;\n }\n if (typeof value === 'string' && value.trim() === '') {\n return null;\n }\n const n = typeof value === 'number' ? value : Number(value);\n if (!Number.isFinite(n)) {\n return null;\n }\n const result = unit === 's' ? n * 1000 : n;\n return Number.isFinite(result) ? result : null;\n}\n","import { request } from './request';\nimport type { HttpRequest } from './types';\n\nexport function parseLinkHeader(header: string \| null): Record<string, string> {\n if (!header) {\n return {};\n }\n const result: Record<string, string> = {};\n for (const part of header.split(',')) {\n const match = part.match(/<([^>]+)>\\s;\\srel=\"([^\"]+)\"/);\n if (match) {\n result[match[2]!] = match[1]!;\n }\n }\n return result;\n}\n\nexport async function* paginateLink<T>(\n initial: HttpRequest,\n parse: (body: unknown) => T[],\n options: { resource: string },\n): AsyncIterable<T> {\n let next: string \| null = initial.url;\n while (next) {\n const res: Awaited<ReturnType<typeof request>> = await request(\n {\n ...initial,\n url: next,\n },\n { resource: options.resource },\n );\n for (const item of parse(res.body)) {\n yield item;\n }\n const links = parseLinkHeader(res.headers.get('link'));\n next = links['next'] ?? null;\n }\n}\n\nexport async function* paginateCursor<T>(\n initial: HttpRequest,\n parse: (body: unknown) => { items: T[]; nextCursor: string \| null },\n buildNext: (req: HttpRequest, cursor: string) => HttpRequest,\n options: { resource: string },\n): AsyncIterable<T> {\n let req: HttpRequest = initial;\n while (true) {\n const res = await request(req, { resource: options.resource });\n const { items, nextCursor } = parse(res.body);\n for (const item of items) {\n yield item;\n }\n if (!nextCursor) {\n return;\n }\n req = buildNext(req, nextCursor);\n }\n}\n\nexport async function* paginatePage<T>(\n initial: HttpRequest,\n parse: (body: unknown) => { items: T[]; hasMore: boolean },\n buildPage: (req: HttpRequest, page: number) => HttpRequest,\n options: { resource: string },\n): AsyncIterable<T> {\n let page = 1;\n while (true) {\n const req = page === 1 ? initial : buildPage(initial, page);\n const res = await request(req, { resource: options.resource });\n const { items, hasMore } = parse(res.body);\n for (const item of items) {\n yield item;\n }\n if (!hasMore \|\| items.length === 0) {\n return;\n }\n page++;\n }\n}\n","export type LogFields = Record<string, unknown>;\n\nexport interface ConnectorLogger {\n info(event: string, fields?: LogFields): void;\n warn(event: string, fields?: LogFields): void;\n}\n\nexport interface ConnectorLoggerOptions {\n scope: string;\n}\n\nconst MAX_VALUE_LEN = 120;\n\nfunction truncate(s: string, max = MAX_VALUE_LEN): string {\n if (s.length <= max) {\n return s;\n }\n return `${s.slice(0, max - 1)}…`;\n}\n\nfunction formatValue(value: unknown): string {\n if (value === null) {\n return 'null';\n }\n if (value === undefined) {\n return '';\n }\n if (typeof value === 'number' \|\| typeof value === 'boolean') {\n return String(value);\n }\n if (typeof value === 'string') {\n const t = truncate(value);\n if (/[\\s\"=]/.test(t)) {\n return JSON.stringify(t);\n }\n return t;\n }\n if (typeof value === 'bigint') {\n return value.toString();\n }\n let json: string \| undefined;\n try {\n json = JSON.stringify(value);\n } catch {\n json = undefined;\n }\n return truncate(json ?? String(value));\n}\n\nexport function formatLogFields(fields?: LogFields): string {\n if (!fields) {\n return '';\n }\n const parts: string[] = [];\n for (const [k, v] of Object.entries(fields)) {\n if (v === undefined) {\n continue;\n }\n parts.push(`${k}=${formatValue(v)}`);\n }\n return parts.length > 0 ? ` ${parts.join(' ')}` : '';\n}\n\nexport function formatLogLine(\n scope: string,\n event: string,\n fields?: LogFields,\n): string {\n return `[${scope}] ${event}${formatLogFields(fields)}`;\n}\n\nexport function createDefaultConnectorLogger(\n opts: ConnectorLoggerOptions,\n): ConnectorLogger {\n return {\n info(event, fields) {\n console.info(formatLogLine(opts.scope, event, fields));\n },\n warn(event, fields) {\n console.warn(formatLogLine(opts.scope, event, fields));\n },\n };\n}\n\nconst NOOP_LOGGER: ConnectorLogger = {\n info() {},\n warn() {},\n};\n\nexport function noopConnectorLogger(): ConnectorLogger {\n return NOOP_LOGGER;\n}\n","import {\n type HttpResponse,\n connectorUserAgent,\n parseEpoch,\n} from '@rawdash/connector-shared';\nimport {\n BaseConnector,\n type ChunkedSyncCursor,\n type ConnectorContext,\n type ConnectorDoc,\n type CredentialsSchema,\n type FetchPageResult,\n type JSONValue,\n type StorageHandle,\n type SyncOptions,\n type SyncResult,\n defineConfigFields,\n defineConnectorDoc,\n defineResources,\n makeChunkedCursorGuard,\n paginateChunked,\n schemasFromResources,\n selectActivePhases,\n} from '@rawdash/core';\nimport { z } from 'zod';\n\nexport const configFields = defineConfigFields(\n z.object({\n apiKey: z.object({ $secret: z.string().min(1) }).meta({\n label: 'API key',\n description:\n 'WorkOS API key (server-side, starts with `sk_`). Used as a bearer token on every request. Read-only access is sufficient for sync.',\n placeholder: 'WORKOS_API_KEY',\n secret: true,\n }),\n resources: z\n .array(\n z.enum(['organizations', 'connections', 'directories', 'auth_events']),\n )\n .nonempty()\n .optional()\n .meta({\n label: 'Resources',\n description:\n 'Which WorkOS resources to sync. Omit to sync all of them.',\n }),\n authEventsLookbackDays: z\n .number()\n .int()\n .positive()\n .max(90)\n .optional()\n .meta({\n label: 'Auth events lookback (days)',\n description:\n 'On a full sync (and when no incremental cursor is available), how many days of authentication events to fetch. Defaults to 30. Caps at 90.',\n placeholder: '30',\n }),\n }),\n);\n\nexport const doc: ConnectorDoc = defineConnectorDoc({\n displayName: 'WorkOS',\n category: 'security',\n brandColor: '#6363F1',\n tagline:\n 'Sync organizations, SSO connections, directory-sync directories, and authentication events from a WorkOS workspace for B2B SaaS onboarding and SSO-activity dashboards.',\n vendor: {\n name: 'WorkOS',\n domain: 'workos.com',\n apiDocs: 'https://workos.com/docs/reference',\n website: 'https://workos.com',\n },\n auth: {\n summary:\n 'A WorkOS API key (server-side, starts with `sk_`) is required. It is sent as a bearer token on every request and never leaves the workspace.',\n setup: [\n 'Sign in to the WorkOS Dashboard and switch to the environment (Sandbox or Production) you want to sync.',\n 'Open API Keys in the left navigation.',\n 'Create a new secret key (or copy an existing one). WorkOS only shows the secret once on creation.',\n 'Store it as a rawdash secret and reference it from the connector config as `apiKey: secret(\"WORKOS_API_KEY\")`.',\n ],\n },\n rateLimit:\n 'WorkOS list endpoints return X-RateLimit-Remaining and X-RateLimit-Reset (Unix seconds) headers when throttling kicks in; the shared HTTP client falls back to Retry-After on 429.',\n limitations: [\n 'Authentication events use the WorkOS Events API filtered to `authentication.` event types (sign-in success and failure across SSO, OAuth, password, magic auth, MFA). Other event categories (`dsync.`, `organization.`) are not synced.',\n 'Organizations, connections, and directories are fetched in full on every sync; the WorkOS list endpoints do not expose a server-side updated_at filter, so the scope is cleared and rewritten on full syncs and left untouched on incremental syncs.',\n 'Directory-sync user and group rows are out of scope; this connector tracks the directory entities themselves, not their imported memberships.',\n ],\n});\n\nexport type WorkOSResource =\n \| 'organizations'\n \| 'connections'\n \| 'directories'\n \| 'auth_events';\n\nexport interface WorkOSSettings {\n resources?: readonly WorkOSResource[];\n authEventsLookbackDays?: number;\n}\n\nconst workosCredentials = {\n apiKey: {\n description: 'WorkOS API key',\n auth: 'required' as const,\n },\n} satisfies CredentialsSchema;\n\ntype WorkOSCredentials = typeof workosCredentials;\n\nconst PHASE_ORDER = [\n 'organizations',\n 'connections',\n 'directories',\n 'auth_events',\n] as const;\n\ntype WorkOSPhase = (typeof PHASE_ORDER)[number];\n\ntype WorkOSSyncCursor = ChunkedSyncCursor<WorkOSPhase, string>;\n\nconst isWorkOSSyncCursor = makeChunkedCursorGuard(PHASE_ORDER);\n\nconst ORGANIZATION_ENTITY = 'workos_organization';\nconst CONNECTION_ENTITY = 'workos_connection';\nconst DIRECTORY_ENTITY = 'workos_directory';\nconst AUTH_EVENT = 'workos_auth_event';\n\nconst PAGE_SIZE = 100;\nconst DEFAULT_AUTH_LOOKBACK_DAYS = 30;\nconst BASE_URL = 'https://api.workos.com';\n\nconst AUTH_EVENT_TYPES = [\n 'authentication.email_verification_succeeded',\n 'authentication.magic_auth_succeeded',\n 'authentication.magic_auth_failed',\n 'authentication.mfa_succeeded',\n 'authentication.mfa_failed',\n 'authentication.oauth_succeeded',\n 'authentication.oauth_failed',\n 'authentication.password_succeeded',\n 'authentication.password_failed',\n 'authentication.sso_succeeded',\n 'authentication.sso_failed',\n] as const;\n\ntype AuthEventType = (typeof AUTH_EVENT_TYPES)[number];\n\nconst idString = z.string().min(1);\n\nconst listMetadataSchema = z.object({\n before: z.string().nullish(),\n after: z.string().nullish(),\n});\n\nconst organizationDomainSchema = z.object({\n domain: z.string(),\n state: z.string().nullish(),\n});\n\nconst organizationSchema = z.object({\n id: idString,\n name: z.string(),\n domains: z.array(organizationDomainSchema).nullish(),\n allow_profiles_outside_organization: z.boolean().nullish(),\n created_at: z.string(),\n updated_at: z.string().nullish(),\n});\n\nconst organizationsResponseSchema = z.object({\n data: z.array(organizationSchema),\n list_metadata: listMetadataSchema,\n});\n\nconst connectionSchema = z.object({\n id: idString,\n name: z.string(),\n organization_id: z.string().nullish(),\n connection_type: z.string(),\n state: z.string().nullish(),\n status: z.string().nullish(),\n created_at: z.string(),\n updated_at: z.string().nullish(),\n});\n\nconst connectionsResponseSchema = z.object({\n data: z.array(connectionSchema),\n list_metadata: listMetadataSchema,\n});\n\nconst directorySchema = z.object({\n id: idString,\n name: z.string(),\n organization_id: z.string().nullish(),\n type: z.string(),\n state: z.string().nullish(),\n created_at: z.string(),\n updated_at: z.string().nullish(),\n});\n\nconst directoriesResponseSchema = z.object({\n data: z.array(directorySchema),\n list_metadata: listMetadataSchema,\n});\n\nconst eventSchema = z.object({\n id: idString,\n event: z.string(),\n created_at: z.string(),\n data: z\n .object({\n organization_id: z.string().nullish(),\n user_id: z.string().nullish(),\n email: z.string().nullish(),\n ip_address: z.string().nullish(),\n connection_id: z.string().nullish(),\n connection_type: z.string().nullish(),\n })\n .passthrough()\n .nullish(),\n});\n\nconst eventsResponseSchema = z.object({\n data: z.array(eventSchema),\n list_metadata: listMetadataSchema,\n});\n\nexport const workosResources = defineResources({\n [ORGANIZATION_ENTITY]: {\n shape: 'entity',\n filterable: [],\n description:\n 'WorkOS organizations (tenants) with their display name, domains, and creation timestamp.',\n endpoint: 'GET /organizations',\n fields: [\n { name: 'name', description: 'Organization display name.' },\n {\n name: 'domains',\n description:\n 'Comma-separated list of domains attached to the organization.',\n },\n {\n name: 'createdAt',\n description: 'When the organization was created (Unix ms).',\n },\n ],\n responses: { organizations: organizationsResponseSchema },\n },\n [CONNECTION_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'state',\n ops: ['eq'],\n values: ['active', 'inactive', 'draft', 'linked', 'unlinked'],\n },\n { field: 'connectionType', ops: ['eq'] },\n ],\n description:\n 'WorkOS SSO connections (one per identity provider per organization) with their type, state, and parent organization.',\n endpoint: 'GET /connections',\n fields: [\n {\n name: 'connectionType',\n description: 'Connection type (e.g. OktaSAML, AzureSAML, GoogleOAuth).',\n },\n {\n name: 'organizationId',\n description: 'WorkOS organization that owns the connection.',\n },\n {\n name: 'state',\n description:\n 'Lifecycle state (active, inactive, draft, linked, unlinked).',\n },\n { name: 'name', description: 'Connection display name.' },\n {\n name: 'createdAt',\n description: 'When the connection was created (Unix ms).',\n },\n ],\n responses: { connections: connectionsResponseSchema },\n },\n [DIRECTORY_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'state',\n ops: ['eq'],\n values: ['active', 'inactive', 'validating', 'linked', 'unlinked'],\n },\n { field: 'directoryType', ops: ['eq'] },\n ],\n description:\n 'WorkOS directory-sync directories (SCIM/HRIS feeds) with their type, state, and parent organization.',\n endpoint: 'GET /directories',\n fields: [\n {\n name: 'directoryType',\n description:\n 'Directory provider type (e.g. okta scim v2.0, azure scim v2.0, bamboohr).',\n },\n {\n name: 'organizationId',\n description: 'WorkOS organization that owns the directory.',\n },\n {\n name: 'state',\n description:\n 'Lifecycle state (active, inactive, validating, linked, unlinked).',\n },\n { name: 'name', description: 'Directory display name.' },\n {\n name: 'createdAt',\n description: 'When the directory was created (Unix ms).',\n },\n ],\n responses: { directories: directoriesResponseSchema },\n },\n [AUTH_EVENT]: {\n shape: 'event',\n filterable: [\n { field: 'eventType', ops: ['eq'], values: [...AUTH_EVENT_TYPES] },\n ],\n description:\n 'Authentication events from the WorkOS Events API (SSO, OAuth, password, magic auth, and MFA sign-in successes and failures).',\n endpoint: 'GET /events',\n notes:\n 'Filtered to the authentication. event family. Incremental syncs pass `range_start` so only events newer than the watermark are returned.',\n fields: [\n {\n name: 'eventType',\n description: 'WorkOS event name (authentication.sso_succeeded, etc).',\n },\n {\n name: 'outcome',\n description: '\"succeeded\" or \"failed\" derived from the event suffix.',\n },\n {\n name: 'method',\n description:\n 'Authentication method (sso, oauth, password, magic_auth, mfa, email_verification).',\n },\n {\n name: 'organizationId',\n description: 'WorkOS organization the event belongs to (may be null).',\n },\n {\n name: 'userId',\n description: 'WorkOS user id involved in the event (may be null).',\n },\n {\n name: 'connectionId',\n description: 'WorkOS connection id used for the event (may be null).',\n },\n {\n name: 'connectionType',\n description:\n 'Connection type used for the event (may be null for non-SSO methods).',\n },\n {\n name: 'ipAddress',\n description: 'Client IP captured by WorkOS (may be null).',\n },\n ],\n responses: { auth_events: eventsResponseSchema },\n },\n});\n\nexport const id = 'workos';\n\ntype OrganizationsResponse = z.infer<typeof organizationsResponseSchema>;\ntype ConnectionsResponse = z.infer<typeof connectionsResponseSchema>;\ntype DirectoriesResponse = z.infer<typeof directoriesResponseSchema>;\ntype EventsResponse = z.infer<typeof eventsResponseSchema>;\n\ntype WorkOSOrganization = z.infer<typeof organizationSchema>;\ntype WorkOSConnection = z.infer<typeof connectionSchema>;\ntype WorkOSDirectory = z.infer<typeof directorySchema>;\ntype WorkOSEvent = z.infer<typeof eventSchema>;\n\ninterface FetchedPage<T> {\n items: T[];\n next: string \| null;\n}\n\nfunction isoToMs(value: string \| null \| undefined): number \| null {\n if (!value) {\n return null;\n }\n return parseEpoch(value, 'iso');\n}\n\nfunction isoToMsOrZero(value: string \| null \| undefined): number {\n return isoToMs(value) ?? 0;\n}\n\nfunction summarizeDomains(\n domains: WorkOSOrganization['domains'],\n): string \| null {\n if (!domains \|\| domains.length === 0) {\n return null;\n }\n return domains.map((d) => d.domain).join(', ');\n}\n\nfunction deriveOutcome(eventType: string): 'succeeded' \| 'failed' \| null {\n if (eventType.endsWith('_succeeded')) {\n return 'succeeded';\n }\n if (eventType.endsWith('_failed')) {\n return 'failed';\n }\n return null;\n}\n\nfunction deriveMethod(eventType: string): string \| null {\n const m = /^authentication\\.(.+?)_(?:succeeded\|failed)$/.exec(eventType);\n return m ? m[1]! : null;\n}\n\nfunction isAuthEventType(value: string): value is AuthEventType {\n return (AUTH_EVENT_TYPES as readonly string[]).includes(value);\n}\n\nfunction lookbackStartIso(days: number): string {\n const ts = Date.now() - days * 24 * 60 * 60 * 1000;\n return new Date(ts).toISOString();\n}\n\nexport class WorkOSConnector extends BaseConnector<\n WorkOSSettings,\n WorkOSCredentials\n> {\n static readonly id = id;\n\n static readonly resources = workosResources;\n\n static readonly schemas = schemasFromResources(workosResources);\n\n static create(input: unknown, ctx?: ConnectorContext): WorkOSConnector {\n const parsed = configFields.parse(input);\n return new WorkOSConnector(\n {\n resources: parsed.resources,\n authEventsLookbackDays: parsed.authEventsLookbackDays,\n },\n { apiKey: parsed.apiKey },\n ctx,\n );\n }\n\n readonly id = id;\n override readonly credentials = workosCredentials;\n\n private buildHeaders(): Record<string, string> {\n return {\n Authorization: `Bearer ${this.creds.apiKey}`,\n Accept: 'application/json',\n 'User-Agent': connectorUserAgent('workos'),\n };\n }\n\n private apiGet<T>(\n url: string,\n resource: string,\n signal?: AbortSignal,\n ): Promise<HttpResponse<T>> {\n return this.get<T>(url, {\n resource,\n headers: this.buildHeaders(),\n signal,\n });\n }\n\n private buildListUrl(\n path: string,\n after: string \| null,\n extra: Record<string, string> = {},\n ): string {\n const url = new URL(`${BASE_URL}${path}`);\n url.searchParams.set('limit', String(PAGE_SIZE));\n url.searchParams.set('order', 'asc');\n if (after) {\n url.searchParams.set('after', after);\n }\n for (const [k, v] of Object.entries(extra)) {\n url.searchParams.append(k, v);\n }\n return url.toString();\n }\n\n private buildEventsUrl(after: string \| null, options: SyncOptions): string {\n const url = new URL(`${BASE_URL}/events`);\n url.searchParams.set('limit', String(PAGE_SIZE));\n for (const t of AUTH_EVENT_TYPES) {\n url.searchParams.append('events', t);\n }\n if (after) {\n url.searchParams.set('after', after);\n } else {\n const rangeStart = options.since ?? this.defaultEventsRangeStart();\n url.searchParams.set('range_start', rangeStart);\n }\n return url.toString();\n }\n\n private defaultEventsRangeStart(): string {\n const days =\n this.settings.authEventsLookbackDays ?? DEFAULT_AUTH_LOOKBACK_DAYS;\n return lookbackStartIso(days);\n }\n\n private async fetchOrganizationsPage(\n page: string \| null,\n signal: AbortSignal \| undefined,\n ): Promise<FetchedPage<WorkOSOrganization>> {\n const url = this.buildListUrl('/organizations', page);\n const res = await this.apiGet<OrganizationsResponse>(\n url,\n 'organizations',\n signal,\n );\n const next = res.body.list_metadata.after ?? null;\n return { items: res.body.data, next };\n }\n\n private async fetchConnectionsPage(\n page: string \| null,\n signal: AbortSignal \| undefined,\n ): Promise<FetchedPage<WorkOSConnection>> {\n const url = this.buildListUrl('/connections', page);\n const res = await this.apiGet<ConnectionsResponse>(\n url,\n 'connections',\n signal,\n );\n const next = res.body.list_metadata.after ?? null;\n return { items: res.body.data, next };\n }\n\n private async fetchDirectoriesPage(\n page: string \| null,\n signal: AbortSignal \| undefined,\n ): Promise<FetchedPage<WorkOSDirectory>> {\n const url = this.buildListUrl('/directories', page);\n const res = await this.apiGet<DirectoriesResponse>(\n url,\n 'directories',\n signal,\n );\n const next = res.body.list_metadata.after ?? null;\n return { items: res.body.data, next };\n }\n\n private async fetchEventsPage(\n page: string \| null,\n options: SyncOptions,\n signal: AbortSignal \| undefined,\n ): Promise<FetchedPage<WorkOSEvent>> {\n const url = this.buildEventsUrl(page, options);\n const res = await this.apiGet<EventsResponse>(url, 'auth_events', signal);\n const next = res.body.list_metadata.after ?? null;\n return { items: res.body.data, next };\n }\n\n private async fetchPhasePage(\n phase: WorkOSPhase,\n page: string \| null,\n options: SyncOptions,\n signal?: AbortSignal,\n ): Promise<FetchPageResult<string>> {\n switch (phase) {\n case 'organizations':\n return this.fetchOrganizationsPage(page, signal);\n case 'connections':\n return this.fetchConnectionsPage(page, signal);\n case 'directories':\n return this.fetchDirectoriesPage(page, signal);\n case 'auth_events':\n return this.fetchEventsPage(page, options, signal);\n }\n }\n\n private async writeOrganizations(\n storage: StorageHandle,\n items: WorkOSOrganization[],\n ): Promise<void> {\n for (const org of items) {\n await storage.entity({\n type: ORGANIZATION_ENTITY,\n id: org.id,\n attributes: {\n name: org.name,\n domains: summarizeDomains(org.domains),\n createdAt: isoToMs(org.created_at),\n },\n updated_at: isoToMsOrZero(org.updated_at ?? org.created_at),\n });\n }\n }\n\n private async writeConnections(\n storage: StorageHandle,\n items: WorkOSConnection[],\n ): Promise<void> {\n for (const c of items) {\n await storage.entity({\n type: CONNECTION_ENTITY,\n id: c.id,\n attributes: {\n name: c.name,\n connectionType: c.connection_type,\n organizationId: c.organization_id ?? null,\n state: c.state ?? c.status ?? null,\n createdAt: isoToMs(c.created_at),\n },\n updated_at: isoToMsOrZero(c.updated_at ?? c.created_at),\n });\n }\n }\n\n private async writeDirectories(\n storage: StorageHandle,\n items: WorkOSDirectory[],\n ): Promise<void> {\n for (const d of items) {\n await storage.entity({\n type: DIRECTORY_ENTITY,\n id: d.id,\n attributes: {\n name: d.name,\n directoryType: d.type,\n organizationId: d.organization_id ?? null,\n state: d.state ?? null,\n createdAt: isoToMs(d.created_at),\n },\n updated_at: isoToMsOrZero(d.updated_at ?? d.created_at),\n });\n }\n }\n\n private async writeAuthEvents(\n storage: StorageHandle,\n items: WorkOSEvent[],\n sinceMs: number \| null,\n ): Promise<void> {\n for (const ev of items) {\n if (!isAuthEventType(ev.event)) {\n continue;\n }\n const ts = isoToMs(ev.created_at);\n if (ts === null) {\n continue;\n }\n if (sinceMs !== null && ts <= sinceMs) {\n continue;\n }\n const data = ev.data ?? {};\n const attributes: Record<string, JSONValue> = {\n eventType: ev.event,\n outcome: deriveOutcome(ev.event),\n method: deriveMethod(ev.event),\n organizationId: data.organization_id ?? null,\n userId: data.user_id ?? null,\n connectionId: data.connection_id ?? null,\n connectionType: data.connection_type ?? null,\n ipAddress: data.ip_address ?? null,\n eventId: ev.id,\n };\n await storage.event({\n name: AUTH_EVENT,\n start_ts: ts,\n end_ts: null,\n attributes,\n });\n }\n }\n\n private async clearScopeOnFirstPage(\n storage: StorageHandle,\n phase: WorkOSPhase,\n isFull: boolean,\n ): Promise<void> {\n if (!isFull) {\n return;\n }\n switch (phase) {\n case 'organizations':\n await storage.entities([], { types: [ORGANIZATION_ENTITY] });\n return;\n case 'connections':\n await storage.entities([], { types: [CONNECTION_ENTITY] });\n return;\n case 'directories':\n await storage.entities([], { types: [DIRECTORY_ENTITY] });\n return;\n case 'auth_events':\n await storage.events([], { names: [AUTH_EVENT] });\n return;\n }\n }\n\n private async writePhase(\n storage: StorageHandle,\n phase: WorkOSPhase,\n items: unknown[],\n sinceMs: number \| null,\n ): Promise<void> {\n switch (phase) {\n case 'organizations':\n return this.writeOrganizations(storage, items as WorkOSOrganization[]);\n case 'connections':\n return this.writeConnections(storage, items as WorkOSConnection[]);\n case 'directories':\n return this.writeDirectories(storage, items as WorkOSDirectory[]);\n case 'auth_events':\n return this.writeAuthEvents(storage, items as WorkOSEvent[], sinceMs);\n }\n }\n\n private resolveCursor(cursor: unknown): WorkOSSyncCursor \| undefined {\n return isWorkOSSyncCursor(cursor) ? cursor : undefined;\n }\n\n async sync(\n options: SyncOptions,\n storage: StorageHandle,\n signal?: AbortSignal,\n ): Promise<SyncResult> {\n const cursor = this.resolveCursor(options.cursor);\n const isFull = options.mode === 'full';\n const sinceMs = options.since ? Date.parse(options.since) : null;\n const sinceMsOrNull =\n sinceMs !== null && Number.isFinite(sinceMs) ? sinceMs : null;\n\n const phases = selectActivePhases<WorkOSResource, WorkOSPhase>(\n (r) => r,\n PHASE_ORDER,\n this.settings.resources,\n );\n\n return paginateChunked<WorkOSPhase, string>({\n phases,\n cursor,\n signal,\n logger: this.logger,\n fetchPage: async (phase, page, sig) =>\n this.fetchPhasePage(phase, page, options, sig),\n writeBatch: async (phase, items, page) => {\n if (page === null) {\n await this.clearScopeOnFirstPage(storage, phase, isFull);\n }\n await this.writePhase(storage, phase, items, sinceMsOrNull);\n },\n });\n }\n}\n","import { WorkOSConnector } from './workos';\n\nexport {\n WorkOSConnector,\n workosResources as resources,\n configFields,\n doc,\n id,\n} from './workos';\nexport type { WorkOSResource, WorkOSSettings } from './workos';\nexport default WorkOSConnector;\n"],"mappings":";AEAO,IAAM,sBAAsB;AAE5B,IAAM,qBAAqB,qBAAqB,mBAAmB;AAEnE,SAAS,mBAAmB,aAA6B;AAC9D,SAAO,qBAAqB,WAAW,IAAI,mBAAmB;AAChE;AKJO,SAAS,WACd,OACA,MACe;AACf,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;EACT;AACA,MAAI,SAAS,OAAO;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;IACT;AACA,UAAM,KAAK,IAAI,KAAK,KAAK,EAAE,QAAQ;AACnC,WAAO,OAAO,SAAS,EAAE,IAAI,KAAK;EACpC;AACA,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;AACpD,WAAO;EACT;AACA,QAAM,IAAI,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC1D,MAAI,CAAC,OAAO,SAAS,CAAC,GAAG;AACvB,WAAO;EACT;AACA,QAAM,SAAS,SAAS,MAAM,IAAI,MAAO;AACzC,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;;;AGpBA;AAAA,EACE;AAAA,EAUA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAEX,IAAM,eAAe;AAAA,EAC1B,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK;AAAA,MACpD,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,MACb,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,WAAW,EACR;AAAA,MACC,EAAE,KAAK,CAAC,iBAAiB,eAAe,eAAe,aAAa,CAAC;AAAA,IACvE,EACC,SAAS,EACT,SAAS,EACT,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,IACJ,CAAC;AAAA,IACH,wBAAwB,EACrB,OAAO,EACP,IAAI,EACJ,SAAS,EACT,IAAI,EAAE,EACN,SAAS,EACT,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,EACL,CAAC;AACH;AAEO,IAAM,MAAoB,mBAAmB;AAAA,EAClD,aAAa;AAAA,EACb,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,SACE;AAAA,EACF,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAAA,EACA,MAAM;AAAA,IACJ,SACE;AAAA,IACF,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,WACE;AAAA,EACF,aAAa;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF,CAAC;AAaD,IAAM,oBAAoB;AAAA,EACxB,QAAQ;AAAA,IACN,aAAa;AAAA,IACb,MAAM;AAAA,EACR;AACF;AAIA,IAAM,cAAc;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMA,IAAM,qBAAqB,uBAAuB,WAAW;AAE7D,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAC1B,IAAM,mBAAmB;AACzB,IAAM,aAAa;AAEnB,IAAM,YAAY;AAClB,IAAM,6BAA6B;AACnC,IAAM,WAAW;AAEjB,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIA,IAAM,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAEjC,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,QAAQ;AAC5B,CAAC;AAED,IAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,QAAQ,EAAE,OAAO;AAAA,EACjB,OAAO,EAAE,OAAO,EAAE,QAAQ;AAC5B,CAAC;AAED,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO;AAAA,EACf,SAAS,EAAE,MAAM,wBAAwB,EAAE,QAAQ;AAAA,EACnD,qCAAqC,EAAE,QAAQ,EAAE,QAAQ;AAAA,EACzD,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,MAAM,kBAAkB;AAAA,EAChC,eAAe;AACjB,CAAC;AAED,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACpC,iBAAiB,EAAE,OAAO;AAAA,EAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,MAAM,EAAE,MAAM,gBAAgB;AAAA,EAC9B,eAAe;AACjB,CAAC;AAED,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACpC,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC1B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,MAAM,EAAE,MAAM,eAAe;AAAA,EAC7B,eAAe;AACjB,CAAC;AAED,IAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI;AAAA,EACJ,OAAO,EAAE,OAAO;AAAA,EAChB,YAAY,EAAE,OAAO;AAAA,EACrB,MAAM,EACH,OAAO;AAAA,IACN,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,IACpC,SAAS,EAAE,OAAO,EAAE,QAAQ;AAAA,IAC5B,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,IAC1B,YAAY,EAAE,OAAO,EAAE,QAAQ;AAAA,IAC/B,eAAe,EAAE,OAAO,EAAE,QAAQ;AAAA,IAClC,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACtC,CAAC,EACA,YAAY,EACZ,QAAQ;AACb,CAAC;AAED,IAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,MAAM,WAAW;AAAA,EACzB,eAAe;AACjB,CAAC;AAEM,IAAM,kBAAkB,gBAAgB;AAAA,EAC7C,CAAC,mBAAmB,GAAG;AAAA,IACrB,OAAO;AAAA,IACP,YAAY,CAAC;AAAA,IACb,aACE;AAAA,IACF,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,6BAA6B;AAAA,MAC1D;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,eAAe,4BAA4B;AAAA,EAC1D;AAAA,EACA,CAAC,iBAAiB,GAAG;AAAA,IACnB,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,UAAU,YAAY,SAAS,UAAU,UAAU;AAAA,MAC9D;AAAA,MACA,EAAE,OAAO,kBAAkB,KAAK,CAAC,IAAI,EAAE;AAAA,IACzC;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,QAAQ;AAAA,MACN;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,EAAE,MAAM,QAAQ,aAAa,2BAA2B;AAAA,MACxD;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,aAAa,0BAA0B;AAAA,EACtD;AAAA,EACA,CAAC,gBAAgB,GAAG;AAAA,IAClB,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,UAAU,YAAY,cAAc,UAAU,UAAU;AAAA,MACnE;AAAA,MACA,EAAE,OAAO,iBAAiB,KAAK,CAAC,IAAI,EAAE;AAAA,IACxC;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,QAAQ;AAAA,MACN;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,EAAE,MAAM,QAAQ,aAAa,0BAA0B;AAAA,MACvD;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,aAAa,0BAA0B;AAAA,EACtD;AAAA,EACA,CAAC,UAAU,GAAG;AAAA,IACZ,OAAO;AAAA,IACP,YAAY;AAAA,MACV,EAAE,OAAO,aAAa,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,gBAAgB,EAAE;AAAA,IACnE;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,aAAa,qBAAqB;AAAA,EACjD;AACF,CAAC;AAEM,IAAM,KAAK;AAiBlB,SAAS,QAAQ,OAAiD;AAChE,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AACA,SAAO,WAAW,OAAO,KAAK;AAChC;AAEA,SAAS,cAAc,OAA0C;AAC/D,SAAO,QAAQ,KAAK,KAAK;AAC3B;AAEA,SAAS,iBACP,SACe;AACf,MAAI,CAAC,WAAW,QAAQ,WAAW,GAAG;AACpC,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI;AAC/C;AAEA,SAAS,cAAc,WAAkD;AACvE,MAAI,UAAU,SAAS,YAAY,GAAG;AACpC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,SAAS,SAAS,GAAG;AACjC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,aAAa,WAAkC;AACtD,QAAM,IAAI,+CAA+C,KAAK,SAAS;AACvE,SAAO,IAAI,EAAE,CAAC,IAAK;AACrB;AAEA,SAAS,gBAAgB,OAAuC;AAC9D,SAAQ,iBAAuC,SAAS,KAAK;AAC/D;AAEA,SAAS,iBAAiB,MAAsB;AAC9C,QAAM,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,KAAK;AAC9C,SAAO,IAAI,KAAK,EAAE,EAAE,YAAY;AAClC;AAEO,IAAM,kBAAN,MAAM,yBAAwB,cAGnC;AAAA,EACA,OAAgB,KAAK;AAAA,EAErB,OAAgB,YAAY;AAAA,EAE5B,OAAgB,UAAU,qBAAqB,eAAe;AAAA,EAE9D,OAAO,OAAO,OAAgB,KAAyC;AACrE,UAAM,SAAS,aAAa,MAAM,KAAK;AACvC,WAAO,IAAI;AAAA,MACT;AAAA,QACE,WAAW,OAAO;AAAA,QAClB,wBAAwB,OAAO;AAAA,MACjC;AAAA,MACA,EAAE,QAAQ,OAAO,OAAO;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAES,KAAK;AAAA,EACI,cAAc;AAAA,EAExB,eAAuC;AAC7C,WAAO;AAAA,MACL,eAAe,UAAU,KAAK,MAAM,MAAM;AAAA,MAC1C,QAAQ;AAAA,MACR,cAAc,mBAAmB,QAAQ;AAAA,IAC3C;AAAA,EACF;AAAA,EAEQ,OACN,KACA,UACA,QAC0B;AAC1B,WAAO,KAAK,IAAO,KAAK;AAAA,MACtB;AAAA,MACA,SAAS,KAAK,aAAa;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,aACN,MACA,OACA,QAAgC,CAAC,GACzB;AACR,UAAM,MAAM,IAAI,IAAI,GAAG,QAAQ,GAAG,IAAI,EAAE;AACxC,QAAI,aAAa,IAAI,SAAS,OAAO,SAAS,CAAC;AAC/C,QAAI,aAAa,IAAI,SAAS,KAAK;AACnC,QAAI,OAAO;AACT,UAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IACrC;AACA,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1C,UAAI,aAAa,OAAO,GAAG,CAAC;AAAA,IAC9B;AACA,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEQ,eAAe,OAAsB,SAA8B;AACzE,UAAM,MAAM,IAAI,IAAI,GAAG,QAAQ,SAAS;AACxC,QAAI,aAAa,IAAI,SAAS,OAAO,SAAS,CAAC;AAC/C,eAAW,KAAK,kBAAkB;AAChC,UAAI,aAAa,OAAO,UAAU,CAAC;AAAA,IACrC;AACA,QAAI,OAAO;AACT,UAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IACrC,OAAO;AACL,YAAM,aAAa,QAAQ,SAAS,KAAK,wBAAwB;AACjE,UAAI,aAAa,IAAI,eAAe,UAAU;AAAA,IAChD;AACA,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEQ,0BAAkC;AACxC,UAAM,OACJ,KAAK,SAAS,0BAA0B;AAC1C,WAAO,iBAAiB,IAAI;AAAA,EAC9B;AAAA,EAEA,MAAc,uBACZ,MACA,QAC0C;AAC1C,UAAM,MAAM,KAAK,aAAa,kBAAkB,IAAI;AACpD,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,OAAO,IAAI,KAAK,cAAc,SAAS;AAC7C,WAAO,EAAE,OAAO,IAAI,KAAK,MAAM,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,qBACZ,MACA,QACwC;AACxC,UAAM,MAAM,KAAK,aAAa,gBAAgB,IAAI;AAClD,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,OAAO,IAAI,KAAK,cAAc,SAAS;AAC7C,WAAO,EAAE,OAAO,IAAI,KAAK,MAAM,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,qBACZ,MACA,QACuC;AACvC,UAAM,MAAM,KAAK,aAAa,gBAAgB,IAAI;AAClD,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,OAAO,IAAI,KAAK,cAAc,SAAS;AAC7C,WAAO,EAAE,OAAO,IAAI,KAAK,MAAM,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,gBACZ,MACA,SACA,QACmC;AACnC,UAAM,MAAM,KAAK,eAAe,MAAM,OAAO;AAC7C,UAAM,MAAM,MAAM,KAAK,OAAuB,KAAK,eAAe,MAAM;AACxE,UAAM,OAAO,IAAI,KAAK,cAAc,SAAS;AAC7C,WAAO,EAAE,OAAO,IAAI,KAAK,MAAM,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,eACZ,OACA,MACA,SACA,QACkC;AAClC,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,KAAK,uBAAuB,MAAM,MAAM;AAAA,MACjD,KAAK;AACH,eAAO,KAAK,qBAAqB,MAAM,MAAM;AAAA,MAC/C,KAAK;AACH,eAAO,KAAK,qBAAqB,MAAM,MAAM;AAAA,MAC/C,KAAK;AACH,eAAO,KAAK,gBAAgB,MAAM,SAAS,MAAM;AAAA,IACrD;AAAA,EACF;AAAA,EAEA,MAAc,mBACZ,SACA,OACe;AACf,eAAW,OAAO,OAAO;AACvB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,IAAI;AAAA,QACR,YAAY;AAAA,UACV,MAAM,IAAI;AAAA,UACV,SAAS,iBAAiB,IAAI,OAAO;AAAA,UACrC,WAAW,QAAQ,IAAI,UAAU;AAAA,QACnC;AAAA,QACA,YAAY,cAAc,IAAI,cAAc,IAAI,UAAU;AAAA,MAC5D,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,iBACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE;AAAA,UACR,gBAAgB,EAAE;AAAA,UAClB,gBAAgB,EAAE,mBAAmB;AAAA,UACrC,OAAO,EAAE,SAAS,EAAE,UAAU;AAAA,UAC9B,WAAW,QAAQ,EAAE,UAAU;AAAA,QACjC;AAAA,QACA,YAAY,cAAc,EAAE,cAAc,EAAE,UAAU;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,iBACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE;AAAA,UACR,eAAe,EAAE;AAAA,UACjB,gBAAgB,EAAE,mBAAmB;AAAA,UACrC,OAAO,EAAE,SAAS;AAAA,UAClB,WAAW,QAAQ,EAAE,UAAU;AAAA,QACjC;AAAA,QACA,YAAY,cAAc,EAAE,cAAc,EAAE,UAAU;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,gBACZ,SACA,OACA,SACe;AACf,eAAW,MAAM,OAAO;AACtB,UAAI,CAAC,gBAAgB,GAAG,KAAK,GAAG;AAC9B;AAAA,MACF;AACA,YAAM,KAAK,QAAQ,GAAG,UAAU;AAChC,UAAI,OAAO,MAAM;AACf;AAAA,MACF;AACA,UAAI,YAAY,QAAQ,MAAM,SAAS;AACrC;AAAA,MACF;AACA,YAAM,OAAO,GAAG,QAAQ,CAAC;AACzB,YAAM,aAAwC;AAAA,QAC5C,WAAW,GAAG;AAAA,QACd,SAAS,cAAc,GAAG,KAAK;AAAA,QAC/B,QAAQ,aAAa,GAAG,KAAK;AAAA,QAC7B,gBAAgB,KAAK,mBAAmB;AAAA,QACxC,QAAQ,KAAK,WAAW;AAAA,QACxB,cAAc,KAAK,iBAAiB;AAAA,QACpC,gBAAgB,KAAK,mBAAmB;AAAA,QACxC,WAAW,KAAK,cAAc;AAAA,QAC9B,SAAS,GAAG;AAAA,MACd;AACA,YAAM,QAAQ,MAAM;AAAA,QAClB,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,sBACZ,SACA,OACA,QACe;AACf,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AACA,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;AAC3D;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;AACzD;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;AACxD;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAChD;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,OACA,OACA,SACe;AACf,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,KAAK,mBAAmB,SAAS,KAA6B;AAAA,MACvE,KAAK;AACH,eAAO,KAAK,iBAAiB,SAAS,KAA2B;AAAA,MACnE,KAAK;AACH,eAAO,KAAK,iBAAiB,SAAS,KAA0B;AAAA,MAClE,KAAK;AACH,eAAO,KAAK,gBAAgB,SAAS,OAAwB,OAAO;AAAA,IACxE;AAAA,EACF;AAAA,EAEQ,cAAc,QAA+C;AACnE,WAAO,mBAAmB,MAAM,IAAI,SAAS;AAAA,EAC/C;AAAA,EAEA,MAAM,KACJ,SACA,SACA,QACqB;AACrB,UAAM,SAAS,KAAK,cAAc,QAAQ,MAAM;AAChD,UAAM,SAAS,QAAQ,SAAS;AAChC,UAAM,UAAU,QAAQ,QAAQ,KAAK,MAAM,QAAQ,KAAK,IAAI;AAC5D,UAAM,gBACJ,YAAY,QAAQ,OAAO,SAAS,OAAO,IAAI,UAAU;AAE3D,UAAM,SAAS;AAAA,MACb,CAAC,MAAM;AAAA,MACP;AAAA,MACA,KAAK,SAAS;AAAA,IAChB;AAEA,WAAO,gBAAqC;AAAA,MAC1C;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,WAAW,OAAO,OAAO,MAAM,QAC7B,KAAK,eAAe,OAAO,MAAM,SAAS,GAAG;AAAA,MAC/C,YAAY,OAAO,OAAO,OAAO,SAAS;AACxC,YAAI,SAAS,MAAM;AACjB,gBAAM,KAAK,sBAAsB,SAAS,OAAO,MAAM;AAAA,QACzD;AACA,cAAM,KAAK,WAAW,SAAS,OAAO,OAAO,aAAa;AAAA,MAC5D;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AC7uBA,IAAO,gBAAQ;","names":[]}
1	+ {"version":3,"sources":["../../../connector-shared/src/errors.ts","../../../connector-shared/src/retry.ts","../../../connector-shared/src/version.ts","../../../connector-shared/src/request.ts","../../../connector-shared/src/rate-limit.ts","../../../connector-shared/src/map-concurrent.ts","../../../connector-shared/src/sanitize.ts","../../../connector-shared/src/epoch.ts","../../../connector-shared/src/pagination.ts","../../../connector-shared/src/logger.ts","../src/workos.ts","../src/index.ts"],"sourcesContent":["import type { HttpResponse } from './types';\n\nexport type HttpErrorKind =\n \| 'transient'\n \| 'rate_limit'\n \| 'auth'\n \| 'upstream_bug'\n \| 'client_bug';\n\nexport abstract class HttpClientError extends Error {\n abstract readonly kind: HttpErrorKind;\n readonly response?: HttpResponse;\n\n constructor(message: string, response?: HttpResponse) {\n super(message);\n this.name = new.target.name;\n this.response = response;\n }\n}\n\nexport class TransientError extends HttpClientError {\n readonly kind = 'transient' as const;\n}\n\nexport class RateLimitError extends HttpClientError {\n readonly kind = 'rate_limit' as const;\n readonly retryAfter?: Date;\n\n constructor(message: string, response?: HttpResponse, retryAfter?: Date) {\n super(message, response);\n this.retryAfter = retryAfter;\n }\n}\n\nexport class AuthError extends HttpClientError {\n readonly kind = 'auth' as const;\n}\n\nexport class UpstreamBugError extends HttpClientError {\n readonly kind = 'upstream_bug' as const;\n}\n\nexport class ClientBugError extends HttpClientError {\n readonly kind = 'client_bug' as const;\n}\n\nexport function classifyStatus(status: number): HttpErrorKind {\n if (status === 429) {\n return 'rate_limit';\n }\n if (status === 401 \|\| status === 403) {\n return 'auth';\n }\n if (status === 408) {\n return 'transient';\n }\n if (status >= 500) {\n return 'upstream_bug';\n }\n if (status >= 400) {\n return 'client_bug';\n }\n return 'client_bug';\n}\n\nexport function errorForStatus(\n message: string,\n response: HttpResponse,\n retryAfter?: Date,\n): HttpClientError {\n const kind = classifyStatus(response.status);\n switch (kind) {\n case 'rate_limit':\n return new RateLimitError(message, response, retryAfter);\n case 'auth':\n return new AuthError(message, response);\n case 'transient':\n return new TransientError(message, response);\n case 'upstream_bug':\n return new UpstreamBugError(message, response);\n case 'client_bug':\n return new ClientBugError(message, response);\n }\n}\n","import { HttpClientError, RateLimitError, TransientError } from './errors';\n\nexport interface RetryPolicy {\n maxAttempts?: number;\n initialDelayMs?: number;\n maxDelayMs?: number;\n retryOn?: (status: number \| null, err?: Error) => boolean;\n}\n\nexport const defaultRetryOn = (status: number \| null, err?: Error): boolean => {\n if (err instanceof RateLimitError) {\n return true;\n }\n if (err instanceof TransientError) {\n return true;\n }\n if (status === null) {\n return err instanceof Error && !(err instanceof HttpClientError);\n }\n if (status === 408 \|\| status === 429) {\n return true;\n }\n if (status >= 500) {\n return true;\n }\n return false;\n};\n\nexport function backoffDelayMs(\n attempt: number,\n policy: Required<Pick<RetryPolicy, 'initialDelayMs' \| 'maxDelayMs'>>,\n): number {\n const base = policy.initialDelayMs * 2 ** attempt;\n const jitter = base * 0.25 * Math.random();\n return Math.min(base + jitter, policy.maxDelayMs);\n}\n\nexport function parseRetryAfter(\n headerValue: string \| null,\n now: Date = new Date(),\n): Date \| undefined {\n if (!headerValue) {\n return undefined;\n }\n const trimmed = headerValue.trim();\n if (/^\\d+$/.test(trimmed)) {\n return new Date(now.getTime() + Number(trimmed) * 1000);\n }\n const parsed = Date.parse(trimmed);\n if (Number.isNaN(parsed)) {\n return undefined;\n }\n return new Date(parsed);\n}\n\nexport function sleep(ms: number, signal?: AbortSignal): Promise<void> {\n if (signal?.aborted) {\n return Promise.reject(signal.reason ?? new Error('Aborted'));\n }\n return new Promise<void>((resolve, reject) => {\n const onAbort = () => {\n clearTimeout(timer);\n reject(signal!.reason ?? new Error('Aborted'));\n };\n const timer = setTimeout(() => {\n signal?.removeEventListener('abort', onAbort);\n resolve();\n }, ms);\n signal?.addEventListener('abort', onAbort, { once: true });\n });\n}\n","export const HTTP_CLIENT_VERSION = '0.0.0';\n\nexport const DEFAULT_USER_AGENT = `rawdash-connector/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n\nexport function connectorUserAgent(connectorId: string): string {\n return `rawdash-connector-${connectorId}/${HTTP_CLIENT_VERSION} (+https://rawdash.dev)`;\n}\n","import {\n AuthError,\n ClientBugError,\n HttpClientError,\n RateLimitError,\n TransientError,\n UpstreamBugError,\n errorForStatus,\n} from './errors';\nimport { defaultRetryOn, parseRetryAfter, sleep } from './retry';\nimport type { FetchLike, HttpMethod, HttpRequest, HttpResponse } from './types';\nimport { DEFAULT_USER_AGENT } from './version';\n\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_ATTEMPTS = 3;\nconst DEFAULT_INITIAL_DELAY_MS = 1000;\nconst DEFAULT_MAX_DELAY_MS = 60_000;\nconst OBSERVER_TIMEOUT_MS = 250;\n\nexport interface RequestObservation {\n url: string;\n method: HttpMethod;\n status: number;\n resource: string;\n requestId: string;\n body: unknown;\n}\n\nexport type RequestObserver = (\n event: RequestObservation,\n) => void \| Promise<void>;\n\nexport interface RequestOptions {\n fetch?: FetchLike;\n observer?: RequestObserver;\n resource: string;\n requestId?: string;\n}\n\nasync function notifyObserver(\n observer: RequestObserver,\n event: RequestObservation,\n): Promise<void> {\n let result: void \| Promise<void>;\n try {\n result = observer(event);\n } catch (err) {\n console.warn('[connector-shared] request observer threw:', err);\n return;\n }\n if (!(result instanceof Promise)) {\n return;\n }\n const guarded = result.catch((err) => {\n console.warn('[connector-shared] request observer rejected:', err);\n });\n let timer: ReturnType<typeof setTimeout> \| undefined;\n const timeout = new Promise<void>((resolve) => {\n timer = setTimeout(resolve, OBSERVER_TIMEOUT_MS);\n });\n try {\n await Promise.race([guarded, timeout]);\n } finally {\n if (timer) {\n clearTimeout(timer);\n }\n }\n}\n\nfunction newRequestId(): string {\n const c = (globalThis as { crypto?: { randomUUID?: () => string } }).crypto;\n if (c?.randomUUID) {\n return c.randomUUID();\n }\n return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;\n}\n\nfunction mergeHeaders(\n defaults: Record<string, string>,\n overrides: Record<string, string> \| undefined,\n): Record<string, string> {\n const merged: Record<string, string> = {};\n for (const [k, v] of Object.entries(defaults)) {\n merged[k.toLowerCase()] = v;\n }\n if (overrides) {\n for (const [k, v] of Object.entries(overrides)) {\n merged[k.toLowerCase()] = v;\n }\n }\n return merged;\n}\n\nfunction linkTimeoutSignal(\n parent: AbortSignal \| undefined,\n timeoutMs: number,\n): { signal: AbortSignal; cancel: () => void } {\n const controller = new AbortController();\n const onParentAbort = () => {\n controller.abort(parent?.reason);\n };\n if (parent) {\n if (parent.aborted) {\n controller.abort(parent.reason);\n } else {\n parent.addEventListener('abort', onParentAbort, { once: true });\n }\n }\n const timer = setTimeout(() => {\n controller.abort(new Error(`Request timed out after ${timeoutMs}ms`));\n }, timeoutMs);\n return {\n signal: controller.signal,\n cancel: () => {\n clearTimeout(timer);\n if (parent) {\n parent.removeEventListener('abort', onParentAbort);\n }\n },\n };\n}\n\nasync function readBody(\n res: Response,\n parseJson: boolean,\n binary: boolean,\n): Promise<unknown> {\n if (res.status === 204 \|\| res.status === 205) {\n return null;\n }\n if (binary) {\n return new Uint8Array(await res.arrayBuffer());\n }\n const contentType = res.headers.get('content-type') ?? '';\n if (parseJson && contentType.includes('application/json')) {\n const text = await res.text();\n if (text.length === 0) {\n return null;\n }\n return JSON.parse(text);\n }\n return res.text();\n}\n\nexport async function request<T = unknown>(\n req: HttpRequest,\n options: RequestOptions,\n): Promise<HttpResponse<T>> {\n const fetchImpl: FetchLike = options.fetch ?? (globalThis.fetch as FetchLike);\n const retry = req.retry ?? {};\n const maxAttempts = retry.maxAttempts ?? DEFAULT_MAX_ATTEMPTS;\n const initialDelayMs = retry.initialDelayMs ?? DEFAULT_INITIAL_DELAY_MS;\n const maxDelayMs = retry.maxDelayMs ?? DEFAULT_MAX_DELAY_MS;\n const retryOn = retry.retryOn ?? defaultRetryOn;\n const timeoutMs = req.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n const parseJson = req.parseJson ?? true;\n const binary = req.binary ?? false;\n\n const headers = mergeHeaders(\n {\n 'User-Agent': DEFAULT_USER_AGENT,\n Accept: 'application/json',\n },\n req.headers,\n );\n\n let lastErr: Error \| undefined;\n\n for (let attempt = 0; attempt < maxAttempts; attempt++) {\n req.signal?.throwIfAborted();\n\n const { signal, cancel } = linkTimeoutSignal(req.signal, timeoutMs);\n let res: Response;\n try {\n res = await fetchImpl(req.url, {\n method: req.method ?? 'GET',\n headers,\n body: req.body as RequestInit['body'],\n signal,\n });\n } catch (err) {\n cancel();\n if (req.signal?.aborted) {\n throw req.signal.reason ?? err;\n }\n const error = err instanceof Error ? err : new Error(String(err));\n lastErr = error;\n if (attempt < maxAttempts - 1 && retryOn(null, error)) {\n const delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n await sleep(delay, req.signal);\n continue;\n }\n throw new TransientError(error.message);\n }\n cancel();\n\n const body = await readBody(res, parseJson, binary);\n const httpResponse: HttpResponse<T> = {\n status: res.status,\n headers: res.headers,\n body: body as T,\n };\n if (req.rateLimit) {\n const state = req.rateLimit.parse(res.headers);\n if (state) {\n httpResponse.rateLimitState = state;\n }\n }\n\n if (options.observer) {\n await notifyObserver(options.observer, {\n url: req.url,\n method: req.method ?? 'GET',\n status: res.status,\n resource: options.resource,\n requestId: options.requestId ?? newRequestId(),\n body,\n });\n }\n\n if (res.ok) {\n return httpResponse;\n }\n\n const retryAfter = parseRetryAfter(res.headers.get('retry-after'));\n const message = `HTTP ${res.status} ${res.statusText} for ${req.method ?? 'GET'} ${req.url}`;\n const err = errorForStatus(message, httpResponse, retryAfter);\n\n if (\n attempt < maxAttempts - 1 &&\n retryOn(res.status, err) &&\n !(err instanceof AuthError) &&\n !(err instanceof ClientBugError)\n ) {\n lastErr = err;\n let delay = computeDelay(attempt, initialDelayMs, maxDelayMs);\n if (err instanceof RateLimitError && retryAfter) {\n const wait = retryAfter.getTime() - Date.now();\n if (wait > 0) {\n delay = Math.min(wait, maxDelayMs);\n }\n }\n await sleep(delay, req.signal);\n continue;\n }\n\n throw err;\n }\n\n throw lastErr ?? new UpstreamBugError('Exhausted retry attempts');\n}\n\nfunction computeDelay(\n attempt: number,\n initialDelayMs: number,\n maxDelayMs: number,\n): number {\n const base = initialDelayMs * 2 ** attempt;\n const jitter = base * 0.25 * Math.random();\n return Math.min(base + jitter, maxDelayMs);\n}\n\nexport { HttpClientError };\n","export interface RateLimitState {\n remaining: number;\n resetAt: Date;\n}\n\nexport interface RateLimitPolicy {\n parse(headers: Headers): RateLimitState \| null;\n}\n\nexport interface StandardRateLimitPolicyConfig {\n remainingHeader: string;\n resetHeader: string;\n resetUnit: 's' \| 'ms';\n resetFallbackMs?: number;\n}\n\nexport function standardRateLimitPolicy(\n config: StandardRateLimitPolicyConfig,\n): RateLimitPolicy {\n const { remainingHeader, resetHeader, resetUnit, resetFallbackMs } = config;\n const multiplier = resetUnit === 's' ? 1000 : 1;\n return {\n parse(h) {\n const remainingRaw = h.get(remainingHeader);\n if (remainingRaw === null \|\| remainingRaw.trim() === '') {\n return null;\n }\n const remaining = Number(remainingRaw);\n if (!Number.isFinite(remaining)) {\n return null;\n }\n const resetRaw = h.get(resetHeader);\n if (resetRaw === null) {\n if (resetFallbackMs === undefined) {\n return null;\n }\n return {\n remaining,\n resetAt: new Date(Date.now() + resetFallbackMs),\n };\n }\n if (resetRaw.trim() === '') {\n return null;\n }\n const reset = Number(resetRaw);\n if (!Number.isFinite(reset) \|\| reset < 0) {\n return null;\n }\n const resetMs = reset * multiplier;\n if (!Number.isFinite(resetMs)) {\n return null;\n }\n return { remaining, resetAt: new Date(resetMs) };\n },\n };\n}\n","export async function mapWithConcurrency<T, R>(\n items: readonly T[],\n concurrency: number,\n fn: (item: T, index: number) => Promise<R>,\n): Promise<R[]> {\n const results = new Array<R>(items.length);\n if (items.length === 0) {\n return results;\n }\n const normalized = Number.isFinite(concurrency) ? Math.floor(concurrency) : 1;\n const limit = Math.max(1, Math.min(normalized, items.length));\n let next = 0;\n let failed = false;\n\n async function worker(): Promise<void> {\n while (!failed) {\n const i = next++;\n if (i >= items.length) {\n return;\n }\n try {\n results[i] = await fn(items[i]!, i);\n } catch (err) {\n failed = true;\n throw err;\n }\n }\n }\n\n const workers: Promise<void>[] = [];\n for (let w = 0; w < limit; w++) {\n workers.push(worker());\n }\n await Promise.all(workers);\n return results;\n}\n","export interface SanitizeAllowedUrlOptions {\n url: string \| null;\n host: string;\n pathname: string;\n protocol?: 'https:' \| 'http:';\n}\n\nexport function sanitizeAllowedUrl(\n options: SanitizeAllowedUrlOptions,\n): string \| null {\n const { url, host, pathname, protocol = 'https:' } = options;\n if (url === null) {\n return null;\n }\n try {\n const u = new URL(url);\n if (u.protocol !== protocol \|\| u.host !== host \|\| u.pathname !== pathname) {\n return null;\n }\n return u.toString();\n } catch {\n return null;\n }\n}\n","export type EpochUnit = 'ms' \| 's' \| 'iso';\n\nexport function parseEpoch(\n value: number \| string \| null \| undefined,\n unit: EpochUnit,\n): number \| null {\n if (value === null \|\| value === undefined) {\n return null;\n }\n if (unit === 'iso') {\n if (typeof value !== 'string') {\n return null;\n }\n const ms = new Date(value).getTime();\n return Number.isFinite(ms) ? ms : null;\n }\n if (typeof value === 'string' && value.trim() === '') {\n return null;\n }\n const n = typeof value === 'number' ? value : Number(value);\n if (!Number.isFinite(n)) {\n return null;\n }\n const result = unit === 's' ? n * 1000 : n;\n return Number.isFinite(result) ? result : null;\n}\n","import { request } from './request';\nimport type { HttpRequest } from './types';\n\nexport function parseLinkHeader(header: string \| null): Record<string, string> {\n if (!header) {\n return {};\n }\n const result: Record<string, string> = {};\n for (const part of header.split(',')) {\n const match = part.match(/<([^>]+)>\\s;\\srel=\"([^\"]+)\"/);\n if (match) {\n result[match[2]!] = match[1]!;\n }\n }\n return result;\n}\n\nexport async function* paginateLink<T>(\n initial: HttpRequest,\n parse: (body: unknown) => T[],\n options: { resource: string },\n): AsyncIterable<T> {\n let next: string \| null = initial.url;\n while (next) {\n const res: Awaited<ReturnType<typeof request>> = await request(\n {\n ...initial,\n url: next,\n },\n { resource: options.resource },\n );\n for (const item of parse(res.body)) {\n yield item;\n }\n const links = parseLinkHeader(res.headers.get('link'));\n next = links['next'] ?? null;\n }\n}\n\nexport async function* paginateCursor<T>(\n initial: HttpRequest,\n parse: (body: unknown) => { items: T[]; nextCursor: string \| null },\n buildNext: (req: HttpRequest, cursor: string) => HttpRequest,\n options: { resource: string },\n): AsyncIterable<T> {\n let req: HttpRequest = initial;\n while (true) {\n const res = await request(req, { resource: options.resource });\n const { items, nextCursor } = parse(res.body);\n for (const item of items) {\n yield item;\n }\n if (!nextCursor) {\n return;\n }\n req = buildNext(req, nextCursor);\n }\n}\n\nexport async function* paginatePage<T>(\n initial: HttpRequest,\n parse: (body: unknown) => { items: T[]; hasMore: boolean },\n buildPage: (req: HttpRequest, page: number) => HttpRequest,\n options: { resource: string },\n): AsyncIterable<T> {\n let page = 1;\n while (true) {\n const req = page === 1 ? initial : buildPage(initial, page);\n const res = await request(req, { resource: options.resource });\n const { items, hasMore } = parse(res.body);\n for (const item of items) {\n yield item;\n }\n if (!hasMore \|\| items.length === 0) {\n return;\n }\n page++;\n }\n}\n","export type LogFields = Record<string, unknown>;\n\nexport interface ConnectorLogger {\n info(event: string, fields?: LogFields): void;\n warn(event: string, fields?: LogFields): void;\n}\n\nexport interface ConnectorLoggerOptions {\n scope: string;\n}\n\nconst MAX_VALUE_LEN = 120;\n\nfunction truncate(s: string, max = MAX_VALUE_LEN): string {\n if (s.length <= max) {\n return s;\n }\n return `${s.slice(0, max - 1)}…`;\n}\n\nfunction formatValue(value: unknown): string {\n if (value === null) {\n return 'null';\n }\n if (value === undefined) {\n return '';\n }\n if (typeof value === 'number' \|\| typeof value === 'boolean') {\n return String(value);\n }\n if (typeof value === 'string') {\n const t = truncate(value);\n if (/[\\s\"=]/.test(t)) {\n return JSON.stringify(t);\n }\n return t;\n }\n if (typeof value === 'bigint') {\n return value.toString();\n }\n let json: string \| undefined;\n try {\n json = JSON.stringify(value);\n } catch {\n json = undefined;\n }\n return truncate(json ?? String(value));\n}\n\nexport function formatLogFields(fields?: LogFields): string {\n if (!fields) {\n return '';\n }\n const parts: string[] = [];\n for (const [k, v] of Object.entries(fields)) {\n if (v === undefined) {\n continue;\n }\n parts.push(`${k}=${formatValue(v)}`);\n }\n return parts.length > 0 ? ` ${parts.join(' ')}` : '';\n}\n\nexport function formatLogLine(\n scope: string,\n event: string,\n fields?: LogFields,\n): string {\n return `[${scope}] ${event}${formatLogFields(fields)}`;\n}\n\nexport function createDefaultConnectorLogger(\n opts: ConnectorLoggerOptions,\n): ConnectorLogger {\n return {\n info(event, fields) {\n console.info(formatLogLine(opts.scope, event, fields));\n },\n warn(event, fields) {\n console.warn(formatLogLine(opts.scope, event, fields));\n },\n };\n}\n\nconst NOOP_LOGGER: ConnectorLogger = {\n info() {},\n warn() {},\n};\n\nexport function noopConnectorLogger(): ConnectorLogger {\n return NOOP_LOGGER;\n}\n","import {\n type HttpResponse,\n connectorUserAgent,\n parseEpoch,\n} from '@rawdash/connector-shared';\nimport {\n BaseConnector,\n type ChunkedSyncCursor,\n type ConnectorContext,\n type ConnectorDoc,\n type CredentialsSchema,\n type FetchPageResult,\n type JSONValue,\n type StorageHandle,\n type SyncOptions,\n type SyncResult,\n defineConfigFields,\n defineConnectorDoc,\n defineResources,\n makeChunkedCursorGuard,\n paginateChunked,\n schemasFromResources,\n selectActivePhases,\n} from '@rawdash/core';\nimport { z } from 'zod';\n\nexport const configFields = defineConfigFields(\n z.object({\n apiKey: z.object({ $secret: z.string().min(1) }).meta({\n label: 'API key',\n description:\n 'WorkOS API key (server-side, starts with `sk_`). Used as a bearer token on every request. Read-only access is sufficient for sync.',\n placeholder: 'WORKOS_API_KEY',\n secret: true,\n }),\n resources: z\n .array(\n z.enum(['organizations', 'connections', 'directories', 'auth_events']),\n )\n .nonempty()\n .optional()\n .meta({\n label: 'Resources',\n description:\n 'Which WorkOS resources to sync. Omit to sync all of them.',\n }),\n authEventsLookbackDays: z\n .number()\n .int()\n .positive()\n .max(90)\n .optional()\n .meta({\n label: 'Auth events lookback (days)',\n description:\n 'On a full sync (and when no incremental cursor is available), how many days of authentication events to fetch. Defaults to 30. Caps at 90.',\n placeholder: '30',\n }),\n }),\n);\n\nexport const doc: ConnectorDoc = defineConnectorDoc({\n displayName: 'WorkOS',\n category: 'security',\n brandColor: '#6363F1',\n tagline:\n 'Sync organizations, SSO connections, directory-sync directories, and authentication events from a WorkOS workspace for B2B SaaS onboarding and SSO-activity dashboards.',\n vendor: {\n name: 'WorkOS',\n domain: 'workos.com',\n apiDocs: 'https://workos.com/docs/reference',\n website: 'https://workos.com',\n },\n auth: {\n summary:\n 'A WorkOS API key (server-side, starts with `sk_`) is required. It is sent as a bearer token on every request and never leaves the workspace.',\n setup: [\n 'Sign in to the WorkOS Dashboard and switch to the environment (Sandbox or Production) you want to sync.',\n 'Open API Keys in the left navigation.',\n 'Create a new secret key (or copy an existing one). WorkOS only shows the secret once on creation.',\n 'Store it as a rawdash secret and reference it from the connector config as `apiKey: secret(\"WORKOS_API_KEY\")`.',\n ],\n },\n rateLimit:\n 'WorkOS list endpoints return X-RateLimit-Remaining and X-RateLimit-Reset (Unix seconds) headers when throttling kicks in; the shared HTTP client falls back to Retry-After on 429.',\n limitations: [\n 'Authentication events use the WorkOS Events API filtered to `authentication.` event types (sign-in success and failure across SSO, OAuth, password, magic auth, MFA). Other event categories (`dsync.`, `organization.`) are not synced.',\n 'Organizations, connections, and directories are fetched in full on every sync; the WorkOS list endpoints do not expose a server-side updated_at filter, so the scope is cleared and rewritten on full syncs and left untouched on incremental syncs.',\n 'Directory-sync user and group rows are out of scope; this connector tracks the directory entities themselves, not their imported memberships.',\n ],\n});\n\nexport type WorkOSResource =\n \| 'organizations'\n \| 'connections'\n \| 'directories'\n \| 'auth_events';\n\nexport interface WorkOSSettings {\n resources?: readonly WorkOSResource[];\n authEventsLookbackDays?: number;\n}\n\nconst workosCredentials = {\n apiKey: {\n description: 'WorkOS API key',\n auth: 'required' as const,\n },\n} satisfies CredentialsSchema;\n\ntype WorkOSCredentials = typeof workosCredentials;\n\nconst PHASE_ORDER = [\n 'organizations',\n 'connections',\n 'directories',\n 'auth_events',\n] as const;\n\ntype WorkOSPhase = (typeof PHASE_ORDER)[number];\n\ntype WorkOSSyncCursor = ChunkedSyncCursor<WorkOSPhase, string>;\n\nconst isWorkOSSyncCursor = makeChunkedCursorGuard(PHASE_ORDER);\n\nconst ORGANIZATION_ENTITY = 'workos_organization';\nconst CONNECTION_ENTITY = 'workos_connection';\nconst DIRECTORY_ENTITY = 'workos_directory';\nconst AUTH_EVENT = 'workos_auth_event';\n\nconst PAGE_SIZE = 100;\nconst DEFAULT_AUTH_LOOKBACK_DAYS = 30;\nconst BASE_URL = 'https://api.workos.com';\n\nconst AUTH_EVENT_TYPES = [\n 'authentication.email_verification_succeeded',\n 'authentication.magic_auth_succeeded',\n 'authentication.magic_auth_failed',\n 'authentication.mfa_succeeded',\n 'authentication.mfa_failed',\n 'authentication.oauth_succeeded',\n 'authentication.oauth_failed',\n 'authentication.password_succeeded',\n 'authentication.password_failed',\n 'authentication.sso_succeeded',\n 'authentication.sso_failed',\n] as const;\n\ntype AuthEventType = (typeof AUTH_EVENT_TYPES)[number];\n\nconst idString = z.string().min(1);\n\nconst listMetadataSchema = z.object({\n before: z.string().nullish(),\n after: z.string().nullish(),\n});\n\nconst organizationDomainSchema = z.object({\n domain: z.string(),\n state: z.string().nullish(),\n});\n\nconst organizationSchema = z.object({\n id: idString,\n name: z.string(),\n domains: z.array(organizationDomainSchema).nullish(),\n allow_profiles_outside_organization: z.boolean().nullish(),\n created_at: z.string(),\n updated_at: z.string().nullish(),\n});\n\nconst organizationsResponseSchema = z.object({\n data: z.array(organizationSchema),\n list_metadata: listMetadataSchema,\n});\n\nconst connectionSchema = z.object({\n id: idString,\n name: z.string(),\n organization_id: z.string().nullish(),\n connection_type: z.string(),\n state: z.string().nullish(),\n status: z.string().nullish(),\n created_at: z.string(),\n updated_at: z.string().nullish(),\n});\n\nconst connectionsResponseSchema = z.object({\n data: z.array(connectionSchema),\n list_metadata: listMetadataSchema,\n});\n\nconst directorySchema = z.object({\n id: idString,\n name: z.string(),\n organization_id: z.string().nullish(),\n type: z.string(),\n state: z.string().nullish(),\n created_at: z.string(),\n updated_at: z.string().nullish(),\n});\n\nconst directoriesResponseSchema = z.object({\n data: z.array(directorySchema),\n list_metadata: listMetadataSchema,\n});\n\nconst eventSchema = z.object({\n id: idString,\n event: z.string(),\n created_at: z.string(),\n data: z\n .object({\n organization_id: z.string().nullish(),\n user_id: z.string().nullish(),\n email: z.string().nullish(),\n ip_address: z.string().nullish(),\n connection_id: z.string().nullish(),\n connection_type: z.string().nullish(),\n })\n .passthrough()\n .nullish(),\n});\n\nconst eventsResponseSchema = z.object({\n data: z.array(eventSchema),\n list_metadata: listMetadataSchema,\n});\n\nexport const workosResources = defineResources({\n [ORGANIZATION_ENTITY]: {\n shape: 'entity',\n filterable: [],\n description:\n 'WorkOS organizations (tenants) with their display name, domains, and creation timestamp.',\n endpoint: 'GET /organizations',\n fields: [\n { name: 'name', description: 'Organization display name.' },\n {\n name: 'domains',\n description:\n 'Comma-separated list of domains attached to the organization.',\n },\n {\n name: 'createdAt',\n description: 'When the organization was created (Unix ms).',\n },\n ],\n responses: { organizations: organizationsResponseSchema },\n },\n [CONNECTION_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'state',\n ops: ['eq'],\n values: ['active', 'inactive', 'draft', 'linked', 'unlinked'],\n },\n { field: 'connectionType', ops: ['eq'] },\n ],\n description:\n 'WorkOS SSO connections (one per identity provider per organization) with their type, state, and parent organization.',\n endpoint: 'GET /connections',\n fields: [\n {\n name: 'connectionType',\n description: 'Connection type (e.g. OktaSAML, AzureSAML, GoogleOAuth).',\n },\n {\n name: 'organizationId',\n description: 'WorkOS organization that owns the connection.',\n },\n {\n name: 'state',\n description:\n 'Lifecycle state (active, inactive, draft, linked, unlinked).',\n },\n { name: 'name', description: 'Connection display name.' },\n {\n name: 'createdAt',\n description: 'When the connection was created (Unix ms).',\n },\n ],\n responses: { connections: connectionsResponseSchema },\n },\n [DIRECTORY_ENTITY]: {\n shape: 'entity',\n filterable: [\n {\n field: 'state',\n ops: ['eq'],\n values: ['active', 'inactive', 'validating', 'linked', 'unlinked'],\n },\n { field: 'directoryType', ops: ['eq'] },\n ],\n description:\n 'WorkOS directory-sync directories (SCIM/HRIS feeds) with their type, state, and parent organization.',\n endpoint: 'GET /directories',\n fields: [\n {\n name: 'directoryType',\n description:\n 'Directory provider type (e.g. okta scim v2.0, azure scim v2.0, bamboohr).',\n },\n {\n name: 'organizationId',\n description: 'WorkOS organization that owns the directory.',\n },\n {\n name: 'state',\n description:\n 'Lifecycle state (active, inactive, validating, linked, unlinked).',\n },\n { name: 'name', description: 'Directory display name.' },\n {\n name: 'createdAt',\n description: 'When the directory was created (Unix ms).',\n },\n ],\n responses: { directories: directoriesResponseSchema },\n },\n [AUTH_EVENT]: {\n shape: 'event',\n filterable: [\n { field: 'eventType', ops: ['eq'], values: [...AUTH_EVENT_TYPES] },\n ],\n description:\n 'Authentication events from the WorkOS Events API (SSO, OAuth, password, magic auth, and MFA sign-in successes and failures).',\n endpoint: 'GET /events',\n notes:\n 'Filtered to the authentication. event family. Incremental syncs pass `range_start` so only events newer than the watermark are returned.',\n fields: [\n {\n name: 'eventType',\n description: 'WorkOS event name (authentication.sso_succeeded, etc).',\n },\n {\n name: 'outcome',\n description: '\"succeeded\" or \"failed\" derived from the event suffix.',\n },\n {\n name: 'method',\n description:\n 'Authentication method (sso, oauth, password, magic_auth, mfa, email_verification).',\n },\n {\n name: 'organizationId',\n description: 'WorkOS organization the event belongs to (may be null).',\n },\n {\n name: 'userId',\n description: 'WorkOS user id involved in the event (may be null).',\n },\n {\n name: 'connectionId',\n description: 'WorkOS connection id used for the event (may be null).',\n },\n {\n name: 'connectionType',\n description:\n 'Connection type used for the event (may be null for non-SSO methods).',\n },\n {\n name: 'ipAddress',\n description: 'Client IP captured by WorkOS (may be null).',\n },\n ],\n responses: { auth_events: eventsResponseSchema },\n },\n});\n\nexport const id = 'workos';\n\ntype OrganizationsResponse = z.infer<typeof organizationsResponseSchema>;\ntype ConnectionsResponse = z.infer<typeof connectionsResponseSchema>;\ntype DirectoriesResponse = z.infer<typeof directoriesResponseSchema>;\ntype EventsResponse = z.infer<typeof eventsResponseSchema>;\n\ntype WorkOSOrganization = z.infer<typeof organizationSchema>;\ntype WorkOSConnection = z.infer<typeof connectionSchema>;\ntype WorkOSDirectory = z.infer<typeof directorySchema>;\ntype WorkOSEvent = z.infer<typeof eventSchema>;\n\ninterface FetchedPage<T> {\n items: T[];\n next: string \| null;\n}\n\nfunction isoToMs(value: string \| null \| undefined): number \| null {\n if (!value) {\n return null;\n }\n return parseEpoch(value, 'iso');\n}\n\nfunction isoToMsOrZero(value: string \| null \| undefined): number {\n return isoToMs(value) ?? 0;\n}\n\nfunction summarizeDomains(\n domains: WorkOSOrganization['domains'],\n): string \| null {\n if (!domains \|\| domains.length === 0) {\n return null;\n }\n return domains.map((d) => d.domain).join(', ');\n}\n\nfunction deriveOutcome(eventType: string): 'succeeded' \| 'failed' \| null {\n if (eventType.endsWith('_succeeded')) {\n return 'succeeded';\n }\n if (eventType.endsWith('_failed')) {\n return 'failed';\n }\n return null;\n}\n\nfunction deriveMethod(eventType: string): string \| null {\n const m = /^authentication\\.(.+?)_(?:succeeded\|failed)$/.exec(eventType);\n return m ? m[1]! : null;\n}\n\nfunction isAuthEventType(value: string): value is AuthEventType {\n return (AUTH_EVENT_TYPES as readonly string[]).includes(value);\n}\n\nfunction lookbackStartIso(days: number): string {\n const ts = Date.now() - days * 24 * 60 * 60 * 1000;\n return new Date(ts).toISOString();\n}\n\nexport class WorkOSConnector extends BaseConnector<\n WorkOSSettings,\n WorkOSCredentials\n> {\n static readonly id = id;\n\n static readonly resources = workosResources;\n\n static readonly schemas = schemasFromResources(workosResources);\n\n static create(input: unknown, ctx?: ConnectorContext): WorkOSConnector {\n const parsed = configFields.parse(input);\n return new WorkOSConnector(\n {\n resources: parsed.resources,\n authEventsLookbackDays: parsed.authEventsLookbackDays,\n },\n { apiKey: parsed.apiKey },\n ctx,\n );\n }\n\n readonly id = id;\n override readonly credentials = workosCredentials;\n\n private buildHeaders(): Record<string, string> {\n return {\n Authorization: `Bearer ${this.creds.apiKey}`,\n Accept: 'application/json',\n 'User-Agent': connectorUserAgent('workos'),\n };\n }\n\n private apiGet<T>(\n url: string,\n resource: string,\n signal?: AbortSignal,\n ): Promise<HttpResponse<T>> {\n return this.get<T>(url, {\n resource,\n headers: this.buildHeaders(),\n signal,\n });\n }\n\n private buildListUrl(\n path: string,\n after: string \| null,\n extra: Record<string, string> = {},\n ): string {\n const url = new URL(`${BASE_URL}${path}`);\n url.searchParams.set('limit', String(PAGE_SIZE));\n url.searchParams.set('order', 'asc');\n if (after) {\n url.searchParams.set('after', after);\n }\n for (const [k, v] of Object.entries(extra)) {\n url.searchParams.append(k, v);\n }\n return url.toString();\n }\n\n private buildEventsUrl(after: string \| null, options: SyncOptions): string {\n const url = new URL(`${BASE_URL}/events`);\n url.searchParams.set('limit', String(PAGE_SIZE));\n for (const t of AUTH_EVENT_TYPES) {\n url.searchParams.append('events', t);\n }\n if (after) {\n url.searchParams.set('after', after);\n } else {\n const rangeStart = options.since ?? this.defaultEventsRangeStart();\n url.searchParams.set('range_start', rangeStart);\n }\n return url.toString();\n }\n\n private defaultEventsRangeStart(): string {\n const days =\n this.settings.authEventsLookbackDays ?? DEFAULT_AUTH_LOOKBACK_DAYS;\n return lookbackStartIso(days);\n }\n\n private async fetchOrganizationsPage(\n page: string \| null,\n signal: AbortSignal \| undefined,\n ): Promise<FetchedPage<WorkOSOrganization>> {\n const url = this.buildListUrl('/organizations', page);\n const res = await this.apiGet<OrganizationsResponse>(\n url,\n 'organizations',\n signal,\n );\n const next = res.body.list_metadata.after ?? null;\n return { items: res.body.data, next };\n }\n\n private async fetchConnectionsPage(\n page: string \| null,\n signal: AbortSignal \| undefined,\n ): Promise<FetchedPage<WorkOSConnection>> {\n const url = this.buildListUrl('/connections', page);\n const res = await this.apiGet<ConnectionsResponse>(\n url,\n 'connections',\n signal,\n );\n const next = res.body.list_metadata.after ?? null;\n return { items: res.body.data, next };\n }\n\n private async fetchDirectoriesPage(\n page: string \| null,\n signal: AbortSignal \| undefined,\n ): Promise<FetchedPage<WorkOSDirectory>> {\n const url = this.buildListUrl('/directories', page);\n const res = await this.apiGet<DirectoriesResponse>(\n url,\n 'directories',\n signal,\n );\n const next = res.body.list_metadata.after ?? null;\n return { items: res.body.data, next };\n }\n\n private async fetchEventsPage(\n page: string \| null,\n options: SyncOptions,\n signal: AbortSignal \| undefined,\n ): Promise<FetchedPage<WorkOSEvent>> {\n const url = this.buildEventsUrl(page, options);\n const res = await this.apiGet<EventsResponse>(url, 'auth_events', signal);\n const next = res.body.list_metadata.after ?? null;\n return { items: res.body.data, next };\n }\n\n private async fetchPhasePage(\n phase: WorkOSPhase,\n page: string \| null,\n options: SyncOptions,\n signal?: AbortSignal,\n ): Promise<FetchPageResult<string>> {\n switch (phase) {\n case 'organizations':\n return this.fetchOrganizationsPage(page, signal);\n case 'connections':\n return this.fetchConnectionsPage(page, signal);\n case 'directories':\n return this.fetchDirectoriesPage(page, signal);\n case 'auth_events':\n return this.fetchEventsPage(page, options, signal);\n }\n }\n\n private async writeOrganizations(\n storage: StorageHandle,\n items: WorkOSOrganization[],\n ): Promise<void> {\n for (const org of items) {\n await storage.entity({\n type: ORGANIZATION_ENTITY,\n id: org.id,\n attributes: {\n name: org.name,\n domains: summarizeDomains(org.domains),\n createdAt: isoToMs(org.created_at),\n },\n updated_at: isoToMsOrZero(org.updated_at ?? org.created_at),\n });\n }\n }\n\n private async writeConnections(\n storage: StorageHandle,\n items: WorkOSConnection[],\n ): Promise<void> {\n for (const c of items) {\n await storage.entity({\n type: CONNECTION_ENTITY,\n id: c.id,\n attributes: {\n name: c.name,\n connectionType: c.connection_type,\n organizationId: c.organization_id ?? null,\n state: c.state ?? c.status ?? null,\n createdAt: isoToMs(c.created_at),\n },\n updated_at: isoToMsOrZero(c.updated_at ?? c.created_at),\n });\n }\n }\n\n private async writeDirectories(\n storage: StorageHandle,\n items: WorkOSDirectory[],\n ): Promise<void> {\n for (const d of items) {\n await storage.entity({\n type: DIRECTORY_ENTITY,\n id: d.id,\n attributes: {\n name: d.name,\n directoryType: d.type,\n organizationId: d.organization_id ?? null,\n state: d.state ?? null,\n createdAt: isoToMs(d.created_at),\n },\n updated_at: isoToMsOrZero(d.updated_at ?? d.created_at),\n });\n }\n }\n\n private async writeAuthEvents(\n storage: StorageHandle,\n items: WorkOSEvent[],\n sinceMs: number \| null,\n ): Promise<void> {\n for (const ev of items) {\n if (!isAuthEventType(ev.event)) {\n continue;\n }\n const ts = isoToMs(ev.created_at);\n if (ts === null) {\n continue;\n }\n if (sinceMs !== null && ts <= sinceMs) {\n continue;\n }\n const data = ev.data ?? {};\n const attributes: Record<string, JSONValue> = {\n eventType: ev.event,\n outcome: deriveOutcome(ev.event),\n method: deriveMethod(ev.event),\n organizationId: data.organization_id ?? null,\n userId: data.user_id ?? null,\n connectionId: data.connection_id ?? null,\n connectionType: data.connection_type ?? null,\n ipAddress: data.ip_address ?? null,\n eventId: ev.id,\n };\n await storage.event({\n name: AUTH_EVENT,\n start_ts: ts,\n end_ts: null,\n attributes,\n });\n }\n }\n\n private async clearScopeOnFirstPage(\n storage: StorageHandle,\n phase: WorkOSPhase,\n isFull: boolean,\n ): Promise<void> {\n if (!isFull) {\n return;\n }\n switch (phase) {\n case 'organizations':\n await storage.entities([], { types: [ORGANIZATION_ENTITY] });\n return;\n case 'connections':\n await storage.entities([], { types: [CONNECTION_ENTITY] });\n return;\n case 'directories':\n await storage.entities([], { types: [DIRECTORY_ENTITY] });\n return;\n case 'auth_events':\n await storage.events([], { names: [AUTH_EVENT] });\n return;\n }\n }\n\n private async writePhase(\n storage: StorageHandle,\n phase: WorkOSPhase,\n items: unknown[],\n sinceMs: number \| null,\n ): Promise<void> {\n switch (phase) {\n case 'organizations':\n return this.writeOrganizations(storage, items as WorkOSOrganization[]);\n case 'connections':\n return this.writeConnections(storage, items as WorkOSConnection[]);\n case 'directories':\n return this.writeDirectories(storage, items as WorkOSDirectory[]);\n case 'auth_events':\n return this.writeAuthEvents(storage, items as WorkOSEvent[], sinceMs);\n }\n }\n\n private resolveCursor(cursor: unknown): WorkOSSyncCursor \| undefined {\n return isWorkOSSyncCursor(cursor) ? cursor : undefined;\n }\n\n async sync(\n options: SyncOptions,\n storage: StorageHandle,\n signal?: AbortSignal,\n ): Promise<SyncResult> {\n const cursor = this.resolveCursor(options.cursor);\n const isFull = options.mode === 'full';\n const sinceMs = options.since ? Date.parse(options.since) : null;\n const sinceMsOrNull =\n sinceMs !== null && Number.isFinite(sinceMs) ? sinceMs : null;\n\n const phases = selectActivePhases<WorkOSResource, WorkOSPhase>(\n (r) => r,\n PHASE_ORDER,\n this.settings.resources,\n );\n\n return paginateChunked<WorkOSPhase, string>({\n phases,\n cursor,\n signal,\n logger: this.logger,\n fetchPage: async (phase, page, sig) =>\n this.fetchPhasePage(phase, page, options, sig),\n writeBatch: async (phase, items, page) => {\n if (page === null) {\n await this.clearScopeOnFirstPage(storage, phase, isFull);\n }\n await this.writePhase(storage, phase, items, sinceMsOrNull);\n },\n });\n }\n}\n","import { WorkOSConnector } from './workos';\n\nexport {\n WorkOSConnector,\n workosResources as resources,\n configFields,\n doc,\n id,\n} from './workos';\nexport type { WorkOSResource, WorkOSSettings } from './workos';\nexport default WorkOSConnector;\n"],"mappings":";AEAO,IAAM,sBAAsB;AAE5B,IAAM,qBAAqB,qBAAqB,mBAAmB;AAEnE,SAAS,mBAAmB,aAA6B;AAC9D,SAAO,qBAAqB,WAAW,IAAI,mBAAmB;AAChE;AKJO,SAAS,WACd,OACA,MACe;AACf,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;EACT;AACA,MAAI,SAAS,OAAO;AAClB,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;IACT;AACA,UAAM,KAAK,IAAI,KAAK,KAAK,EAAE,QAAQ;AACnC,WAAO,OAAO,SAAS,EAAE,IAAI,KAAK;EACpC;AACA,MAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;AACpD,WAAO;EACT;AACA,QAAM,IAAI,OAAO,UAAU,WAAW,QAAQ,OAAO,KAAK;AAC1D,MAAI,CAAC,OAAO,SAAS,CAAC,GAAG;AACvB,WAAO;EACT;AACA,QAAM,SAAS,SAAS,MAAM,IAAI,MAAO;AACzC,SAAO,OAAO,SAAS,MAAM,IAAI,SAAS;AAC5C;;;AGpBA;AAAA,EACE;AAAA,EAUA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,SAAS;AAEX,IAAM,eAAe;AAAA,EAC1B,EAAE,OAAO;AAAA,IACP,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK;AAAA,MACpD,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,MACb,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,WAAW,EACR;AAAA,MACC,EAAE,KAAK,CAAC,iBAAiB,eAAe,eAAe,aAAa,CAAC;AAAA,IACvE,EACC,SAAS,EACT,SAAS,EACT,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,IACJ,CAAC;AAAA,IACH,wBAAwB,EACrB,OAAO,EACP,IAAI,EACJ,SAAS,EACT,IAAI,EAAE,EACN,SAAS,EACT,KAAK;AAAA,MACJ,OAAO;AAAA,MACP,aACE;AAAA,MACF,aAAa;AAAA,IACf,CAAC;AAAA,EACL,CAAC;AACH;AAEO,IAAM,MAAoB,mBAAmB;AAAA,EAClD,aAAa;AAAA,EACb,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,SACE;AAAA,EACF,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,SAAS;AAAA,EACX;AAAA,EACA,MAAM;AAAA,IACJ,SACE;AAAA,IACF,OAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,WACE;AAAA,EACF,aAAa;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF,CAAC;AAaD,IAAM,oBAAoB;AAAA,EACxB,QAAQ;AAAA,IACN,aAAa;AAAA,IACb,MAAM;AAAA,EACR;AACF;AAIA,IAAM,cAAc;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMA,IAAM,qBAAqB,uBAAuB,WAAW;AAE7D,IAAM,sBAAsB;AAC5B,IAAM,oBAAoB;AAC1B,IAAM,mBAAmB;AACzB,IAAM,aAAa;AAEnB,IAAM,YAAY;AAClB,IAAM,6BAA6B;AACnC,IAAM,WAAW;AAEjB,IAAM,mBAAmB;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAIA,IAAM,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAEjC,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,QAAQ;AAC5B,CAAC;AAED,IAAM,2BAA2B,EAAE,OAAO;AAAA,EACxC,QAAQ,EAAE,OAAO;AAAA,EACjB,OAAO,EAAE,OAAO,EAAE,QAAQ;AAC5B,CAAC;AAED,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO;AAAA,EACf,SAAS,EAAE,MAAM,wBAAwB,EAAE,QAAQ;AAAA,EACnD,qCAAqC,EAAE,QAAQ,EAAE,QAAQ;AAAA,EACzD,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,MAAM,kBAAkB;AAAA,EAChC,eAAe;AACjB,CAAC;AAED,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACpC,iBAAiB,EAAE,OAAO;AAAA,EAC1B,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC1B,QAAQ,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC3B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,MAAM,EAAE,MAAM,gBAAgB;AAAA,EAC9B,eAAe;AACjB,CAAC;AAED,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,IAAI;AAAA,EACJ,MAAM,EAAE,OAAO;AAAA,EACf,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACpC,MAAM,EAAE,OAAO;AAAA,EACf,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC1B,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO,EAAE,QAAQ;AACjC,CAAC;AAED,IAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,MAAM,EAAE,MAAM,eAAe;AAAA,EAC7B,eAAe;AACjB,CAAC;AAED,IAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,IAAI;AAAA,EACJ,OAAO,EAAE,OAAO;AAAA,EAChB,YAAY,EAAE,OAAO;AAAA,EACrB,MAAM,EACH,OAAO;AAAA,IACN,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,IACpC,SAAS,EAAE,OAAO,EAAE,QAAQ;AAAA,IAC5B,OAAO,EAAE,OAAO,EAAE,QAAQ;AAAA,IAC1B,YAAY,EAAE,OAAO,EAAE,QAAQ;AAAA,IAC/B,eAAe,EAAE,OAAO,EAAE,QAAQ;AAAA,IAClC,iBAAiB,EAAE,OAAO,EAAE,QAAQ;AAAA,EACtC,CAAC,EACA,YAAY,EACZ,QAAQ;AACb,CAAC;AAED,IAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,MAAM,WAAW;AAAA,EACzB,eAAe;AACjB,CAAC;AAEM,IAAM,kBAAkB,gBAAgB;AAAA,EAC7C,CAAC,mBAAmB,GAAG;AAAA,IACrB,OAAO;AAAA,IACP,YAAY,CAAC;AAAA,IACb,aACE;AAAA,IACF,UAAU;AAAA,IACV,QAAQ;AAAA,MACN,EAAE,MAAM,QAAQ,aAAa,6BAA6B;AAAA,MAC1D;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,eAAe,4BAA4B;AAAA,EAC1D;AAAA,EACA,CAAC,iBAAiB,GAAG;AAAA,IACnB,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,UAAU,YAAY,SAAS,UAAU,UAAU;AAAA,MAC9D;AAAA,MACA,EAAE,OAAO,kBAAkB,KAAK,CAAC,IAAI,EAAE;AAAA,IACzC;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,QAAQ;AAAA,MACN;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,EAAE,MAAM,QAAQ,aAAa,2BAA2B;AAAA,MACxD;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,aAAa,0BAA0B;AAAA,EACtD;AAAA,EACA,CAAC,gBAAgB,GAAG;AAAA,IAClB,OAAO;AAAA,IACP,YAAY;AAAA,MACV;AAAA,QACE,OAAO;AAAA,QACP,KAAK,CAAC,IAAI;AAAA,QACV,QAAQ,CAAC,UAAU,YAAY,cAAc,UAAU,UAAU;AAAA,MACnE;AAAA,MACA,EAAE,OAAO,iBAAiB,KAAK,CAAC,IAAI,EAAE;AAAA,IACxC;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,QAAQ;AAAA,MACN;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA,EAAE,MAAM,QAAQ,aAAa,0BAA0B;AAAA,MACvD;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,aAAa,0BAA0B;AAAA,EACtD;AAAA,EACA,CAAC,UAAU,GAAG;AAAA,IACZ,OAAO;AAAA,IACP,YAAY;AAAA,MACV,EAAE,OAAO,aAAa,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,gBAAgB,EAAE;AAAA,IACnE;AAAA,IACA,aACE;AAAA,IACF,UAAU;AAAA,IACV,OACE;AAAA,IACF,QAAQ;AAAA,MACN;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aACE;AAAA,MACJ;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,aAAa;AAAA,MACf;AAAA,IACF;AAAA,IACA,WAAW,EAAE,aAAa,qBAAqB;AAAA,EACjD;AACF,CAAC;AAEM,IAAM,KAAK;AAiBlB,SAAS,QAAQ,OAAiD;AAChE,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AACA,SAAO,WAAW,OAAO,KAAK;AAChC;AAEA,SAAS,cAAc,OAA0C;AAC/D,SAAO,QAAQ,KAAK,KAAK;AAC3B;AAEA,SAAS,iBACP,SACe;AACf,MAAI,CAAC,WAAW,QAAQ,WAAW,GAAG;AACpC,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI;AAC/C;AAEA,SAAS,cAAc,WAAkD;AACvE,MAAI,UAAU,SAAS,YAAY,GAAG;AACpC,WAAO;AAAA,EACT;AACA,MAAI,UAAU,SAAS,SAAS,GAAG;AACjC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,aAAa,WAAkC;AACtD,QAAM,IAAI,+CAA+C,KAAK,SAAS;AACvE,SAAO,IAAI,EAAE,CAAC,IAAK;AACrB;AAEA,SAAS,gBAAgB,OAAuC;AAC9D,SAAQ,iBAAuC,SAAS,KAAK;AAC/D;AAEA,SAAS,iBAAiB,MAAsB;AAC9C,QAAM,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,KAAK;AAC9C,SAAO,IAAI,KAAK,EAAE,EAAE,YAAY;AAClC;AAEO,IAAM,kBAAN,MAAM,yBAAwB,cAGnC;AAAA,EACA,OAAgB,KAAK;AAAA,EAErB,OAAgB,YAAY;AAAA,EAE5B,OAAgB,UAAU,qBAAqB,eAAe;AAAA,EAE9D,OAAO,OAAO,OAAgB,KAAyC;AACrE,UAAM,SAAS,aAAa,MAAM,KAAK;AACvC,WAAO,IAAI;AAAA,MACT;AAAA,QACE,WAAW,OAAO;AAAA,QAClB,wBAAwB,OAAO;AAAA,MACjC;AAAA,MACA,EAAE,QAAQ,OAAO,OAAO;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAES,KAAK;AAAA,EACI,cAAc;AAAA,EAExB,eAAuC;AAC7C,WAAO;AAAA,MACL,eAAe,UAAU,KAAK,MAAM,MAAM;AAAA,MAC1C,QAAQ;AAAA,MACR,cAAc,mBAAmB,QAAQ;AAAA,IAC3C;AAAA,EACF;AAAA,EAEQ,OACN,KACA,UACA,QAC0B;AAC1B,WAAO,KAAK,IAAO,KAAK;AAAA,MACtB;AAAA,MACA,SAAS,KAAK,aAAa;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEQ,aACN,MACA,OACA,QAAgC,CAAC,GACzB;AACR,UAAM,MAAM,IAAI,IAAI,GAAG,QAAQ,GAAG,IAAI,EAAE;AACxC,QAAI,aAAa,IAAI,SAAS,OAAO,SAAS,CAAC;AAC/C,QAAI,aAAa,IAAI,SAAS,KAAK;AACnC,QAAI,OAAO;AACT,UAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IACrC;AACA,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC1C,UAAI,aAAa,OAAO,GAAG,CAAC;AAAA,IAC9B;AACA,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEQ,eAAe,OAAsB,SAA8B;AACzE,UAAM,MAAM,IAAI,IAAI,GAAG,QAAQ,SAAS;AACxC,QAAI,aAAa,IAAI,SAAS,OAAO,SAAS,CAAC;AAC/C,eAAW,KAAK,kBAAkB;AAChC,UAAI,aAAa,OAAO,UAAU,CAAC;AAAA,IACrC;AACA,QAAI,OAAO;AACT,UAAI,aAAa,IAAI,SAAS,KAAK;AAAA,IACrC,OAAO;AACL,YAAM,aAAa,QAAQ,SAAS,KAAK,wBAAwB;AACjE,UAAI,aAAa,IAAI,eAAe,UAAU;AAAA,IAChD;AACA,WAAO,IAAI,SAAS;AAAA,EACtB;AAAA,EAEQ,0BAAkC;AACxC,UAAM,OACJ,KAAK,SAAS,0BAA0B;AAC1C,WAAO,iBAAiB,IAAI;AAAA,EAC9B;AAAA,EAEA,MAAc,uBACZ,MACA,QAC0C;AAC1C,UAAM,MAAM,KAAK,aAAa,kBAAkB,IAAI;AACpD,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,OAAO,IAAI,KAAK,cAAc,SAAS;AAC7C,WAAO,EAAE,OAAO,IAAI,KAAK,MAAM,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,qBACZ,MACA,QACwC;AACxC,UAAM,MAAM,KAAK,aAAa,gBAAgB,IAAI;AAClD,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,OAAO,IAAI,KAAK,cAAc,SAAS;AAC7C,WAAO,EAAE,OAAO,IAAI,KAAK,MAAM,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,qBACZ,MACA,QACuC;AACvC,UAAM,MAAM,KAAK,aAAa,gBAAgB,IAAI;AAClD,UAAM,MAAM,MAAM,KAAK;AAAA,MACrB;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,UAAM,OAAO,IAAI,KAAK,cAAc,SAAS;AAC7C,WAAO,EAAE,OAAO,IAAI,KAAK,MAAM,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,gBACZ,MACA,SACA,QACmC;AACnC,UAAM,MAAM,KAAK,eAAe,MAAM,OAAO;AAC7C,UAAM,MAAM,MAAM,KAAK,OAAuB,KAAK,eAAe,MAAM;AACxE,UAAM,OAAO,IAAI,KAAK,cAAc,SAAS;AAC7C,WAAO,EAAE,OAAO,IAAI,KAAK,MAAM,KAAK;AAAA,EACtC;AAAA,EAEA,MAAc,eACZ,OACA,MACA,SACA,QACkC;AAClC,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,KAAK,uBAAuB,MAAM,MAAM;AAAA,MACjD,KAAK;AACH,eAAO,KAAK,qBAAqB,MAAM,MAAM;AAAA,MAC/C,KAAK;AACH,eAAO,KAAK,qBAAqB,MAAM,MAAM;AAAA,MAC/C,KAAK;AACH,eAAO,KAAK,gBAAgB,MAAM,SAAS,MAAM;AAAA,IACrD;AAAA,EACF;AAAA,EAEA,MAAc,mBACZ,SACA,OACe;AACf,eAAW,OAAO,OAAO;AACvB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,IAAI;AAAA,QACR,YAAY;AAAA,UACV,MAAM,IAAI;AAAA,UACV,SAAS,iBAAiB,IAAI,OAAO;AAAA,UACrC,WAAW,QAAQ,IAAI,UAAU;AAAA,QACnC;AAAA,QACA,YAAY,cAAc,IAAI,cAAc,IAAI,UAAU;AAAA,MAC5D,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,iBACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE;AAAA,UACR,gBAAgB,EAAE;AAAA,UAClB,gBAAgB,EAAE,mBAAmB;AAAA,UACrC,OAAO,EAAE,SAAS,EAAE,UAAU;AAAA,UAC9B,WAAW,QAAQ,EAAE,UAAU;AAAA,QACjC;AAAA,QACA,YAAY,cAAc,EAAE,cAAc,EAAE,UAAU;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,iBACZ,SACA,OACe;AACf,eAAW,KAAK,OAAO;AACrB,YAAM,QAAQ,OAAO;AAAA,QACnB,MAAM;AAAA,QACN,IAAI,EAAE;AAAA,QACN,YAAY;AAAA,UACV,MAAM,EAAE;AAAA,UACR,eAAe,EAAE;AAAA,UACjB,gBAAgB,EAAE,mBAAmB;AAAA,UACrC,OAAO,EAAE,SAAS;AAAA,UAClB,WAAW,QAAQ,EAAE,UAAU;AAAA,QACjC;AAAA,QACA,YAAY,cAAc,EAAE,cAAc,EAAE,UAAU;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,gBACZ,SACA,OACA,SACe;AACf,eAAW,MAAM,OAAO;AACtB,UAAI,CAAC,gBAAgB,GAAG,KAAK,GAAG;AAC9B;AAAA,MACF;AACA,YAAM,KAAK,QAAQ,GAAG,UAAU;AAChC,UAAI,OAAO,MAAM;AACf;AAAA,MACF;AACA,UAAI,YAAY,QAAQ,MAAM,SAAS;AACrC;AAAA,MACF;AACA,YAAM,OAAO,GAAG,QAAQ,CAAC;AACzB,YAAM,aAAwC;AAAA,QAC5C,WAAW,GAAG;AAAA,QACd,SAAS,cAAc,GAAG,KAAK;AAAA,QAC/B,QAAQ,aAAa,GAAG,KAAK;AAAA,QAC7B,gBAAgB,KAAK,mBAAmB;AAAA,QACxC,QAAQ,KAAK,WAAW;AAAA,QACxB,cAAc,KAAK,iBAAiB;AAAA,QACpC,gBAAgB,KAAK,mBAAmB;AAAA,QACxC,WAAW,KAAK,cAAc;AAAA,QAC9B,SAAS,GAAG;AAAA,MACd;AACA,YAAM,QAAQ,MAAM;AAAA,QAClB,MAAM;AAAA,QACN,UAAU;AAAA,QACV,QAAQ;AAAA,QACR;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAc,sBACZ,SACA,OACA,QACe;AACf,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AACA,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;AAC3D;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;AACzD;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;AACxD;AAAA,MACF,KAAK;AACH,cAAM,QAAQ,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAChD;AAAA,IACJ;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,OACA,OACA,SACe;AACf,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,KAAK,mBAAmB,SAAS,KAA6B;AAAA,MACvE,KAAK;AACH,eAAO,KAAK,iBAAiB,SAAS,KAA2B;AAAA,MACnE,KAAK;AACH,eAAO,KAAK,iBAAiB,SAAS,KAA0B;AAAA,MAClE,KAAK;AACH,eAAO,KAAK,gBAAgB,SAAS,OAAwB,OAAO;AAAA,IACxE;AAAA,EACF;AAAA,EAEQ,cAAc,QAA+C;AACnE,WAAO,mBAAmB,MAAM,IAAI,SAAS;AAAA,EAC/C;AAAA,EAEA,MAAM,KACJ,SACA,SACA,QACqB;AACrB,UAAM,SAAS,KAAK,cAAc,QAAQ,MAAM;AAChD,UAAM,SAAS,QAAQ,SAAS;AAChC,UAAM,UAAU,QAAQ,QAAQ,KAAK,MAAM,QAAQ,KAAK,IAAI;AAC5D,UAAM,gBACJ,YAAY,QAAQ,OAAO,SAAS,OAAO,IAAI,UAAU;AAE3D,UAAM,SAAS;AAAA,MACb,CAAC,MAAM;AAAA,MACP;AAAA,MACA,KAAK,SAAS;AAAA,IAChB;AAEA,WAAO,gBAAqC;AAAA,MAC1C;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,MACb,WAAW,OAAO,OAAO,MAAM,QAC7B,KAAK,eAAe,OAAO,MAAM,SAAS,GAAG;AAAA,MAC/C,YAAY,OAAO,OAAO,OAAO,SAAS;AACxC,YAAI,SAAS,MAAM;AACjB,gBAAM,KAAK,sBAAsB,SAAS,OAAO,MAAM;AAAA,QACzD;AACA,cAAM,KAAK,WAAW,SAAS,OAAO,OAAO,aAAa;AAAA,MAC5D;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AC7uBA,IAAO,gBAAQ;","names":[]}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@rawdash/connector-workos",
-  "version": "0.27.0",
+  "version": "0.28.2",
   "description": "Rawdash connector for WorkOS — syncs organizations, SSO connections, directory-sync directories, and authentication events from the WorkOS API into the six-shape storage model",
   "license": "Apache-2.0",
   "type": "module",
@@ -24,15 +24,15 @@
   },
   "dependencies": {
     "zod": "^4.4.3",
-    "@rawdash/core": "0.27.0"
+    "@rawdash/core": "0.28.2"
   },
   "devDependencies": {
     "fast-check": "^4.8.0",
     "tsup": "^8.0.0",
     "typescript": "^5.7.2",
     "vitest": "^4.1.4",
-    "@rawdash/connector-test-utils": "0.0.10",
-    "@rawdash/connector-shared": "0.3.1"
+    "@rawdash/connector-shared": "0.3.1",
+    "@rawdash/connector-test-utils": "0.0.10"
   },
   "scripts": {
     "build": "tsup",