@relyio/sdk 0.17.0 → 0.19.0

package/dist/chunk-NN45CSPZ.cjs

@@ -0,0 +1,872 @@
+'use strict';
+
+var chunkL6DXCKVQ_cjs = require('./chunk-L6DXCKVQ.cjs');
+
+/* RelyIO SDK - Built with ❤️ by the RelyIO Team */
+
+// ../../platform/api-contract/dist/chunk-46347LG2.js
+function defineRoute(route) {
+  if (route.kind === "raw" && route.standardShape === void 0) {
+    throw new Error("kind 'raw' requires a named StandardShape");
+  }
+  if (route.kind === "raw" && route.success === 302 && !route.headers.some((header) => header.name === "Location")) {
+    throw new Error("a raw route declaring success 302 must declare its 'Location' header");
+  }
+  if (route.kind === "stream" && route.stream === void 0) {
+    throw new Error("kind 'stream' requires a StreamDeclaration");
+  }
+  if (route.kind === "collection" && route.page === void 0) {
+    throw new Error("kind 'collection' requires a page dialect");
+  }
+  if (route.queues === true) {
+    if (route.kind !== "object" && route.kind !== "empty") {
+      throw new Error(
+        `kind '${route.kind}' cannot declare \`queues\`: only an object or empty route answers 202 beside its own status`
+      );
+    }
+    if (route.kind === "object" && route.success === 202) {
+      throw new Error("a route whose own status is 202 cannot also declare `queues`");
+    }
+  }
+  if ((route.kind === "object" || route.kind === "collection") && route.negotiated !== void 0) {
+    refuseMismatchedAlternate(route, route.negotiated["text/event-stream"]);
+  }
+  return route;
+}
+chunkL6DXCKVQ_cjs.__name(defineRoute, "defineRoute");
+function refuseMismatchedAlternate(route, stream) {
+  if (stream.kind !== "stream") {
+    throw new Error("a negotiated 'text/event-stream' alternate must be kind 'stream'");
+  }
+  if (stream.stream.mediaType !== "text/event-stream") {
+    throw new Error(
+      `a negotiated 'text/event-stream' alternate declares media type "${stream.stream.mediaType}"`
+    );
+  }
+  const own = [...new Set(route.codes)].sort();
+  const alternate = [...new Set(stream.codes)].sort();
+  if (own.length !== alternate.length || own.some((code, index) => code !== alternate[index])) {
+    throw new Error(
+      `a negotiated alternate refuses with [${alternate.join(", ")}] while its route refuses with [${own.join(", ")}]; one route refuses with one set of codes on every transport`
+    );
+  }
+}
+chunkL6DXCKVQ_cjs.__name(refuseMismatchedAlternate, "refuseMismatchedAlternate");
+
+// ../../platform/api-contract/dist/chunk-WT7DXIEW.js
+var HEADER_END_USER = {
+  name: "X-RelyIO-End-User",
+  in: "request",
+  required: false
+};
+var END_USER_TOKEN_REFUSAL_REASONS = [
+  "missing",
+  "no-identity-source",
+  "malformed",
+  "unsupported-algorithm",
+  "wrong-issuer",
+  "unknown-key",
+  "bad-signature",
+  "wrong-audience",
+  "expired",
+  "not-yet-valid",
+  "missing-subject"
+];
+
+// ../../platform/api-contract/dist/index.js
+var HEADER_RETRY_AFTER = { name: "Retry-After" };
+var HEADER_IF_MATCH = {
+  name: "If-Match",
+  in: "request",
+  required: false
+};
+function entityTag(parts) {
+  return `"${parts.entryUid}:${parts.locale}:${parts.version}:${parts.sharedVersion}"`;
+}
+chunkL6DXCKVQ_cjs.__name(entityTag, "entityTag");
+var HEADER_IDEMPOTENCY_KEY = {
+  name: "Idempotency-Key",
+  in: "request",
+  required: false
+};
+var FRESH_PARAMETER = "_fresh";
+var K = new Uint32Array([
+  1116352408,
+  1899447441,
+  3049323471,
+  3921009573,
+  961987163,
+  1508970993,
+  2453635748,
+  2870763221,
+  3624381080,
+  310598401,
+  607225278,
+  1426881987,
+  1925078388,
+  2162078206,
+  2614888103,
+  3248222580,
+  3835390401,
+  4022224774,
+  264347078,
+  604807628,
+  770255983,
+  1249150122,
+  1555081692,
+  1996064986,
+  2554220882,
+  2821834349,
+  2952996808,
+  3210313671,
+  3336571891,
+  3584528711,
+  113926993,
+  338241895,
+  666307205,
+  773529912,
+  1294757372,
+  1396182291,
+  1695183700,
+  1986661051,
+  2177026350,
+  2456956037,
+  2730485921,
+  2820302411,
+  3259730800,
+  3345764771,
+  3516065817,
+  3600352804,
+  4094571909,
+  275423344,
+  430227734,
+  506948616,
+  659060556,
+  883997877,
+  958139571,
+  1322822218,
+  1537002063,
+  1747873779,
+  1955562222,
+  2024104815,
+  2227730452,
+  2361852424,
+  2428436474,
+  2756734187,
+  3204031479,
+  3329325298
+]);
+var rotr = /* @__PURE__ */ chunkL6DXCKVQ_cjs.__name((value, bits) => value >>> bits | value << 32 - bits, "rotr");
+function sha256Hex(text) {
+  const bytes = new globalThis.TextEncoder().encode(text);
+  const blocks = Math.ceil((bytes.length + 9) / 64);
+  const padded = new Uint8Array(blocks * 64);
+  padded.set(bytes);
+  padded[bytes.length] = 128;
+  const view = new DataView(padded.buffer);
+  const bits = bytes.length * 8;
+  view.setUint32(padded.length - 8, Math.floor(bits / 4294967296));
+  view.setUint32(padded.length - 4, bits >>> 0);
+  const hash = new Uint32Array([
+    1779033703,
+    3144134277,
+    1013904242,
+    2773480762,
+    1359893119,
+    2600822924,
+    528734635,
+    1541459225
+  ]);
+  const w = new Uint32Array(64);
+  for (let block = 0; block < blocks; block++) {
+    for (let i = 0; i < 16; i++) w[i] = view.getUint32(block * 64 + i * 4);
+    for (let i = 16; i < 64; i++) {
+      const w15 = w[i - 15];
+      const w2 = w[i - 2];
+      const s0 = rotr(w15, 7) ^ rotr(w15, 18) ^ w15 >>> 3;
+      const s1 = rotr(w2, 17) ^ rotr(w2, 19) ^ w2 >>> 10;
+      w[i] = w[i - 16] + s0 + w[i - 7] + s1 >>> 0;
+    }
+    let a = hash[0];
+    let b = hash[1];
+    let c = hash[2];
+    let d = hash[3];
+    let e = hash[4];
+    let f = hash[5];
+    let g = hash[6];
+    let h = hash[7];
+    for (let i = 0; i < 64; i++) {
+      const s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+      const choice = e & f ^ ~e & g;
+      const t1 = h + s1 + choice + K[i] + w[i] >>> 0;
+      const s0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+      const majority = a & b ^ a & c ^ b & c;
+      const t2 = s0 + majority >>> 0;
+      h = g;
+      g = f;
+      f = e;
+      e = d + t1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = t1 + t2 >>> 0;
+    }
+    hash[0] = hash[0] + a;
+    hash[1] = hash[1] + b;
+    hash[2] = hash[2] + c;
+    hash[3] = hash[3] + d;
+    hash[4] = hash[4] + e;
+    hash[5] = hash[5] + f;
+    hash[6] = hash[6] + g;
+    hash[7] = hash[7] + h;
+  }
+  return Array.from(hash, (word) => word.toString(16).padStart(8, "0")).join("");
+}
+chunkL6DXCKVQ_cjs.__name(sha256Hex, "sha256Hex");
+var PREVIEW_DATASET_PREFIX = "preview/";
+var READABLE_MAX = 40;
+var HASH_DIGITS = 8;
+function previewDatasetSlug(branch) {
+  const name = branch.startsWith("refs/heads/") ? branch.slice("refs/heads/".length) : branch;
+  if (name === "") {
+    throw new TypeError(`previewDatasetSlug: ${JSON.stringify(branch)} names no Git branch`);
+  }
+  const readable = name.toLowerCase().replaceAll(/[^a-z0-9]+/g, "-").replaceAll(/^-+|-+$/g, "").slice(0, READABLE_MAX).replace(/-+$/, "");
+  const hash = sha256Hex(name).slice(0, HASH_DIGITS);
+  return `${PREVIEW_DATASET_PREFIX}${readable === "" ? "" : `${readable}-`}${hash}`;
+}
+chunkL6DXCKVQ_cjs.__name(previewDatasetSlug, "previewDatasetSlug");
+var VISITOR_LIVE_PATH = "/visitor/changes";
+var VISITOR_QUERY = {
+  /** The publishable key. */
+  key: "key",
+  /** A dataset id or name the key reaches; absent, the key's default dataset. */
+  dataset: "dataset",
+  /** The cursor to continue from; absent, the socket starts now. */
+  since: "since",
+  /** Comma-separated content types to keep; absent keeps every type. */
+  types: "types",
+  /** Comma-separated entry ids to keep; absent keeps every entry. */
+  ids: "ids",
+  /** The poll's client id. Required on a poll, and not read on a socket. */
+  client: "client"
+};
+var VISITOR_CURSOR = /^[\w.~-]{1,256}$/;
+var VISITOR_POLL_INTERVAL_MS = 15e3;
+var VISITOR_KEEPALIVE = { request: "ping", response: "pong" };
+var VISITOR_FRAMES = {
+  opened: "feed.opened",
+  changes: "feed.changes",
+  resync: "feed.resync"
+};
+defineRoute({
+  kind: "object",
+  headers: [HEADER_RETRY_AFTER],
+  codes: [
+    "REQUEST_INVALID",
+    "MISSING_API_KEY",
+    "INVALID_API_KEY",
+    "ACCESS_DENIED",
+    "METHOD_NOT_ALLOWED",
+    "SERVICE_INDETERMINATE",
+    "USAGE_QUOTA_EXCEEDED",
+    "RATE_LIMIT_EXCEEDED"
+  ]
+});
+var VISITOR_CLOSE_CODES = {
+  /** A query the door cannot read: a malformed `since`, filter, `dataset` or `client`. */
+  requestInvalid: 4400,
+  /** No publishable key, or one that is unknown, revoked, expired, a secret key or a preview key. */
+  keyRefused: 4401,
+  /** The page's `Origin` is absent, or not on the key's allowed origins. */
+  originRefused: 4403,
+  /** `dataset` names nothing the key reaches. */
+  datasetRefused: 4404,
+  /** The key's scope, the project's counter or the feed could not be reached just now. */
+  unavailable: 1013,
+  /**
+   * The project holds as many visitor connections as its plan allows — Starter's 100 — or its
+   * Organization is suspended. As HTTP's 402: more needs a bigger plan, or visitors leaving.
+   */
+  allowanceReached: 4402,
+  /** This client's address holds as many connections to the project as one address may. */
+  addressLimitReached: 4429,
+  /** The project is at its per-project safety ceiling — Pro's 50,000 — whatever it would pay for. */
+  ceilingReached: 4503
+};
+var VISITOR_CLOSE_RETRY = {
+  4400: "stop",
+  4401: "stop",
+  4403: "stop",
+  4404: "stop",
+  1013: "retry",
+  4402: "back-off",
+  4429: "back-off",
+  4503: "back-off"
+};
+var VISITOR_POLL_RETRY = {
+  REQUEST_INVALID: "stop",
+  MISSING_API_KEY: "stop",
+  INVALID_API_KEY: "stop",
+  ACCESS_DENIED: "stop",
+  METHOD_NOT_ALLOWED: "stop",
+  SERVICE_INDETERMINATE: "retry",
+  USAGE_QUOTA_EXCEEDED: "back-off",
+  RATE_LIMIT_EXCEEDED: "back-off"
+};
+var VISITOR_ADMISSION_RETRY_AFTER_SECONDS = 60;
+function parseVisitorFrame(text) {
+  let value;
+  try {
+    value = JSON.parse(text);
+  } catch {
+    return null;
+  }
+  if (!isRecord2(value) || !isCursor(value.cursor)) return null;
+  switch (value.type) {
+    case VISITOR_FRAMES.opened: {
+      return hasOnly(value, ["type", "cursor"]) ? { type: VISITOR_FRAMES.opened, cursor: value.cursor } : null;
+    }
+    case VISITOR_FRAMES.changes: {
+      const changes = hasOnly(value, ["type", "changes", "cursor"]) ? readVisitorChanges(value.changes) : null;
+      return changes === null ? null : { type: VISITOR_FRAMES.changes, changes, cursor: value.cursor };
+    }
+    case VISITOR_FRAMES.resync: {
+      return hasOnly(value, ["type", "reason", "cursor"]) && isResyncReason(value.reason) ? { type: VISITOR_FRAMES.resync, reason: value.reason, cursor: value.cursor } : null;
+    }
+    default: {
+      return null;
+    }
+  }
+}
+chunkL6DXCKVQ_cjs.__name(parseVisitorFrame, "parseVisitorFrame");
+function readVisitorPollAnswer(value) {
+  if (!isRecord2(value) || !isCursor(value.cursor)) return null;
+  if (value.kind === "resync") {
+    return hasOnly(value, ["kind", "reason", "cursor"]) && isResyncReason(value.reason) ? { kind: "resync", reason: value.reason, cursor: value.cursor } : null;
+  }
+  if (value.kind !== "changes" || !hasOnly(value, ["kind", "changes", "cursor"])) return null;
+  const changes = readVisitorChanges(value.changes);
+  return changes === null ? null : { kind: "changes", changes, cursor: value.cursor };
+}
+chunkL6DXCKVQ_cjs.__name(readVisitorPollAnswer, "readVisitorPollAnswer");
+var CHANGE_KINDS = /* @__PURE__ */ new Set([
+  "published",
+  "updated",
+  "unpublished",
+  "deleted"
+]);
+var RESYNC_REASONS = /* @__PURE__ */ new Set([
+  "retention",
+  "dataset-replaced",
+  "ahead-of-head",
+  "foreign-cursor",
+  "too-far-behind"
+]);
+function isResyncReason(value) {
+  return typeof value === "string" && RESYNC_REASONS.has(value);
+}
+chunkL6DXCKVQ_cjs.__name(isResyncReason, "isResyncReason");
+function readVisitorChanges(value) {
+  if (!Array.isArray(value)) return null;
+  const changes = [];
+  for (const item of value) {
+    if (!isRecord2(item) || !hasOnly(item, ["entryId", "contentType", "locale", "kind"])) return null;
+    const { entryId, contentType, locale, kind } = item;
+    if (!isNonEmptyString2(entryId) || !isNonEmptyString2(contentType)) return null;
+    if (locale !== null && typeof locale !== "string") return null;
+    if (typeof kind !== "string" || !CHANGE_KINDS.has(kind)) return null;
+    changes.push({ entryId, contentType, locale, kind });
+  }
+  return changes;
+}
+chunkL6DXCKVQ_cjs.__name(readVisitorChanges, "readVisitorChanges");
+function isCursor(value) {
+  return typeof value === "string" && VISITOR_CURSOR.test(value);
+}
+chunkL6DXCKVQ_cjs.__name(isCursor, "isCursor");
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+chunkL6DXCKVQ_cjs.__name(isRecord2, "isRecord2");
+function isNonEmptyString2(value) {
+  return typeof value === "string" && value.length > 0;
+}
+chunkL6DXCKVQ_cjs.__name(isNonEmptyString2, "isNonEmptyString2");
+function hasOnly(value, keys) {
+  const present = Object.keys(value);
+  return present.length === keys.length && present.every((key) => keys.includes(key));
+}
+chunkL6DXCKVQ_cjs.__name(hasOnly, "hasOnly");
+var FUNCTION_RUN_FAILURES = [
+  "threw",
+  "exceeded-cpu",
+  "exceeded-memory",
+  "exceeded-duration",
+  "load-failed",
+  "output-invalid"
+];
+new Set(FUNCTION_RUN_FAILURES);
+var WEBHOOK_EVENT_ID_HEADER = "x-relyio-event-id";
+var RESEND_IDEMPOTENCY_HEADER = "Idempotency-Key";
+var RESEND_ATTACHMENTS_MAX_BYTES = 25 * 1024 * 1024;
+var DEPLOYMENT_SUCCEEDED = "deployment.succeeded";
+var STRIPE_EVENT_FIELDS = [
+  { path: "id", type: "string", required: true },
+  { path: "type", type: "string", required: true },
+  { path: "created", type: "number", required: true },
+  { path: "livemode", type: "boolean", required: true },
+  { path: "data.object.id", type: "string", required: true },
+  { path: "data.object.object", type: "string", required: true },
+  { path: "data.object.metadata", type: "object", required: false, values: "string" }
+];
+var STRIPE_SUBSCRIPTION_FIELDS = [
+  ...STRIPE_EVENT_FIELDS,
+  { path: "data.object.status", type: "string", required: true },
+  { path: "data.object.customer", type: "string", required: true },
+  { path: "data.object.cancel_at_period_end", type: "boolean", required: false },
+  { path: "data.object.cancel_at", type: "number", required: false },
+  { path: "data.object.canceled_at", type: "number", required: false },
+  { path: "data.object.ended_at", type: "number", required: false },
+  { path: "data.object.start_date", type: "number", required: false },
+  { path: "data.object.trial_end", type: "number", required: false }
+];
+var IDENTITY_CLAIMS_SETTING = "claims";
+var IDENTITY_CLAIMS_SETTING_FIELD = {
+  key: IDENTITY_CLAIMS_SETTING,
+  label: "Claims",
+  type: "text",
+  maxLength: 512,
+  required: false,
+  helpText: "The Claims your Policies read off an End user\u2019s token, by name, separated by commas: `plan, role`. A Claim not named here is never read; one named and missing from a token is absent."
+};
+var EXTENSION_SURFACES = {
+  webhook: {
+    settings: [],
+    actions: {
+      post: {
+        action: "post",
+        // An Automation step's (REL-3849): the step names where and what, and the send is signed with
+        // the Connection's signing secret, its custom headers sent too.
+        step: {
+          input: [
+            {
+              key: "url",
+              type: "url",
+              required: true,
+              description: "Where to POST: an http(s) URL."
+            },
+            {
+              key: "headers",
+              type: "headers",
+              required: false,
+              description: "Request headers, sent after the Connection\u2019s custom headers. The headers RelyIO signs with are its own."
+            },
+            {
+              key: "body",
+              type: "json",
+              required: false,
+              description: "The JSON body. Absent, the body is `null`."
+            }
+          ],
+          output: [
+            {
+              key: "status",
+              type: "number",
+              required: true,
+              description: "The HTTP status the receiver answered."
+            },
+            {
+              key: "body",
+              type: "text",
+              required: false,
+              description: "The first kilobyte of the receiver\u2019s answer, as text."
+            }
+          ],
+          sample: { status: 200, body: "" },
+          // The webhook contract: a receiver dedupes on the delivery id, which carries `<runId>:<step>`.
+          idempotencyHeader: WEBHOOK_EVENT_ID_HEADER
+        }
+      }
+    },
+    triggers: {},
+    fieldKinds: {},
+    recordTypes: {}
+  },
+  vercel: {
+    settings: [],
+    actions: {},
+    triggers: {
+      deploymentSucceeded: {
+        trigger: DEPLOYMENT_SUCCEEDED,
+        payload: [
+          { path: "payload.deployment.id", type: "string", required: true },
+          { path: "payload.deployment.url", type: "string", required: false },
+          // A deployment made from the Vercel CLI names no commit: it is delivered, and links nothing.
+          { path: "payload.deployment.meta.githubCommitSha", type: "string", required: false },
+          { path: "payload.deployment.meta.githubCommitRef", type: "string", required: false },
+          { path: "payload.project.id", type: "string", required: true },
+          // `null` for a preview deployment, `production` for production.
+          { path: "payload.target", type: "string", required: false }
+        ]
+      }
+    },
+    fieldKinds: {},
+    recordTypes: {}
+  },
+  netlify: {
+    settings: [],
+    actions: {},
+    triggers: {
+      deploymentSucceeded: {
+        trigger: DEPLOYMENT_SUCCEEDED,
+        payload: [
+          { path: "id", type: "string", required: true },
+          { path: "site_id", type: "string", required: true },
+          { path: "state", type: "string", required: true },
+          // `production`, `deploy-preview` or `branch-deploy`.
+          { path: "context", type: "string", required: false },
+          { path: "branch", type: "string", required: false },
+          // A deploy from the Netlify CLI names no commit: it is delivered, and links nothing.
+          { path: "commit_ref", type: "string", required: false },
+          { path: "deploy_ssl_url", type: "string", required: false }
+        ]
+      }
+    },
+    fieldKinds: {},
+    recordTypes: {}
+  },
+  // Triggers only (spec 3, REL-3853): Stripe tells RelyIO a payment succeeded, failed, a Checkout
+  // completed or a charge was refunded — and, since spec 4 (REL-3893), that a subscription was
+  // created, changed or ended. No Action: checkout keeps calling Stripe from a Function with its own
+  // Secret (spec 2).
+  stripe: {
+    settings: [],
+    actions: {},
+    triggers: {
+      paymentIntentSucceeded: {
+        trigger: "payment_intent.succeeded",
+        payload: [
+          ...STRIPE_EVENT_FIELDS,
+          { path: "data.object.amount", type: "number", required: true },
+          { path: "data.object.amount_received", type: "number", required: true },
+          { path: "data.object.currency", type: "string", required: true },
+          { path: "data.object.status", type: "string", required: true },
+          { path: "data.object.customer", type: "string", required: false },
+          { path: "data.object.latest_charge", type: "string", required: false },
+          { path: "data.object.receipt_email", type: "string", required: false }
+        ]
+      },
+      paymentIntentPaymentFailed: {
+        trigger: "payment_intent.payment_failed",
+        payload: [
+          ...STRIPE_EVENT_FIELDS,
+          { path: "data.object.amount", type: "number", required: true },
+          { path: "data.object.currency", type: "string", required: true },
+          { path: "data.object.status", type: "string", required: true },
+          { path: "data.object.customer", type: "string", required: false },
+          { path: "data.object.last_payment_error.code", type: "string", required: false },
+          { path: "data.object.last_payment_error.message", type: "string", required: false }
+        ]
+      },
+      checkoutSessionCompleted: {
+        trigger: "checkout.session.completed",
+        payload: [
+          ...STRIPE_EVENT_FIELDS,
+          { path: "data.object.mode", type: "string", required: true },
+          { path: "data.object.payment_status", type: "string", required: true },
+          { path: "data.object.amount_total", type: "number", required: false },
+          { path: "data.object.currency", type: "string", required: false },
+          { path: "data.object.payment_intent", type: "string", required: false },
+          { path: "data.object.customer", type: "string", required: false },
+          { path: "data.object.customer_details.email", type: "string", required: false },
+          { path: "data.object.client_reference_id", type: "string", required: false }
+        ]
+      },
+      chargeRefunded: {
+        trigger: "charge.refunded",
+        payload: [
+          ...STRIPE_EVENT_FIELDS,
+          { path: "data.object.amount", type: "number", required: true },
+          { path: "data.object.amount_refunded", type: "number", required: true },
+          { path: "data.object.currency", type: "string", required: true },
+          { path: "data.object.refunded", type: "boolean", required: true },
+          { path: "data.object.payment_intent", type: "string", required: false }
+        ]
+      },
+      customerSubscriptionCreated: {
+        trigger: "customer.subscription.created",
+        payload: STRIPE_SUBSCRIPTION_FIELDS
+      },
+      customerSubscriptionUpdated: {
+        trigger: "customer.subscription.updated",
+        payload: [
+          ...STRIPE_SUBSCRIPTION_FIELDS,
+          // The status it had before this change, when the change was to its status
+          { path: "data.previous_attributes.status", type: "string", required: false }
+        ]
+      },
+      customerSubscriptionDeleted: {
+        trigger: "customer.subscription.deleted",
+        payload: STRIPE_SUBSCRIPTION_FIELDS
+      }
+    },
+    fieldKinds: {},
+    recordTypes: {}
+  },
+  slack: {
+    settings: [
+      {
+        key: "defaultChannel",
+        label: "Default channel",
+        type: "text",
+        prefix: "#",
+        maxLength: 80,
+        required: false,
+        helpText: "The channel a message goes to when its step names none: #orders."
+      }
+    ],
+    actions: {
+      postMessage: {
+        action: "postMessage",
+        // Spec 3, "Slack" (REL-3855): `channel` defaults to the `defaultChannel` setting, `text`,
+        // optional blocks; posted as RelyIO's app's bot with the Connection's bot token.
+        step: {
+          input: [
+            {
+              key: "channel",
+              type: "text",
+              required: false,
+              setting: "defaultChannel",
+              description: "The channel to post to, by name (#orders-review) or id. Absent, the defaultChannel setting."
+            },
+            {
+              key: "text",
+              type: "text",
+              required: true,
+              description: "The message, in Slack\u2019s mrkdwn; also the notification text when blocks are sent."
+            },
+            {
+              key: "blocks",
+              type: "json",
+              required: false,
+              description: "Block Kit blocks to post instead of plain text."
+            }
+          ],
+          output: [
+            {
+              key: "ts",
+              type: "text",
+              required: true,
+              description: "The posted message\u2019s timestamp, Slack\u2019s id for it in its channel."
+            },
+            {
+              key: "channel",
+              type: "text",
+              required: true,
+              description: "The channel the message was posted to, as Slack answered it."
+            }
+          ],
+          // A Recorded post hands this on, with the channel it would have posted to in place of
+          // `sample` (the events worker's Slack sender, `sampleOf`).
+          sample: { ts: "sample", channel: "sample" },
+          // Slack keys nothing to dedupe a post on: a post that succeeded is never sent again, and
+          // one whose outcome is unknown is not either.
+          idempotencyHeader: null
+        }
+      }
+    },
+    triggers: {},
+    fieldKinds: {},
+    recordTypes: {}
+  },
+  // Resend (spec 3, REL-3854): an email, its Files attached. The sender is the step's, else the
+  // Project's `from`; `html` or `text` is the body, at least one of them.
+  resend: {
+    settings: [
+      {
+        key: "from",
+        label: "From",
+        type: "text",
+        maxLength: 320,
+        required: false,
+        helpText: "Who an email is from when its step names no sender: an address on a domain verified in Resend, such as Acme <orders@acme.shop>."
+      }
+    ],
+    actions: {
+      send: {
+        action: "send",
+        step: {
+          input: [
+            {
+              key: "to",
+              type: "text",
+              required: true,
+              description: "Who the email is to: an address, or several separated by commas."
+            },
+            { key: "subject", type: "text", required: true, description: "The subject line." },
+            {
+              key: "html",
+              type: "text",
+              required: false,
+              description: "The body as HTML. `html` or `text` is required, or both."
+            },
+            {
+              key: "text",
+              type: "text",
+              required: false,
+              description: "The body as plain text. `html` or `text` is required, or both."
+            },
+            {
+              key: "from",
+              type: "text",
+              required: false,
+              setting: "from",
+              description: "Who the email is from: an address on a domain verified in Resend. Absent, the Project\u2019s `from` setting; with neither, the send is refused."
+            },
+            {
+              key: "attachments",
+              type: "files",
+              required: false,
+              maxBytes: RESEND_ATTACHMENTS_MAX_BYTES,
+              description: "Files a Record of the run\u2019s Dataset holds (`event.record.invoice`), attached under their names. The send point reads their bytes."
+            }
+          ],
+          output: [
+            {
+              key: "id",
+              type: "text",
+              required: true,
+              description: "The id Resend gave the email."
+            }
+          ],
+          sample: { id: "resend-sample" },
+          // Resend dedupes a send on this header for 24 hours; it carries `<runId>:<step>`
+          idempotencyHeader: RESEND_IDEMPOTENCY_HEADER
+        }
+      }
+    },
+    triggers: {},
+    fieldKinds: {},
+    recordTypes: {}
+  },
+  /**
+   * The plain OIDC identity source (spec 4, REL-3880): any issuer that publishes a discovery
+   * document — Auth0, Supabase Auth, an own one. Its Connection, per Environment, holds the issuer
+   * and the audience; it has no Action and no Trigger. Its one setting is the Claims the Project
+   * relies on ({@link IDENTITY_CLAIMS_SETTING}).
+   */
+  oidc: {
+    settings: [IDENTITY_CLAIMS_SETTING_FIELD],
+    actions: {},
+    triggers: {},
+    fieldKinds: {},
+    recordTypes: {}
+  },
+  /**
+   * Clerk as an identity source (spec 4, REL-3881): its Connection, per Environment, holds the
+   * instance's publishable key — which encodes the Frontend API, and so the issuer — its secret key,
+   * its webhook signing secret and the origins its tokens may be minted for. Its one setting so far
+   * is the Claims the Project relies on, as `oidc`'s; its Triggers come with its users (spec 4, E3).
+   *
+   * Its Action, `updateUserMetadata` (REL-3893), merges `publicMetadata` into a Clerk user's public
+   * metadata with the Connection's secret key — the newsletter's `syncPlan` sets `{ plan: 'paid' }` —
+   * and a session token carries it once the customer adds the Claim to Clerk's session token
+   * (`"plan": "{{user.public_metadata.plan}}"`, the Clerk Extension's guide).
+   */
+  clerk: {
+    settings: [IDENTITY_CLAIMS_SETTING_FIELD],
+    actions: {
+      updateUserMetadata: {
+        action: "updateUserMetadata",
+        step: {
+          input: [
+            {
+              key: "userId",
+              type: "text",
+              required: true,
+              description: "The Clerk user\u2019s id, `user_\u2026`: a token\u2019s `sub`."
+            },
+            {
+              key: "publicMetadata",
+              type: "json",
+              required: true,
+              description: "An object merged into the user\u2019s public metadata: each key given replaces theirs, a nested object is merged, and a key set to `null` is removed. Keys not given are kept."
+            }
+          ],
+          output: [
+            {
+              key: "id",
+              type: "text",
+              required: true,
+              description: "The id of the user Clerk updated."
+            }
+          ],
+          sample: { id: "user_sample" },
+          // Clerk's Backend API keys nothing to dedupe a request on: an update that succeeded is never
+          // sent again, and one whose outcome is unknown is not either.
+          idempotencyHeader: null
+        }
+      }
+    },
+    triggers: {},
+    /**
+     * Its one field kind (REL-3894): `clerk.userRef()`, a reference to `clerkUser` that the Studio
+     * picks by name or email rather than by pasting an id.
+     */
+    fieldKinds: {
+      userRef: {
+        base: { type: "reference", to: "clerkUser" },
+        picker: {
+          search: ["email", "firstName", "lastName"],
+          title: ["firstName", "lastName"],
+          description: "email",
+          image: "imageUrl"
+        }
+      }
+    },
+    /** Its Managed user type (REL-3888): `clerk.user`, the Record kept for each Clerk user. */
+    recordTypes: { user: "clerkUser" }
+  }
+};
+var CONTRIBUTED_FIELD_KIND_OPTION = "fieldKind";
+function contributedFieldKindName(extension, kind) {
+  return `${extension}.${kind}`;
+}
+chunkL6DXCKVQ_cjs.__name(contributedFieldKindName, "contributedFieldKindName");
+var EXTENSION_BACKFILL_REFUSALS = [
+  "connection-gone",
+  "connection-inactive",
+  "connection-unreadable",
+  "vendor-refused",
+  "vendor-unavailable",
+  "vendor-answer-unreadable",
+  "extension-not-backfilled"
+];
+new Set(EXTENSION_BACKFILL_REFUSALS);
+
+exports.CONTRIBUTED_FIELD_KIND_OPTION = CONTRIBUTED_FIELD_KIND_OPTION;
+exports.END_USER_TOKEN_REFUSAL_REASONS = END_USER_TOKEN_REFUSAL_REASONS;
+exports.EXTENSION_SURFACES = EXTENSION_SURFACES;
+exports.FRESH_PARAMETER = FRESH_PARAMETER;
+exports.HEADER_END_USER = HEADER_END_USER;
+exports.HEADER_IDEMPOTENCY_KEY = HEADER_IDEMPOTENCY_KEY;
+exports.HEADER_IF_MATCH = HEADER_IF_MATCH;
+exports.HEADER_RETRY_AFTER = HEADER_RETRY_AFTER;
+exports.PREVIEW_DATASET_PREFIX = PREVIEW_DATASET_PREFIX;
+exports.VISITOR_ADMISSION_RETRY_AFTER_SECONDS = VISITOR_ADMISSION_RETRY_AFTER_SECONDS;
+exports.VISITOR_CLOSE_CODES = VISITOR_CLOSE_CODES;
+exports.VISITOR_CLOSE_RETRY = VISITOR_CLOSE_RETRY;
+exports.VISITOR_FRAMES = VISITOR_FRAMES;
+exports.VISITOR_KEEPALIVE = VISITOR_KEEPALIVE;
+exports.VISITOR_LIVE_PATH = VISITOR_LIVE_PATH;
+exports.VISITOR_POLL_INTERVAL_MS = VISITOR_POLL_INTERVAL_MS;
+exports.VISITOR_POLL_RETRY = VISITOR_POLL_RETRY;
+exports.VISITOR_QUERY = VISITOR_QUERY;
+exports.contributedFieldKindName = contributedFieldKindName;
+exports.entityTag = entityTag;
+exports.parseVisitorFrame = parseVisitorFrame;
+exports.previewDatasetSlug = previewDatasetSlug;
+exports.readVisitorPollAnswer = readVisitorPollAnswer;
+//# sourceMappingURL=chunk-NN45CSPZ.cjs.map
+//# sourceMappingURL=chunk-NN45CSPZ.cjs.map