@scalekit-sdk/node 2.2.0-beta.1 → 2.2.0-beta.3

package/src/pkg/grpc/scalekit/v1/tools/tools_connect.ts

@@ -1,9 +1,9 @@
-// @generated by protoc-gen-connect-es v1.4.0 with parameter "target=ts"
+// @generated by protoc-gen-connect-es v1.7.0 with parameter "target=ts"
 // @generated from file scalekit/v1/tools/tools.proto (package scalekit.v1.tools, syntax proto3)
 /* eslint-disable */
 // @ts-nocheck
 
-import { CreateToolRequest, CreateToolResponse, DeleteToolRequest, ExecuteToolRequest, ExecuteToolResponse, ListScopedToolsRequest, ListScopedToolsResponse, ListToolsRequest, ListToolsResponse, SetToolDefaultRequest, SetToolDefaultResponse, UpdateToolRequest, UpdateToolResponse } from "./tools_pb.js";
+import { CreateToolRequest, CreateToolResponse, DeleteToolRequest, ExecuteToolRequest, ExecuteToolResponse, ListAvailableToolsRequest, ListAvailableToolsResponse, ListScopedToolsRequest, ListScopedToolsResponse, ListToolsRequest, ListToolsResponse, SetToolDefaultRequest, SetToolDefaultResponse, UpdateToolRequest, UpdateToolResponse } from "./tools_pb.js";
 import { Empty, MethodKind } from "@bufbuild/protobuf";
 
 /**
@@ -39,6 +39,15 @@ export const ToolService = {
       O: ListScopedToolsResponse,
       kind: MethodKind.Unary,
     },
+    /**
+     * @generated from rpc scalekit.v1.tools.ToolService.ListAvailableTools
+     */
+    listAvailableTools: {
+      name: "ListAvailableTools",
+      I: ListAvailableToolsRequest,
+      O: ListAvailableToolsResponse,
+      kind: MethodKind.Unary,
+    },
     /**
      * @generated from rpc scalekit.v1.tools.ToolService.SetToolDefault
      */

package/src/pkg/grpc/scalekit/v1/tools/tools_pb.ts

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v1.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v1.10.1 with parameter "target=ts"
 // @generated from file scalekit/v1/tools/tools.proto (package scalekit.v1.tools, syntax proto3)
 /* eslint-disable */
 // @ts-nocheck
@@ -845,3 +845,107 @@ export class ScopedToolFilter extends Message<ScopedToolFilter> {
   }
 }
 
+/**
+ * @generated from message scalekit.v1.tools.ListAvailableToolsRequest
+ */
+export class ListAvailableToolsRequest extends Message<ListAvailableToolsRequest> {
+  /**
+   * @generated from field: string identifier = 1;
+   */
+  identifier = "";
+
+  /**
+   * @generated from field: uint32 page_size = 2;
+   */
+  pageSize = 0;
+
+  /**
+   * @generated from field: string page_token = 3;
+   */
+  pageToken = "";
+
+  constructor(data?: PartialMessage<ListAvailableToolsRequest>) {
+    super();
+    proto3.util.initPartial(data, this);
+  }
+
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "scalekit.v1.tools.ListAvailableToolsRequest";
+  static readonly fields: FieldList = proto3.util.newFieldList(() => [
+    { no: 1, name: "identifier", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 2, name: "page_size", kind: "scalar", T: 13 /* ScalarType.UINT32 */ },
+    { no: 3, name: "page_token", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
+
+  static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListAvailableToolsRequest {
+    return new ListAvailableToolsRequest().fromBinary(bytes, options);
+  }
+
+  static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListAvailableToolsRequest {
+    return new ListAvailableToolsRequest().fromJson(jsonValue, options);
+  }
+
+  static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListAvailableToolsRequest {
+    return new ListAvailableToolsRequest().fromJsonString(jsonString, options);
+  }
+
+  static equals(a: ListAvailableToolsRequest | PlainMessage<ListAvailableToolsRequest> | undefined, b: ListAvailableToolsRequest | PlainMessage<ListAvailableToolsRequest> | undefined): boolean {
+    return proto3.util.equals(ListAvailableToolsRequest, a, b);
+  }
+}
+
+/**
+ * @generated from message scalekit.v1.tools.ListAvailableToolsResponse
+ */
+export class ListAvailableToolsResponse extends Message<ListAvailableToolsResponse> {
+  /**
+   * @generated from field: string next_page_token = 1;
+   */
+  nextPageToken = "";
+
+  /**
+   * @generated from field: uint32 total_size = 2;
+   */
+  totalSize = 0;
+
+  /**
+   * @generated from field: string prev_page_token = 3;
+   */
+  prevPageToken = "";
+
+  /**
+   * @generated from field: repeated scalekit.v1.tools.Tool tools = 4;
+   */
+  tools: Tool[] = [];
+
+  constructor(data?: PartialMessage<ListAvailableToolsResponse>) {
+    super();
+    proto3.util.initPartial(data, this);
+  }
+
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "scalekit.v1.tools.ListAvailableToolsResponse";
+  static readonly fields: FieldList = proto3.util.newFieldList(() => [
+    { no: 1, name: "next_page_token", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 2, name: "total_size", kind: "scalar", T: 13 /* ScalarType.UINT32 */ },
+    { no: 3, name: "prev_page_token", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+    { no: 4, name: "tools", kind: "message", T: Tool, repeated: true },
+  ]);
+
+  static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListAvailableToolsResponse {
+    return new ListAvailableToolsResponse().fromBinary(bytes, options);
+  }
+
+  static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListAvailableToolsResponse {
+    return new ListAvailableToolsResponse().fromJson(jsonValue, options);
+  }
+
+  static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListAvailableToolsResponse {
+    return new ListAvailableToolsResponse().fromJsonString(jsonString, options);
+  }
+
+  static equals(a: ListAvailableToolsResponse | PlainMessage<ListAvailableToolsResponse> | undefined, b: ListAvailableToolsResponse | PlainMessage<ListAvailableToolsResponse> | undefined): boolean {
+    return proto3.util.equals(ListAvailableToolsResponse, a, b);
+  }
+}
+

package/src/pkg/grpc/scalekit/v1/users/users_connect.ts

@@ -1,9 +1,9 @@
-// @generated by protoc-gen-connect-es v1.4.0 with parameter "target=ts"
+// @generated by protoc-gen-connect-es v1.7.0 with parameter "target=ts"
 // @generated from file scalekit/v1/users/users.proto (package scalekit.v1.users, syntax proto3)
 /* eslint-disable */
 // @ts-nocheck
 
-import { AssignUserRolesRequest, AssignUserRolesResponse, CreateMembershipRequest, CreateMembershipResponse, CreateUserAndMembershipRequest, CreateUserAndMembershipResponse, DeleteMembershipRequest, DeleteUserRequest, GetCurrentUserRequest, GetCurrentUserResponse, GetUserRequest, GetUserResponse, ListOrganizationUsersRequest, ListOrganizationUsersResponse, ListUserPermissionsRequest, ListUserPermissionsResponse, ListUserRolesRequest, ListUserRolesResponse, ListUsersRequest, ListUsersResponse, RemoveUserRoleRequest, ResendInviteRequest, ResendInviteResponse, SearchOrganizationUsersRequest, SearchOrganizationUsersResponse, SearchUsersRequest, SearchUsersResponse, UpdateMembershipRequest, UpdateMembershipResponse, UpdateUserRequest, UpdateUserResponse } from "./users_pb.js";
+import { AssignUserRolesRequest, AssignUserRolesResponse, CreateMembershipRequest, CreateMembershipResponse, CreateUserAndMembershipRequest, CreateUserAndMembershipResponse, DeleteMembershipRequest, DeleteUserRequest, GetCurrentUserRequest, GetCurrentUserResponse, GetSupportHashResponse, GetUserRequest, GetUserResponse, ListOrganizationUsersRequest, ListOrganizationUsersResponse, ListUserPermissionsRequest, ListUserPermissionsResponse, ListUserRolesRequest, ListUserRolesResponse, ListUsersRequest, ListUsersResponse, RemoveUserRoleRequest, ResendInviteRequest, ResendInviteResponse, SearchOrganizationUsersRequest, SearchOrganizationUsersResponse, SearchUsersRequest, SearchUsersResponse, UpdateMembershipRequest, UpdateMembershipResponse, UpdateUserRequest, UpdateUserResponse } from "./users_pb.js";
 import { Empty, MethodKind } from "@bufbuild/protobuf";
 
 /**
@@ -32,6 +32,15 @@ export const UserService = {
       O: GetCurrentUserResponse,
       kind: MethodKind.Unary,
     },
+    /**
+     * @generated from rpc scalekit.v1.users.UserService.GetSupportHash
+     */
+    getSupportHash: {
+      name: "GetSupportHash",
+      I: Empty,
+      O: GetSupportHashResponse,
+      kind: MethodKind.Unary,
+    },
     /**
      * @generated from rpc scalekit.v1.users.UserService.ListUsers
      */

package/src/pkg/grpc/scalekit/v1/users/users_pb.ts

@@ -1,4 +1,4 @@
-// @generated by protoc-gen-es v1.10.0 with parameter "target=ts"
+// @generated by protoc-gen-es v1.10.1 with parameter "target=ts"
 // @generated from file scalekit/v1/users/users.proto (package scalekit.v1.users, syntax proto3)
 /* eslint-disable */
 // @ts-nocheck
@@ -2112,6 +2112,43 @@ export class Permission extends Message<Permission> {
   }
 }
 
+/**
+ * @generated from message scalekit.v1.users.GetSupportHashResponse
+ */
+export class GetSupportHashResponse extends Message<GetSupportHashResponse> {
+  /**
+   * @generated from field: string support_hash = 1;
+   */
+  supportHash = "";
+
+  constructor(data?: PartialMessage<GetSupportHashResponse>) {
+    super();
+    proto3.util.initPartial(data, this);
+  }
+
+  static readonly runtime: typeof proto3 = proto3;
+  static readonly typeName = "scalekit.v1.users.GetSupportHashResponse";
+  static readonly fields: FieldList = proto3.util.newFieldList(() => [
+    { no: 1, name: "support_hash", kind: "scalar", T: 9 /* ScalarType.STRING */ },
+  ]);
+
+  static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetSupportHashResponse {
+    return new GetSupportHashResponse().fromBinary(bytes, options);
+  }
+
+  static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetSupportHashResponse {
+    return new GetSupportHashResponse().fromJson(jsonValue, options);
+  }
+
+  static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetSupportHashResponse {
+    return new GetSupportHashResponse().fromJsonString(jsonString, options);
+  }
+
+  static equals(a: GetSupportHashResponse | PlainMessage<GetSupportHashResponse> | undefined, b: GetSupportHashResponse | PlainMessage<GetSupportHashResponse> | undefined): boolean {
+    return proto3.util.equals(GetSupportHashResponse, a, b);
+  }
+}
+
 /**
  * @generated from message scalekit.v1.users.ListUserPermissionsResponse
  */

package/src/scalekit.ts

@@ -17,6 +17,7 @@ import SessionClient from './session';
 import RoleClient from './role';
 import PermissionClient from './permission';
 import WebAuthnClient from './webauthn';
+import ActionsClient from './actions';
 import { IdpInitiatedLoginClaims, IdTokenClaim, User } from './types/auth';
 import { AuthenticationOptions, AuthenticationResponse, AuthorizationUrlOptions, GrantType, LogoutUrlOptions, RefreshTokenResponse ,TokenValidationOptions } from './types/scalekit';
 import { WebhookVerificationError, ScalekitValidateTokenFailureException } from './errors/base-exception';
@@ -64,6 +65,7 @@ export default class ScalekitClient {
   readonly domain: DomainClient;
   readonly tools: ToolsClient;
   readonly connectedAccounts: ConnectedAccountsClient;
+  readonly actions: ActionsClient;
   readonly directory: DirectoryClient;
   readonly passwordless: PasswordlessClient;
   readonly user: UserClient;
@@ -97,6 +99,11 @@ export default class ScalekitClient {
       this.grpcConnect,
       this.coreClient
     );
+    this.actions = new ActionsClient(
+      this.tools,
+      this.connectedAccounts,
+      this.coreClient
+    );
     this.directory = new DirectoryClient(this.grpcConnect, this.coreClient);
     this.passwordless = new PasswordlessClient(
       this.grpcConnect,

package/src/tools.ts

@@ -4,6 +4,8 @@ import GrpcConnect from "./connect";
 import CoreClient from "./core";
 import { ToolService } from "./pkg/grpc/scalekit/v1/tools/tools_connect";
 import {
+  ListAvailableToolsRequest,
+  ListAvailableToolsResponse,
   ExecuteToolRequest,
   ExecuteToolResponse,
   Filter,
@@ -69,26 +71,58 @@ export default class ToolsClient {
    *
    * @param identifier Connected account identifier to scope the tools list (for example,
    *                   a workspace identifier or email).
-   * @param options Optional filter and pagination parameters
-   * @param options.filter Filter configuration for scoped tools (providers, tool names, connection names).
+   * @param options Filter and pagination parameters
+   * @param options.filter Filter configuration for scoped tools (providers, tool names, connection names). Required.
    * @param options.pageSize Maximum number of tools to return per page.
    * @param options.pageToken Token from a previous `listScopedTools` response for pagination.
    */
   async listScopedTools(
     identifier: string,
-    options?: {
-      filter?: PartialMessage<ScopedToolFilter>;
+    options: {
+      filter: PartialMessage<ScopedToolFilter>;
       pageSize?: number;
       pageToken?: string;
     }
   ): Promise<ListScopedToolsResponse> {
     const request: PartialMessage<ListScopedToolsRequest> = {
       identifier,
+      filter: options.filter as ScopedToolFilter,
     };
 
-    if (options?.filter) {
-      request.filter = options.filter as ScopedToolFilter;
+    if (options.pageSize !== undefined) {
+      request.pageSize = options.pageSize;
     }
+    if (options.pageToken) {
+      request.pageToken = options.pageToken;
+    }
+
+    return this.coreClient.connectExec(this.client.listScopedTools, request);
+  }
+
+  /**
+   * Lists tools that are available for a specific connected account identifier.
+   *
+   * This is similar to `listScopedTools` but returns the tools that can be
+   * made available for a given identifier, rather than the tools that are
+   * already scoped to it.
+   *
+   * @param identifier Connected account identifier to scope the available tools list (for example,
+   *                   a workspace identifier or email).
+   * @param options Optional pagination parameters
+   * @param options.pageSize Maximum number of tools to return per page.
+   * @param options.pageToken Token from a previous `listAvailableTools` response for pagination.
+   */
+  async listAvailableTools(
+    identifier: string,
+    options?: {
+      pageSize?: number;
+      pageToken?: string;
+    }
+  ): Promise<ListAvailableToolsResponse> {
+    const request: PartialMessage<ListAvailableToolsRequest> = {
+      identifier,
+    };
+
     if (options?.pageSize !== undefined) {
       request.pageSize = options.pageSize;
     }
@@ -96,7 +130,10 @@ export default class ToolsClient {
       request.pageToken = options.pageToken;
     }
 
-    return this.coreClient.connectExec(this.client.listScopedTools, request);
+    return this.coreClient.connectExec(
+      this.client.listAvailableTools,
+      request
+    );
   }
 
   /**

package/tests/actions.test.ts

@@ -0,0 +1,356 @@
+import ScalekitClient from "../src/scalekit";
+import { describe, it, expect, beforeEach, afterEach } from "@jest/globals";
+import { TestDataGenerator, TestOrganizationManager } from "./utils/test-data";
+import {
+  AuthorizationDetails,
+  CreateConnectedAccount,
+  OauthToken,
+} from "../src/pkg/grpc/scalekit/v1/connected_accounts/connected_accounts_pb";
+
+declare const global: {
+  client: ScalekitClient;
+};
+
+describe("Actions", () => {
+  let client: ScalekitClient;
+  let testOrg: string;
+
+  // Happy-path assumptions for the test environment:
+  // - A GMAIL connector named "GMAIL-test" exists.
+  // - A connected account with identifier "default" is ACTIVE for that connector.
+  // - A tool named "gmail_fetch_mails" is available for that connection.
+  const GMAIL_CONNECTION_NAME = "GMAIL-test";
+  const GMAIL_IDENTIFIER = "default";
+  const GMAIL_TOOL_NAME = "gmail_fetch_mails";
+  const USER_PROFILE_PATH = "/v1/users/me/profile";
+  const FRESHDESK_CONNECTION_NAME = "freshdesk";
+
+  beforeEach(async () => {
+    client = global.client;
+    testOrg = await TestOrganizationManager.createTestOrganization(client);
+  });
+
+  afterEach(async () => {
+    await TestOrganizationManager.cleanupTestOrganization(client, testOrg);
+  });
+
+  it("should expose actions on ScalekitClient", () => {
+    expect(client.actions).toBeDefined();
+  });
+
+  it("should expose key connected-account helper methods", () => {
+    
+    expect(typeof client.actions.createConnectedAccount).toBe("function");
+    expect(typeof client.actions.getOrCreateConnectedAccount).toBe("function");
+    expect(typeof client.actions.updateConnectedAccount).toBe("function");
+    expect(typeof client.actions.deleteConnectedAccount).toBe("function");
+    expect(typeof client.actions.getConnectedAccount).toBe("function");
+  });
+
+  describe("executeTool", () => {
+    it("should delegate to tools.executeTool with basic params", async () => {
+      try {
+        await client.actions.executeTool({
+          toolName: "test_tool",
+          toolInput: { key: "value" },
+        });
+      } catch (error: any) {
+        expect(error).toBeDefined();
+        expect(error.message || error.toString()).toBeDefined();
+      }
+    });
+
+    it("should execute a Gmail tool successfully via actions", async () => {
+      const toolInput = { max_results: 1 };
+
+      const response = await client.actions.executeTool({
+        toolName: GMAIL_TOOL_NAME,
+        toolInput,
+        identifier: GMAIL_IDENTIFIER,
+        connector: GMAIL_CONNECTION_NAME,
+      });
+
+      expect(response).toBeDefined();
+      // We expect a non-empty executionId and some data from the tool.
+      expect(typeof response.executionId).toBe("string");
+      expect(response.executionId.length).toBeGreaterThan(0);
+      expect(response.data).toBeDefined();
+    });
+  });
+
+  describe("getAuthorizationLink", () => {
+    it("should call underlying magic link API", async () => {
+      try {
+        const response = await client.actions.getAuthorizationLink({
+          connectionName: "test_connector",
+          identifier: "test_identifier",
+          organizationId: testOrg,
+        });
+
+        expect(response).toBeDefined();
+      } catch (error: any) {
+        expect(error).toBeDefined();
+      }
+    });
+  });
+
+  describe("createConnectedAccount", () => {
+    it("should construct CreateConnectedAccount payload", async () => {
+      const oauthToken = new OauthToken({
+        accessToken: "test_access_token",
+      });
+
+      const authorizationDetails = new AuthorizationDetails({
+        details: {
+          case: "oauthToken",
+          value: oauthToken,
+        },
+      });
+
+      try {
+        const response = await client.actions.createConnectedAccount({
+          connectionName: "test_connector",
+          identifier: `test_${Date.now()}`,
+          authorizationDetails,
+          organizationId: testOrg,
+        });
+
+        expect(response).toBeDefined();
+      } catch (error: any) {
+        expect(error).toBeDefined();
+      }
+    });
+
+    it("should validate required parameters", async () => {
+      const oauthToken = new OauthToken({
+        accessToken: "test_access_token",
+      });
+
+      const authorizationDetails = new AuthorizationDetails({
+        details: {
+          case: "oauthToken",
+          value: oauthToken,
+        },
+      });
+
+      // Missing connectionName
+      await expect(
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        client.actions.createConnectedAccount({
+          connectionName: "" as any,
+          identifier: "test_id",
+          authorizationDetails,
+        } as any)
+      ).rejects.toThrow("connectionName is required");
+
+      // Missing identifier
+      await expect(
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        client.actions.createConnectedAccount({
+          connectionName: "GMAIL",
+          identifier: "" as any,
+          authorizationDetails,
+        } as any)
+      ).rejects.toThrow("identifier is required");
+    });
+  });
+
+  describe("getOrCreateConnectedAccount", () => {
+    it("should delegate validation to underlying client", async () => {
+      // connector / connectionName required
+      await expect(
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        client.actions.getOrCreateConnectedAccount({
+          connectionName: "" as any,
+          identifier: "user_123",
+        } as any)
+      ).rejects.toThrow("connector is required");
+
+      // identifier required
+      await expect(
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        client.actions.getOrCreateConnectedAccount({
+          connectionName: "gmail",
+          identifier: "" as any,
+        } as any)
+      ).rejects.toThrow("identifier is required");
+    });
+  });
+
+  describe("request", () => {
+    it("should validate required parameters", async () => {
+      await expect(
+        client.actions.request({
+          connectionName: "",
+          identifier: "",
+          path: "",
+        })
+      ).rejects.toThrow();
+    });
+
+    it("should fetch user profile successfully via proxy request", async () => {
+      const response = await client.actions.request({
+        connectionName: GMAIL_CONNECTION_NAME,
+        identifier: GMAIL_IDENTIFIER,
+        path: USER_PROFILE_PATH,
+        method: "GET",
+      });
+
+      expect(response).toBeDefined();
+      expect(response.status).toBeGreaterThanOrEqual(200);
+      expect(response.status).toBeLessThan(300);
+      // Response data should be JSON-serializable user profile shape.
+      expect(response.data).toBeDefined();
+      expect(typeof response.data).toBe("object");
+    });
+  });
+
+  describe("connected account lifecycle (Gmail OAuth)", () => {
+    it("should create, get, update, and delete a Gmail connected account with apiConfig", async () => {
+      const uniqueId = TestDataGenerator.generateUniqueId();
+      const identifier = `test_actions_gmail_${uniqueId}`;
+
+      const oauthToken = new OauthToken({
+        accessToken: "test_access_token_api",
+        refreshToken: "test_refresh_token_api",
+        scopes: ["read", "write"],
+      });
+
+      const authorizationDetails = new AuthorizationDetails({
+        details: {
+          case: "oauthToken",
+          value: oauthToken,
+        },
+      });
+
+      const initialApiConfig = {
+        version: "v1.0",
+        domain: "gmail.com",
+        api_endpoint: "https://gmail.googleapis.com",
+        custom_auth_header: "Bearer",
+      };
+
+      // Create
+      const createResponse = await client.actions.createConnectedAccount({
+        connectionName: GMAIL_CONNECTION_NAME,
+        identifier,
+        authorizationDetails,
+        apiConfig: initialApiConfig,
+      });
+
+      expect(createResponse.connectedAccount).toBeDefined();
+      const created = createResponse.connectedAccount!;
+      expect(created.identifier).toBe(identifier);
+      expect(created.apiConfig).toBeDefined();
+
+      // Get via actions wrapper
+      const getResponse = await client.actions.getConnectedAccount({
+        connectionName: GMAIL_CONNECTION_NAME,
+        identifier,
+      });
+
+      expect(getResponse.connectedAccount).toBeDefined();
+      expect(getResponse.connectedAccount!.identifier).toBe(identifier);
+
+      // Update apiConfig
+      const updatedApiConfig = {
+        version: "v2.0",
+        domain: "updated.gmail.com",
+        api_endpoint: "https://updated.gmail.googleapis.com",
+        custom_auth_header: "Updated Bearer",
+      };
+
+      const updateResponse = await client.actions.updateConnectedAccount({
+        connectionName: GMAIL_CONNECTION_NAME,
+        identifier,
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        apiConfig: updatedApiConfig as any,
+      });
+
+      expect(updateResponse.connectedAccount).toBeDefined();
+      const updated = updateResponse.connectedAccount!;
+      expect(updated.identifier).toBe(identifier);
+      expect(updated.apiConfig).toBeDefined();
+
+      // Delete via actions wrapper
+      const deleteResponse = await client.actions.deleteConnectedAccount({
+        connectionName: GMAIL_CONNECTION_NAME,
+        identifier,
+      });
+      expect(deleteResponse).toBeDefined();
+    });
+  });
+
+  describe("connected account lifecycle (Freshdesk static auth)", () => {
+    it("should create, update, and delete a Freshdesk connected account with static auth", async () => {
+      const uniqueId = TestDataGenerator.generateUniqueId();
+      const identifier = `test_actions_freshdesk_${uniqueId}`;
+
+      // Initial static auth
+      const initialStaticAuth = {
+        static_auth: {
+          domain: "initial.freshdesk.com",
+          username: "initial_user",
+          password: "initial_password",
+        },
+      };
+
+      try {
+        // Create Freshdesk account
+        const createResponse = await client.actions.createConnectedAccount({
+          connectionName: FRESHDESK_CONNECTION_NAME,
+          identifier,
+          // For Node, authorizationDetails is carried through as a generic value; we rely
+          // on the backend to interpret the structure.
+          // eslint-disable-next-line @typescript-eslint/no-explicit-any
+          authorizationDetails: initialStaticAuth as any,
+        });
+
+        expect(createResponse.connectedAccount).toBeDefined();
+        const created = createResponse.connectedAccount!;
+        expect(created.identifier).toBe(identifier);
+
+        // Update static auth
+        const updatedStaticAuth = {
+          static_auth: {
+            domain: "updated.freshdesk.com",
+            username: "updated_user",
+            password: "updated_password",
+          },
+        };
+
+        const updateResponse = await client.actions.updateConnectedAccount({
+          connectionName: FRESHDESK_CONNECTION_NAME,
+          identifier,
+          // eslint-disable-next-line @typescript-eslint/no-explicit-any
+          authorizationDetails: updatedStaticAuth as any,
+        });
+
+        expect(updateResponse.connectedAccount).toBeDefined();
+        const updated = updateResponse.connectedAccount!;
+        expect(updated.identifier).toBe(identifier);
+
+        // Best-effort check: authorizationDetails should be present
+        expect(updated.authorizationDetails).toBeDefined();
+
+        // Delete Freshdesk account
+        const deleteResponse = await client.actions.deleteConnectedAccount({
+          connectionName: FRESHDESK_CONNECTION_NAME,
+          identifier,
+        });
+        expect(deleteResponse).toBeDefined();
+      } catch (error: any) {
+        // If the Freshdesk connector is not configured in this environment,
+        // treat this as a skipped integration scenario rather than a hard failure.
+        if (
+          error?.name === "ScalekitNotFoundException" ||
+          /connection not found/i.test(String(error.message ?? error))
+        ) {
+          return;
+        }
+        throw error;
+      }
+    });
+  });
+});
+