@tangle-network/agent-integrations 0.53.35 → 0.53.37

package/dist/{chunk-ANWNXGVV.js → chunk-EKSAOR2I.js}

@@ -1,7 +1,7 @@
 import {
   TangleIdentityUnreachableError,
   createTangleIdentityClient
-} from "./chunk-JXFPIZ3O.js";
+} from "./chunk-WE7SQ7PB.js";
 
 // src/middleware/index.ts
 async function requireTangleAuth(request, opts = {}) {
@@ -126,4 +126,4 @@ export {
   honoTangleAuthMiddleware,
   expressTangleAuthMiddleware
 };
-//# sourceMappingURL=chunk-ANWNXGVV.js.map
+//# sourceMappingURL=chunk-EKSAOR2I.js.map

package/dist/{chunk-XGL345YX.js → chunk-JR2RWYQO.js}

@@ -2,7 +2,7 @@ import {
   DEFAULT_TANGLE_PLATFORM_URL,
   TangleIdentityUnreachableError,
   createTangleIdentityClient
-} from "./chunk-JXFPIZ3O.js";
+} from "./chunk-WE7SQ7PB.js";
 
 // src/connect/index.ts
 function startConnectFlow(opts, input) {
@@ -103,4 +103,4 @@ export {
   revokeConnectFlow,
   InMemoryConnectStateStore
 };
-//# sourceMappingURL=chunk-XGL345YX.js.map
+//# sourceMappingURL=chunk-JR2RWYQO.js.map

package/dist/{chunk-BVHX2E5X.js → chunk-LAD6KGK4.js}

@@ -7,11 +7,13 @@ import {
   canonicalIntegrationKind,
   integrationSpecToConnector,
   listIntegrationSpecs
-} from "./chunk-GGKD2W6H.js";
+} from "./chunk-Z3GB2P2B.js";
 import {
-  CONNECTOR_ADAPTER_FACTORIES,
-  adapters_exports
-} from "./chunk-N4KK3J7U.js";
+  listBundledConnectorAdapters
+} from "./chunk-YEZEIQ6U.js";
+import {
+  CONNECTOR_ADAPTER_FACTORIES
+} from "./chunk-E3CAVV2V.js";
 
 // src/activepieces-catalog.ts
 import { readFileSync } from "fs";
@@ -246,6 +248,7 @@ function createConnectorAdapterProvider(options) {
           "auth_not_supported"
         );
       }
+      resolveTokenClientAuthMethod(auth.tokenClientAuthMethod, request.connectorId);
       if (!options.resolveOAuthClient) {
         throw new IntegrationError(
           `OAuth client resolver missing on adapter provider; cannot start auth for ${request.connectorId}.`,
@@ -307,6 +310,10 @@ function createConnectorAdapterProvider(options) {
           "auth_not_supported"
         );
       }
+      const tokenClientAuthMethod = resolveTokenClientAuthMethod(
+        auth.tokenClientAuthMethod,
+        request.connectorId
+      );
       if (!request.code) {
         throw new IntegrationError(
           `Authorization code missing on completeAuth for ${request.connectorId}.`,
@@ -335,10 +342,21 @@ function createConnectorAdapterProvider(options) {
       const body = new URLSearchParams({
         grant_type: "authorization_code",
         code: request.code,
-        client_id: client.clientId,
-        client_secret: client.clientSecret,
         redirect_uri: request.redirectUri
       });
+      const headers = {
+        "content-type": "application/x-www-form-urlencoded",
+        accept: "application/json"
+      };
+      const redactionValues = [request.code, client.clientId, client.clientSecret];
+      if (tokenClientAuthMethod === "client_secret_post") {
+        body.set("client_id", client.clientId);
+        body.set("client_secret", client.clientSecret);
+      } else {
+        const authorization = `Basic ${base64Encode(`${client.clientId}:${client.clientSecret}`)}`;
+        headers.authorization = authorization;
+        redactionValues.push(authorization);
+      }
       const tokenUrl = resolveOAuthUrlTemplate(
         auth.tokenUrl,
         request.metadata,
@@ -348,16 +366,13 @@ function createConnectorAdapterProvider(options) {
       try {
         res = await fetchImpl(tokenUrl, {
           method: "POST",
-          headers: {
-            "content-type": "application/x-www-form-urlencoded",
-            accept: "application/json"
-          },
+          headers,
           body
         });
       } catch (cause) {
         const detail = redactSensitiveText(
           cause?.message ?? "unknown",
-          [request.code, client.clientId, client.clientSecret]
+          redactionValues
         );
         throw new IntegrationError(
           `OAuth token exchange transport error for ${request.connectorId}: ${detail}`,
@@ -368,7 +383,7 @@ function createConnectorAdapterProvider(options) {
         const text = await res.text().catch(() => "");
         const detail = redactSensitiveText(
           `${res.status} ${res.statusText} \u2014 ${text.slice(0, 200)}`,
-          [request.code, client.clientId, client.clientSecret]
+          redactionValues
         );
         throw new IntegrationError(
           `OAuth token exchange failed for ${request.connectorId}: ${detail}`,
@@ -557,6 +572,29 @@ function oauthManifestAuth(auth) {
   if (auth.kind !== "one_of") return void 0;
   return auth.options.find((option) => option.kind === "oauth2");
 }
+function resolveTokenClientAuthMethod(value, connectorId) {
+  if (value === void 0 || value === "client_secret_post") {
+    return "client_secret_post";
+  }
+  if (value === "client_secret_basic") return value;
+  throw new IntegrationError(
+    `Connector ${connectorId} has an unsupported OAuth token client authentication method.`,
+    "config_missing"
+  );
+}
+function base64Encode(value) {
+  const btoa2 = globalThis.btoa;
+  if (typeof btoa2 !== "function") {
+    throw new IntegrationError(
+      "OAuth client_secret_basic requires a base64 encoder in this runtime.",
+      "config_missing"
+    );
+  }
+  const bytes = new TextEncoder().encode(value);
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa2(binary);
+}
 function redactSensitiveText(text, secrets) {
   return secrets.filter((secret) => secret.length > 0).reduce(
     (redacted, secret) => redacted.split(secret).join("[REDACTED]"),
@@ -3615,18 +3653,11 @@ function listTangleNativeAdapterIds() {
       (definition) => definition.kind
     )
   );
-  for (const value of Object.values(adapters_exports)) {
-    if (isConnectorAdapter(value)) {
-      ids.add(value.manifest.kind);
-    }
+  for (const adapter of listBundledConnectorAdapters()) {
+    ids.add(adapter.manifest.kind);
   }
   return [...ids].sort();
 }
-function isConnectorAdapter(value) {
-  return Boolean(
-    value && typeof value === "object" && "manifest" in value && value.manifest && typeof value.manifest.kind === "string"
-  );
-}
 function listTangleIntegrationCatalogEntries() {
   return listActivepiecesCatalogEntries().map((entry) => sanitizeEntry(entry));
 }
@@ -4395,4 +4426,4 @@ export {
   signCapability,
   verifyCapabilityToken
 };
-//# sourceMappingURL=chunk-BVHX2E5X.js.map
+//# sourceMappingURL=chunk-LAD6KGK4.js.map