@testsmith/api-spector 0.9.0 → 0.9.2

package/out/main/chunks/{broker-client-DqDgA2G6.js → broker-client-Cl6Fu3oD.js}

@@ -3,7 +3,7 @@ const promises = require("node:fs/promises");
 const path = require("node:path");
 const crypto = require("node:crypto");
 const undici = require("undici");
-const requestExec = require("./request-exec-CcF1Fzve.js");
+const requestExec = require("./request-exec-B8DJ8Id2.js");
 const Ajv = require("ajv");
 const jsYaml = require("js-yaml");
 require("node:http");

package/out/main/chunks/{handle-_4XMUlwm.js → handle-HQp1EXf8.js}

@@ -8,6 +8,13 @@ const IPC = {
     /** Event (main→renderer): a `spector://open-from-git?url=…` deep link was
      *  received; the renderer runs the same open-from-Git flow as the button. */
     openFromGitDeepLink: "file:openFromGitDeepLink",
+    /** Event (main→renderer): a `spector://import?token=…` deep link was
+     *  received; the renderer imports the shared collection/request. */
+    importShareDeepLink: "file:importShareDeepLink",
+    /** Serialize the open workspace to a secret-free snapshot for cloud sync. */
+    serializeWorkspace: "file:serializeWorkspace",
+    /** Apply a pulled snapshot to disk (backs up first; merges local secrets). */
+    applyWorkspaceSnapshot: "file:applyWorkspaceSnapshot",
     getLastWorkspace: "file:getLastWorkspace",
     getRecentWorkspaces: "file:getRecentWorkspaces",
     saveWorkspace: "file:saveWorkspace",
@@ -240,6 +247,10 @@ const IPC = {
     branches: "git:branches",
     checkout: "git:checkout",
     deleteBranch: "git:deleteBranch",
+    stashList: "git:stashList",
+    stash: "git:stash",
+    stashPop: "git:stashPop",
+    stashDrop: "git:stashDrop",
     fetch: "git:fetch",
     pull: "git:pull",
     push: "git:push",
@@ -308,7 +319,28 @@ const IPC = {
     /** Open a flow's page in the cloud UI. */
     openFlow: "cloud:openFlow",
     /** Open the cloud deployment matrix in the browser. */
-    openMatrix: "cloud:openMatrix"
+    openMatrix: "cloud:openMatrix",
+    /** Share a collection as a public read-only link (POST /api/share). */
+    shareCollection: "cloud:shareCollection",
+    /** Share a single request as a public read-only link (POST /api/share). */
+    shareRequest: "cloud:shareRequest",
+    /** Share a folder subtree as a public read-only link (POST /api/share). */
+    shareFolder: "cloud:shareFolder",
+    /** Fetch a shared collection/request by token for import (GET /api/share/{token}). */
+    importShare: "cloud:importShare",
+    /** Look up an existing share for a local collection/request (GET /api/share-lookup). */
+    shareLookup: "cloud:shareLookup",
+    /** Restrict a share: set/clear its expiry (PATCH /api/share/{token}). */
+    shareUpdate: "cloud:shareUpdate",
+    /** Revoke a share link (DELETE /api/share/{token}). */
+    shareRevoke: "cloud:shareRevoke",
+    /** Cloud-synced workspaces (collaborate without git). */
+    workspaceList: "cloud:workspaceList",
+    workspaceCreate: "cloud:workspaceCreate",
+    workspacePull: "cloud:workspacePull",
+    workspacePush: "cloud:workspacePush",
+    workspaceVersions: "cloud:workspaceVersions",
+    workspaceRestore: "cloud:workspaceRestore"
   }
 };
 function handleIpc(ipc, channel, fn) {

package/out/main/chunks/{import-ujxXe3Uu.js → import-DVpFH9Wb.js}

@@ -1,8 +1,8 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const uuid = require("uuid");
-const soapHandler = require("./soap-handler-BF5ii0UV.js");
-require("./handle-_4XMUlwm.js");
+const soapHandler = require("./soap-handler-D_Hj9e8S.js");
+require("./handle-HQp1EXf8.js");
 require("node:https");
 require("node:http");
 require("@xmldom/xmldom");

package/out/main/chunks/{perf-run-Ww_weuqI.js → perf-run-BNunvZsG.js}

@@ -1,5 +1,5 @@
 "use strict";
-const requestExec = require("./request-exec-CcF1Fzve.js");
+const requestExec = require("./request-exec-B8DJ8Id2.js");
 const grpc = require("@grpc/grpc-js");
 const protoLoader = require("@grpc/proto-loader");
 const fs = require("node:fs");

package/out/main/chunks/{request-exec-CcF1Fzve.js → request-exec-B8DJ8Id2.js}

@@ -24,7 +24,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 const undici = require("undici");
 const promises$1 = require("fs/promises");
 const nodeTls = require("tls");
-const handle = require("./handle-_4XMUlwm.js");
+const handle = require("./handle-HQp1EXf8.js");
 const fs = require("node:fs");
 const os = require("node:os");
 const path = require("node:path");
@@ -105,20 +105,21 @@ function readFileTrim(path2) {
 }
 function resolveConn$4() {
   const cfg = getSecretsConfig()?.vault ?? {};
-  const address = env$4("VAULT_ADDR", "API_SPECTOR_VAULT_ADDR") ?? cfg.address;
+  const address = env$4("VAULT_ADDR", "BAO_ADDR", "API_SPECTOR_VAULT_ADDR") ?? cfg.address;
   if (!address) {
-    throw new Error("Vault is not configured: set VAULT_ADDR (or settings.secrets.vault.address)");
-  }
-  const token = env$4("VAULT_TOKEN", "API_SPECTOR_VAULT_TOKEN") ?? readFileTrim(path.join(os.homedir(), ".vault-token"));
-  const roleId = env$4("VAULT_ROLE_ID", "API_SPECTOR_VAULT_ROLE_ID") ?? cfg.roleId;
-  const secretId = env$4("VAULT_SECRET_ID", "API_SPECTOR_VAULT_SECRET_ID");
-  const jwt = env$4("VAULT_JWT", "API_SPECTOR_VAULT_JWT") ?? (env$4("VAULT_JWT_PATH", "API_SPECTOR_VAULT_JWT_PATH") ? readFileTrim(env$4("VAULT_JWT_PATH", "API_SPECTOR_VAULT_JWT_PATH")) : void 0);
-  const jwtRole = env$4("VAULT_JWT_ROLE", "API_SPECTOR_VAULT_JWT_ROLE") ?? cfg.jwtRole;
-  const explicit = env$4("VAULT_AUTH_METHOD", "API_SPECTOR_VAULT_AUTH_METHOD") ?? cfg.authMethod;
+    throw new Error("Vault/OpenBao is not configured: set VAULT_ADDR or BAO_ADDR (or settings.secrets.vault.address)");
+  }
+  const token = env$4("VAULT_TOKEN", "BAO_TOKEN", "API_SPECTOR_VAULT_TOKEN") ?? readFileTrim(path.join(os.homedir(), ".vault-token")) ?? readFileTrim(path.join(os.homedir(), ".bao-token"));
+  const roleId = env$4("VAULT_ROLE_ID", "BAO_ROLE_ID", "API_SPECTOR_VAULT_ROLE_ID") ?? cfg.roleId;
+  const secretId = env$4("VAULT_SECRET_ID", "BAO_SECRET_ID", "API_SPECTOR_VAULT_SECRET_ID");
+  const jwtPath = env$4("VAULT_JWT_PATH", "BAO_JWT_PATH", "API_SPECTOR_VAULT_JWT_PATH");
+  const jwt = env$4("VAULT_JWT", "BAO_JWT", "API_SPECTOR_VAULT_JWT") ?? (jwtPath ? readFileTrim(jwtPath) : void 0);
+  const jwtRole = env$4("VAULT_JWT_ROLE", "BAO_JWT_ROLE", "API_SPECTOR_VAULT_JWT_ROLE") ?? cfg.jwtRole;
+  const explicit = env$4("VAULT_AUTH_METHOD", "BAO_AUTH_METHOD", "API_SPECTOR_VAULT_AUTH_METHOD") ?? cfg.authMethod;
   const authMethod = explicit ?? (token ? "token" : roleId ? "approle" : jwt ? "jwt" : "token");
   return {
     address: address.replace(/\/+$/, ""),
-    namespace: env$4("VAULT_NAMESPACE", "API_SPECTOR_VAULT_NAMESPACE") ?? cfg.namespace,
+    namespace: env$4("VAULT_NAMESPACE", "BAO_NAMESPACE", "API_SPECTOR_VAULT_NAMESPACE") ?? cfg.namespace,
     authMethod,
     token,
     roleId,
@@ -126,9 +127,9 @@ function resolveConn$4() {
     jwt,
     jwtRole,
     loginMount: cfg.loginMount,
-    kvVersion: env$4("VAULT_KV_VERSION", "API_SPECTOR_VAULT_KV_VERSION") ?? cfg.kvVersion ?? "auto",
-    skipVerify: (env$4("VAULT_SKIP_VERIFY", "API_SPECTOR_VAULT_SKIP_VERIFY") ?? "").toLowerCase() === "true" || cfg.skipVerify === true,
-    caPath: env$4("VAULT_CACERT", "API_SPECTOR_VAULT_CACERT")
+    kvVersion: env$4("VAULT_KV_VERSION", "BAO_KV_VERSION", "API_SPECTOR_VAULT_KV_VERSION") ?? cfg.kvVersion ?? "auto",
+    skipVerify: (env$4("VAULT_SKIP_VERIFY", "BAO_SKIP_VERIFY", "API_SPECTOR_VAULT_SKIP_VERIFY") ?? "").toLowerCase() === "true" || cfg.skipVerify === true,
+    caPath: env$4("VAULT_CACERT", "BAO_CACERT", "API_SPECTOR_VAULT_CACERT")
   };
 }
 let cachedToken$2 = null;
@@ -202,15 +203,15 @@ async function clientToken(conn) {
   cachedToken$2 = { value: token, expiresAt: ttl > 0 ? now + ttl * 1e3 : now + 5 * 6e4 };
   return token;
 }
-async function readSecret(refBody) {
+async function readSecret(refBody, scheme) {
   const hash = refBody.lastIndexOf("#");
   if (hash < 0) {
-    throw new Error(`Vault reference must be 'vault:<path>#<key>' (got 'vault:${refBody}')`);
+    throw new Error(`${scheme} reference must be '${scheme}:<path>#<key>' (got '${scheme}:${refBody}')`);
   }
   const path2 = refBody.slice(0, hash).replace(/^\/+/, "");
   const key = refBody.slice(hash + 1);
   if (!path2 || !key) {
-    throw new Error(`Vault reference must be 'vault:<path>#<key>' (got 'vault:${refBody}')`);
+    throw new Error(`${scheme} reference must be '${scheme}:<path>#<key>' (got '${scheme}:${refBody}')`);
   }
   const conn = resolveConn$4();
   const cacheKey = `${conn.address}|${conn.namespace ?? ""}|${path2}`;
@@ -235,7 +236,11 @@ async function readSecret(refBody) {
 }
 const vaultProvider = {
   scheme: "vault",
-  resolve: (refBody) => readSecret(refBody)
+  resolve: (refBody) => readSecret(refBody, "vault")
+};
+const openBaoProvider = {
+  scheme: "bao",
+  resolve: (refBody) => readSecret(refBody, "bao")
 };
 function hmac(key, data) {
   return crypto.createHmac("sha256", key).update(data, "utf8").digest();
@@ -658,6 +663,7 @@ const gcpSecretManagerProvider = {
   resolve: (refBody) => resolve(refBody)
 };
 registerSecretProvider(vaultProvider);
+registerSecretProvider(openBaoProvider);
 registerSecretProvider(awsSecretsProvider);
 registerSecretProvider(azureKeyVaultProvider);
 registerSecretProvider(onePasswordProvider);

package/out/main/chunks/{soap-handler-BF5ii0UV.js → soap-handler-D_Hj9e8S.js}

@@ -1,5 +1,5 @@
 "use strict";
-const handle = require("./handle-_4XMUlwm.js");
+const handle = require("./handle-HQp1EXf8.js");
 const https = require("node:https");
 const http = require("node:http");
 const xmldom = require("@xmldom/xmldom");
@@ -324,7 +324,7 @@ function registerSoapHandlers(ipc) {
   handle.handleIpc(ipc, handle.IPC.wsdl.import, async (_event, opts) => {
     const { validateWsdlImport } = await Promise.resolve().then(() => require("./ipc-validate-sqUFqRmE.js"));
     validateWsdlImport(opts);
-    const { importWsdl } = await Promise.resolve().then(() => require("./import-ujxXe3Uu.js"));
+    const { importWsdl } = await Promise.resolve().then(() => require("./import-DVpFH9Wb.js"));
     const wsdlText = opts.xml ?? (opts.url ? await fetchUrl(opts.url) : "");
     if (!wsdlText) throw new Error("wsdl:import requires either `url` or `xml`");
     return importWsdl(wsdlText, { name: opts.name, existingMockPorts: opts.existingMockPorts });

package/out/main/contract.js

@@ -2,7 +2,7 @@
 "use strict";
 const promises = require("node:fs/promises");
 const path = require("node:path");
-const brokerClient = require("./chunks/broker-client-DqDgA2G6.js");
+const brokerClient = require("./chunks/broker-client-Cl6Fu3oD.js");
 const escape = require("./chunks/escape-DDVAlOvZ.js");
 const crypto = require("node:crypto");
 const undici = require("undici");
@@ -11,10 +11,10 @@ const cliCommon = require("./chunks/cli-common-GnihVSjU.js");
 const node_child_process = require("node:child_process");
 const jsYaml = require("js-yaml");
 const environments = require("./chunks/environments-iM3SUM-4.js");
-require("./chunks/request-exec-CcF1Fzve.js");
+require("./chunks/request-exec-B8DJ8Id2.js");
 require("fs/promises");
 require("tls");
-require("./chunks/handle-_4XMUlwm.js");
+require("./chunks/handle-HQp1EXf8.js");
 require("node:fs");
 require("dayjs");
 require("node:vm");

package/out/main/flow.js

@@ -2,7 +2,7 @@
 "use strict";
 const promises = require("node:fs/promises");
 const path = require("node:path");
-const requestExec = require("./chunks/request-exec-CcF1Fzve.js");
+const requestExec = require("./chunks/request-exec-B8DJ8Id2.js");
 const requestCollection = require("./chunks/request-collection-zRRUfg0X.js");
 const environments = require("./chunks/environments-iM3SUM-4.js");
 const flowEngine = require("./chunks/flow-engine-BxwjEy37.js");
@@ -10,7 +10,7 @@ const cliCommon = require("./chunks/cli-common-GnihVSjU.js");
 require("undici");
 require("fs/promises");
 require("tls");
-require("./chunks/handle-_4XMUlwm.js");
+require("./chunks/handle-HQp1EXf8.js");
 require("node:fs");
 require("node:os");
 require("node:crypto");
@@ -281,7 +281,7 @@ async function main() {
   const envName = args.environment ?? args.env;
   const env = environments.selectEnvironment(workspace, environments$1, envName);
   const verbose = Boolean(args.verbose);
-  const version = `v${"0.9.0"}`;
+  const version = `v${"0.9.2"}`;
   console.log("");
   console.log(cliCommon.color("  API Flow Runner" + (version ? ` ${version}` : ""), cliCommon.C.bold, cliCommon.C.white));
   console.log(cliCommon.color(`  Flow:        ${flow.name}`, cliCommon.C.gray));

package/out/main/index.js

@@ -1,10 +1,10 @@
 "use strict";
 const electron = require("electron");
-const handle = require("./chunks/handle-_4XMUlwm.js");
+const handle = require("./chunks/handle-HQp1EXf8.js");
 const path = require("node:path");
 const fs = require("node:fs");
 const registerHandlers = require("./register-handlers.js");
-const requestExec = require("./chunks/request-exec-CcF1Fzve.js");
+const requestExec = require("./chunks/request-exec-B8DJ8Id2.js");
 const electronUpdater = require("electron-updater");
 const mockServer = require("./chunks/mock-server-C4kTFkod.js");
 require("node:fs/promises");
@@ -18,7 +18,7 @@ require("./chunks/ipc-validate-sqUFqRmE.js");
 require("ajv");
 require("js-yaml");
 require("undici");
-require("./chunks/soap-handler-BF5ii0UV.js");
+require("./chunks/soap-handler-D_Hj9e8S.js");
 require("node:https");
 require("node:http");
 require("@xmldom/xmldom");
@@ -32,7 +32,7 @@ require("node:os");
 require("@grpc/grpc-js");
 require("@grpc/proto-loader");
 require("./chunks/escape-DDVAlOvZ.js");
-require("./chunks/broker-client-DqDgA2G6.js");
+require("./chunks/broker-client-Cl6Fu3oD.js");
 require("./chunks/recorder-BkO8G_mB.js");
 require("fs/promises");
 require("tls");
@@ -50,7 +50,7 @@ function isNewer(a, b) {
   return a2 > b2;
 }
 async function checkForUpdate() {
-  const current = "0.9.0";
+  const current = "0.9.2";
   try {
     const res = await fetch(REGISTRY_URL, { signal: AbortSignal.timeout(4e3) });
     if (!res.ok) return null;
@@ -103,6 +103,7 @@ if (process.env.ELECTRON_NO_SANDBOX === "1") {
 }
 const PROTOCOL = "spector";
 let pendingRepoUrl = null;
+let pendingImportToken = null;
 function deepLinkFromArgv(argv) {
   return argv.find((a) => a.startsWith(`${PROTOCOL}://`)) ?? null;
 }
@@ -119,12 +120,27 @@ function parseOpenFromGit(deepLink) {
   const repo = u.searchParams.get("url");
   return repo?.trim() ? repo.trim() : null;
 }
+function parseImportShare(deepLink) {
+  let u;
+  try {
+    u = new URL(deepLink);
+  } catch {
+    return null;
+  }
+  if (u.protocol !== `${PROTOCOL}:`) return null;
+  const action = u.hostname || u.pathname.replace(/^\/+/, "").split("/")[0];
+  if (action !== "import") return null;
+  const token = u.searchParams.get("token");
+  return token?.trim() ? token.trim() : null;
+}
 function handleDeepLink(deepLink) {
   const repo = parseOpenFromGit(deepLink);
-  if (!repo) return;
+  const token = repo ? null : parseImportShare(deepLink);
+  if (!repo && !token) return;
   const win = electron.BrowserWindow.getAllWindows()[0];
   if (!win) {
     pendingRepoUrl = repo;
+    pendingImportToken = token;
     if (electron.app.isReady()) createWindow();
     return;
   }
@@ -132,15 +148,23 @@ function handleDeepLink(deepLink) {
   win.focus();
   if (win.webContents.isLoading()) {
     pendingRepoUrl = repo;
+    pendingImportToken = token;
   } else {
-    win.webContents.send(handle.IPC.file.openFromGitDeepLink, repo);
+    if (repo) win.webContents.send(handle.IPC.file.openFromGitDeepLink, repo);
+    if (token) win.webContents.send(handle.IPC.file.importShareDeepLink, token);
   }
 }
 function flushDeepLink(win) {
-  if (!pendingRepoUrl) return;
-  const repo = pendingRepoUrl;
-  pendingRepoUrl = null;
-  win.webContents.send(handle.IPC.file.openFromGitDeepLink, repo);
+  if (pendingRepoUrl) {
+    const repo = pendingRepoUrl;
+    pendingRepoUrl = null;
+    win.webContents.send(handle.IPC.file.openFromGitDeepLink, repo);
+  }
+  if (pendingImportToken) {
+    const token = pendingImportToken;
+    pendingImportToken = null;
+    win.webContents.send(handle.IPC.file.importShareDeepLink, token);
+  }
 }
 function createSplashWindow() {
   const splash = new electron.BrowserWindow({

package/out/main/lib.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const mockServer = require("./chunks/mock-server-C4kTFkod.js");
-const requestExec = require("./chunks/request-exec-CcF1Fzve.js");
+const requestExec = require("./chunks/request-exec-B8DJ8Id2.js");
 const flowEngine = require("./chunks/flow-engine-BxwjEy37.js");
 require("node:http");
 require("node:crypto");
@@ -11,7 +11,7 @@ require("@xmldom/xmldom");
 require("undici");
 require("fs/promises");
 require("tls");
-require("./chunks/handle-_4XMUlwm.js");
+require("./chunks/handle-HQp1EXf8.js");
 require("node:fs");
 require("node:os");
 require("node:path");

package/out/main/perf-worker.js

@@ -1,6 +1,6 @@
 "use strict";
-const perfRun = require("./chunks/perf-run-Ww_weuqI.js");
-const requestExec = require("./chunks/request-exec-CcF1Fzve.js");
+const perfRun = require("./chunks/perf-run-BNunvZsG.js");
+const requestExec = require("./chunks/request-exec-B8DJ8Id2.js");
 require("@grpc/grpc-js");
 require("@grpc/proto-loader");
 require("node:fs");
@@ -13,7 +13,7 @@ require("uuid");
 require("undici");
 require("fs/promises");
 require("tls");
-require("./chunks/handle-_4XMUlwm.js");
+require("./chunks/handle-HQp1EXf8.js");
 require("node:crypto");
 require("dayjs");
 require("node:vm");

package/out/main/perf.js

@@ -2,17 +2,17 @@
 "use strict";
 const promises = require("node:fs/promises");
 const path = require("node:path");
-const requestExec = require("./chunks/request-exec-CcF1Fzve.js");
+const requestExec = require("./chunks/request-exec-B8DJ8Id2.js");
 const requestCollection = require("./chunks/request-collection-zRRUfg0X.js");
 const environments = require("./chunks/environments-iM3SUM-4.js");
 const flowEngine = require("./chunks/flow-engine-BxwjEy37.js");
-const perfRun = require("./chunks/perf-run-Ww_weuqI.js");
+const perfRun = require("./chunks/perf-run-BNunvZsG.js");
 const perfReport = require("./chunks/perf-report-KXGZgCDY.js");
 const cliCommon = require("./chunks/cli-common-GnihVSjU.js");
 require("undici");
 require("fs/promises");
 require("tls");
-require("./chunks/handle-_4XMUlwm.js");
+require("./chunks/handle-HQp1EXf8.js");
 require("node:fs");
 require("node:os");
 require("node:crypto");
@@ -191,7 +191,7 @@ async function main() {
     targetLabel = `flow: ${flow.name}`;
   }
   const load = perfRun.deriveLoad(plan);
-  const version = `v${"0.9.0"}`;
+  const version = `v${"0.9.2"}`;
   console.log("");
   console.log(cliCommon.color("  API Performance" + (version ? ` ${version}` : ""), cliCommon.C.bold, cliCommon.C.white));
   console.log(cliCommon.color(`  Plan:        ${plan.name}`, cliCommon.C.gray));