@uniformdev/mesh-sdk 20.72.3-alpha.3 → 20.72.3-alpha.5

package/dist/index.esm.js

@@ -7,7 +7,7 @@ var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot
 
 // src/clients/IntegrationDefinitionClient.ts
 import { ApiClient } from "@uniformdev/context/api";
-var _url;
+var _url, _credentialsUrl;
 var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends ApiClient {
   constructor(options) {
     super(options);
@@ -18,7 +18,7 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends Ap
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url), { ...options, teamId });
     return await this.apiClient(fetchUri);
   }
-  /** Creates or updates a mesh app definition on a team */
+  /** Creates or updates a mesh app definition on a team. Identity-delegation credentials must be minted separately via {@link rotateCredential}. */
   async upsert(body) {
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url));
     return await this.apiClient(fetchUri, {
@@ -35,9 +35,37 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends Ap
       expectNoContent: true
     });
   }
+  /**
+   * Mints or rotates an identity-delegation credential for an integration definition. The plaintext
+   * `appSecret` is returned exactly once and is not retrievable afterwards — Uniform stores only
+   * the hash. A successful response invalidates any previously-issued secret of the same kind.
+   * Caller must be a team admin.
+   */
+  async rotateCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    return await this.apiClient(fetchUri, {
+      method: "POST",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId })
+    });
+  }
+  /**
+   * Revokes an identity-delegation credential. Future delegation grants and refreshes will fail
+   * until a new credential is minted; in-flight delegation tokens remain valid until natural
+   * expiry (up to ~15 minutes). Caller must be a team admin.
+   */
+  async revokeCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    await this.apiClient(fetchUri, {
+      method: "DELETE",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId }),
+      expectNoContent: true
+    });
+  }
 };
 _url = new WeakMap();
+_credentialsUrl = new WeakMap();
 __privateAdd(_IntegrationDefinitionClient, _url, "/api/v1/integration-definitions");
+__privateAdd(_IntegrationDefinitionClient, _credentialsUrl, "/api/v1/integration-credentials");
 var IntegrationDefinitionClient = _IntegrationDefinitionClient;
 
 // src/clients/IntegrationInstallationClient.ts
@@ -86,6 +114,10 @@ _url2 = new WeakMap();
 __privateAdd(_IntegrationInstallationClient, _url2, "/api/v1/integration-installations");
 var IntegrationInstallationClient = _IntegrationInstallationClient;
 
+// src/delegation/csrfConstants.ts
+var CSRF_HEADER_NAME = "x-mesh-csrf";
+var CSRF_HEADER_VALUE = "1";
+
 // src/locations/aiAgents.ts
 var functionCallSystemParameters = ["pageHtml"];
 function parseFunctionCall(request) {
@@ -488,56 +520,63 @@ async function connectToParent({
   });
   client.onRequest("metadata-value", onMetadataUpdated);
   client.onRequest("external-value-update", onValueExternallyUpdated);
+  const parent = {
+    resize: async ({ height }) => {
+      await client.request("resize", { height });
+    },
+    setValue: async (value) => {
+      await client.request("setValue", value);
+    },
+    openDialog: async (message) => {
+      const res = await client.request(
+        "openDialog",
+        message
+      );
+      const dialogId = res == null ? void 0 : res.dialogId;
+      if (!dialogId) {
+        return;
+      }
+      return new Promise((resolve, reject) => {
+        dialogResponseHandlers[dialogId] = { resolve, reject };
+      });
+    },
+    closeDialog: async (message) => {
+      await client.request("closeDialog", message);
+    },
+    getDataResource: async (message) => {
+      return await client.request("getDataResource", message, {
+        timeout: 3e4
+      });
+    },
+    navigate: async (message) => {
+      await client.request("navigate", message);
+    },
+    reloadLocation: async () => {
+      await client.request("reload");
+    },
+    editConnectedData: async (message) => {
+      return await client.request(
+        "editConnectedData",
+        message,
+        {
+          timeout: (
+            // 24 hours in ms
+            864e5
+          )
+        }
+      );
+    },
+    getSessionToken: async () => {
+      return await client.request("getSessionToken", void 0, {
+        // Delegation may wait on consent UI + token API; default framepost timeout (5s) is too short.
+        timeout: 12e4
+      });
+    },
+    editorState: createEditorStateApi(client)
+  };
   return {
     initData,
-    parent: {
-      resize: async ({ height }) => {
-        await client.request("resize", { height });
-      },
-      setValue: async (value) => {
-        await client.request("setValue", value);
-      },
-      openDialog: async (message) => {
-        const res = await client.request(
-          "openDialog",
-          message
-        );
-        const dialogId = res == null ? void 0 : res.dialogId;
-        if (!dialogId) {
-          return;
-        }
-        return new Promise((resolve, reject) => {
-          dialogResponseHandlers[dialogId] = { resolve, reject };
-        });
-      },
-      closeDialog: async (message) => {
-        await client.request("closeDialog", message);
-      },
-      getDataResource: async (message) => {
-        return await client.request("getDataResource", message, {
-          timeout: 3e4
-        });
-      },
-      navigate: async (message) => {
-        await client.request("navigate", message);
-      },
-      reloadLocation: async () => {
-        await client.request("reload");
-      },
-      editConnectedData: async (message) => {
-        return await client.request(
-          "editConnectedData",
-          message,
-          {
-            timeout: (
-              // 24 hours in ms
-              864e5
-            )
-          }
-        );
-      },
-      editorState: createEditorStateApi(client)
-    }
+    parent
   };
 }
 function createEditorStateApi(client) {
@@ -923,7 +962,8 @@ async function initializeUniformMeshSDK({
       },
       closeCurrentLocationDialog: async () => {
         await parent.closeDialog({ dialogId: void 0, dialogType: "currentLocation" });
-      }
+      },
+      getSessionToken: () => parent.getSessionToken()
     };
     window.UniformMeshSDK = sdk;
     initializing = false;
@@ -945,6 +985,8 @@ var hasRole = (role, user) => {
   return user.roles.some((userRole) => userRole.name === role || userRole.id === role);
 };
 export {
+  CSRF_HEADER_NAME,
+  CSRF_HEADER_VALUE,
   IntegrationDefinitionClient,
   IntegrationInstallationClient,
   functionCallSystemParameters,

package/dist/index.js

@@ -1,3 +1,4 @@
+if (typeof process !== 'undefined' && process.emitWarning) { process.emitWarning('@uniformdev/mesh-sdk CommonJS entry is deprecated and will be removed in v21; Node.js 18 support will also be removed in v21 (Node.js 20+ required). Import the ESM build instead.', { type: 'DeprecationWarning', code: 'UNIFORM_MESH_SDK_CJS' }); }
 "use strict";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -36,6 +37,8 @@ var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  CSRF_HEADER_NAME: () => CSRF_HEADER_NAME,
+  CSRF_HEADER_VALUE: () => CSRF_HEADER_VALUE,
   IntegrationDefinitionClient: () => IntegrationDefinitionClient,
   IntegrationInstallationClient: () => IntegrationInstallationClient,
   functionCallSystemParameters: () => functionCallSystemParameters,
@@ -48,7 +51,7 @@ module.exports = __toCommonJS(index_exports);
 
 // src/clients/IntegrationDefinitionClient.ts
 var import_api = require("@uniformdev/context/api");
-var _url;
+var _url, _credentialsUrl;
 var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends import_api.ApiClient {
   constructor(options) {
     super(options);
@@ -59,7 +62,7 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends im
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url), { ...options, teamId });
     return await this.apiClient(fetchUri);
   }
-  /** Creates or updates a mesh app definition on a team */
+  /** Creates or updates a mesh app definition on a team. Identity-delegation credentials must be minted separately via {@link rotateCredential}. */
   async upsert(body) {
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url));
     return await this.apiClient(fetchUri, {
@@ -76,9 +79,37 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends im
       expectNoContent: true
     });
   }
+  /**
+   * Mints or rotates an identity-delegation credential for an integration definition. The plaintext
+   * `appSecret` is returned exactly once and is not retrievable afterwards — Uniform stores only
+   * the hash. A successful response invalidates any previously-issued secret of the same kind.
+   * Caller must be a team admin.
+   */
+  async rotateCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    return await this.apiClient(fetchUri, {
+      method: "POST",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId })
+    });
+  }
+  /**
+   * Revokes an identity-delegation credential. Future delegation grants and refreshes will fail
+   * until a new credential is minted; in-flight delegation tokens remain valid until natural
+   * expiry (up to ~15 minutes). Caller must be a team admin.
+   */
+  async revokeCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    await this.apiClient(fetchUri, {
+      method: "DELETE",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId }),
+      expectNoContent: true
+    });
+  }
 };
 _url = new WeakMap();
+_credentialsUrl = new WeakMap();
 __privateAdd(_IntegrationDefinitionClient, _url, "/api/v1/integration-definitions");
+__privateAdd(_IntegrationDefinitionClient, _credentialsUrl, "/api/v1/integration-credentials");
 var IntegrationDefinitionClient = _IntegrationDefinitionClient;
 
 // src/clients/IntegrationInstallationClient.ts
@@ -127,6 +158,10 @@ _url2 = new WeakMap();
 __privateAdd(_IntegrationInstallationClient, _url2, "/api/v1/integration-installations");
 var IntegrationInstallationClient = _IntegrationInstallationClient;
 
+// src/delegation/csrfConstants.ts
+var CSRF_HEADER_NAME = "x-mesh-csrf";
+var CSRF_HEADER_VALUE = "1";
+
 // src/locations/aiAgents.ts
 var functionCallSystemParameters = ["pageHtml"];
 function parseFunctionCall(request) {
@@ -529,56 +564,63 @@ async function connectToParent({
   });
   client.onRequest("metadata-value", onMetadataUpdated);
   client.onRequest("external-value-update", onValueExternallyUpdated);
+  const parent = {
+    resize: async ({ height }) => {
+      await client.request("resize", { height });
+    },
+    setValue: async (value) => {
+      await client.request("setValue", value);
+    },
+    openDialog: async (message) => {
+      const res = await client.request(
+        "openDialog",
+        message
+      );
+      const dialogId = res == null ? void 0 : res.dialogId;
+      if (!dialogId) {
+        return;
+      }
+      return new Promise((resolve, reject) => {
+        dialogResponseHandlers[dialogId] = { resolve, reject };
+      });
+    },
+    closeDialog: async (message) => {
+      await client.request("closeDialog", message);
+    },
+    getDataResource: async (message) => {
+      return await client.request("getDataResource", message, {
+        timeout: 3e4
+      });
+    },
+    navigate: async (message) => {
+      await client.request("navigate", message);
+    },
+    reloadLocation: async () => {
+      await client.request("reload");
+    },
+    editConnectedData: async (message) => {
+      return await client.request(
+        "editConnectedData",
+        message,
+        {
+          timeout: (
+            // 24 hours in ms
+            864e5
+          )
+        }
+      );
+    },
+    getSessionToken: async () => {
+      return await client.request("getSessionToken", void 0, {
+        // Delegation may wait on consent UI + token API; default framepost timeout (5s) is too short.
+        timeout: 12e4
+      });
+    },
+    editorState: createEditorStateApi(client)
+  };
   return {
     initData,
-    parent: {
-      resize: async ({ height }) => {
-        await client.request("resize", { height });
-      },
-      setValue: async (value) => {
-        await client.request("setValue", value);
-      },
-      openDialog: async (message) => {
-        const res = await client.request(
-          "openDialog",
-          message
-        );
-        const dialogId = res == null ? void 0 : res.dialogId;
-        if (!dialogId) {
-          return;
-        }
-        return new Promise((resolve, reject) => {
-          dialogResponseHandlers[dialogId] = { resolve, reject };
-        });
-      },
-      closeDialog: async (message) => {
-        await client.request("closeDialog", message);
-      },
-      getDataResource: async (message) => {
-        return await client.request("getDataResource", message, {
-          timeout: 3e4
-        });
-      },
-      navigate: async (message) => {
-        await client.request("navigate", message);
-      },
-      reloadLocation: async () => {
-        await client.request("reload");
-      },
-      editConnectedData: async (message) => {
-        return await client.request(
-          "editConnectedData",
-          message,
-          {
-            timeout: (
-              // 24 hours in ms
-              864e5
-            )
-          }
-        );
-      },
-      editorState: createEditorStateApi(client)
-    }
+    parent
   };
 }
 function createEditorStateApi(client) {
@@ -964,7 +1006,8 @@ async function initializeUniformMeshSDK({
       },
       closeCurrentLocationDialog: async () => {
         await parent.closeDialog({ dialogId: void 0, dialogType: "currentLocation" });
-      }
+      },
+      getSessionToken: () => parent.getSessionToken()
     };
     window.UniformMeshSDK = sdk;
     initializing = false;
@@ -987,6 +1030,8 @@ var hasRole = (role, user) => {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  CSRF_HEADER_NAME,
+  CSRF_HEADER_VALUE,
   IntegrationDefinitionClient,
   IntegrationInstallationClient,
   functionCallSystemParameters,

package/dist/index.mjs

@@ -7,7 +7,7 @@ var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot
 
 // src/clients/IntegrationDefinitionClient.ts
 import { ApiClient } from "@uniformdev/context/api";
-var _url;
+var _url, _credentialsUrl;
 var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends ApiClient {
   constructor(options) {
     super(options);
@@ -18,7 +18,7 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends Ap
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url), { ...options, teamId });
     return await this.apiClient(fetchUri);
   }
-  /** Creates or updates a mesh app definition on a team */
+  /** Creates or updates a mesh app definition on a team. Identity-delegation credentials must be minted separately via {@link rotateCredential}. */
   async upsert(body) {
     const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _url));
     return await this.apiClient(fetchUri, {
@@ -35,9 +35,37 @@ var _IntegrationDefinitionClient = class _IntegrationDefinitionClient extends Ap
       expectNoContent: true
     });
   }
+  /**
+   * Mints or rotates an identity-delegation credential for an integration definition. The plaintext
+   * `appSecret` is returned exactly once and is not retrievable afterwards — Uniform stores only
+   * the hash. A successful response invalidates any previously-issued secret of the same kind.
+   * Caller must be a team admin.
+   */
+  async rotateCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    return await this.apiClient(fetchUri, {
+      method: "POST",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId })
+    });
+  }
+  /**
+   * Revokes an identity-delegation credential. Future delegation grants and refreshes will fail
+   * until a new credential is minted; in-flight delegation tokens remain valid until natural
+   * expiry (up to ~15 minutes). Caller must be a team admin.
+   */
+  async revokeCredential(body) {
+    const fetchUri = this.createUrl(__privateGet(_IntegrationDefinitionClient, _credentialsUrl));
+    await this.apiClient(fetchUri, {
+      method: "DELETE",
+      body: JSON.stringify({ ...body, teamId: this.options.teamId }),
+      expectNoContent: true
+    });
+  }
 };
 _url = new WeakMap();
+_credentialsUrl = new WeakMap();
 __privateAdd(_IntegrationDefinitionClient, _url, "/api/v1/integration-definitions");
+__privateAdd(_IntegrationDefinitionClient, _credentialsUrl, "/api/v1/integration-credentials");
 var IntegrationDefinitionClient = _IntegrationDefinitionClient;
 
 // src/clients/IntegrationInstallationClient.ts
@@ -86,6 +114,10 @@ _url2 = new WeakMap();
 __privateAdd(_IntegrationInstallationClient, _url2, "/api/v1/integration-installations");
 var IntegrationInstallationClient = _IntegrationInstallationClient;
 
+// src/delegation/csrfConstants.ts
+var CSRF_HEADER_NAME = "x-mesh-csrf";
+var CSRF_HEADER_VALUE = "1";
+
 // src/locations/aiAgents.ts
 var functionCallSystemParameters = ["pageHtml"];
 function parseFunctionCall(request) {
@@ -488,56 +520,63 @@ async function connectToParent({
   });
   client.onRequest("metadata-value", onMetadataUpdated);
   client.onRequest("external-value-update", onValueExternallyUpdated);
+  const parent = {
+    resize: async ({ height }) => {
+      await client.request("resize", { height });
+    },
+    setValue: async (value) => {
+      await client.request("setValue", value);
+    },
+    openDialog: async (message) => {
+      const res = await client.request(
+        "openDialog",
+        message
+      );
+      const dialogId = res == null ? void 0 : res.dialogId;
+      if (!dialogId) {
+        return;
+      }
+      return new Promise((resolve, reject) => {
+        dialogResponseHandlers[dialogId] = { resolve, reject };
+      });
+    },
+    closeDialog: async (message) => {
+      await client.request("closeDialog", message);
+    },
+    getDataResource: async (message) => {
+      return await client.request("getDataResource", message, {
+        timeout: 3e4
+      });
+    },
+    navigate: async (message) => {
+      await client.request("navigate", message);
+    },
+    reloadLocation: async () => {
+      await client.request("reload");
+    },
+    editConnectedData: async (message) => {
+      return await client.request(
+        "editConnectedData",
+        message,
+        {
+          timeout: (
+            // 24 hours in ms
+            864e5
+          )
+        }
+      );
+    },
+    getSessionToken: async () => {
+      return await client.request("getSessionToken", void 0, {
+        // Delegation may wait on consent UI + token API; default framepost timeout (5s) is too short.
+        timeout: 12e4
+      });
+    },
+    editorState: createEditorStateApi(client)
+  };
   return {
     initData,
-    parent: {
-      resize: async ({ height }) => {
-        await client.request("resize", { height });
-      },
-      setValue: async (value) => {
-        await client.request("setValue", value);
-      },
-      openDialog: async (message) => {
-        const res = await client.request(
-          "openDialog",
-          message
-        );
-        const dialogId = res == null ? void 0 : res.dialogId;
-        if (!dialogId) {
-          return;
-        }
-        return new Promise((resolve, reject) => {
-          dialogResponseHandlers[dialogId] = { resolve, reject };
-        });
-      },
-      closeDialog: async (message) => {
-        await client.request("closeDialog", message);
-      },
-      getDataResource: async (message) => {
-        return await client.request("getDataResource", message, {
-          timeout: 3e4
-        });
-      },
-      navigate: async (message) => {
-        await client.request("navigate", message);
-      },
-      reloadLocation: async () => {
-        await client.request("reload");
-      },
-      editConnectedData: async (message) => {
-        return await client.request(
-          "editConnectedData",
-          message,
-          {
-            timeout: (
-              // 24 hours in ms
-              864e5
-            )
-          }
-        );
-      },
-      editorState: createEditorStateApi(client)
-    }
+    parent
   };
 }
 function createEditorStateApi(client) {
@@ -923,7 +962,8 @@ async function initializeUniformMeshSDK({
       },
       closeCurrentLocationDialog: async () => {
         await parent.closeDialog({ dialogId: void 0, dialogType: "currentLocation" });
-      }
+      },
+      getSessionToken: () => parent.getSessionToken()
     };
     window.UniformMeshSDK = sdk;
     initializing = false;
@@ -945,6 +985,8 @@ var hasRole = (role, user) => {
   return user.roles.some((userRole) => userRole.name === role || userRole.id === role);
 };
 export {
+  CSRF_HEADER_NAME,
+  CSRF_HEADER_VALUE,
   IntegrationDefinitionClient,
   IntegrationInstallationClient,
   functionCallSystemParameters,