@versori/run 0.2.0-alpha.10 → 0.2.0-alpha.11

package/esm/src/dsl/http/versori/credentials/v1alpha1/credential_service_pb.js

@@ -0,0 +1,128 @@
+// @generated by protoc-gen-es v2.2.3
+// @generated from file versori/credential/v1alpha1/credential_service.proto (package versori.credential.v1alpha1, syntax proto3)
+/* eslint-disable */
+import { fileDesc, messageDesc, serviceDesc } from '@bufbuild/protobuf/codegenv1';
+import { file_google_protobuf_timestamp } from '@bufbuild/protobuf/wkt';
+import { file_versori_credential_v1alpha1_common } from './common_pb.js';
+import { file_versori_credential_v1alpha1_credential } from './credential_pb.js';
+/**
+ * Describes the file versori/credential/v1alpha1/credential_service.proto.
+ */
+export const file_versori_credential_v1alpha1_credential_service = 
+/*@__PURE__*/
+fileDesc('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', [
+    file_google_protobuf_timestamp,
+    file_versori_credential_v1alpha1_common,
+    file_versori_credential_v1alpha1_credential,
+]);
+/**
+ * Describes the message versori.credential.v1alpha1.CreateCredentialRequest.
+ * Use `create(CreateCredentialRequestSchema)` to create a new message.
+ */
+export const CreateCredentialRequestSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 0);
+/**
+ * Describes the message versori.credential.v1alpha1.CreateCredentialResponse.
+ * Use `create(CreateCredentialResponseSchema)` to create a new message.
+ */
+export const CreateCredentialResponseSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 1);
+/**
+ * Describes the message versori.credential.v1alpha1.GetCredentialRequest.
+ * Use `create(GetCredentialRequestSchema)` to create a new message.
+ */
+export const GetCredentialRequestSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 2);
+/**
+ * Describes the message versori.credential.v1alpha1.GetCredentialResponse.
+ * Use `create(GetCredentialResponseSchema)` to create a new message.
+ */
+export const GetCredentialResponseSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 3);
+/**
+ * Describes the message versori.credential.v1alpha1.GetManyCredentialsRequest.
+ * Use `create(GetManyCredentialsRequestSchema)` to create a new message.
+ */
+export const GetManyCredentialsRequestSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 4);
+/**
+ * Describes the message versori.credential.v1alpha1.GetManyCredentialsResponse.
+ * Use `create(GetManyCredentialsResponseSchema)` to create a new message.
+ */
+export const GetManyCredentialsResponseSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 5);
+/**
+ * Describes the message versori.credential.v1alpha1.ListCredentialsRequest.
+ * Use `create(ListCredentialsRequestSchema)` to create a new message.
+ */
+export const ListCredentialsRequestSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 6);
+/**
+ * Describes the message versori.credential.v1alpha1.ListCredentialsResponse.
+ * Use `create(ListCredentialsResponseSchema)` to create a new message.
+ */
+export const ListCredentialsResponseSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 7);
+/**
+ * Describes the message versori.credential.v1alpha1.UpdateCredentialRequest.
+ * Use `create(UpdateCredentialRequestSchema)` to create a new message.
+ */
+export const UpdateCredentialRequestSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 8);
+/**
+ * Describes the message versori.credential.v1alpha1.UpdateCredentialResponse.
+ * Use `create(UpdateCredentialResponseSchema)` to create a new message.
+ */
+export const UpdateCredentialResponseSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 9);
+/**
+ * Describes the message versori.credential.v1alpha1.DeleteCredentialRequest.
+ * Use `create(DeleteCredentialRequestSchema)` to create a new message.
+ */
+export const DeleteCredentialRequestSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 10);
+/**
+ * Describes the message versori.credential.v1alpha1.DeleteCredentialResponse.
+ * Use `create(DeleteCredentialResponseSchema)` to create a new message.
+ */
+export const DeleteCredentialResponseSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 11);
+/**
+ * Describes the message versori.credential.v1alpha1.ValidateCredentialRequest.
+ * Use `create(ValidateCredentialRequestSchema)` to create a new message.
+ */
+export const ValidateCredentialRequestSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 12);
+/**
+ * Describes the message versori.credential.v1alpha1.ValidateCredentialResponse.
+ * Use `create(ValidateCredentialResponseSchema)` to create a new message.
+ */
+export const ValidateCredentialResponseSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 13);
+/**
+ * Describes the message versori.credential.v1alpha1.ValidateCredentialResponse.ValidationError.
+ * Use `create(ValidateCredentialResponse_ValidationErrorSchema)` to create a new message.
+ */
+export const ValidateCredentialResponse_ValidationErrorSchema = 
+/*@__PURE__*/
+messageDesc(file_versori_credential_v1alpha1_credential_service, 13, 0);
+/**
+ * @generated from service versori.credential.v1alpha1.CredentialService
+ */
+export const CredentialService = 
+/*@__PURE__*/
+serviceDesc(file_versori_credential_v1alpha1_credential_service, 0);

package/esm/src/dsl/http/versori/roundtripper.d.ts

@@ -2,6 +2,7 @@ import { DynamicFetcher, RoundTripperFactory } from '../types.js';
 import { VersoriCredentialClient } from './credentials/mod.js';
 import { PlatformAPIClient } from './platformapi.js';
 import { Logger } from '../../../observability/logging/Logger.js';
+import { Credentials } from './contextcredentials.js';
 /**
  * VersoriRoundTripper is an implementation of the RoundTripperFactory interface for Versori connections.
  * This is the intended implementation for when projects/services are hosted on Versori infrastructure.
@@ -9,12 +10,12 @@ import { Logger } from '../../../observability/logging/Logger.js';
  *
  * @example
  * ```typescript
- * const factory = new VersoriRoundTripperFactory(connectAPIClient, tokenClient);
+ * const factory = new VersoriCredentialsFactory(connectAPIClient, tokenClient);
  * const customFetch = await factory.create('connectionName');
  * const response = await customFetch('https://api.example.com/data');
  * ```
  */
-export declare class VersoriRoundTripperFactory implements RoundTripperFactory {
+export declare class VersoriCredentialsFactory implements RoundTripperFactory {
     private tokenClient;
     private credsBaseURL;
     private platformAPIClient;
@@ -22,11 +23,15 @@ export declare class VersoriRoundTripperFactory implements RoundTripperFactory {
     private log;
     private readonly defaultDynamic;
     constructor(credsClient: VersoriCredentialClient, credsBaseURL: string, platformAPIClient: PlatformAPIClient, logger: Logger);
-    static fromEnv(logger?: Logger): VersoriRoundTripperFactory;
+    static fromEnv(logger?: Logger): VersoriCredentialsFactory;
     private changeRequestInit;
     private changeBaseUrl;
     create(connName: string, fn?: typeof fetch): Promise<typeof fetch | undefined>;
     createDynamic(templateName: string, fn?: typeof fetch): Promise<DynamicFetcher | undefined>;
+    credentials(): Credentials;
+    private getTokenByName;
+    private getRawByName;
+    private getCredentialIDFromName;
     private getConnectionID;
     private getTemplateID;
     private apiKeyFetcher;

package/esm/src/dsl/http/versori/roundtripper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"roundtripper.d.ts","sourceRoot":"","sources":["../../../../../src/src/dsl/http/versori/roundtripper.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,cAAc,EACd,mBAAmB,EAEtB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,0CAA0C,CAAC;AAYlE;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IAClE,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,iBAAiB,CAAoB;IAE7C,OAAO,CAAC,UAAU,CAAmB;IAErC,OAAO,CAAC,GAAG,CAAS;IAEpB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAK7B;gBAGE,WAAW,EAAE,uBAAuB,EACpC,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,MAAM;IASlB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,0BAA0B;IA6B3D,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,aAAa;IAwBrB,MAAM,CACF,QAAQ,EAAE,MAAM,EAChB,EAAE,GAAE,OAAO,KAAwB,GACpC,OAAO,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;IAqCpC,aAAa,CACT,YAAY,EAAE,MAAM,EACpB,EAAE,GAAE,OAAO,KAAwB,GACpC,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IA+CtC,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAyDrB,OAAO,CAAC,gBAAgB;IAqCxB,OAAO,CAAC,kBAAkB;IAmC1B,OAAO,CAAC,aAAa;YAwEP,QAAQ;CAuBzB"}
+{"version":3,"file":"roundtripper.d.ts","sourceRoot":"","sources":["../../../../../src/src/dsl/http/versori/roundtripper.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,cAAc,EACd,mBAAmB,EAEtB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,0CAA0C,CAAC;AAWlE,OAAO,EAAE,WAAW,EAAS,MAAM,yBAAyB,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,qBAAa,yBAA0B,YAAW,mBAAmB;IACjE,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,YAAY,CAAS;IAE7B,OAAO,CAAC,iBAAiB,CAAoB;IAE7C,OAAO,CAAC,UAAU,CAAmB;IAErC,OAAO,CAAC,GAAG,CAAS;IAEpB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAK7B;gBAGE,WAAW,EAAE,uBAAuB,EACpC,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,MAAM;IAWlB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,yBAAyB;IA6B1D,OAAO,CAAC,iBAAiB;IAezB,OAAO,CAAC,aAAa;IAwBrB,MAAM,CACF,QAAQ,EAAE,MAAM,EAChB,EAAE,GAAE,OAAO,KAAwB,GACpC,OAAO,CAAC,OAAO,KAAK,GAAG,SAAS,CAAC;IAqCpC,aAAa,CACT,YAAY,EAAE,MAAM,EACpB,EAAE,GAAE,OAAO,KAAwB,GACpC,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IA+CtC,WAAW,IAAI,WAAW;YAOZ,cAAc;YAed,YAAY;YAaZ,uBAAuB;IAkBrC,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAyDrB,OAAO,CAAC,gBAAgB;IAqCxB,OAAO,CAAC,kBAAkB;IAmC1B,OAAO,CAAC,aAAa;YAwEP,QAAQ;CAuBzB"}

package/esm/src/dsl/http/versori/roundtripper.js

@@ -11,12 +11,12 @@ import { ConnectError, Code } from '@connectrpc/connect';
  *
  * @example
  * ```typescript
- * const factory = new VersoriRoundTripperFactory(connectAPIClient, tokenClient);
+ * const factory = new VersoriCredentialsFactory(connectAPIClient, tokenClient);
  * const customFetch = await factory.create('connectionName');
  * const response = await customFetch('https://api.example.com/data');
  * ```
  */
-export class VersoriRoundTripperFactory {
+export class VersoriCredentialsFactory {
     constructor(credsClient, credsBaseURL, platformAPIClient, logger) {
         Object.defineProperty(this, "tokenClient", {
             enumerable: true,
@@ -64,6 +64,7 @@ export class VersoriRoundTripperFactory {
         this.platformAPIClient = platformAPIClient;
         this.versoriCfg = LoadConfigFromFile();
         this.log = logger;
+        this.credentials = this.credentials.bind(this);
     }
     static fromEnv(logger) {
         const credsBaseURL = Deno.env.get(envVarCredsBaseURL);
@@ -85,7 +86,7 @@ export class VersoriRoundTripperFactory {
         const log = logger || new ConsoleLogger('debug');
         const pAPIClient = new PlatformAPIClient(platformApiBaseURL, orgId, envId, log);
         const tokenClient = new VersoriCredentialClient(credsBaseURL);
-        return new VersoriRoundTripperFactory(tokenClient, credsBaseURL, pAPIClient, log);
+        return new VersoriCredentialsFactory(tokenClient, credsBaseURL, pAPIClient, log);
     }
     // takes the info and modifies the url using changeBaseUrl if necessary
     // if a full valid URL is passed as a string, it will be returned as is
@@ -188,6 +189,47 @@ export class VersoriRoundTripperFactory {
         };
         return _fn;
     }
+    credentials() {
+        return {
+            getRaw: this.getRawByName.bind(this),
+            getAccessToken: this.getTokenByName.bind(this),
+        };
+    }
+    async getTokenByName(name) {
+        const credId = await this.getCredentialIDFromName(name);
+        const token = await this.tokenClient.getToken(credId);
+        if (!token?.token) {
+            throw new Error(`Token not found for connection ${name} with credential ID ${credId}`);
+        }
+        return {
+            accessToken: token.token.accessToken,
+            tokenType: token.token.tokenType,
+            expiry: token.token.expiry ? new Date(Number(token.token.expiry.seconds) * 1000) : undefined,
+        };
+    }
+    async getRawByName(name) {
+        const credId = await this.getCredentialIDFromName(name);
+        const raw = await this.tokenClient.getRaw(credId);
+        if (!raw) {
+            throw new Error(`Raw data not found for connection ${name} with credential ID ${credId}`);
+        }
+        let buffer = raw?.credential?.data['raw'];
+        return buffer;
+    }
+    async getCredentialIDFromName(name) {
+        const conId = this.getConnectionID(name);
+        if (!conId) {
+            throw new Error(`Connection ${name} not found`);
+        }
+        const conn = await this.platformAPIClient.getStaticConnection(conId);
+        if (!conn) {
+            throw new Error(`Connection ${name} not found`);
+        }
+        if (!conn?.credentials[0]?.credential?.id) {
+            throw new Error(`Connection ${name}/${conId} has no credentials defined on it`);
+        }
+        return conn.credentials[0].credential.id;
+    }
     getConnectionID(connName) {
         const conn = this.versoriCfg.mappings.find((c) => (c.dynamic === undefined || c.dynamic === false) &&
             c.name.toLowerCase() === connName.toLowerCase());

package/esm/src/interpreter/memory/MemoryInterpreter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MemoryInterpreter.d.ts","sourceRoot":"","sources":["../../../../src/src/interpreter/memory/MemoryInterpreter.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAqB,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAA+B,UAAU,EAAW,YAAY,EAAE,MAAM,MAAM,CAAC;AACtF,OAAO,EAAE,eAAe,EAAuB,MAAM,kCAAkC,CAAC;AAExF,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAGhG,OAAO,EAAE,QAAQ,EAAgB,MAAM,uBAAuB,CAAC;AAI/D,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAAmB,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAIpE,MAAM,MAAM,wBAAwB,GAAG;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF,KAAK,YAAY,GAAG;IAChB,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,KAAK,EAAE,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9C,oBAAoB,EAAE,eAAe,CAAC;IACtC,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B,CAAA;AAED,qBAAa,iBAAiB;IAOtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAbjC,OAAO,CAAC,mBAAmB,CAA2B;IACtD,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC,OAAO,CAAC,cAAc,CAAS;gBAGV,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,kBAAkB,EAC5B,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,MAAM,EAAE,MAAM,EACvB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACxB,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,YAAY;WASlC,WAAW,CAAC,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAwC5F,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,wBAAwB;IA8C/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA2ItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAK9B"}
+{"version":3,"file":"MemoryInterpreter.d.ts","sourceRoot":"","sources":["../../../../src/src/interpreter/memory/MemoryInterpreter.ts"],"names":[],"mappings":"AAAA,OAAgB,EAAqB,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAA+B,UAAU,EAAW,YAAY,EAAE,MAAM,MAAM,CAAC;AACtF,OAAO,EAAE,eAAe,EAAuB,MAAM,kCAAkC,CAAC;AAExF,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAGhG,OAAO,EAAE,QAAQ,EAAgB,MAAM,uBAAuB,CAAC;AAI/D,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAAmB,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAMpE,MAAM,MAAM,wBAAwB,GAAG;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CACpC,CAAC;AAEF,KAAK,YAAY,GAAG;IAChB,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,KAAK,EAAE,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9C,oBAAoB,EAAE,eAAe,CAAC;IACtC,cAAc,EAAE,MAAM,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC/B,CAAA;AAED,qBAAa,iBAAiB;IAOtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAbjC,OAAO,CAAC,mBAAmB,CAA2B;IACtD,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC,OAAO,CAAC,cAAc,CAAS;gBAGV,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,kBAAkB,EAC5B,eAAe,EAAE,eAAe,EAChC,mBAAmB,EAAE,mBAAmB,EACxC,MAAM,EAAE,MAAM,EACvB,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACxB,kBAAkB,EAAE,kBAAkB,EACtC,YAAY,EAAE,YAAY;WASlC,WAAW,CAAC,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAwC5F,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,wBAAwB;IA8C/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA2ItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAK9B"}

package/esm/src/interpreter/memory/MemoryInterpreter.js

@@ -3,7 +3,7 @@ import { catchError, EMPTY, mergeMap, of, tap } from 'rxjs';
 import { ContextProviderImpl } from '../../context/ContextProvider.js';
 import { DefaultRoundTripperFactory } from '../../dsl/http/default.js';
 import { PlatformAPIClient } from '../../dsl/http/versori/platformapi.js';
-import { VersoriRoundTripperFactory } from '../../dsl/http/versori/roundtripper.js';
+import { VersoriCredentialsFactory } from '../../dsl/http/versori/roundtripper.js';
 import { WorkflowImpl } from '../../dsl/Workflow.js';
 import { MemoryKeyValueProvider } from '../../kv/memory/MemoryKeyValueProvider.js';
 import { NatsKeyValueProvider } from '../../kv/nats/NatsKeyValueProvider.js';
@@ -95,7 +95,7 @@ export class MemoryInterpreter {
         const compiler = options.compiler || new ObservableCompiler();
         const roundTripperFactory = options.skipVersoriCredentials
             ? new DefaultRoundTripperFactory()
-            : VersoriRoundTripperFactory.fromEnv(log);
+            : VersoriCredentialsFactory.fromEnv(log);
         if (options.contextProvider) {
             // no need to set up a key-value provider if options.contextProvider is already
             // initialised.
@@ -104,7 +104,7 @@ export class MemoryInterpreter {
         const kvp = await (options.skipVersoriCredentials
             ? new MemoryKeyValueProvider()
             : NatsKeyValueProvider.fromEnv());
-        return new MemoryInterpreter(log, compiler, new ContextProviderImpl(log, kvp), roundTripperFactory, express.Router(), new Map(), PlatformAPIClient.fromEnv(), CronAPIClient.fromEnv());
+        return new MemoryInterpreter(log, compiler, new ContextProviderImpl(log, kvp, roundTripperFactory.credentials()), roundTripperFactory, express.Router(), new Map(), PlatformAPIClient.fromEnv(), CronAPIClient.fromEnv());
     }
     register(workflow, options) {
         const localAbortController = new AbortController();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@versori/run",
-  "version": "v0.2.0-alpha.10",
+  "version": "v0.2.0-alpha.11",
   "description": "Versori Run",
   "homepage": "https://github.com/versori/versori-run#readme",
   "repository": {

package/script/src/context/Context.d.ts

@@ -1,6 +1,7 @@
 import { Activation } from '../dsl/http/types.js';
 import { KeyValue, KeyValueProvider, KeyValueScope } from '../kv/KeyValue.js';
 import { Logger } from '../observability/logging/Logger.js';
+import { Credentials } from '../dsl/http/versori/contextcredentials.js';
 export type OnSuccessFn = (ctx: Context<any>) => void;
 export type OnErrorFn = (ctx: Context<any>) => void;
 export type ContextOptions = {
@@ -19,6 +20,7 @@ export interface Context<D> {
      * @param scope
      */
     openKv(scope?: KeyValueScope): KeyValue;
+    credentials(): Credentials;
 }
 export interface InternalContext<D, Index = void> extends Context<D> {
     withData<D2>(data: D2): InternalContext<D2, Index>;
@@ -35,15 +37,17 @@ export declare class ContextImpl<D, Index = void> implements InternalContext<D,
     executionId: string;
     startTime: Date;
     data: D;
+    private creds;
     idx: Index;
     readonly kvp: KeyValueProvider;
     readonly options: ContextOptions;
-    constructor(log: Logger, kvp: KeyValueProvider, executionId: string, startTime: Date, data: D, options?: ContextOptions);
+    constructor(log: Logger, kvp: KeyValueProvider, creds: Credentials, executionId: string, startTime: Date, data: D, options?: ContextOptions);
     get activation(): Activation | undefined;
     setIndex(idx: number): InternalContext<D, number>;
     withActivation(activation: Activation): InternalContext<D, Index>;
     withData<D2>(data: D2): InternalContext<D2, Index>;
     openKv(scope?: KeyValueScope): KeyValue;
+    credentials(): Credentials;
     destroy(scope: KeyValueScope): Promise<void>;
     [Symbol.toPrimitive](): Record<string, unknown>;
     toJSON(): Record<string, unknown>;

package/script/src/context/Context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Context.d.ts","sourceRoot":"","sources":["../../../src/src/context/Context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAE5D,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;AACtD,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;AAEpD,MAAM,MAAM,cAAc,GAAG;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,WAAW,OAAO,CAAC,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,IAAI,EAAE,CAAC,CAAC;IAER;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,QAAQ,CAAC;CAC3C;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAE,SAAQ,OAAO,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACnD,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAElD,GAAG,EAAE,KAAK,CAAC;IAEX,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAEjC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,qBAAa,WAAW,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAE,YAAW,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC;IAC1E,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC;IAER,GAAG,EAAE,KAAK,CAAC;IAEX,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;gBAE7B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,gBAAgB,EACrB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,IAAI,EACf,IAAI,EAAE,CAAC,EACP,OAAO,GAAE,cAAmB;IAiBhC,IAAI,UAAU,IAAI,UAAU,GAAG,SAAS,CAEvC;IAED,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC;IAcjD,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC;IAmBjE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;IAWlD,MAAM,CAAC,KAAK,GAAE,aAA2B,GAAG,QAAQ;IAepD,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5C,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAS/C,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAGpC"}
+{"version":3,"file":"Context.d.ts","sourceRoot":"","sources":["../../../src/src/context/Context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAExE,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;AACtD,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;AAEpD,MAAM,MAAM,cAAc,GAAG;IACzB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB,OAAO,CAAC,EAAE,SAAS,CAAC;CACvB,CAAC;AAEF,MAAM,WAAW,OAAO,CAAC,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,IAAI,EAAE,CAAC,CAAC;IAER;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,QAAQ,CAAC;IAExC,WAAW,IAAI,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAE,SAAQ,OAAO,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACnD,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAElD,GAAG,EAAE,KAAK,CAAC;IAEX,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAEjC,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,qBAAa,WAAW,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAE,YAAW,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC;IAC1E,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,IAAI,CAAC;IAChB,IAAI,EAAE,CAAC,CAAC;IACR,OAAO,CAAC,KAAK,CAAc;IAC3B,GAAG,EAAE,KAAK,CAAC;IAEX,QAAQ,CAAC,GAAG,EAAE,gBAAgB,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;gBAE7B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,IAAI,EACf,IAAI,EAAE,CAAC,EACP,OAAO,GAAE,cAAmB;IAmBhC,IAAI,UAAU,IAAI,UAAU,GAAG,SAAS,CAEvC;IAED,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC;IAejD,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC;IAoBjE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC;IAYlD,MAAM,CAAC,KAAK,GAAE,aAA2B,GAAG,QAAQ;IAepD,WAAW,IAAI,WAAW;IAI1B,OAAO,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5C,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAS/C,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAGpC"}

package/script/src/context/Context.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ContextImpl = void 0;
 class ContextImpl {
-    constructor(log, kvp, executionId, startTime, data, options = {}) {
+    constructor(log, kvp, creds, executionId, startTime, data, options = {}) {
         Object.defineProperty(this, "log", {
             enumerable: true,
             configurable: true,
@@ -27,6 +27,12 @@ class ContextImpl {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "creds", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         Object.defineProperty(this, "idx", {
             enumerable: true,
             configurable: true,
@@ -47,6 +53,7 @@ class ContextImpl {
         });
         this.log = log;
         this.executionId = executionId;
+        this.creds = creds;
         this.startTime = startTime;
         this.data = data;
         this.idx = void 0;
@@ -56,12 +63,13 @@ class ContextImpl {
         // so that destructuring the context object doesn't break the binding of the methods to the
         // correct instance.
         this.openKv = this.openKv.bind(this);
+        this.credentials = this.credentials.bind(this);
     }
     get activation() {
         return this.options.activation;
     }
     setIndex(idx) {
-        const next = new ContextImpl(this.log, this.kvp, this.executionId, this.startTime, this.data, this.options);
+        const next = new ContextImpl(this.log, this.kvp, this.creds, this.executionId, this.startTime, this.data, this.options);
         next.idx = idx;
         return next;
     }
@@ -70,13 +78,13 @@ class ContextImpl {
         if (this.activation) {
             throw new Error('Activation is already set');
         }
-        return new ContextImpl(this.log, this.kvp, this.executionId, this.startTime, this.data, {
+        return new ContextImpl(this.log, this.kvp, this.creds, this.executionId, this.startTime, this.data, {
             ...this.options,
             activation,
         });
     }
     withData(data) {
-        return new ContextImpl(this.log, this.kvp, this.executionId, this.startTime, data, this.options);
+        return new ContextImpl(this.log, this.kvp, this.creds, this.executionId, this.startTime, data, this.options);
     }
     openKv(scope = ':project:') {
         if (scope === ':execution:') {
@@ -91,6 +99,9 @@ class ContextImpl {
             activationId: this.activation?.id,
         });
     }
+    credentials() {
+        return this.creds;
+    }
     destroy(scope) {
         if (scope === ':execution:') {
             return this.kvp.destroy({

package/script/src/context/ContextProvider.d.ts

@@ -1,6 +1,7 @@
 import { KeyValueProvider } from '../kv/KeyValue.js';
 import { Logger } from '../observability/logging/Logger.js';
 import { Context, ContextOptions, InternalContext } from './Context.js';
+import { Credentials } from '../dsl/http/versori/contextcredentials.js';
 export interface ContextProvider {
     create<D>(data: D, options?: ContextOptions): InternalContext<D, void>;
     destroy(ctx: Context<any>): Promise<void>;
@@ -8,7 +9,8 @@ export interface ContextProvider {
 export declare class ContextProviderImpl implements ContextProvider {
     log: Logger;
     kvp: KeyValueProvider;
-    constructor(log: Logger, kvp: KeyValueProvider);
+    creds: Credentials;
+    constructor(log: Logger, kvp: KeyValueProvider, creds: Credentials);
     create<D>(data: D, options?: ContextOptions): InternalContext<D, void>;
     destroy(ctx: Context<any>): Promise<void>;
 }

package/script/src/context/ContextProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ContextProvider.d.ts","sourceRoot":"","sources":["../../../src/src/context/ContextProvider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAe,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAGrF,MAAM,WAAW,eAAe;IAC5B,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,qBAAa,mBAAoB,YAAW,eAAe;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,gBAAgB,CAAC;gBAEV,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB;IAK9C,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,GAAE,cAAmB,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC;IAe1E,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAM5C"}
+{"version":3,"file":"ContextProvider.d.ts","sourceRoot":"","sources":["../../../src/src/context/ContextProvider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,oCAAoC,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAe,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAExE,MAAM,WAAW,eAAe;IAC5B,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,qBAAa,mBAAoB,YAAW,eAAe;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,gBAAgB,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;gBAEP,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,WAAW;IAMlE,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,GAAE,cAAmB,GAAG,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC;IAe1E,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAM5C"}

package/script/src/context/ContextProvider.js

@@ -4,7 +4,7 @@ exports.ContextProviderImpl = void 0;
 const mod_js_1 = require("../../deps/jsr.io/@std/ulid/1.0.0/mod.js");
 const Context_js_1 = require("./Context.js");
 class ContextProviderImpl {
-    constructor(log, kvp) {
+    constructor(log, kvp, creds) {
         Object.defineProperty(this, "log", {
             enumerable: true,
             configurable: true,
@@ -17,8 +17,15 @@ class ContextProviderImpl {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "creds", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         this.log = log;
         this.kvp = kvp;
+        this.creds = creds;
     }
     create(data, options = {}) {
         const executionId = (0, mod_js_1.ulid)();
@@ -29,7 +36,7 @@ class ContextProviderImpl {
                 externalUserId: options.activation.user.externalId,
             });
         }
-        return new Context_js_1.ContextImpl(logger, this.kvp, executionId, new Date(), data, options);
+        return new Context_js_1.ContextImpl(logger, this.kvp, this.creds, executionId, new Date(), data, options);
     }
     destroy(ctx) {
         return this.kvp.destroy({

package/script/src/dsl/http/default.d.ts

@@ -1,4 +1,5 @@
 import { DynamicFetcher, RoundTripperFactory } from './types.js';
+import { Credentials } from './versori/contextcredentials.js';
 /**
  * A factory class for creating a default round tripper.
  * This class is used to provide a default implementation for initializing
@@ -19,5 +20,6 @@ export declare class DefaultRoundTripperFactory implements RoundTripperFactory {
      */
     create(connName: string, fn?: typeof fetch): Promise<typeof fetch>;
     createDynamic(templateName: string, fn: typeof fetch): Promise<DynamicFetcher>;
+    credentials(): Credentials;
 }
 //# sourceMappingURL=default.d.ts.map

package/script/src/dsl/http/default.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../../../src/src/dsl/http/default.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE7E;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IAClE;;OAEG;;IAGH;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,OAAO,KAAK,CAAC;IAIzE,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC;CAKvF"}
+{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../../../src/src/dsl/http/default.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IAClE;;OAEG;;IAGH;;;;;;;OAOG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,OAAO,KAAK,CAAC;IAIzE,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC;IAMpF,WAAW,IAAI,WAAW;CAU7B"}

package/script/src/dsl/http/default.js

@@ -27,5 +27,15 @@ class DefaultRoundTripperFactory {
             return fetch(input, init);
         };
     }
+    credentials() {
+        return {
+            getRaw: () => Promise.resolve(new ArrayBuffer(0)),
+            getAccessToken: () => Promise.resolve({
+                accessToken: '',
+                tokenType: '',
+                expiry: undefined,
+            }),
+        };
+    }
 }
 exports.DefaultRoundTripperFactory = DefaultRoundTripperFactory;

package/script/src/dsl/http/versori/contextcredentials.d.ts

@@ -0,0 +1,10 @@
+export type Token = {
+    accessToken: string;
+    tokenType: string;
+    expiry?: Date;
+};
+export interface Credentials {
+    getRaw(name: string): Promise<ArrayBuffer>;
+    getAccessToken(name: string): Promise<Token>;
+}
+//# sourceMappingURL=contextcredentials.d.ts.map

package/script/src/dsl/http/versori/contextcredentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextcredentials.d.ts","sourceRoot":"","sources":["../../../../../src/src/dsl/http/versori/contextcredentials.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,KAAK,GAAG;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,IAAI,CAAC;CACjB,CAAA;AAED,MAAM,WAAW,WAAW;IACxB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CAChD"}

package/script/src/dsl/http/versori/contextcredentials.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/script/src/dsl/http/versori/credentials/client.d.ts

@@ -1,7 +1,10 @@
 import { GetTokenResponse } from './tokens/v1/token_service_pb.js';
+import { GetCredentialResponse } from './v1alpha1/credential_service_pb.js';
 export declare class VersoriCredentialClient {
     private TokenService;
+    private credentialsClient;
     constructor(credsBaseUrl: string);
     getToken(credId: string, forceRefresh?: boolean): Promise<GetTokenResponse>;
+    getRaw(credId: string): Promise<GetCredentialResponse>;
 }
 //# sourceMappingURL=client.d.ts.map

package/script/src/dsl/http/versori/credentials/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../../../src/src/dsl/http/versori/credentials/client.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,qBAAa,uBAAuB;IAEhC,OAAO,CAAC,YAAY,CAAc;gBAEtB,YAAY,EAAE,MAAM;IAIhC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,GAAE,OAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAGrF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../../../src/src/dsl/http/versori/credentials/client.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAE5E,qBAAa,uBAAuB;IAEhC,OAAO,CAAC,YAAY,CAAc;IAClC,OAAO,CAAC,iBAAiB,CAAoB;gBAEjC,YAAY,EAAE,MAAM;IAKhC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,GAAE,OAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIlF,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAGzD"}

package/script/src/dsl/http/versori/credentials/client.js

@@ -10,10 +10,20 @@ class VersoriCredentialClient {
             writable: true,
             value: void 0
         });
+        Object.defineProperty(this, "credentialsClient", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
         this.TokenService = (0, credentials_js_1.createTokenClient)(credsBaseUrl);
+        this.credentialsClient = (0, credentials_js_1.createCredentialsClient)(credsBaseUrl);
     }
     getToken(credId, forceRefresh = false) {
         return this.TokenService.getToken({ credentialId: credId, forceRefresh });
     }
+    getRaw(credId) {
+        return this.credentialsClient.get({ id: credId, showRedacted: true });
+    }
 }
 exports.VersoriCredentialClient = VersoriCredentialClient;

package/script/src/dsl/http/versori/credentials/credentials.d.ts

@@ -39,4 +39,42 @@ export declare function createOAuth2TokenService(baseUrl?: string): import("@con
     };
 }>>;
 export type OAuth2TokenClient = ReturnType<typeof createOAuth2TokenService>;
+export declare function createCredentialsClient(baseUrl?: string): import("@connectrpc/connect").Client<import("@bufbuild/protobuf/codegenv1").GenService<{
+    create: {
+        methodKind: "unary";
+        input: typeof import("./v1alpha1/credential_service_pb.js").CreateCredentialRequestSchema;
+        output: typeof import("./v1alpha1/credential_service_pb.js").CreateCredentialResponseSchema;
+    };
+    get: {
+        methodKind: "unary";
+        input: typeof import("./v1alpha1/credential_service_pb.js").GetCredentialRequestSchema;
+        output: typeof import("./v1alpha1/credential_service_pb.js").GetCredentialResponseSchema;
+    };
+    getMany: {
+        methodKind: "unary";
+        input: typeof import("./v1alpha1/credential_service_pb.js").GetManyCredentialsRequestSchema;
+        output: typeof import("./v1alpha1/credential_service_pb.js").GetManyCredentialsResponseSchema;
+    };
+    list: {
+        methodKind: "unary";
+        input: typeof import("./v1alpha1/credential_service_pb.js").ListCredentialsRequestSchema;
+        output: typeof import("./v1alpha1/credential_service_pb.js").ListCredentialsResponseSchema;
+    };
+    update: {
+        methodKind: "unary";
+        input: typeof import("./v1alpha1/credential_service_pb.js").UpdateCredentialRequestSchema;
+        output: typeof import("./v1alpha1/credential_service_pb.js").UpdateCredentialResponseSchema;
+    };
+    delete: {
+        methodKind: "unary";
+        input: typeof import("./v1alpha1/credential_service_pb.js").DeleteCredentialRequestSchema;
+        output: typeof import("./v1alpha1/credential_service_pb.js").DeleteCredentialResponseSchema;
+    };
+    validate: {
+        methodKind: "unary";
+        input: typeof import("./v1alpha1/credential_service_pb.js").ValidateCredentialRequestSchema;
+        output: typeof import("./v1alpha1/credential_service_pb.js").ValidateCredentialResponseSchema;
+    };
+}>>;
+export type CredentialsClient = ReturnType<typeof createCredentialsClient>;
 //# sourceMappingURL=credentials.d.ts.map

package/script/src/dsl/http/versori/credentials/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/src/dsl/http/versori/credentials/credentials.ts"],"names":[],"mappings":"AAeA,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,MAAgC;;;;;;;;;;;IAK1E;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,MAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;IAKjF;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../../../src/src/dsl/http/versori/credentials/credentials.ts"],"names":[],"mappings":"AAeA,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,MAAgC;;;;;;;;;;;IAK1E;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE/D,wBAAgB,wBAAwB,CAAC,OAAO,GAAE,MAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;IAKjF;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE5E,wBAAgB,uBAAuB,CAAC,OAAO,GAAE,MAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAKhF;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC"}