@vornrun/connector-sdk 0.7.0 → 0.7.1-beta.1

package/README.md

@@ -217,6 +217,8 @@ auth: {
 }
 ```
 
+Add `headers` to `check` for a site whose reads need one, such as a CSRF flag. Headers the browser sets itself or that carry who you are, such as `cookie`, `authorization`, `origin` or any `sec-` header, are refused.
+
 Vorn opens a window on a browser profile that belongs to one connection, and the person signs in there. The connector's code then gets `ctx.session.fetch` beside `ctx.fetch`. A call through `ctx.session.fetch` runs inside that signed-in window as a same-origin request, so the service sees its own page asking and no cookie reaches the connector. Calls outside `origins` are refused. `ctx.fetch` stays a plain fetch for public reads, such as a feed, which work before anyone signs in. A `browser` connector's declared `request` actions go through the window.
 
 `--mock` serves signed-in calls from the same routes as every other call. A `--live` run from a terminal has no window, so it skips them.

package/dist/{check-62s2GvcO.d.ts → check-CzSTEQD8.d.ts}

@@ -389,6 +389,8 @@ interface BrowserSignIn {
     check: {
         url: string;
         identity: string[];
+        /** Sent with the check, for a site whose reads need a header such as a CSRF flag. */
+        headers?: Record<string, string>;
     };
 }
 /** The signed-in window, offered to a `browser` connector's code. */

package/dist/{chunk-ZKHXHE3O.js → chunk-CCY5QT5R.js}

@@ -122,6 +122,101 @@ function withinOrigins(origins, url) {
     return wildcard ? target.endsWith(`.${host}`) : target === host;
   });
 }
+var FORBIDDEN_SESSION_HEADERS = /* @__PURE__ */ new Set([
+  "cookie",
+  "cookie2",
+  "authorization",
+  "host",
+  "origin",
+  "referer",
+  "content-length"
+]);
+var HEADER_NAME = /^[A-Za-z0-9!#$%&'*+.^_`|~-]+$/;
+function allowedSessionHeader(name) {
+  const lower = name.toLowerCase();
+  return HEADER_NAME.test(name) && !FORBIDDEN_SESSION_HEADERS.has(lower) && !lower.startsWith("sec-") && !lower.startsWith("proxy-");
+}
+
+// src/post-receive.ts
+var UNSAFE_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function segments(path) {
+  return path.split(".").map((part) => part.trim()).filter((part) => part !== "");
+}
+function valueAt(value, path) {
+  let current = value;
+  for (const key of segments(path)) {
+    if (UNSAFE_KEYS.has(key)) return void 0;
+    if (Array.isArray(current)) {
+      const index = Number(key);
+      if (!Number.isInteger(index)) return void 0;
+      current = current[index];
+      continue;
+    }
+    if (!isRecord(current)) return void 0;
+    current = Object.prototype.hasOwnProperty.call(current, key) ? current[key] : void 0;
+  }
+  return current;
+}
+function withValueAt(value, path, next) {
+  const keys = segments(path);
+  if (keys.length === 0) return next;
+  const [head, ...rest] = keys;
+  if (UNSAFE_KEYS.has(head)) return value;
+  if (Array.isArray(value)) {
+    const index = Number(head);
+    if (!Number.isInteger(index)) return value;
+    const copy = [...value];
+    copy[index] = rest.length === 0 ? next : withValueAt(copy[index], rest.join("."), next);
+    return copy;
+  }
+  const base = isRecord(value) ? value : {};
+  return {
+    ...base,
+    [head]: rest.length === 0 ? next : withValueAt(base[head], rest.join("."), next)
+  };
+}
+function pick(value, keys) {
+  if (Array.isArray(value)) return value.map((entry) => pick(entry, keys));
+  if (!isRecord(value)) return value;
+  const out = {};
+  for (const key of keys) {
+    if (UNSAFE_KEYS.has(key)) continue;
+    if (Object.prototype.hasOwnProperty.call(value, key)) out[key] = value[key];
+  }
+  return out;
+}
+function rename(value, from, to) {
+  if (Array.isArray(value)) return value.map((entry) => rename(entry, from, to));
+  if (!isRecord(value)) return value;
+  if (UNSAFE_KEYS.has(from) || UNSAFE_KEYS.has(to)) return value;
+  if (!Object.prototype.hasOwnProperty.call(value, from)) return value;
+  const out = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (key === from) out[to] = entry;
+    else if (key !== to) out[key] = entry;
+  }
+  return out;
+}
+function applyOp(value, op) {
+  if (op.op === "flatten") return valueAt(value, op.path);
+  const target = op.path === void 0 ? value : valueAt(value, op.path);
+  if (op.path !== void 0 && target === void 0) return value;
+  let next;
+  if (op.op === "pick") next = pick(target, op.keys);
+  else if (op.op === "rename") next = rename(target, op.from, op.to);
+  else if (op.op === "filter") {
+    next = Array.isArray(target) ? target.filter((entry) => isRecord(entry) && valueAt(entry, op.key) === op.equals) : target;
+  } else {
+    next = Array.isArray(target) ? target.map((entry) => applyPostReceive(entry, op.ops)) : target;
+  }
+  return op.path === void 0 ? next : withValueAt(value, op.path, next);
+}
+function applyPostReceive(value, ops) {
+  return (ops ?? []).reduce(applyOp, value);
+}
 
 // src/define.ts
 var KEY_PATTERN = /^[a-zA-Z][a-zA-Z0-9_-]*$/;
@@ -270,6 +365,16 @@ function assertBrowserSignIn(id, browser) {
   if (!Array.isArray(identity) || identity.some((path) => typeof path !== "string" || !path.trim())) {
     throw new Error(`Connector ${id} must name its identity fields as non-empty strings`);
   }
+  const headers = browser.check?.headers;
+  if (headers === void 0) return;
+  const badHeader = isRecord(headers) ? Object.entries(headers).find(
+    ([name, value]) => typeof value !== "string" || !allowedSessionHeader(name)
+  ) : void 0;
+  if (!isRecord(headers) || badHeader) {
+    throw new Error(
+      `Connector ${id} may add only plain string headers to its signed-in check` + (badHeader ? `; ${JSON.stringify(badHeader[0])} is not one` : "")
+    );
+  }
 }
 function assertIdentity(kind, definition) {
   if (!KEY_PATTERN.test(definition.id ?? "")) {
@@ -1121,7 +1226,7 @@ var RESERVED_KEYS = [
   "assignee",
   "updatedAt"
 ];
-var UNSAFE_KEYS = ["__proto__", "constructor", "prototype"];
+var UNSAFE_KEYS2 = ["__proto__", "constructor", "prototype"];
 function itemExternalId(item) {
   return String(item.externalId ?? "").trim();
 }
@@ -1147,7 +1252,7 @@ function normalizeItem(item, polledAt) {
   const extra = {};
   for (const [key, value] of Object.entries(item.data ?? {})) {
     if (RESERVED_KEYS.includes(key)) continue;
-    if (UNSAFE_KEYS.includes(key)) continue;
+    if (UNSAFE_KEYS2.includes(key)) continue;
     extra[key] = value;
   }
   return {
@@ -1292,87 +1397,6 @@ async function runFetch(type, fetchItems, context) {
   return fetched;
 }
 
-// src/post-receive.ts
-var UNSAFE_KEYS2 = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function segments(path) {
-  return path.split(".").map((part) => part.trim()).filter((part) => part !== "");
-}
-function valueAt(value, path) {
-  let current = value;
-  for (const key of segments(path)) {
-    if (UNSAFE_KEYS2.has(key)) return void 0;
-    if (Array.isArray(current)) {
-      const index = Number(key);
-      if (!Number.isInteger(index)) return void 0;
-      current = current[index];
-      continue;
-    }
-    if (!isRecord(current)) return void 0;
-    current = Object.prototype.hasOwnProperty.call(current, key) ? current[key] : void 0;
-  }
-  return current;
-}
-function withValueAt(value, path, next) {
-  const keys = segments(path);
-  if (keys.length === 0) return next;
-  const [head, ...rest] = keys;
-  if (UNSAFE_KEYS2.has(head)) return value;
-  if (Array.isArray(value)) {
-    const index = Number(head);
-    if (!Number.isInteger(index)) return value;
-    const copy = [...value];
-    copy[index] = rest.length === 0 ? next : withValueAt(copy[index], rest.join("."), next);
-    return copy;
-  }
-  const base = isRecord(value) ? value : {};
-  return {
-    ...base,
-    [head]: rest.length === 0 ? next : withValueAt(base[head], rest.join("."), next)
-  };
-}
-function pick(value, keys) {
-  if (Array.isArray(value)) return value.map((entry) => pick(entry, keys));
-  if (!isRecord(value)) return value;
-  const out = {};
-  for (const key of keys) {
-    if (UNSAFE_KEYS2.has(key)) continue;
-    if (Object.prototype.hasOwnProperty.call(value, key)) out[key] = value[key];
-  }
-  return out;
-}
-function rename(value, from, to) {
-  if (Array.isArray(value)) return value.map((entry) => rename(entry, from, to));
-  if (!isRecord(value)) return value;
-  if (UNSAFE_KEYS2.has(from) || UNSAFE_KEYS2.has(to)) return value;
-  if (!Object.prototype.hasOwnProperty.call(value, from)) return value;
-  const out = {};
-  for (const [key, entry] of Object.entries(value)) {
-    if (key === from) out[to] = entry;
-    else if (key !== to) out[key] = entry;
-  }
-  return out;
-}
-function applyOp(value, op) {
-  if (op.op === "flatten") return valueAt(value, op.path);
-  const target = op.path === void 0 ? value : valueAt(value, op.path);
-  if (op.path !== void 0 && target === void 0) return value;
-  let next;
-  if (op.op === "pick") next = pick(target, op.keys);
-  else if (op.op === "rename") next = rename(target, op.from, op.to);
-  else if (op.op === "filter") {
-    next = Array.isArray(target) ? target.filter((entry) => isRecord(entry) && valueAt(entry, op.key) === op.equals) : target;
-  } else {
-    next = Array.isArray(target) ? target.map((entry) => applyPostReceive(entry, op.ops)) : target;
-  }
-  return op.path === void 0 ? next : withValueAt(value, op.path, next);
-}
-function applyPostReceive(value, ops) {
-  return (ops ?? []).reduce(applyOp, value);
-}
-
 // src/request.ts
 var MAX_ERROR_BODY = 500;
 var PLACEHOLDER = /\{\{\s*(args|config)\.([A-Za-z0-9_.-]+)\s*\}\}/g;
@@ -3450,6 +3474,8 @@ export {
   createSessionFetch,
   ORIGIN_PATTERN,
   withinOrigins,
+  valueAt,
+  applyPostReceive,
   EXTENSION_PERMISSIONS,
   HOST_PERMISSIONS,
   envNameFor,
@@ -3477,8 +3503,6 @@ export {
   normalizeItem,
   normalizeItems,
   pollWithDedupe,
-  valueAt,
-  applyPostReceive,
   resolveTemplates,
   resolveRequest,
   asOutput,

package/dist/cli.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { B as BundleRequest, a as BundleOutput, C as CheckFinding } from './check-62s2GvcO.js';
+import { B as BundleRequest, a as BundleOutput, C as CheckFinding } from './check-CzSTEQD8.js';
 
 interface CliDeps {
     load(modulePath: string): Promise<unknown>;

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   runPoll,
   scaffoldFiles,
   serveConnector
-} from "./chunk-ZKHXHE3O.js";
+} from "./chunk-CCY5QT5R.js";
 
 // src/cli.ts
 import { fileURLToPath, pathToFileURL } from "url";

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { E as ExtensionPermission, b as ExtensionHostMethod, c as ConnectorDefinition, d as Connector, e as ExtensionDefinition, f as ConnectorConfig, g as ExtensionHost, T as TriggerDefinition, P as PollContext, h as PollOutcome, i as ConnectorItem, N as NormalizedItem, j as PostReceiveOp, A as ActionRequest, B as BundleRequest, a as BundleOutput, C as CheckFinding } from './check-62s2GvcO.js';
-export { k as ActionContext, l as ActionDefinition, m as ActionInputField, n as ActionInputOption, o as ActionInputType, p as ActionOutputField, q as ActivationPredicate, r as AuthRung, s as BrowserSignIn, t as CHECK_OWNERS, u as CheckCode, v as CheckOptions, w as ConformanceRun, x as ConnectionSetup, y as ConnectorAuth, z as ConnectorConfigField, D as ConnectorHarness, F as ConnectorIcon, G as ConnectorKind, H as ConnectorManifest, I as ConnectorVerification, J as DedupeStrategy, K as DefaultWorkflow, L as ExtensionAgent, M as ExtensionContext, O as ExtensionContributions, Q as ExtensionPlatform, R as ExtensionUsage, S as ExtensionUsageWindow, U as FetchContext, V as FooterContribution, W as FooterItem, X as HarnessOptions, Y as LinkContext, Z as LinkHandled, _ as LinkHandlerContribution, $ as MANIFEST_TOOL, a0 as MAX_PACK_BYTES, a1 as MAX_POLL_PAGES, a2 as ManifestContributions, a3 as MockCall, a4 as MockHostAnswers, a5 as MockHostRun, a6 as MockRoute, a7 as MockRouteMissError, a8 as MockRun, a9 as OPTIONS_TOOL, aa as OptionsContext, ab as OptionsLoader, ac as PREFLIGHT_TOOL, ad as PaginationStrategy, ae as PaneContribution, af as PollPage, ag as PreflightResult, ah as ResilientFetchOptions, ai as RetryPolicy, aj as RunActionOptions, ak as RunPollOptions, al as SessionContext, am as StatusSuggestion, an as backoffMs, ao as bundleDependencyFindings, ap as bundledRequireFindings, aq as checkConnector, ar as connectionSetup, as as connectorManifest, at as createConnectorHarness, au as drainPoll, av as esbuildBundle, aw as escapedMockHttp, ax as footerToolName, ay as formatFindings, az as handlerToolName, aA as lifecycleScriptFindings, aB as mockExtensionHost, aC as pollToolName, aD as readNearestPackageJson, aE as resilientFetch, aF as retryAfterMs, aG as runAction, aH as runConformance, aI as runOptions, aJ as runPoll, aK as withMockHttp } from './check-62s2GvcO.js';
+import { E as ExtensionPermission, b as ExtensionHostMethod, c as ConnectorDefinition, d as Connector, e as ExtensionDefinition, f as ConnectorConfig, g as ExtensionHost, T as TriggerDefinition, P as PollContext, h as PollOutcome, i as ConnectorItem, N as NormalizedItem, j as PostReceiveOp, A as ActionRequest, B as BundleRequest, a as BundleOutput, C as CheckFinding } from './check-CzSTEQD8.js';
+export { k as ActionContext, l as ActionDefinition, m as ActionInputField, n as ActionInputOption, o as ActionInputType, p as ActionOutputField, q as ActivationPredicate, r as AuthRung, s as BrowserSignIn, t as CHECK_OWNERS, u as CheckCode, v as CheckOptions, w as ConformanceRun, x as ConnectionSetup, y as ConnectorAuth, z as ConnectorConfigField, D as ConnectorHarness, F as ConnectorIcon, G as ConnectorKind, H as ConnectorManifest, I as ConnectorVerification, J as DedupeStrategy, K as DefaultWorkflow, L as ExtensionAgent, M as ExtensionContext, O as ExtensionContributions, Q as ExtensionPlatform, R as ExtensionUsage, S as ExtensionUsageWindow, U as FetchContext, V as FooterContribution, W as FooterItem, X as HarnessOptions, Y as LinkContext, Z as LinkHandled, _ as LinkHandlerContribution, $ as MANIFEST_TOOL, a0 as MAX_PACK_BYTES, a1 as MAX_POLL_PAGES, a2 as ManifestContributions, a3 as MockCall, a4 as MockHostAnswers, a5 as MockHostRun, a6 as MockRoute, a7 as MockRouteMissError, a8 as MockRun, a9 as OPTIONS_TOOL, aa as OptionsContext, ab as OptionsLoader, ac as PREFLIGHT_TOOL, ad as PaginationStrategy, ae as PaneContribution, af as PollPage, ag as PreflightResult, ah as ResilientFetchOptions, ai as RetryPolicy, aj as RunActionOptions, ak as RunPollOptions, al as SessionContext, am as StatusSuggestion, an as backoffMs, ao as bundleDependencyFindings, ap as bundledRequireFindings, aq as checkConnector, ar as connectionSetup, as as connectorManifest, at as createConnectorHarness, au as drainPoll, av as esbuildBundle, aw as escapedMockHttp, ax as footerToolName, ay as formatFindings, az as handlerToolName, aA as lifecycleScriptFindings, aB as mockExtensionHost, aC as pollToolName, aD as readNearestPackageJson, aE as resilientFetch, aF as retryAfterMs, aG as runAction, aH as runConformance, aI as runOptions, aJ as runPoll, aK as withMockHttp } from './check-CzSTEQD8.js';
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 
 /** Everything an extension may ask the host for; anything else is not grantable. */

package/dist/index.js

@@ -66,7 +66,7 @@ import {
   valueAt,
   withMockHttp,
   withinOrigins
-} from "./chunk-ZKHXHE3O.js";
+} from "./chunk-CCY5QT5R.js";
 export {
   BROWSER_HOST_ENV,
   BROWSER_TOKEN_ENV,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vornrun/connector-sdk",
-  "version": "0.7.0",
+  "version": "0.7.1-beta.1",
   "description": "Build and share Vorn pull connectors as ordinary npm packages",
   "type": "module",
   "license": "MIT",