@workos-inc/widgets 1.20.0-next.1790966764940 → 1.20.0-next.1791237372282

package/CHANGELOG.md

@@ -1,9 +1,11 @@
 # Changelog
 
-## 1.20.0-next.1790966764940
+## 1.20.0-next.1791237372282
 
 ### Minor Changes
 
+- Prepare the sectioned `<Pipes>` and `<PipesAdmin>` experiences (`enableSharedConnections`) for multiple connections per provider. Nothing changes until multiple connections are enabled for your environment; until then each provider keeps its single connection and looks as it did before. Once enabled, a provider with several connections renders as a group with one row per connection, oldest first, each with its own status and actions. "Add connection" and "Connect another account" add one (asking for an optional name) when the API reports it available, and connections can be renamed. Repairs target the exact connection, and adds are retry-safe.
+
 - Surface data integration connection failures in the Pipes widget
 
   When an OAuth handoff popup fails or closes without completing, the widget now
@@ -21,10 +23,14 @@
 
 - Unify relative date display logic across all Widgets.
 
+- Client GraphQL requests no longer treat errors with the message "Forbidden resource" as auth failures. Only `UNAUTHENTICATED`/`FORBIDDEN` error codes and HTTP 401/403 now trigger a token refresh and retry.
+
 - Ensure "Unknown Location" is translated in User Sessions Widget.
 
 - Stabilize dates during render to prevent dates re-rendering arbitrarily
 
+- Data provider connection input types now include an optional `idempotencyKey` field.
+
 - Fix CommonJS builds requiring `.js` files that don't exist in `dist/cjs`.
 
 ## 1.19.0

package/dist/cjs/api/client-graphql/client.cjs

@@ -12,29 +12,20 @@ let _tanstack_react_query = require("@tanstack/react-query");
 let graphql_request = require("graphql-request");
 //#region src/api/client-graphql/client.ts
 /**
-* Message NestJS attaches to a bare `ForbiddenException`, which is what the
-* Client API's auth guard produces when it rejects a token (expired, revoked,
-* or otherwise invalid). The GraphQL layer reports it as an HTTP 200 whose
-* error carries `extensions.code: "INTERNAL_SERVER_ERROR"`, so the message is
-* the only signal that distinguishes it from a genuine server fault.
-*/
-const GUARD_DENIAL_MESSAGE = "Forbidden resource";
-/**
 * A GraphQL request failed because the request was unauthenticated or the token
 * no longer carries the required permissions.
 *
-* Permission denials surface as an HTTP 200 whose `errors[].extensions.code`
-* is `"FORBIDDEN"`; token rejections from the auth guard surface as described
-* on `GUARD_DENIAL_MESSAGE`. The HTTP-status check is only a safety net for
+* Both surface as an HTTP 200 whose `errors[].extensions.code` is
+* `"UNAUTHENTICATED"` (token rejected by the auth guard) or `"FORBIDDEN"`
+* (permission denied). The HTTP-status check is only a safety net for
 * transport-level rejections (proxies, gateways) that never reach GraphQL.
-* `"UNAUTHENTICATED"` is included for when the backend reports it directly.
 */
 function isAuthError(error) {
 	const status = error.response.status;
 	if (status === 401 || status === 403) return true;
 	return (error.response.errors ?? []).some((graphQlError) => {
 		const code = graphQlError.extensions?.code;
-		return code === "UNAUTHENTICATED" || code === "FORBIDDEN" || graphQlError.message === GUARD_DENIAL_MESSAGE;
+		return code === "UNAUTHENTICATED" || code === "FORBIDDEN";
 	});
 }
 /**

package/dist/cjs/api/client-graphql/client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.cjs","names":["ClientError","ExpiredTokenError","IncorrectPermissionsError","ApiError","FetchError","useApi","useQueryClient","React","CLIENT_API_GRAPHQL_PATH","GraphQLClient","authTokenQueryKey","getSdk"],"sources":["../../../../src/api/client-graphql/client.ts"],"sourcesContent":["import { useQueryClient } from \"@tanstack/react-query\";\nimport { ClientError, GraphQLClient } from \"graphql-request\";\nimport * as React from \"react\";\nimport {\n  AuthTokenQueryData,\n  authTokenQueryKey,\n  useApi,\n  WidgetType,\n} from \"../api-provider.js\";\nimport { WIDGETS_API_VERSION } from \"../constants.js\";\nimport { ApiError, FetchError } from \"../errors.js\";\nimport {\n  ExpiredTokenError,\n  IncorrectPermissionsError,\n} from \"../../lib/errors.js\";\nimport { getSdk, Sdk, SdkFunctionWrapper } from \"./generated.js\";\nimport { CLIENT_API_GRAPHQL_PATH } from \"./constants.js\";\n\ntype QueryType = \"query\" | \"mutation\";\n\n/**\n * Message NestJS attaches to a bare `ForbiddenException`, which is what the\n * Client API's auth guard produces when it rejects a token (expired, revoked,\n * or otherwise invalid). The GraphQL layer reports it as an HTTP 200 whose\n * error carries `extensions.code: \"INTERNAL_SERVER_ERROR\"`, so the message is\n * the only signal that distinguishes it from a genuine server fault.\n */\nconst GUARD_DENIAL_MESSAGE = \"Forbidden resource\";\n\n/**\n * A GraphQL request failed because the request was unauthenticated or the token\n * no longer carries the required permissions.\n *\n * Permission denials surface as an HTTP 200 whose `errors[].extensions.code`\n * is `\"FORBIDDEN\"`; token rejections from the auth guard surface as described\n * on `GUARD_DENIAL_MESSAGE`. The HTTP-status check is only a safety net for\n * transport-level rejections (proxies, gateways) that never reach GraphQL.\n * `\"UNAUTHENTICATED\"` is included for when the backend reports it directly.\n */\nfunction isAuthError(error: ClientError): boolean {\n  const status = error.response.status;\n  if (status === 401 || status === 403) {\n    return true;\n  }\n\n  return (error.response.errors ?? []).some((graphQlError) => {\n    const code = graphQlError.extensions?.code;\n    return (\n      code === \"UNAUTHENTICATED\" ||\n      code === \"FORBIDDEN\" ||\n      graphQlError.message === GUARD_DENIAL_MESSAGE\n    );\n  });\n}\n\n/**\n * The Client API returns GraphQL-level errors (validation, not-found, etc.) as\n * an HTTP 200 with an `errors` array. Surfacing that raw `200` on an `ApiError`\n * is misleading for downstream consumers and telemetry, so normalize any\n * non-error HTTP status to a 500.\n */\nfunction normalizeErrorStatus(status: number): number {\n  return status >= 400 ? status : 500;\n}\n\n/**\n * Translate a graphql-request failure into the same error classes the REST\n * Widgets client throws, so presentational components and error boundaries can\n * handle both transports uniformly.\n */\nfunction toWidgetError(\n  error: unknown,\n  queryType: QueryType,\n  isExpiredToken: boolean,\n): Error {\n  if (error instanceof ClientError) {\n    if (isAuthError(error)) {\n      const context = { status: error.response.status, queryType } as const;\n      return isExpiredToken\n        ? new ExpiredTokenError({ context })\n        : new IncorrectPermissionsError({ context });\n    }\n\n    const firstError = error.response.errors?.[0];\n    return new ApiError({\n      message: firstError?.message ?? error.message,\n      status: normalizeErrorStatus(error.response.status),\n      queryType,\n      context: { errors: error.response.errors },\n    });\n  }\n\n  return new FetchError({\n    message: error instanceof Error ? error.message : \"GraphQL request failed\",\n    queryType,\n    context: { error },\n  });\n}\n\n/**\n * Returns a typed SDK for the WorkOS Client GraphQL API, wired up to the same\n * `ApiProvider` auth plumbing the REST Widgets client uses:\n *\n * - Sends the current bearer token plus the widget-type / version headers.\n * - On an auth failure, re-mints the token via the shared `authToken` query and\n *   retries the operation once (mirrors the REST client's 403 retry).\n * - Maps GraphQL/network failures onto the widget error classes.\n *\n * Elevated-access tokens are intentionally not attached here; the Client API\n * takes them as mutation input fields, so call sites read them from\n * `useElevatedAccessToken` and pass them through the relevant inputs.\n */\nexport function useClientGraphql(): Sdk {\n  const { authToken, baseUrl, widgetType } = useApi();\n  const queryClient = useQueryClient();\n\n  return React.useMemo(() => {\n    const endpoint = new URL(baseUrl);\n    endpoint.pathname = CLIENT_API_GRAPHQL_PATH;\n    const client = new GraphQLClient(endpoint.toString());\n\n    const buildHeaders = (\n      token: string | undefined,\n    ): Record<string, string> => {\n      const headers: Record<string, string> = {\n        \"WorkOS-Widgets-Version\": WIDGETS_API_VERSION,\n        \"WorkOS-Widgets-Type\": widgetType,\n      };\n      if (token) {\n        headers.Authorization = `Bearer ${token}`;\n      }\n      return headers;\n    };\n\n    const refetchToken = async (\n      currentWidgetType: WidgetType,\n    ): Promise<string | undefined> => {\n      const tokenQueryKey = authTokenQueryKey(currentWidgetType);\n      await queryClient.refetchQueries({ queryKey: tokenQueryKey });\n      const refreshed =\n        queryClient.getQueryData<AuthTokenQueryData>(tokenQueryKey);\n      return refreshed?.authToken;\n    };\n\n    const isTokenExpired = (): boolean => {\n      const refreshed = queryClient.getQueryData<AuthTokenQueryData>(\n        authTokenQueryKey(widgetType),\n      );\n      const exp = refreshed?.exp;\n      // TODO: Fix this!\n      // oxlint-disable-next-line react/purity\n      return exp !== undefined && exp * 1000 <= Date.now();\n    };\n\n    const wrapper: SdkFunctionWrapper = async (\n      action,\n      _operationName,\n      operationType,\n    ) => {\n      const queryType: QueryType =\n        operationType === \"mutation\" ? \"mutation\" : \"query\";\n\n      try {\n        return await action(buildHeaders(authToken));\n      } catch (error) {\n        if (error instanceof ClientError && isAuthError(error)) {\n          let freshToken: string | undefined;\n          try {\n            freshToken = await refetchToken(widgetType);\n          } catch (refetchError) {\n            throw new ExpiredTokenError({\n              context: { queryType, refetchError },\n            });\n          }\n\n          if (freshToken && freshToken !== authToken) {\n            try {\n              return await action(buildHeaders(freshToken));\n            } catch (retryError) {\n              throw toWidgetError(retryError, queryType, isTokenExpired());\n            }\n          }\n        }\n\n        throw toWidgetError(error, queryType, isTokenExpired());\n      }\n    };\n\n    return getSdk(client, wrapper);\n  }, [authToken, baseUrl, widgetType, queryClient]);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA2BA,MAAM,uBAAuB;;;;;;;;;;;AAY7B,SAAS,YAAY,OAA6B;CAChD,MAAM,SAAS,MAAM,SAAS;CAC9B,IAAI,WAAW,OAAO,WAAW,KAC/B,OAAO;CAGT,QAAQ,MAAM,SAAS,UAAU,CAAC,EAAA,CAAG,MAAM,iBAAiB;EAC1D,MAAM,OAAO,aAAa,YAAY;EACtC,OACE,SAAS,qBACT,SAAS,eACT,aAAa,YAAY;CAE7B,CAAC;AACH;;;;;;;AAQA,SAAS,qBAAqB,QAAwB;CACpD,OAAO,UAAU,MAAM,SAAS;AAClC;;;;;;AAOA,SAAS,cACP,OACA,WACA,gBACO;CACP,IAAI,iBAAiBA,gBAAAA,aAAa;EAChC,IAAI,YAAY,KAAK,GAAG;GACtB,MAAM,UAAU;IAAE,QAAQ,MAAM,SAAS;IAAQ;GAAU;GAC3D,OAAO,iBACH,IAAIC,mBAAAA,kBAAkB,EAAE,QAAQ,CAAC,IACjC,IAAIC,mBAAAA,0BAA0B,EAAE,QAAQ,CAAC;EAC/C;EAEA,MAAM,aAAa,MAAM,SAAS,SAAS;EAC3C,OAAO,IAAIC,mBAAAA,SAAS;GAClB,SAAS,YAAY,WAAW,MAAM;GACtC,QAAQ,qBAAqB,MAAM,SAAS,MAAM;GAClD;GACA,SAAS,EAAE,QAAQ,MAAM,SAAS,OAAO;EAC3C,CAAC;CACH;CAEA,OAAO,IAAIC,mBAAAA,WAAW;EACpB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;EAClD;EACA,SAAS,EAAE,MAAM;CACnB,CAAC;AACH;;;;;;;;;;;;;;AAeA,SAAgB,mBAAwB;CACtC,MAAM,EAAE,WAAW,SAAS,eAAeC,yBAAAA,OAAO;CAClD,MAAM,eAAA,GAAcC,sBAAAA,eAAAA,CAAe;CAEnC,OAAOC,MAAM,cAAc;EACzB,MAAM,WAAW,IAAI,IAAI,OAAO;EAChC,SAAS,WAAWC,qCAAAA;EACpB,MAAM,SAAS,IAAIC,gBAAAA,cAAc,SAAS,SAAS,CAAC;EAEpD,MAAM,gBACJ,UAC2B;GAC3B,MAAM,UAAkC;IACtC,0BAAA;IACA,uBAAuB;GACzB;GACA,IAAI,OACF,QAAQ,gBAAgB,UAAU;GAEpC,OAAO;EACT;EAEA,MAAM,eAAe,OACnB,sBACgC;GAChC,MAAM,gBAAgBC,yBAAAA,kBAAkB,iBAAiB;GACzD,MAAM,YAAY,eAAe,EAAE,UAAU,cAAc,CAAC;GAG5D,OADE,YAAY,aAAiC,aACxC,CAAA,EAAW;EACpB;EAEA,MAAM,uBAAgC;GAIpC,MAAM,MAHY,YAAY,aAC5BA,yBAAAA,kBAAkB,UAAU,CAElB,CAAA,EAAW;GAGvB,OAAO,QAAQ,UAAa,MAAM,OAAQ,KAAK,IAAI;EACrD;EAEA,MAAM,UAA8B,OAClC,QACA,gBACA,kBACG;GACH,MAAM,YACJ,kBAAkB,aAAa,aAAa;GAE9C,IAAI;IACF,OAAO,MAAM,OAAO,aAAa,SAAS,CAAC;GAC7C,SAAS,OAAO;IACd,IAAI,iBAAiBV,gBAAAA,eAAe,YAAY,KAAK,GAAG;KACtD,IAAI;KACJ,IAAI;MACF,aAAa,MAAM,aAAa,UAAU;KAC5C,SAAS,cAAc;MACrB,MAAM,IAAIC,mBAAAA,kBAAkB,EAC1B,SAAS;OAAE;OAAW;MAAa,EACrC,CAAC;KACH;KAEA,IAAI,cAAc,eAAe,WAC/B,IAAI;MACF,OAAO,MAAM,OAAO,aAAa,UAAU,CAAC;KAC9C,SAAS,YAAY;MACnB,MAAM,cAAc,YAAY,WAAW,eAAe,CAAC;KAC7D;IAEJ;IAEA,MAAM,cAAc,OAAO,WAAW,eAAe,CAAC;GACxD;EACF;EAEA,OAAOU,qCAAAA,OAAO,QAAQ,OAAO;CAC/B,GAAG;EAAC;EAAW;EAAS;EAAY;CAAW,CAAC;AAClD"}
+{"version":3,"file":"client.cjs","names":["ClientError","ExpiredTokenError","IncorrectPermissionsError","ApiError","FetchError","useApi","useQueryClient","React","CLIENT_API_GRAPHQL_PATH","GraphQLClient","authTokenQueryKey","getSdk"],"sources":["../../../../src/api/client-graphql/client.ts"],"sourcesContent":["import { useQueryClient } from \"@tanstack/react-query\";\nimport { ClientError, GraphQLClient } from \"graphql-request\";\nimport * as React from \"react\";\nimport {\n  AuthTokenQueryData,\n  authTokenQueryKey,\n  useApi,\n  WidgetType,\n} from \"../api-provider.js\";\nimport { WIDGETS_API_VERSION } from \"../constants.js\";\nimport { ApiError, FetchError } from \"../errors.js\";\nimport {\n  ExpiredTokenError,\n  IncorrectPermissionsError,\n} from \"../../lib/errors.js\";\nimport { getSdk, Sdk, SdkFunctionWrapper } from \"./generated.js\";\nimport { CLIENT_API_GRAPHQL_PATH } from \"./constants.js\";\n\ntype QueryType = \"query\" | \"mutation\";\n\n/**\n * A GraphQL request failed because the request was unauthenticated or the token\n * no longer carries the required permissions.\n *\n * Both surface as an HTTP 200 whose `errors[].extensions.code` is\n * `\"UNAUTHENTICATED\"` (token rejected by the auth guard) or `\"FORBIDDEN\"`\n * (permission denied). The HTTP-status check is only a safety net for\n * transport-level rejections (proxies, gateways) that never reach GraphQL.\n */\nfunction isAuthError(error: ClientError): boolean {\n  const status = error.response.status;\n  if (status === 401 || status === 403) {\n    return true;\n  }\n\n  return (error.response.errors ?? []).some((graphQlError) => {\n    const code = graphQlError.extensions?.code;\n    return code === \"UNAUTHENTICATED\" || code === \"FORBIDDEN\";\n  });\n}\n\n/**\n * The Client API returns GraphQL-level errors (validation, not-found, etc.) as\n * an HTTP 200 with an `errors` array. Surfacing that raw `200` on an `ApiError`\n * is misleading for downstream consumers and telemetry, so normalize any\n * non-error HTTP status to a 500.\n */\nfunction normalizeErrorStatus(status: number): number {\n  return status >= 400 ? status : 500;\n}\n\n/**\n * Translate a graphql-request failure into the same error classes the REST\n * Widgets client throws, so presentational components and error boundaries can\n * handle both transports uniformly.\n */\nfunction toWidgetError(\n  error: unknown,\n  queryType: QueryType,\n  isExpiredToken: boolean,\n): Error {\n  if (error instanceof ClientError) {\n    if (isAuthError(error)) {\n      const context = { status: error.response.status, queryType } as const;\n      return isExpiredToken\n        ? new ExpiredTokenError({ context })\n        : new IncorrectPermissionsError({ context });\n    }\n\n    const firstError = error.response.errors?.[0];\n    return new ApiError({\n      message: firstError?.message ?? error.message,\n      status: normalizeErrorStatus(error.response.status),\n      queryType,\n      context: { errors: error.response.errors },\n    });\n  }\n\n  return new FetchError({\n    message: error instanceof Error ? error.message : \"GraphQL request failed\",\n    queryType,\n    context: { error },\n  });\n}\n\n/**\n * Returns a typed SDK for the WorkOS Client GraphQL API, wired up to the same\n * `ApiProvider` auth plumbing the REST Widgets client uses:\n *\n * - Sends the current bearer token plus the widget-type / version headers.\n * - On an auth failure, re-mints the token via the shared `authToken` query and\n *   retries the operation once (mirrors the REST client's 403 retry).\n * - Maps GraphQL/network failures onto the widget error classes.\n *\n * Elevated-access tokens are intentionally not attached here; the Client API\n * takes them as mutation input fields, so call sites read them from\n * `useElevatedAccessToken` and pass them through the relevant inputs.\n */\nexport function useClientGraphql(): Sdk {\n  const { authToken, baseUrl, widgetType } = useApi();\n  const queryClient = useQueryClient();\n\n  return React.useMemo(() => {\n    const endpoint = new URL(baseUrl);\n    endpoint.pathname = CLIENT_API_GRAPHQL_PATH;\n    const client = new GraphQLClient(endpoint.toString());\n\n    const buildHeaders = (\n      token: string | undefined,\n    ): Record<string, string> => {\n      const headers: Record<string, string> = {\n        \"WorkOS-Widgets-Version\": WIDGETS_API_VERSION,\n        \"WorkOS-Widgets-Type\": widgetType,\n      };\n      if (token) {\n        headers.Authorization = `Bearer ${token}`;\n      }\n      return headers;\n    };\n\n    const refetchToken = async (\n      currentWidgetType: WidgetType,\n    ): Promise<string | undefined> => {\n      const tokenQueryKey = authTokenQueryKey(currentWidgetType);\n      await queryClient.refetchQueries({ queryKey: tokenQueryKey });\n      const refreshed =\n        queryClient.getQueryData<AuthTokenQueryData>(tokenQueryKey);\n      return refreshed?.authToken;\n    };\n\n    const isTokenExpired = (): boolean => {\n      const refreshed = queryClient.getQueryData<AuthTokenQueryData>(\n        authTokenQueryKey(widgetType),\n      );\n      const exp = refreshed?.exp;\n      // TODO: Fix this!\n      // oxlint-disable-next-line react/purity\n      return exp !== undefined && exp * 1000 <= Date.now();\n    };\n\n    const wrapper: SdkFunctionWrapper = async (\n      action,\n      _operationName,\n      operationType,\n    ) => {\n      const queryType: QueryType =\n        operationType === \"mutation\" ? \"mutation\" : \"query\";\n\n      try {\n        return await action(buildHeaders(authToken));\n      } catch (error) {\n        if (error instanceof ClientError && isAuthError(error)) {\n          let freshToken: string | undefined;\n          try {\n            freshToken = await refetchToken(widgetType);\n          } catch (refetchError) {\n            throw new ExpiredTokenError({\n              context: { queryType, refetchError },\n            });\n          }\n\n          if (freshToken && freshToken !== authToken) {\n            try {\n              return await action(buildHeaders(freshToken));\n            } catch (retryError) {\n              throw toWidgetError(retryError, queryType, isTokenExpired());\n            }\n          }\n        }\n\n        throw toWidgetError(error, queryType, isTokenExpired());\n      }\n    };\n\n    return getSdk(client, wrapper);\n  }, [authToken, baseUrl, widgetType, queryClient]);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA6BA,SAAS,YAAY,OAA6B;CAChD,MAAM,SAAS,MAAM,SAAS;CAC9B,IAAI,WAAW,OAAO,WAAW,KAC/B,OAAO;CAGT,QAAQ,MAAM,SAAS,UAAU,CAAC,EAAA,CAAG,MAAM,iBAAiB;EAC1D,MAAM,OAAO,aAAa,YAAY;EACtC,OAAO,SAAS,qBAAqB,SAAS;CAChD,CAAC;AACH;;;;;;;AAQA,SAAS,qBAAqB,QAAwB;CACpD,OAAO,UAAU,MAAM,SAAS;AAClC;;;;;;AAOA,SAAS,cACP,OACA,WACA,gBACO;CACP,IAAI,iBAAiBA,gBAAAA,aAAa;EAChC,IAAI,YAAY,KAAK,GAAG;GACtB,MAAM,UAAU;IAAE,QAAQ,MAAM,SAAS;IAAQ;GAAU;GAC3D,OAAO,iBACH,IAAIC,mBAAAA,kBAAkB,EAAE,QAAQ,CAAC,IACjC,IAAIC,mBAAAA,0BAA0B,EAAE,QAAQ,CAAC;EAC/C;EAEA,MAAM,aAAa,MAAM,SAAS,SAAS;EAC3C,OAAO,IAAIC,mBAAAA,SAAS;GAClB,SAAS,YAAY,WAAW,MAAM;GACtC,QAAQ,qBAAqB,MAAM,SAAS,MAAM;GAClD;GACA,SAAS,EAAE,QAAQ,MAAM,SAAS,OAAO;EAC3C,CAAC;CACH;CAEA,OAAO,IAAIC,mBAAAA,WAAW;EACpB,SAAS,iBAAiB,QAAQ,MAAM,UAAU;EAClD;EACA,SAAS,EAAE,MAAM;CACnB,CAAC;AACH;;;;;;;;;;;;;;AAeA,SAAgB,mBAAwB;CACtC,MAAM,EAAE,WAAW,SAAS,eAAeC,yBAAAA,OAAO;CAClD,MAAM,eAAA,GAAcC,sBAAAA,eAAAA,CAAe;CAEnC,OAAOC,MAAM,cAAc;EACzB,MAAM,WAAW,IAAI,IAAI,OAAO;EAChC,SAAS,WAAWC,qCAAAA;EACpB,MAAM,SAAS,IAAIC,gBAAAA,cAAc,SAAS,SAAS,CAAC;EAEpD,MAAM,gBACJ,UAC2B;GAC3B,MAAM,UAAkC;IACtC,0BAAA;IACA,uBAAuB;GACzB;GACA,IAAI,OACF,QAAQ,gBAAgB,UAAU;GAEpC,OAAO;EACT;EAEA,MAAM,eAAe,OACnB,sBACgC;GAChC,MAAM,gBAAgBC,yBAAAA,kBAAkB,iBAAiB;GACzD,MAAM,YAAY,eAAe,EAAE,UAAU,cAAc,CAAC;GAG5D,OADE,YAAY,aAAiC,aACxC,CAAA,EAAW;EACpB;EAEA,MAAM,uBAAgC;GAIpC,MAAM,MAHY,YAAY,aAC5BA,yBAAAA,kBAAkB,UAAU,CAElB,CAAA,EAAW;GAGvB,OAAO,QAAQ,UAAa,MAAM,OAAQ,KAAK,IAAI;EACrD;EAEA,MAAM,UAA8B,OAClC,QACA,gBACA,kBACG;GACH,MAAM,YACJ,kBAAkB,aAAa,aAAa;GAE9C,IAAI;IACF,OAAO,MAAM,OAAO,aAAa,SAAS,CAAC;GAC7C,SAAS,OAAO;IACd,IAAI,iBAAiBV,gBAAAA,eAAe,YAAY,KAAK,GAAG;KACtD,IAAI;KACJ,IAAI;MACF,aAAa,MAAM,aAAa,UAAU;KAC5C,SAAS,cAAc;MACrB,MAAM,IAAIC,mBAAAA,kBAAkB,EAC1B,SAAS;OAAE;OAAW;MAAa,EACrC,CAAC;KACH;KAEA,IAAI,cAAc,eAAe,WAC/B,IAAI;MACF,OAAO,MAAM,OAAO,aAAa,UAAU,CAAC;KAC9C,SAAS,YAAY;MACnB,MAAM,cAAc,YAAY,WAAW,eAAe,CAAC;KAC7D;IAEJ;IAEA,MAAM,cAAc,OAAO,WAAW,eAAe,CAAC;GACxD;EACF;EAEA,OAAOU,qCAAAA,OAAO,QAAQ,OAAO;CAC/B,GAAG;EAAC;EAAW;EAAS;EAAY;CAAW,CAAC;AAClD"}

package/dist/cjs/api/client-graphql/generated.cjs

@@ -189,6 +189,10 @@ const DataProviderFieldsFragmentDoc = `
   iconSlug
   iconUrl
   iconDarkUrl
+  capabilities {
+    canAddConnection
+    addConnectionMethods
+  }
   configFields {
     ...DataProviderConfigFieldFields
   }
@@ -245,6 +249,10 @@ const DataProviderConnectionFieldsFragmentDoc = `
   scopes
   state
   availability
+  capabilities {
+    canReauthorize
+    canUpdateCredentials
+  }
   apiKeyLast4
   clientId
   clientSecretLast4
@@ -291,6 +299,8 @@ const OrganizationDataProviderFieldsFragmentDoc = `
     canDisconnect
     canReauthorize
     canUpdateCredentials
+    canAddConnection
+    addConnectionMethods
   }
   configFields {
     ...DataProviderConfigFieldFields
@@ -310,6 +320,17 @@ const OrganizationDataProviderFieldsFragmentDoc = `
 }
     ${DataProviderConfigFieldFieldsFragmentDoc}
 ${DataProviderConnectionFieldsFragmentDoc}`;
+const DataProviderConnectionLabelResultFieldsFragmentDoc = `
+    fragment DataProviderConnectionLabelResultFields on UpdateDataProviderConnectionLabelResult {
+  connection {
+    ...DataProviderConnectionFields
+  }
+  warnings {
+    code
+    message
+  }
+}
+    ${DataProviderConnectionFieldsFragmentDoc}`;
 const SharedDataProviderFieldsFragmentDoc = `
     fragment SharedDataProviderFields on SharedDataProvider {
   id
@@ -952,6 +973,20 @@ const DeleteOrganizationDataProviderConnectionDocument = `
   deleteOrganizationDataProviderConnection(id: $id)
 }
     `;
+const UpdateDataProviderConnectionLabelDocument = `
+    mutation UpdateDataProviderConnectionLabel($input: UpdateDataProviderConnectionLabelInput!) {
+  updateDataProviderConnectionLabel(input: $input) {
+    ...DataProviderConnectionLabelResultFields
+  }
+}
+    ${DataProviderConnectionLabelResultFieldsFragmentDoc}`;
+const UpdateOrganizationDataProviderConnectionLabelDocument = `
+    mutation UpdateOrganizationDataProviderConnectionLabel($input: UpdateDataProviderConnectionLabelInput!) {
+  updateOrganizationDataProviderConnectionLabel(input: $input) {
+    ...DataProviderConnectionLabelResultFields
+  }
+}
+    ${DataProviderConnectionLabelResultFieldsFragmentDoc}`;
 const RegisterPasskeyDocument = `
     mutation RegisterPasskey($input: RegisterPasskeyInput!) {
   registerPasskey(input: $input) {
@@ -1815,6 +1850,28 @@ function getSdk(client, withWrapper = defaultWrapper) {
 				signal
 			}), "DeleteOrganizationDataProviderConnection", "mutation", variables);
 		},
+		UpdateDataProviderConnectionLabel(variables, requestHeaders, signal) {
+			return withWrapper((wrappedRequestHeaders) => client.request({
+				document: UpdateDataProviderConnectionLabelDocument,
+				variables,
+				requestHeaders: {
+					...requestHeaders,
+					...wrappedRequestHeaders
+				},
+				signal
+			}), "UpdateDataProviderConnectionLabel", "mutation", variables);
+		},
+		UpdateOrganizationDataProviderConnectionLabel(variables, requestHeaders, signal) {
+			return withWrapper((wrappedRequestHeaders) => client.request({
+				document: UpdateOrganizationDataProviderConnectionLabelDocument,
+				variables,
+				requestHeaders: {
+					...requestHeaders,
+					...wrappedRequestHeaders
+				},
+				signal
+			}), "UpdateOrganizationDataProviderConnectionLabel", "mutation", variables);
+		},
 		RegisterPasskey(variables, requestHeaders, signal) {
 			return withWrapper((wrappedRequestHeaders) => client.request({
 				document: RegisterPasskeyDocument,
@@ -2063,6 +2120,7 @@ exports.DataProviderAuthorizationStatusDocument = DataProviderAuthorizationStatu
 exports.DataProviderConfigFieldFieldsFragmentDoc = DataProviderConfigFieldFieldsFragmentDoc;
 exports.DataProviderConfigurationFieldsFragmentDoc = DataProviderConfigurationFieldsFragmentDoc;
 exports.DataProviderConnectionFieldsFragmentDoc = DataProviderConnectionFieldsFragmentDoc;
+exports.DataProviderConnectionLabelResultFieldsFragmentDoc = DataProviderConnectionLabelResultFieldsFragmentDoc;
 exports.DataProviderFieldsFragmentDoc = DataProviderFieldsFragmentDoc;
 exports.DeleteDataProviderConnectionDocument = DeleteDataProviderConnectionDocument;
 exports.DeleteOrganizationApiKeyDocument = DeleteOrganizationApiKeyDocument;
@@ -2118,7 +2176,9 @@ exports.SetDataProviderConfigurationDocument = SetDataProviderConfigurationDocum
 exports.SetDataProviderEnabledDocument = SetDataProviderEnabledDocument;
 exports.SetOrganizationDataProviderConfigurationDocument = SetOrganizationDataProviderConfigurationDocument;
 exports.SharedDataProviderFieldsFragmentDoc = SharedDataProviderFieldsFragmentDoc;
+exports.UpdateDataProviderConnectionLabelDocument = UpdateDataProviderConnectionLabelDocument;
 exports.UpdateMemberRoleDocument = UpdateMemberRoleDocument;
+exports.UpdateOrganizationDataProviderConnectionLabelDocument = UpdateOrganizationDataProviderConnectionLabelDocument;
 exports.UpdatePasswordDocument = UpdatePasswordDocument;
 exports.UpdateProfileDocument = UpdateProfileDocument;
 exports.UserApiKeyFieldsFragmentDoc = UserApiKeyFieldsFragmentDoc;