@xyne/workflow-sdk 3.2.31 → 3.2.33

package/dist/steps/builtin/code.step.d.ts

@@ -1,14 +1,18 @@
 /**
  * CODE step — sandboxed JavaScript execution.
  *
- * Runs user-provided JS code in a restricted `vm.runInNewContext` sandbox.
+ * Runs user-provided JS in the host-configured code-execution sandbox — the same
+ * isolated E2B / Docker backend the `run_code` agent tool uses — NOT in the
+ * workflow process. `node:vm` is not a security boundary (a constructor-chain
+ * escape reaches the host runtime and thus OS-level access), so this step
+ * requires a real sandbox and FAILS CLOSED when none is configured rather than
+ * falling back to in-process evaluation.
+ *
  * The code receives:
  * - `$input` — the previous step's output (or {} if first step)
  * - `$context` — read-only snapshot of the workflow context
  *
  * Must return a JSON-serializable value.
- *
- * Security: no access to require, process, fs, net, or any Node globals.
  */
 import { z } from 'zod';
 import { BaseActionStep } from '../base-step.js';

package/dist/steps/builtin/code.step.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"code.step.d.ts","sourceRoot":"","sources":["../../../src/steps/builtin/code.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAS9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,MAAM,WAAW,cAAe,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,MAAM,EAAE,OAAO,CAAC;CACjB;AAQD,qBAAa,QAAS,SAAQ,cAAc,CAC1C,OAAO,oBAAoB,EAC3B,cAAc,CACf;IACC,SAAkB,IAAI,wBAAwB;IAC9C,SAAkB,IAAI,UAAU;IAChC,SAAkB,WAAW,uCAAuC;IACpE,SAAkB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;OAAwB;IACtD,SAAkB,YAAY;;;;;;OAAwB;IACtD,SAAkB,QAAQ,EAAE,YAAY,CAAU;IAClD,SAAkB,IAAI,UAAU;IAEvB,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAWlF,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAiB3E,OAAO,CACpB,MAAM,EAAE,cAAc,EACtB,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAAC,cAAc,CAAC;CA+D3B"}
+{"version":3,"file":"code.step.d.ts","sourceRoot":"","sources":["../../../src/steps/builtin/code.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAG5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAS9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,MAAM,WAAW,cAAe,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,MAAM,EAAE,OAAO,CAAC;CACjB;AA+CD,qBAAa,QAAS,SAAQ,cAAc,CAC1C,OAAO,oBAAoB,EAC3B,cAAc,CACf;IACC,SAAkB,IAAI,wBAAwB;IAC9C,SAAkB,IAAI,UAAU;IAChC,SAAkB,WAAW,uCAAuC;IACpE,SAAkB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;OAAwB;IACtD,SAAkB,YAAY;;;;;;OAAwB;IACtD,SAAkB,QAAQ,EAAE,YAAY,CAAU;IAClD,SAAkB,IAAI,UAAU;IAEvB,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAWlF,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAiB3E,OAAO,CACpB,MAAM,EAAE,cAAc,EACtB,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAAC,cAAc,CAAC;CA4D3B"}

package/dist/steps/builtin/code.step.js

@@ -1,18 +1,22 @@
 /**
  * CODE step — sandboxed JavaScript execution.
  *
- * Runs user-provided JS code in a restricted `vm.runInNewContext` sandbox.
+ * Runs user-provided JS in the host-configured code-execution sandbox — the same
+ * isolated E2B / Docker backend the `run_code` agent tool uses — NOT in the
+ * workflow process. `node:vm` is not a security boundary (a constructor-chain
+ * escape reaches the host runtime and thus OS-level access), so this step
+ * requires a real sandbox and FAILS CLOSED when none is configured rather than
+ * falling back to in-process evaluation.
+ *
  * The code receives:
  * - `$input` — the previous step's output (or {} if first step)
  * - `$context` — read-only snapshot of the workflow context
  *
  * Must return a JSON-serializable value.
- *
- * Security: no access to require, process, fs, net, or any Node globals.
  */
 import { z } from 'zod';
-import { runInNewContext } from 'node:vm';
 import { BaseActionStep } from '../base-step.js';
+import { bindSandboxSession } from '../../sandbox/types.js';
 import { BuiltinStepType } from '../../types/known-types.js';
 // ─── Config ───
 const OutputFieldSchema = z.object({
@@ -27,6 +31,38 @@ export const CodeStepConfigSchema = z.object({
 const CodeStepOutputSchema = z.object({
     result: z.unknown(),
 });
+// Sentinel delimiting the JSON return value on stdout. The program appends it
+// last, after any user console output, so `lastIndexOf` recovers the result
+// even if the user logged text that resembles the marker.
+const RESULT_MARKER = '__XYNE_CODE_RESULT__';
+// Wrap the user code into a self-contained Node (CommonJS) program that injects
+// $input/$context, runs the code, and prints the JSON result after the marker.
+// $input/$context are embedded via JSON.parse of a JSON-encoded string so no
+// input value can break out into code. User code is written to a file (never a
+// shell argument), so it needs no escaping.
+function buildProgram(code, $input, $context, timeoutMs) {
+    const inputLit = JSON.stringify(JSON.stringify($input));
+    const contextLit = JSON.stringify(JSON.stringify($context));
+    return [
+        `const $input = JSON.parse(${inputLit});`,
+        `const $context = JSON.parse(${contextLit});`,
+        `const __timer = setTimeout(() => { process.stderr.write("Code step timed out after ${timeoutMs}ms"); process.exit(1); }, ${timeoutMs});`,
+        `if (__timer.unref) __timer.unref();`,
+        `Promise.resolve().then(async () => {`,
+        code,
+        `}).then((r) => {`,
+        `  clearTimeout(__timer);`,
+        `  let out;`,
+        `  try { out = JSON.stringify(r === undefined ? null : r); }`,
+        `  catch (_e) { process.stderr.write("Return value is not JSON-serializable"); process.exit(1); return; }`,
+        `  process.stdout.write("\\n${RESULT_MARKER}" + out);`,
+        `}, (e) => {`,
+        `  clearTimeout(__timer);`,
+        `  process.stderr.write(String(e && e.stack ? e.stack : e));`,
+        `  process.exit(1);`,
+        `});`,
+    ].join('\n');
+}
 // ─── Step ───
 export class CodeStep extends BaseActionStep {
     type = BuiltinStepType.CODE;
@@ -68,54 +104,48 @@ export class CodeStep extends BaseActionStep {
         const lastStep = stepEntries[stepEntries.length - 1];
         const $input = lastStep?.output ?? {};
         // Build read-only context snapshot
-        const $context = Object.freeze({
+        const $context = {
             trigger: ctx.workflow.trigger,
-            steps: Object.freeze(Object.fromEntries(Object.entries(ctx.workflow.steps).map(([k, v]) => [
-                k,
-                Object.freeze({ ...v }),
-            ]))),
-        });
-        // Minimal sandbox — no Node globals
-        const sandbox = {
-            $input,
-            $context,
-            // Safe globals
-            JSON,
-            Math,
-            Date,
-            Array,
-            Object,
-            String,
-            Number,
-            Boolean,
-            RegExp,
-            Map,
-            Set,
-            parseInt,
-            parseFloat,
-            isNaN,
-            isFinite,
-            // Console (mapped to ctx.log)
-            console: Object.freeze({
-                log: ctx.log.info,
-                warn: ctx.log.warn,
-                error: ctx.log.error,
-            }),
+            steps: Object.fromEntries(Object.entries(ctx.workflow.steps).map(([k, v]) => [k, { ...v }])),
         };
+        // Fail closed: JS runs only inside the isolated sandbox, never in-process.
+        if (!ctx.sandbox) {
+            throw new Error('Code step execution failed: no code-execution sandbox is configured. '
+                + 'The CODE step runs JavaScript in an isolated sandbox and does not fall '
+                + 'back to in-process execution. Configure a sandbox backend (e.g. '
+                + 'SANDBOX_BACKEND / E2B_API_KEY) to enable CODE steps.');
+        }
+        const program = buildProgram(config.code, $input, $context, config.timeoutMs);
+        const scriptPath = `/tmp/xyne-code-${ctx.runtime.executionId}-${ctx.runtime.stepId}.cjs`;
+        const scope = ctx.runtime.attributes;
+        const handle = await ctx.sandbox.create(scope ? { scope } : {});
         try {
-            // Wrap in async IIFE so user code can use await
-            const wrappedCode = `(async () => { ${config.code} })()`;
-            const result = await runInNewContext(wrappedCode, sandbox, {
-                timeout: config.timeoutMs,
-                filename: 'workflow-code-step.js',
+            const session = bindSandboxSession(ctx.sandbox, handle);
+            await session.writeFiles([
+                { path: scriptPath, bytes: new TextEncoder().encode(program) },
+            ]);
+            const res = await session.bash(`node ${scriptPath}`, {
+                timeoutMs: config.timeoutMs,
             });
-            // Ensure JSON-serializable
-            const serialized = JSON.parse(JSON.stringify(result ?? null));
-            return { result: serialized };
+            const markerAt = res.stdout.lastIndexOf(RESULT_MARKER);
+            if (markerAt === -1) {
+                const detail = res.stderr.trim() ||
+                    res.stdout.trim() ||
+                    `exited with code ${res.exitCode ?? 'unknown'}`;
+                throw new Error(`Code step execution failed: ${detail}`);
+            }
+            // Surface anything the user logged before the result to the step log.
+            const logged = res.stdout.slice(0, markerAt).trim();
+            if (logged)
+                ctx.log.info(logged);
+            const payload = res.stdout.slice(markerAt + RESULT_MARKER.length).trim();
+            const result = JSON.parse(payload);
+            return { result };
         }
-        catch (err) {
-            const message = err instanceof Error ? err.message : String(err);
-            throw new Error(`Code step execution failed: ${message}`);
+        finally {
+            await ctx.sandbox.destroy(handle).catch(() => {
+                /* best-effort teardown */
+            });
         }
     }
 }

package/dist/steps/builtin/code.step.js.map

@@ -1 +1 @@
-{"version":3,"file":"code.step.js","sourceRoot":"","sources":["../../../src/steps/builtin/code.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG7D,iBAAiB;AAEjB,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CACrG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8HAA8H,CAAC;IAChK,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACvG,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uFAAuF,CAAC;CACtJ,CAAC,CAAC;AAUH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAEH,eAAe;AAEf,MAAM,OAAO,QAAS,SAAQ,cAG7B;IACmB,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC;IAC5B,IAAI,GAAG,MAAM,CAAC;IACd,WAAW,GAAG,mCAAmC,CAAC;IAClD,YAAY,GAAG,oBAAoB,CAAC;IACpC,YAAY,GAAG,oBAAoB,CAAC;IACpC,QAAQ,GAAiB,MAAM,CAAC;IAChC,IAAI,GAAG,MAAM,CAAC;IAEvB,oBAAoB,CAAC,UAAmC;QAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAwD,CAAC;QAC9F,IAAI,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEQ,uBAAuB,CAAC,MAA+B;QAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAsD,CAAC;QAC3F,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,WAAW,GAA4C,EAAE,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE;aACpD;SACF,CAAC;IACJ,CAAC;IAEQ,KAAK,CAAC,OAAO,CACpB,MAAsB,EACtB,GAAyB;QAEzB,gDAAgD;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAA4B,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;QAE/D,mCAAmC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO;YAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,CAClB,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;gBACjD,CAAC;gBACD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;aACxB,CAAC,CACH,CACF;SACF,CAAC,CAAC;QAEH,oCAAoC;QACpC,MAAM,OAAO,GAA4B;YACvC,MAAM;YACN,QAAQ;YACR,eAAe;YACf,IAAI;YACJ,IAAI;YACJ,IAAI;YACJ,KAAK;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,GAAG;YACH,GAAG;YACH,QAAQ;YACR,UAAU;YACV,KAAK;YACL,QAAQ;YACR,8BAA8B;YAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrB,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI;gBACjB,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI;gBAClB,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK;aACrB,CAAC;SACH,CAAC;QAEF,IAAI,CAAC;YACH,gDAAgD;YAChD,MAAM,WAAW,GAAG,kBAAkB,MAAM,CAAC,IAAI,OAAO,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,OAAO,EAAE;gBACzD,OAAO,EAAE,MAAM,CAAC,SAAS;gBACzB,QAAQ,EAAE,uBAAuB;aAClC,CAAC,CAAC;YAEH,2BAA2B;YAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,CAAY,CAAC;YACzE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"code.step.js","sourceRoot":"","sources":["../../../src/steps/builtin/code.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG7D,iBAAiB;AAEjB,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC;CACrG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8HAA8H,CAAC;IAChK,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACvG,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uFAAuF,CAAC;CACtJ,CAAC,CAAC;AAUH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAEH,8EAA8E;AAC9E,4EAA4E;AAC5E,0DAA0D;AAC1D,MAAM,aAAa,GAAG,sBAAsB,CAAC;AAE7C,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,4CAA4C;AAC5C,SAAS,YAAY,CACnB,IAAY,EACZ,MAAe,EACf,QAAiB,EACjB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5D,OAAO;QACL,6BAA6B,QAAQ,IAAI;QACzC,+BAA+B,UAAU,IAAI;QAC7C,sFAAsF,SAAS,6BAA6B,SAAS,IAAI;QACzI,qCAAqC;QACrC,sCAAsC;QACtC,IAAI;QACJ,kBAAkB;QAClB,0BAA0B;QAC1B,YAAY;QACZ,6DAA6D;QAC7D,0GAA0G;QAC1G,8BAA8B,aAAa,WAAW;QACtD,aAAa;QACb,0BAA0B;QAC1B,6DAA6D;QAC7D,oBAAoB;QACpB,KAAK;KACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,eAAe;AAEf,MAAM,OAAO,QAAS,SAAQ,cAG7B;IACmB,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC;IAC5B,IAAI,GAAG,MAAM,CAAC;IACd,WAAW,GAAG,mCAAmC,CAAC;IAClD,YAAY,GAAG,oBAAoB,CAAC;IACpC,YAAY,GAAG,oBAAoB,CAAC;IACpC,QAAQ,GAAiB,MAAM,CAAC;IAChC,IAAI,GAAG,MAAM,CAAC;IAEvB,oBAAoB,CAAC,UAAmC;QAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,YAAY,CAAwD,CAAC;QAC9F,IAAI,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAChF,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAEQ,uBAAuB,CAAC,MAA+B;QAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAsD,CAAC;QAC3F,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,WAAW,GAA4C,EAAE,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE;aACpD;SACF,CAAC;IACJ,CAAC;IAEQ,KAAK,CAAC,OAAO,CACpB,MAAsB,EACtB,GAAyB;QAEzB,gDAAgD;QAChD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAA4B,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;QAE/D,mCAAmC;QACnC,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO;YAC7B,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAClE;SACF,CAAC;QAEF,2EAA2E;QAC3E,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,uEAAuE;kBACrE,yEAAyE;kBACzE,kEAAkE;kBAClE,sDAAsD,CACzD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,kBAAkB,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC;QACzF,MAAM,KAAK,GAAiB,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC;QAEnD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvB,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;aAC/D,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,UAAU,EAAE,EAAE;gBACnD,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;YACvD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;gBACpB,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;oBACjB,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;oBACjB,oBAAoB,GAAG,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,sEAAsE;YACtE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,MAAM;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEjC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBAC3C,0BAA0B;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}

package/dist/steps/builtin/http-request.step.d.ts

@@ -19,14 +19,11 @@
  *
  * ## Auth
  *
- * Two auth mechanisms, used together or independently:
- *
- * 1. **Config-level `auth`** — for tokens from variable refs
- *    `{{ steps.login.output.token }}`. Fully typed discriminated union.
- *
- * 2. **Credential slots** — for stored secrets from the credential vault.
- *    Resolved by the executor at runtime, injected via `ctx.credentials`.
- *    Config-level auth takes precedence when both are present.
+ * The optional `credentialName` selects a stored credential from the vault.
+ * Before this step runs, the executor resolves that selection and injects the
+ * validated value through `ctx.credentials`. The step
+ * receives the resolved value and applies it after user-provided headers, so
+ * managed authentication cannot be accidentally overridden.
  *
  * ## Response shape
  *
@@ -43,65 +40,9 @@
  */
 import { z } from 'zod';
 import { BaseActionStep } from '../base-step.js';
-import type { StepExecutionContext, CredentialSlot, CredentialTypeSchema } from '../base-step.js';
+import type { StepExecutionContext } from '../base-step.js';
 import { BuiltinStepType } from '../../types/known-types.js';
 import type { StepCategory } from '../../types/categories.js';
-declare const HttpAuthSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
-    type: z.ZodLiteral<"none">;
-}, "strip", z.ZodTypeAny, {
-    type: "none";
-}, {
-    type: "none";
-}>, z.ZodObject<{
-    type: z.ZodLiteral<"bearer">;
-    token: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    type: "bearer";
-    token: string;
-}, {
-    type: "bearer";
-    token: string;
-}>, z.ZodObject<{
-    type: z.ZodLiteral<"basic">;
-    username: z.ZodString;
-    password: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    type: "basic";
-    password: string;
-    username: string;
-}, {
-    type: "basic";
-    password: string;
-    username: string;
-}>, z.ZodObject<{
-    type: z.ZodLiteral<"apiKey">;
-    key: z.ZodString;
-    name: z.ZodDefault<z.ZodString>;
-    in: z.ZodDefault<z.ZodEnum<["header", "query"]>>;
-}, "strip", z.ZodTypeAny, {
-    type: "apiKey";
-    name: string;
-    key: string;
-    in: "header" | "query";
-}, {
-    type: "apiKey";
-    key: string;
-    name?: string | undefined;
-    in?: "header" | "query" | undefined;
-}>, z.ZodObject<{
-    type: z.ZodLiteral<"customHeader">;
-    name: z.ZodString;
-    value: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    value: string;
-    type: "customHeader";
-    name: string;
-}, {
-    value: string;
-    type: "customHeader";
-    name: string;
-}>]>;
-export type HttpAuth = z.infer<typeof HttpAuthSchema>;
 export declare const HttpRawContentTypeSchema: z.ZodEnum<["json", "xml", "html", "text", "javascript", "custom"]>;
 export type HttpRawContentType = z.infer<typeof HttpRawContentTypeSchema>;
 export declare const HttpBodySchema: z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
@@ -322,61 +263,7 @@ export type HttpMethod = z.infer<typeof HttpMethodSchema>;
 export declare const HttpRequestStepConfigSchema: z.ZodObject<{
     url: z.ZodString;
     method: z.ZodDefault<z.ZodEnum<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]>>;
-    auth: z.ZodDefault<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
-        type: z.ZodLiteral<"none">;
-    }, "strip", z.ZodTypeAny, {
-        type: "none";
-    }, {
-        type: "none";
-    }>, z.ZodObject<{
-        type: z.ZodLiteral<"bearer">;
-        token: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        type: "bearer";
-        token: string;
-    }, {
-        type: "bearer";
-        token: string;
-    }>, z.ZodObject<{
-        type: z.ZodLiteral<"basic">;
-        username: z.ZodString;
-        password: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        type: "basic";
-        password: string;
-        username: string;
-    }, {
-        type: "basic";
-        password: string;
-        username: string;
-    }>, z.ZodObject<{
-        type: z.ZodLiteral<"apiKey">;
-        key: z.ZodString;
-        name: z.ZodDefault<z.ZodString>;
-        in: z.ZodDefault<z.ZodEnum<["header", "query"]>>;
-    }, "strip", z.ZodTypeAny, {
-        type: "apiKey";
-        name: string;
-        key: string;
-        in: "header" | "query";
-    }, {
-        type: "apiKey";
-        key: string;
-        name?: string | undefined;
-        in?: "header" | "query" | undefined;
-    }>, z.ZodObject<{
-        type: z.ZodLiteral<"customHeader">;
-        name: z.ZodString;
-        value: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        value: string;
-        type: "customHeader";
-        name: string;
-    }, {
-        value: string;
-        type: "customHeader";
-        name: string;
-    }>]>>;
+    credentialName: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodString]>>;
     headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     queryParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     body: z.ZodDefault<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
@@ -629,28 +516,9 @@ export declare const HttpRequestStepConfigSchema: z.ZodObject<{
             }[] | undefined;
         }[] | undefined;
     };
-    timeoutMs: number;
     url: string;
+    timeoutMs: number;
     method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
-    auth: {
-        type: "none";
-    } | {
-        type: "bearer";
-        token: string;
-    } | {
-        type: "basic";
-        password: string;
-        username: string;
-    } | {
-        type: "apiKey";
-        name: string;
-        key: string;
-        in: "header" | "query";
-    } | {
-        value: string;
-        type: "customHeader";
-        name: string;
-    };
     response: {
         type: "json";
         bodySchema?: Record<string, unknown> | undefined;
@@ -666,6 +534,7 @@ export declare const HttpRequestStepConfigSchema: z.ZodObject<{
     };
     followRedirects: boolean;
     headers?: Record<string, string> | undefined;
+    credentialName?: string | undefined;
     queryParams?: Record<string, string> | undefined;
 }, {
     url: string;
@@ -709,25 +578,7 @@ export declare const HttpRequestStepConfigSchema: z.ZodObject<{
     } | undefined;
     timeoutMs?: number | undefined;
     method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS" | undefined;
-    auth?: {
-        type: "none";
-    } | {
-        type: "bearer";
-        token: string;
-    } | {
-        type: "basic";
-        password: string;
-        username: string;
-    } | {
-        type: "apiKey";
-        key: string;
-        name?: string | undefined;
-        in?: "header" | "query" | undefined;
-    } | {
-        value: string;
-        type: "customHeader";
-        name: string;
-    } | undefined;
+    credentialName?: string | undefined;
     queryParams?: Record<string, string> | undefined;
     response?: {
         type: "json";
@@ -777,61 +628,7 @@ export declare class HttpRequestStep extends BaseActionStep<typeof HttpRequestSt
     readonly configSchema: z.ZodObject<{
         url: z.ZodString;
         method: z.ZodDefault<z.ZodEnum<["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]>>;
-        auth: z.ZodDefault<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
-            type: z.ZodLiteral<"none">;
-        }, "strip", z.ZodTypeAny, {
-            type: "none";
-        }, {
-            type: "none";
-        }>, z.ZodObject<{
-            type: z.ZodLiteral<"bearer">;
-            token: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            type: "bearer";
-            token: string;
-        }, {
-            type: "bearer";
-            token: string;
-        }>, z.ZodObject<{
-            type: z.ZodLiteral<"basic">;
-            username: z.ZodString;
-            password: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            type: "basic";
-            password: string;
-            username: string;
-        }, {
-            type: "basic";
-            password: string;
-            username: string;
-        }>, z.ZodObject<{
-            type: z.ZodLiteral<"apiKey">;
-            key: z.ZodString;
-            name: z.ZodDefault<z.ZodString>;
-            in: z.ZodDefault<z.ZodEnum<["header", "query"]>>;
-        }, "strip", z.ZodTypeAny, {
-            type: "apiKey";
-            name: string;
-            key: string;
-            in: "header" | "query";
-        }, {
-            type: "apiKey";
-            key: string;
-            name?: string | undefined;
-            in?: "header" | "query" | undefined;
-        }>, z.ZodObject<{
-            type: z.ZodLiteral<"customHeader">;
-            name: z.ZodString;
-            value: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            value: string;
-            type: "customHeader";
-            name: string;
-        }, {
-            value: string;
-            type: "customHeader";
-            name: string;
-        }>]>>;
+        credentialName: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodString]>>;
         headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         queryParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         body: z.ZodDefault<z.ZodDiscriminatedUnion<"mode", [z.ZodObject<{
@@ -1084,28 +881,9 @@ export declare class HttpRequestStep extends BaseActionStep<typeof HttpRequestSt
                 }[] | undefined;
             }[] | undefined;
         };
-        timeoutMs: number;
         url: string;
+        timeoutMs: number;
         method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS";
-        auth: {
-            type: "none";
-        } | {
-            type: "bearer";
-            token: string;
-        } | {
-            type: "basic";
-            password: string;
-            username: string;
-        } | {
-            type: "apiKey";
-            name: string;
-            key: string;
-            in: "header" | "query";
-        } | {
-            value: string;
-            type: "customHeader";
-            name: string;
-        };
         response: {
             type: "json";
             bodySchema?: Record<string, unknown> | undefined;
@@ -1121,6 +899,7 @@ export declare class HttpRequestStep extends BaseActionStep<typeof HttpRequestSt
         };
         followRedirects: boolean;
         headers?: Record<string, string> | undefined;
+        credentialName?: string | undefined;
         queryParams?: Record<string, string> | undefined;
     }, {
         url: string;
@@ -1164,25 +943,7 @@ export declare class HttpRequestStep extends BaseActionStep<typeof HttpRequestSt
         } | undefined;
         timeoutMs?: number | undefined;
         method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE" | "HEAD" | "OPTIONS" | undefined;
-        auth?: {
-            type: "none";
-        } | {
-            type: "bearer";
-            token: string;
-        } | {
-            type: "basic";
-            password: string;
-            username: string;
-        } | {
-            type: "apiKey";
-            key: string;
-            name?: string | undefined;
-            in?: "header" | "query" | undefined;
-        } | {
-            value: string;
-            type: "customHeader";
-            name: string;
-        } | undefined;
+        credentialName?: string | undefined;
         queryParams?: Record<string, string> | undefined;
         response?: {
             type: "json";
@@ -1229,13 +990,10 @@ export declare class HttpRequestStep extends BaseActionStep<typeof HttpRequestSt
     }>;
     readonly category: StepCategory;
     readonly icon = "globe";
-    /**
-     * Credential slots — fallback auth when config.auth is 'none'.
-     * Resolved by the executor from the credential vault.
-     */
-    readonly credentialSlots: readonly CredentialSlot[];
-    /** Credential type schemas — defines what fields each credential type needs for UI forms. */
-    readonly credentialTypeSchemas: readonly CredentialTypeSchema[];
+    readonly credentialSlots: readonly [{
+        readonly name: "credentialName";
+        readonly required: false;
+    }];
     decorateConfigSchema(jsonSchema: Record<string, unknown>): Record<string, unknown>;
     /**
      * Per-instance output schema. When the author's `response` config provides
@@ -1248,9 +1006,6 @@ export declare class HttpRequestStep extends BaseActionStep<typeof HttpRequestSt
     redactInput(input: Record<string, unknown>): Record<string, unknown>;
     execute(config: HttpRequestStepConfig, ctx: StepExecutionContext): Promise<HttpRequestStepOutput>;
     private buildUrl;
-    private applyAuth;
-    private applyConfigAuth;
-    private applyCredentialAuth;
     /**
      * Encode the request body for the given mode. Mutates `headers` to set
      * the appropriate Content-Type unless the user already supplied one.
@@ -1262,5 +1017,4 @@ export declare class HttpRequestStep extends BaseActionStep<typeof HttpRequestSt
     private parseResponseBody;
     private autoParseBody;
 }
-export {};
 //# sourceMappingURL=http-request.step.d.ts.map

package/dist/steps/builtin/http-request.step.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-request.step.d.ts","sourceRoot":"","sources":["../../../src/steps/builtin/http-request.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EACd,oBAAoB,EACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAiC9D,QAAA,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAMlB,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAYtD,eAAO,MAAM,wBAAwB,oEAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AA0C1E,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAKzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AA2BtD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAM7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAI1D,eAAO,MAAM,gBAAgB,yEAE3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWtC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAIhF,MAAM,WAAW,qBAAsB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACpE,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC;;;;;;;OAOG;IACH,IAAI,EAAE,OAAO,CAAC;IACd,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAeD,qBAAa,eAAgB,SAAQ,cAAc,CACjD,OAAO,2BAA2B,EAClC,qBAAqB,CACtB;IACC,SAAkB,IAAI,gCAAgC;IACtD,SAAkB,IAAI,kBAAkB;IACxC,SAAkB,WAAW,yCAAyC;IACtE,SAAkB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAA+B;IAC7D,SAAkB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;OAA+B;IAC7D,SAAkB,QAAQ,EAAE,YAAY,CAAiB;IACzD,SAAkB,IAAI,WAAW;IAEjC;;;OAGG;IACH,SAAkB,eAAe,EAAE,SAAS,cAAc,EAAE,CAE1D;IAEF,6FAA6F;IAC7F,SAAkB,qBAAqB,EAAE,SAAS,oBAAoB,EAAE,CAiCtE;IAEO,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IA8B3F;;;;;OAKG;IACM,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAsB1F,OAAO,CAAC,mBAAmB;IAkBlB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAkB9D,OAAO,CACpB,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAAC,qBAAqB,CAAC;IAgGjC,OAAO,CAAC,QAAQ;IAehB,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,eAAe;IAuBvB,OAAO,CAAC,mBAAmB;IA4C3B;;;;;OAKG;YACW,UAAU;IA+DxB,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,iBAAiB;IAqBzB,OAAO,CAAC,aAAa;CAiBtB"}
+{"version":3,"file":"http-request.step.d.ts","sourceRoot":"","sources":["../../../src/steps/builtin/http-request.step.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAkB9D,eAAO,MAAM,wBAAwB,oEAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AA0C1E,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAKzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AA2BtD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAM7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAI1D,eAAO,MAAM,gBAAgB,yEAE3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAetC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAIhF,MAAM,WAAW,qBAAsB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACpE,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC;;;;;;;OAOG;IACH,IAAI,EAAE,OAAO,CAAC;IACd,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAeD,qBAAa,eAAgB,SAAQ,cAAc,CACjD,OAAO,2BAA2B,EAClC,qBAAqB,CACtB;IACC,SAAkB,IAAI,gCAAgC;IACtD,SAAkB,IAAI,kBAAkB;IACxC,SAAkB,WAAW,yCAAyC;IACtE,SAAkB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAA+B;IAC7D,SAAkB,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;OAA+B;IAC7D,SAAkB,QAAQ,EAAE,YAAY,CAAiB;IACzD,SAAkB,IAAI,WAAW;IAKjC,SAAkB,eAAe;;;OAEtB;IAEF,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAqC3F;;;;;OAKG;IACM,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAsB1F,OAAO,CAAC,mBAAmB;IAkBlB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAkB9D,OAAO,CACpB,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAAC,qBAAqB,CAAC;IAuHjC,OAAO,CAAC,QAAQ;IAehB;;;;;OAKG;YACW,UAAU;IA+DxB,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,iBAAiB;IAqBzB,OAAO,CAAC,aAAa;CAiBtB"}