@zapier/zapier-sdk 0.114.4 → 0.115.0

package/dist/{chunk-A2GMUMK3.mjs → chunk-NVVSKZ3Y.mjs}

@@ -512,7 +512,9 @@ var WatchTriggerInboxSchema = TriggerInboxCommandBaseSchema.extend({
   "Continuously consume a trigger inbox: drain currently-available messages, then subscribe to SSE notifications for new arrivals, until aborted. Stop via the `signal` AbortSignal or by throwing `ZapierAbortDrainSignal` from a handler. Transient drain failures (5xx, 429, network blips) retry indefinitely with bounded backoff; real-time wake-up and drain health warnings print to stderr. Resolves cleanly on abort; rejects on a fatal error or a fail-fast handler error."
 );
 var ActionExecutionInputSchema = z.object({
-  inputs: z.record(z.string(), z.unknown()).optional(),
+  inputs: InputsPropertySchema.optional().describe(
+    "Input parameters for the action"
+  ),
   /** @deprecated Use `connection` instead. */
   connectionId: ConnectionIdPropertySchema.optional().meta({
     deprecated: true
@@ -720,7 +722,7 @@ function createDebugLogger(enabled) {
 function censorHeaders(headers) {
   if (!headers) return headers;
   const headersObj = new Headers(headers);
-  const authKeys = ["authorization", "x-api-key"];
+  const authKeys = ["authorization", "x-api-key", "x-zapier-approval-token"];
   for (const [key, value] of headersObj.entries()) {
     if (authKeys.some((authKey) => key.toLowerCase() === authKey)) {
       const spaceIndex = value.indexOf(" ");
@@ -2818,7 +2820,7 @@ function logRouteOverride({
 }
 
 // src/sdk-version.ts
-var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.114.4" : void 0) || "unknown";
+var SDK_VERSION = (typeof process !== "undefined" && process.env ? "0.115.0" : void 0) || "unknown";
 
 // src/utils/open-url.ts
 var nodePrefix = "node:";
@@ -2911,6 +2913,8 @@ var CreateApprovalResponseSchema = z.object({
   approval_url: z.string().url(),
   poll_url: z.string().url(),
   stream_url: z.string().url().optional(),
+  // Present when the approval mints one-time tokens; absent on legacy/manual approvals.
+  tokens_url: z.string().url().optional(),
   reason: z.string().optional()
 }).transform((approval, ctx) => {
   const id = approval.id ?? approval.approval_id;
@@ -2923,6 +2927,14 @@ var CreateApprovalResponseSchema = z.object({
   }
   return { ...approval, id };
 });
+var APPROVAL_TOKEN_HANDLE_PATTERN = /^zat_[0-9A-Za-z]{24}$/;
+var MAX_APPROVAL_TOKEN_HANDLES = 20;
+var ApprovalTokenSchema = z.object({
+  handle: z.string().regex(APPROVAL_TOKEN_HANDLE_PATTERN)
+});
+var ApprovalTokensResponseSchema = z.object({
+  tokens: z.array(z.unknown())
+});
 var PollApprovalResponseSchema = z.object({
   id: z.string().optional(),
   status: ApprovalStatusSchema,
@@ -3087,6 +3099,25 @@ var ZapierApiClient = class {
           return { response };
         }
         const errorType = response.headers.get("x-zapier-error-type");
+        if (errorType === "approval_token_invalid") {
+          const { data } = await this.parseResult(response);
+          const { message, errors } = this.parseErrorResponse({
+            status: response.status,
+            statusText: response.statusText,
+            data
+          });
+          return {
+            response,
+            approvalRoundError: new ZapierApprovalError(
+              message || "Approval token rejected by the server",
+              {
+                status: "approval_token_invalid",
+                statusCode: response.status,
+                errors
+              }
+            )
+          };
+        }
         if (errorType !== "approval_required") {
           return { response };
         }
@@ -3103,8 +3134,9 @@ var ZapierApiClient = class {
           "x-zapier-ask-statement-ids"
         );
         const askStatementIds = askStatementIdsHeader ? JSON.parse(askStatementIdsHeader) : void 0;
+        let approvalTokens;
         try {
-          await this.runOneApprovalRound({
+          approvalTokens = await this.runOneApprovalRound({
             buildContext: approvalContext,
             mode: approvalMode,
             signal: init?.signal ?? void 0,
@@ -3114,6 +3146,13 @@ var ZapierApiClient = class {
         } catch (error) {
           return { response, approvalRoundError: error };
         }
+        const nextHeaders = new Headers(init?.headers);
+        if (approvalTokens.length > 0) {
+          nextHeaders.set("x-zapier-approval-token", approvalTokens.join(","));
+        } else {
+          nextHeaders.delete("x-zapier-approval-token");
+        }
+        init = { ...init, headers: nextHeaders };
       }
       throw new ZapierApiError("Approval retry loop ended unexpectedly");
     };
@@ -3127,9 +3166,10 @@ var ZapierApiClient = class {
      *   - `request_denied_by_policy`  → a policy rule permanently blocks the
      *                                   request; no human can approve it. Throw.
      *   - `approval_required`         → the request needs human approval; the
-     *                                   SDK creates an approval, opens the URL
-     *                                   (poll mode), waits for resolution, and
-     *                                   retries the original request.
+     *                                   SDK creates an approval, waits for
+     *                                   resolution, then retries with any
+     *                                   minted one-time token(s) attached.
+     *   - `approval_token_invalid`     → a retried token was rejected. Terminal.
      *   - anything else               → not our concern, pass through.
      *
      * The retry loop exists because a single user action can legitimately
@@ -3187,6 +3227,9 @@ var ZapierApiClient = class {
         );
       }
       if (errorType !== "approval_required") {
+        if (approvalRoundError) {
+          throw approvalRoundError;
+        }
         return response;
       }
       if (approvalRoundError) {
@@ -3693,9 +3736,48 @@ var ZapierApiClient = class {
     }
   }
   /**
-   * Run a single approval round: create the approval, open the URL (poll mode)
-   * or throw (throw mode), poll until resolved, and emit events. Throws on
-   * denied/failed/timeout/unexpected status. Returns on approved.
+   * Fetch every token handle minted for a resolved approval. Fails open
+   * (returns [], emits approval:error) on any non-200, malformed body, or
+   * network error, so a token-fetch failure never blocks the retry. Aborts
+   * propagate.
+   */
+  async fetchApprovalTokens(approvalId, tokensUrl, signal, callId) {
+    const failOpen = (message) => {
+      this.emitEvent("approval:error", { approvalId, message });
+      return [];
+    };
+    try {
+      const response = await this.withSemaphore(
+        { url: tokensUrl, method: "GET", signal },
+        () => this.rawFetchUrl(tokensUrl, {
+          method: "GET",
+          headers: { Accept: "application/json" },
+          signal,
+          [CORRELATION_CALL_ID]: callId
+        })
+      );
+      if (!response.ok) {
+        return failOpen(`Failed to fetch approval tokens: ${response.status}`);
+      }
+      const { data } = await this.parseResult(response);
+      const body = ApprovalTokensResponseSchema.safeParse(data);
+      if (!body.success) {
+        return failOpen("Failed to parse approval tokens response");
+      }
+      return body.data.tokens.map((t) => ApprovalTokenSchema.safeParse(t)).filter((parsed) => parsed.success).map((parsed) => parsed.data.handle).slice(0, MAX_APPROVAL_TOKEN_HANDLES);
+    } catch (err) {
+      if (signal?.aborted || isAbortError(err)) throw err;
+      return failOpen(
+        `Failed to fetch approval tokens: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  /**
+   * Run a single approval round: create the approval, open the URL (poll
+   * mode) or throw (throw mode), poll until resolved, and emit events.
+   * Throws on denied/failed/timeout/unexpected status. Returns on approved
+   * with every one-time token handle the approval minted (via tokens_url),
+   * or [] when no tokens_url is present (legacy/manual policy-sync path).
    *
    * Caller is responsible for passing a non-"disabled" mode; this method
    * unconditionally creates an approval.
@@ -3785,6 +3867,13 @@ var ZapierApiClient = class {
       if (approval.stream_url) {
         assertApprovalOrigin(approval.stream_url, sdkapiOrigin, "stream_url");
       }
+      if (approval.tokens_url) {
+        assertApprovalOrigin(
+          approval.tokens_url,
+          approvalsOrigin,
+          "tokens_url"
+        );
+      }
       assertApprovalOrigin(
         approval.approval_url,
         browserOrigin,
@@ -3806,7 +3895,12 @@ var ZapierApiClient = class {
         this.emitEvent("approval:approved", {
           approvalId: approval.id
         });
-        return;
+        return approval.tokens_url ? this.fetchApprovalTokens(
+          approval.id,
+          approval.tokens_url,
+          signal,
+          callId
+        ) : [];
       }
       if (approval.status === "denied") {
         this.emitEvent("approval:denied", {
@@ -3998,6 +4092,12 @@ var ZapierApiClient = class {
     this.emitEvent("approval:approved", {
       approvalId: approval.id
     });
+    return approval.tokens_url ? this.fetchApprovalTokens(
+      approval.id,
+      approval.tokens_url,
+      signal,
+      callId
+    ) : [];
   }
   throwApprovalFailed({
     approvalId,
@@ -13293,4 +13393,15 @@ function describeThrown(error) {
   }
 }
 
-export { ACTION_RUNS_PATH, API_ID, ActionKeyPropertySchema, ActionPropertySchema, ActionTimeoutMillisecondsPropertySchema, ActionTimeoutSecondsPropertySchema, ActionTypePropertySchema, AppKeyPropertySchema, AppPropertySchema, AppsPropertySchema, AuthMechanism, AuthenticationIdPropertySchema, BaseSdkOptionsSchema, CONNECTIONS_ID, CONTEXT_CACHE_MAX_SIZE, CONTEXT_CACHE_TTL_MILLISECONDS, ClientCredentialsObjectSchema, ConnectionEntrySchema, ConnectionIdPropertySchema, ConnectionPropertySchema, ConnectionsMapSchema, ConnectionsPropertySchema, CredentialsFunctionSchema, CredentialsObjectSchema, CredentialsSchema, DEFAULT_ACTION_TIMEOUT_MILLISECONDS, DEFAULT_APPROVAL_TIMEOUT_MILLISECONDS, DEFAULT_CONFIG_PATH, DEFAULT_MAX_APPROVAL_RETRIES, DEFAULT_PAGE_SIZE, DEPRECATION_NOTICE_EVENT, DebugPropertySchema, DrainTriggerInboxSchema, EVENT_EMISSION_ID, FieldsPropertySchema, InputFieldPropertySchema, InputsPropertySchema, LeaseLimitPropertySchema, LeasePropertySchema, LeaseSecondsPropertySchema, LimitPropertySchema, MANIFEST_ID, MAX_CONCURRENCY_LIMIT, MAX_PAGE_LIMIT, OffsetPropertySchema, OutputPropertySchema, ParamsPropertySchema, PkceCredentialsObjectSchema, RESOLVE_CREDENTIALS_ID, RecordPropertySchema, RecordsPropertySchema, RelayFetchSchema, RelayRequestSchema, ResolvedCredentialsSchema, SDK_OPTIONS_ID, SDK_VERSION, STABILITY_DEFINITIONS, TablePropertySchema, TablesPropertySchema, TriggerInboxKeyPropertySchema, TriggerInboxNamePropertySchema, TriggerInboxPropertySchema, WatchTriggerInboxSchema, ZAPIER_BASE_URL, ZAPIER_MAX_CONCURRENT_REQUESTS, ZAPIER_MAX_NETWORK_RETRIES, ZAPIER_MAX_NETWORK_RETRY_DELAY_MILLISECONDS, ZapierAbortDrainSignal, ZapierActionError, ZapierApiError, ZapierAppNotFoundError, ZapierApprovalError, ZapierAuthenticationError, ZapierBundleError, ZapierConfigurationError, ZapierConflictError, ZapierError, ZapierNotFoundError, ZapierRateLimitError, ZapierRelayError, ZapierReleaseTriggerMessageSignal, ZapierResourceNotFoundError, ZapierSignal, ZapierTimeoutError, ZapierUnknownError, ZapierValidationError, actionKeyResolver, actionTypeResolver, apiPlugin, apiPluginRef, appKeyResolver, appsPlugin, batch, buildApplicationLifecycleEvent, buildCapabilityMessage, buildErrorEvent, buildErrorEventWithContext, buildMethodCalledEvent, cleanupEventListeners, clearTokenCache, clientCredentialsNameResolver, clientIdResolver, connectionIdGenericResolver, connectionIdResolver, connectionsPlugin, connectionsPluginRef, createActionRunPlugin, createBaseEvent, createClientCredentialsPlugin, createMemoryCache, createTableFieldsPlugin, createTablePlugin, createTableRecordsPlugin, createZapierApi, createZapierSdk, createZapierSdkWithoutRegistry, deleteClientCredentialsPlugin, deleteTableFieldsPlugin, deleteTablePlugin, deleteTableRecordsPlugin, durableRunIdResolver, eventEmissionHookPlugin, eventEmissionPlugin, eventEmissionPluginRef, extractErrorDetail, fetchPlugin, findFirstConnectionPlugin, findManifestEntry, findUniqueConnectionPlugin, formatErrorMessage, formatExtensionPluginFailure, generateEventId, getActionInputFieldsSchemaPlugin, getActionPlugin, getActionRunPlugin, getAgent, getAppPlugin, getBaseUrlFromCredentials, getCallerContext, getCiPlatform, getClientIdFromCredentials, getConnectionPlugin, getCpuTime, getCurrentTimestamp, getMemoryUsage, getOrCreateApiClient, getOsInfo, getPlatformVersions, getPreferredManifestEntryKey, getProfilePlugin, getReleaseId, getTablePlugin, getTableRecordPlugin, getTokenFromCliLogin, getTtyContext, getZapierApprovalMode, getZapierCausationId, getZapierCorrelationId, getZapierDefaultApprovalMode, getZapierOpenAutoModeApprovalsInBrowser, getZapierSdkService, injectCliLogin, inputFieldKeyResolver, inputsAllOptionalResolver, inputsResolver, invalidateCachedToken, invalidateCredentialsToken, isCi, isCliLoginAvailable, isClientCredentials, isCredentialsFunction, isCredentialsObject, isPermanentHttpError, isPkceCredentials, isZapierAbortDrainSignal, isZapierActionError, isZapierAppNotFoundError, isZapierApprovalError, isZapierAuthenticationError, isZapierBundleError, isZapierConflictError, isZapierError, isZapierNotFoundError, isZapierRateLimitError, isZapierReleaseTriggerMessageSignal, isZapierResourceNotFoundError, isZapierSignal, isZapierTimeoutError, isZapierValidationError, listActionInputFieldChoicesPlugin, listActionInputFieldsPlugin, listActionsPlugin, listAppsPlugin, listClientCredentialsPlugin, listConnectionsPlugin, listTableFieldsPlugin, listTableRecordsPlugin, listTablesPlugin, logDeprecation, manifestPlugin, manifestPluginRef, operationAnnotatorPlugin, parseConcurrencyEnvVar, readManifestFromFile, requestPlugin, resetDeprecationWarnings, resolveAuth, resolveAuthToken, resolveCredentials, resolveCredentialsFromEnv, resolveCredentialsPlugin, resolveCredentialsPluginRef, runActionPlugin, runWithCallerContext, sdkOptionsPluginRef, tableFieldIdsResolver, tableFieldsResolver, tableFiltersResolver, tableIdResolver, tableNameResolver, tableRecordIdResolver, tableRecordIdsResolver, tableRecordsResolver, tableSortResolver, tableUpdateRecordsResolver, triggerInboxResolver, triggerMessagesResolver, updateTableRecordsPlugin, workflowDraftIdResolver, workflowDraftRevisionResolver, workflowIdResolver, workflowRunIdResolver, workflowVersionIdResolver, zapierAdaptError, zapierCoreOptions, zapierSdkPlugin };
+// src/utils/schema-description.ts
+function descriptionFor(schema) {
+  let current = schema;
+  while (current) {
+    const own = current.description;
+    if (own) return own;
+    current = current._zod?.def?.innerType;
+  }
+  return void 0;
+}
+
+export { ACTION_RUNS_PATH, API_ID, ActionKeyPropertySchema, ActionPropertySchema, ActionTimeoutMillisecondsPropertySchema, ActionTimeoutSecondsPropertySchema, ActionTypePropertySchema, AppKeyPropertySchema, AppPropertySchema, AppsPropertySchema, AuthMechanism, AuthenticationIdPropertySchema, BaseSdkOptionsSchema, CONNECTIONS_ID, CONTEXT_CACHE_MAX_SIZE, CONTEXT_CACHE_TTL_MILLISECONDS, ClientCredentialsObjectSchema, ConnectionEntrySchema, ConnectionIdPropertySchema, ConnectionPropertySchema, ConnectionsMapSchema, ConnectionsPropertySchema, CredentialsFunctionSchema, CredentialsObjectSchema, CredentialsSchema, DEFAULT_ACTION_TIMEOUT_MILLISECONDS, DEFAULT_APPROVAL_TIMEOUT_MILLISECONDS, DEFAULT_CONFIG_PATH, DEFAULT_MAX_APPROVAL_RETRIES, DEFAULT_PAGE_SIZE, DEPRECATION_NOTICE_EVENT, DebugPropertySchema, DrainTriggerInboxSchema, EVENT_EMISSION_ID, FieldsPropertySchema, InputFieldPropertySchema, InputsPropertySchema, LeaseLimitPropertySchema, LeasePropertySchema, LeaseSecondsPropertySchema, LimitPropertySchema, MANIFEST_ID, MAX_CONCURRENCY_LIMIT, MAX_PAGE_LIMIT, OffsetPropertySchema, OutputPropertySchema, ParamsPropertySchema, PkceCredentialsObjectSchema, RESOLVE_CREDENTIALS_ID, RecordPropertySchema, RecordsPropertySchema, RelayFetchSchema, RelayRequestSchema, ResolvedCredentialsSchema, SDK_OPTIONS_ID, SDK_VERSION, STABILITY_DEFINITIONS, TablePropertySchema, TablesPropertySchema, TriggerInboxKeyPropertySchema, TriggerInboxNamePropertySchema, TriggerInboxPropertySchema, WatchTriggerInboxSchema, ZAPIER_BASE_URL, ZAPIER_MAX_CONCURRENT_REQUESTS, ZAPIER_MAX_NETWORK_RETRIES, ZAPIER_MAX_NETWORK_RETRY_DELAY_MILLISECONDS, ZapierAbortDrainSignal, ZapierActionError, ZapierApiError, ZapierAppNotFoundError, ZapierApprovalError, ZapierAuthenticationError, ZapierBundleError, ZapierConfigurationError, ZapierConflictError, ZapierError, ZapierNotFoundError, ZapierRateLimitError, ZapierRelayError, ZapierReleaseTriggerMessageSignal, ZapierResourceNotFoundError, ZapierSignal, ZapierTimeoutError, ZapierUnknownError, ZapierValidationError, actionKeyResolver, actionTypeResolver, apiPlugin, apiPluginRef, appKeyResolver, appsPlugin, batch, buildApplicationLifecycleEvent, buildCapabilityMessage, buildErrorEvent, buildErrorEventWithContext, buildMethodCalledEvent, cleanupEventListeners, clearTokenCache, clientCredentialsNameResolver, clientIdResolver, connectionIdGenericResolver, connectionIdResolver, connectionsPlugin, connectionsPluginRef, createActionRunPlugin, createBaseEvent, createClientCredentialsPlugin, createMemoryCache, createTableFieldsPlugin, createTablePlugin, createTableRecordsPlugin, createZapierApi, createZapierSdk, createZapierSdkWithoutRegistry, deleteClientCredentialsPlugin, deleteTableFieldsPlugin, deleteTablePlugin, deleteTableRecordsPlugin, descriptionFor, durableRunIdResolver, eventEmissionHookPlugin, eventEmissionPlugin, eventEmissionPluginRef, extractErrorDetail, fetchPlugin, findFirstConnectionPlugin, findManifestEntry, findUniqueConnectionPlugin, formatErrorMessage, formatExtensionPluginFailure, generateEventId, getActionInputFieldsSchemaPlugin, getActionPlugin, getActionRunPlugin, getAgent, getAppPlugin, getBaseUrlFromCredentials, getCallerContext, getCiPlatform, getClientIdFromCredentials, getConnectionPlugin, getCpuTime, getCurrentTimestamp, getMemoryUsage, getOrCreateApiClient, getOsInfo, getPlatformVersions, getPreferredManifestEntryKey, getProfilePlugin, getReleaseId, getTablePlugin, getTableRecordPlugin, getTokenFromCliLogin, getTtyContext, getZapierApprovalMode, getZapierCausationId, getZapierCorrelationId, getZapierDefaultApprovalMode, getZapierOpenAutoModeApprovalsInBrowser, getZapierSdkService, injectCliLogin, inputFieldKeyResolver, inputsAllOptionalResolver, inputsResolver, invalidateCachedToken, invalidateCredentialsToken, isCi, isCliLoginAvailable, isClientCredentials, isCredentialsFunction, isCredentialsObject, isPermanentHttpError, isPkceCredentials, isZapierAbortDrainSignal, isZapierActionError, isZapierAppNotFoundError, isZapierApprovalError, isZapierAuthenticationError, isZapierBundleError, isZapierConflictError, isZapierError, isZapierNotFoundError, isZapierRateLimitError, isZapierReleaseTriggerMessageSignal, isZapierResourceNotFoundError, isZapierSignal, isZapierTimeoutError, isZapierValidationError, listActionInputFieldChoicesPlugin, listActionInputFieldsPlugin, listActionsPlugin, listAppsPlugin, listClientCredentialsPlugin, listConnectionsPlugin, listTableFieldsPlugin, listTableRecordsPlugin, listTablesPlugin, logDeprecation, manifestPlugin, manifestPluginRef, operationAnnotatorPlugin, parseConcurrencyEnvVar, readManifestFromFile, requestPlugin, resetDeprecationWarnings, resolveAuth, resolveAuthToken, resolveCredentials, resolveCredentialsFromEnv, resolveCredentialsPlugin, resolveCredentialsPluginRef, runActionPlugin, runWithCallerContext, sdkOptionsPluginRef, tableFieldIdsResolver, tableFieldsResolver, tableFiltersResolver, tableIdResolver, tableNameResolver, tableRecordIdResolver, tableRecordIdsResolver, tableRecordsResolver, tableSortResolver, tableUpdateRecordsResolver, triggerInboxResolver, triggerMessagesResolver, updateTableRecordsPlugin, workflowDraftIdResolver, workflowDraftRevisionResolver, workflowIdResolver, workflowRunIdResolver, workflowVersionIdResolver, zapierAdaptError, zapierCoreOptions, zapierSdkPlugin };

package/dist/{chunk-ICFP2AO2.mjs → chunk-Q7ECOKIG.mjs}

@@ -1,4 +1,4 @@
-import { zapierSdkPlugin, zapierCoreOptions, SDK_OPTIONS_ID } from './chunk-A2GMUMK3.mjs';
+import { zapierSdkPlugin, zapierCoreOptions, SDK_OPTIONS_ID } from './chunk-NVVSKZ3Y.mjs';
 import { definePlugin, createSdk, CORE_OPTIONS_ID } from '@zapier/kitcore';
 
 var zapierBetaSdkPlugin = definePlugin({