@zixt/host 0.0.113 → 0.0.115

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.113",
+  version: "0.0.115",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -15749,9 +15749,9 @@ var SecretName = external_exports.string().min(1).max(120).regex(/^[A-Z][A-Z0-9_
 var OAuthConfig = external_exports.object({
   /** Authorization server base URL — auto-discovered when omitted (RFC 9728/8414). */
   authorizationServer: external_exports.url().optional(),
-  /** Pre-registered client id (manual fallback; DCR fills this in otherwise). */
+  /** Legacy Zixt/operator registration. Organization users never supply this value. */
   clientId: external_exports.string().max(512).optional(),
-  /** Space-delimited scopes to request. */
+  /** Provider-advertised scopes retained on legacy connections. */
   scopes: external_exports.string().max(2e3).optional()
 });
 var OAuthStatus = external_exports.enum(["not_connected", "connected", "expired", "error"]);
@@ -15771,7 +15771,6 @@ var Connection = external_exports.object({
   secretName: SecretName.optional(),
   /** Legacy: an inline vaulted token predating secret references (read-only fallback). */
   bearerSet: external_exports.boolean(),
-  oauth: OAuthConfig.optional(),
   oauthStatus: OAuthStatus,
   /** Free-text usage guidance rendered into the agent's instructions (GR-2 instructions-first). */
   usageNotes: external_exports.string().max(4e3).optional(),
@@ -15811,7 +15810,6 @@ var CreateConnectionRequest = external_exports.object({
   authKind: ConnectionAuthKind.default("none"),
   /** Org secret holding the API key — required when authKind === 'bearer'. */
   secretName: SecretName.optional(),
-  oauth: OAuthConfig.optional(),
   usageNotes: external_exports.string().max(4e3).optional()
 });
 var UpdateConnectionRequest = external_exports.object({
@@ -15821,7 +15819,6 @@ var UpdateConnectionRequest = external_exports.object({
   authKind: ConnectionAuthKind.optional(),
   /** New secret reference; omit to leave the current one untouched. */
   secretName: SecretName.optional(),
-  oauth: OAuthConfig.optional(),
   usageNotes: external_exports.string().max(4e3).optional()
 });
 var ListConnectionsResponse = external_exports.object({ connections: external_exports.array(ConnectionProjection) });
@@ -15888,15 +15885,6 @@ var EmailIncomingSettings = external_exports.object({
     });
   }
 });
-var EmailOAuthSetup = external_exports.object({
-  clientId: external_exports.string().trim().min(1).max(1e3).optional(),
-  /** Write-only. Omit on update to retain the saved value or use Zixt's managed app. */
-  clientSecret: external_exports.string().min(1).max(1e4).optional(),
-  authorizationUrl: external_exports.url().max(2e3).optional(),
-  tokenUrl: external_exports.url().max(2e3).optional(),
-  scopes: external_exports.array(external_exports.string().trim().min(1).max(500)).max(100).optional(),
-  tokenEndpointAuthMethod: external_exports.enum(["none", "client_secret_basic", "client_secret_post"]).default("client_secret_basic")
-}).strict();
 var EmailTlsCredentials = external_exports.object({
   /** PEM values are write-only and remain encrypted. */
   certificateAuthority: external_exports.string().min(1).max(1e5).optional(),
@@ -15936,7 +15924,6 @@ var EmailConnectionMutable = external_exports.object({
   replyTo: external_exports.email().max(500).optional(),
   smtp: EmailServerSettings.nullable(),
   incoming: EmailIncomingSettings.nullable(),
-  oauth: EmailOAuthSetup.nullable().optional(),
   smtpPassword: external_exports.string().min(1).max(2e4).optional(),
   incomingPassword: external_exports.string().min(1).max(2e4).optional(),
   tls: EmailTlsCredentials.optional(),
@@ -15969,14 +15956,15 @@ var EmailConnectionMutable = external_exports.object({
     });
   }
   const oauthRequired = value.smtp?.authentication === "oauth2" || value.incoming?.authentication === "oauth2";
-  if (oauthRequired && !value.oauth) {
+  if (oauthRequired && value.provider === "custom") {
     context.addIssue({
       code: "custom",
-      path: ["oauth"],
-      message: "Add the OAuth connection details."
+      path: ["provider"],
+      message: "OAuth is available through a Zixt-managed provider preset."
     });
   }
 });
+var CreateEmailConnectionRequest = EmailConnectionMutable;
 var UpdateEmailConnectionRequest = EmailConnectionMutable.safeExtend({
   expectedRevision: external_exports.number().int().min(1)
 });
@@ -16006,14 +15994,7 @@ var EmailConnection = external_exports.object({
   }).nullable(),
   oauth: external_exports.object({
     status: external_exports.enum(["not_connected", "connected", "expired", "error"]),
-    managedClient: external_exports.boolean(),
-    clientCredentialConfigured: external_exports.boolean(),
-    clientId: external_exports.string(),
-    authorizationUrl: external_exports.url(),
-    tokenUrl: external_exports.url(),
-    scopes: external_exports.array(external_exports.string()),
-    tokenEndpointAuthMethod: external_exports.enum(["none", "client_secret_basic", "client_secret_post"]),
-    callbackUrl: external_exports.url()
+    authorizationUrl: external_exports.url()
   }).strict().nullable(),
   tls: external_exports.object({
     certificateAuthorityConfigured: external_exports.boolean(),
@@ -16035,6 +16016,10 @@ var TestEmailConnectionRequest = external_exports.object({
   capability: external_exports.enum(["sending", "receiving", "both"]),
   testRecipient: external_exports.email().max(500).optional()
 }).strict();
+var TestDraftEmailConnectionRequest = external_exports.object({
+  connection: CreateEmailConnectionRequest,
+  test: TestEmailConnectionRequest
+}).strict();
 var TestEmailConnectionResponse = external_exports.object({
   sending: external_exports.enum(["passed", "failed", "not_tested", "not_enabled"]),
   receiving: external_exports.enum(["passed", "failed", "not_tested", "not_enabled"]),
@@ -16042,6 +16027,13 @@ var TestEmailConnectionResponse = external_exports.object({
   message: external_exports.string().max(2e3)
 }).strict();
 var StartEmailOAuthResponse = external_exports.object({ authorizeUrl: external_exports.url(), callbackOrigin: external_exports.string().min(1) }).strict();
+var StartEmailOAuthRequest = external_exports.object({
+  /**
+   * Existing connections stage edits here. The live connection is replaced
+   * only after the provider returns a valid authorization code.
+   */
+  pendingUpdate: UpdateEmailConnectionRequest.optional()
+}).strict();
 var EmailMessageReference = external_exports.string().min(1).max(2e3).regex(/^[A-Za-z0-9_-]+$/);
 var EmailAddressList = external_exports.array(external_exports.email().max(500)).min(1).max(100);
 
@@ -16671,10 +16663,7 @@ var ApiConnection = external_exports.object({
   ),
   oauth: external_exports.object({
     schemeId: external_exports.string().min(1).max(120),
-    status: external_exports.enum(["not_connected", "connected", "expired", "error"]),
-    clientIdConfigured: external_exports.boolean(),
-    scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100),
-    callbackUrl: external_exports.url().max(2e3)
+    status: external_exports.enum(["not_connected", "connected", "expired", "error"])
   }).strict().nullable(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)),
   health: ApiConnectionHealth,
@@ -16684,12 +16673,8 @@ var ApiConnection = external_exports.object({
   createdAt: IsoDate,
   updatedAt: IsoDate
 }).strict();
-var ApiOAuthClientConfig = external_exports.object({
-  schemeId: external_exports.string().min(1).max(120),
-  clientId: external_exports.string().min(1).max(512),
-  /** Write-only. Omit on update to retain the vaulted client secret. */
-  clientSecret: external_exports.string().min(1).max(1e4).optional(),
-  scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100).optional()
+var ApiOAuthSelection = external_exports.object({
+  schemeId: external_exports.string().min(1).max(120)
 }).strict();
 var ListApiConnectionsResponse = external_exports.object({ connections: external_exports.array(ApiConnection) }).strict();
 var CreateApiConnectionRequest = external_exports.object({
@@ -16702,7 +16687,7 @@ var CreateApiConnectionRequest = external_exports.object({
     external_exports.string().min(1).max(120),
     external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
   ),
-  oauth: ApiOAuthClientConfig.optional(),
+  oauth: ApiOAuthSelection.optional(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)).default([])
 }).strict();
 var UpdateApiConnectionRequest = external_exports.object({
@@ -16714,7 +16699,7 @@ var UpdateApiConnectionRequest = external_exports.object({
     external_exports.string().min(1).max(120),
     external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
   ).optional(),
-  oauth: ApiOAuthClientConfig.nullable().optional(),
+  oauth: ApiOAuthSelection.nullable().optional(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)).optional()
 }).strict();
 var ApiInputScalar = external_exports.union([external_exports.string().max(2e4), external_exports.number().finite(), external_exports.boolean()]);
@@ -19850,13 +19835,7 @@ var ManagerApiCredentialScheme = external_exports.object({
       label: external_exports.string().min(1).max(200),
       secret: external_exports.boolean()
     }).strict()
-  ).max(10),
-  oauth: external_exports.object({
-    scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100),
-    clientSecretRequired: external_exports.boolean(),
-    callbackUrl: external_exports.url().max(2e3),
-    authorizationUrl: external_exports.url().max(2e3)
-  }).strict().nullable()
+  ).max(10)
 }).strict();
 var ManagerApiConnectionActionProjection = external_exports.object({
   ...ManagerApiActionBase,
@@ -19906,7 +19885,7 @@ var SubmitManagerApiConnectionRequest = external_exports.object({
     external_exports.string().min(1).max(120),
     external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
   ),
-  oauth: ApiOAuthClientConfig.optional()
+  oauth: ApiOAuthSelection.optional()
 }).strict();
 var ConfirmManagerApiInvocationRequest = external_exports.object({ requestId: external_exports.uuid() }).strict();
 var ManagerApiActionResponse = external_exports.object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.113",
+  "version": "0.0.115",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",