@zixt/host 0.0.92 → 0.0.94

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.92",
+  version: "0.0.94",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -15802,6 +15802,15 @@ var ApiAuthBase = {
   label: external_exports.string().min(1).max(120),
   description: external_exports.string().max(2e3).nullable()
 };
+var OAuthTokenEndpointAuthMethod = external_exports.enum([
+  "none",
+  "client_secret_basic",
+  "client_secret_post"
+]);
+var OAuthHttpUrl = external_exports.url().max(2e3).refine((value) => {
+  const url3 = new URL(value);
+  return ["http:", "https:"].includes(url3.protocol) && !url3.username && !url3.password;
+}, "OAuth endpoints must be credential-free HTTP(S) URLs");
 var ApiAuthScheme = external_exports.discriminatedUnion("type", [
   external_exports.object({
     ...ApiAuthBase,
@@ -15823,6 +15832,17 @@ var ApiAuthScheme = external_exports.discriminatedUnion("type", [
       external_exports.object({ id: external_exports.literal("username"), label: external_exports.string() }).strict(),
       external_exports.object({ id: external_exports.literal("password"), label: external_exports.string() }).strict()
     ])
+  }).strict(),
+  external_exports.object({
+    ...ApiAuthBase,
+    type: external_exports.literal("oauth2"),
+    authorizationUrl: OAuthHttpUrl,
+    tokenUrl: OAuthHttpUrl,
+    scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100),
+    usePkce: external_exports.boolean().default(true),
+    tokenEndpointAuthMethod: OAuthTokenEndpointAuthMethod.default("none"),
+    /** Optional provider-supported static-token fallback, presented as Bearer auth. */
+    fields: external_exports.array(external_exports.object({ id: external_exports.literal("token"), label: external_exports.string() }).strict()).max(1)
   }).strict()
 ]);
 var ApiAuthSchemeOverrideId = external_exports.string().min(1).max(120).regex(/^[A-Za-z0-9_.:-]+$/);
@@ -15842,9 +15862,22 @@ var ApiBearerAuthSchemeOverride = external_exports.object({
   description: external_exports.string().min(1).max(2e3),
   tokenLabel: external_exports.string().min(1).max(120)
 }).strict();
+var ApiOAuth2AuthSchemeOverride = external_exports.object({
+  schemeId: ApiAuthSchemeOverrideId,
+  type: external_exports.literal("oauth2"),
+  label: external_exports.string().min(1).max(120),
+  description: external_exports.string().min(1).max(2e3),
+  authorizationUrl: OAuthHttpUrl.optional(),
+  tokenUrl: OAuthHttpUrl.optional(),
+  scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100).optional(),
+  usePkce: external_exports.boolean(),
+  tokenEndpointAuthMethod: OAuthTokenEndpointAuthMethod,
+  fallbackTokenLabel: external_exports.string().min(1).max(120).optional()
+}).strict();
 var ApiAuthSchemeOverride = external_exports.discriminatedUnion("type", [
   ApiBasicAuthSchemeOverride,
-  ApiBearerAuthSchemeOverride
+  ApiBearerAuthSchemeOverride,
+  ApiOAuth2AuthSchemeOverride
 ]);
 var NormalizedApiDefinition = external_exports.object({
   sourceFormat: external_exports.enum(["openapi-3.0", "openapi-3.1", "swagger-2.0", "natural-language"]),
@@ -15896,7 +15929,7 @@ var IntegrationDefinitionSummary = external_exports.object({
   isBuiltIn: external_exports.boolean(),
   revision: external_exports.number().int().min(1),
   operationCount: external_exports.number().int().min(0),
-  authKinds: external_exports.array(external_exports.enum(["none", "apiKey", "bearer", "basic"])).max(4),
+  authKinds: external_exports.array(external_exports.enum(["none", "apiKey", "bearer", "basic", "oauth2"])).max(5),
   updatedAt: IsoDate
 }).strict();
 var IntegrationDefinition = IntegrationDefinitionSummary.extend({
@@ -16052,6 +16085,13 @@ var ApiConnection = external_exports.object({
       configuredFields: external_exports.array(external_exports.string().min(1).max(120)).max(10)
     }).strict()
   ),
+  oauth: external_exports.object({
+    schemeId: external_exports.string().min(1).max(120),
+    status: external_exports.enum(["not_connected", "connected", "expired", "error"]),
+    clientIdConfigured: external_exports.boolean(),
+    scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100),
+    callbackUrl: external_exports.url().max(2e3)
+  }).strict().nullable(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)),
   health: ApiConnectionHealth,
   lastCheckedAt: IsoDate.nullable(),
@@ -16060,6 +16100,13 @@ var ApiConnection = external_exports.object({
   createdAt: IsoDate,
   updatedAt: IsoDate
 }).strict();
+var ApiOAuthClientConfig = external_exports.object({
+  schemeId: external_exports.string().min(1).max(120),
+  clientId: external_exports.string().min(1).max(512),
+  /** Write-only. Omit on update to retain the vaulted client secret. */
+  clientSecret: external_exports.string().min(1).max(1e4).optional(),
+  scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100).optional()
+}).strict();
 var ListApiConnectionsResponse = external_exports.object({ connections: external_exports.array(ApiConnection) }).strict();
 var CreateApiConnectionRequest = external_exports.object({
   definitionId: IntegrationDefinitionId,
@@ -16071,6 +16118,7 @@ var CreateApiConnectionRequest = external_exports.object({
     external_exports.string().min(1).max(120),
     external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
   ),
+  oauth: ApiOAuthClientConfig.optional(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)).default([])
 }).strict();
 var UpdateApiConnectionRequest = external_exports.object({
@@ -16082,6 +16130,7 @@ var UpdateApiConnectionRequest = external_exports.object({
     external_exports.string().min(1).max(120),
     external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
   ).optional(),
+  oauth: ApiOAuthClientConfig.nullable().optional(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)).optional()
 }).strict();
 var ApiInputScalar = external_exports.union([external_exports.string().max(2e4), external_exports.number().finite(), external_exports.boolean()]);
@@ -16100,9 +16149,21 @@ var ApiOperationInput = external_exports.object({
     }
   }
 });
+var TryApiAuthentication = external_exports.discriminatedUnion("mode", [
+  external_exports.object({ mode: external_exports.literal("saved") }).strict(),
+  external_exports.object({
+    mode: external_exports.literal("one_time"),
+    alternative: external_exports.array(external_exports.string().min(1).max(120)).min(1).max(20).refine((items) => new Set(items).size === items.length, "Schemes must be unique"),
+    credentials: external_exports.record(
+      external_exports.string().min(1).max(120),
+      external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
+    )
+  }).strict()
+]);
 var TryApiOperationRequest = external_exports.object({
   operationId: external_exports.string().min(1).max(240),
   input: ApiOperationInput.default({ path: {}, query: {}, headers: {} }),
+  authentication: TryApiAuthentication.default({ mode: "saved" }),
   confirmed: external_exports.boolean().default(false)
 }).strict();
 var ApiOperationResult = external_exports.object({
@@ -16110,6 +16171,7 @@ var ApiOperationResult = external_exports.object({
   status: external_exports.number().int().min(0).max(999).nullable(),
   statusText: external_exports.string().max(500),
   contentType: external_exports.string().max(500).nullable(),
+  headers: external_exports.record(external_exports.string().min(1).max(200), external_exports.string().max(8e3)).refine((items) => Object.keys(items).length <= 100, "Too many response headers").default({}),
   body: external_exports.string().max(2e5),
   truncated: external_exports.boolean(),
   durationMs: external_exports.number().int().min(0),
@@ -21788,6 +21850,9 @@ var REQUEST_BODY_LIMIT = 1e6;
 var REQUEST_URL_LIMIT = 2e4;
 var REQUEST_HEADERS_LIMIT = 64e3;
 var REQUEST_TIMEOUT_MS2 = 3e4;
+var RESPONSE_HEADERS_LIMIT = 64e3;
+var RESPONSE_HEADER_VALUE_LIMIT = 8e3;
+var RESPONSE_HEADER_COUNT_LIMIT = 100;
 var FORBIDDEN_HEADERS = /* @__PURE__ */ new Set([
   "authorization",
   "cookie",
@@ -21797,6 +21862,7 @@ var FORBIDDEN_HEADERS = /* @__PURE__ */ new Set([
   "proxy-authorization",
   "transfer-encoding"
 ]);
+var PRIVATE_RESPONSE_HEADERS = /* @__PURE__ */ new Set(["set-cookie", "set-cookie2"]);
 function operationFor(connection, operationId) {
   const operation = connection.operations.find(({ id }) => id === operationId);
   if (!operation) throw new Error("That API operation is not available on this connection.");
@@ -21855,6 +21921,21 @@ async function boundedBody(response) {
   }
   return { body: new TextDecoder("utf-8", { fatal: false }).decode(joined), truncated };
 }
+function boundedHeaders(response) {
+  const result = {};
+  let bytes = 0;
+  for (const [name, rawValue] of response.headers) {
+    const normalized = name.toLowerCase();
+    if (PRIVATE_RESPONSE_HEADERS.has(normalized)) continue;
+    if (Object.keys(result).length >= RESPONSE_HEADER_COUNT_LIMIT) break;
+    const value = rawValue.slice(0, RESPONSE_HEADER_VALUE_LIMIT);
+    const nextBytes = Buffer.byteLength(normalized) + Buffer.byteLength(value);
+    if (bytes + nextBytes > RESPONSE_HEADERS_LIMIT) break;
+    result[normalized] = value;
+    bytes += nextBytes;
+  }
+  return result;
+}
 async function executeApiOperation(input) {
   const started = performance.now();
   try {
@@ -21975,6 +22056,7 @@ async function executeApiOperation(input) {
       status: response.status,
       statusText: response.statusText.slice(0, 500),
       contentType: response.headers.get("content-type")?.slice(0, 500) ?? null,
+      headers: boundedHeaders(response),
       ...payload,
       durationMs: Math.max(0, Math.round(performance.now() - started)),
       error: response.ok ? null : `The API returned HTTP ${response.status}.`
@@ -21985,6 +22067,7 @@ async function executeApiOperation(input) {
       status: null,
       statusText: "",
       contentType: null,
+      headers: {},
       body: "",
       truncated: false,
       durationMs: Math.max(0, Math.round(performance.now() - started)),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.92",
+  "version": "0.0.94",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",