@zixt/host 0.0.93 → 0.0.95

package/dist/index.js

@@ -28,7 +28,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.93",
+  version: "0.0.95",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -14664,6 +14664,8 @@ var ID_PREFIXES = {
   managerIntegrationAction: "mia",
   /** One Manager-prepared secure Credential entry card (MG-17). */
   managerCredentialRequest: "mcr",
+  /** One Manager-prepared generic API setup or invocation card (MG-20). */
+  managerApiAction: "maa",
   /** One Manager inference call's token-metering row (MG-8). */
   managerUsage: "mgu",
   /** One ordered Manager reply awaiting Slack delivery. */
@@ -14724,6 +14726,7 @@ var ManagerCredentialRequestId = idSchema(
   ID_PREFIXES.managerCredentialRequest,
   "Manager credential request id"
 );
+var ManagerApiActionId = idSchema(ID_PREFIXES.managerApiAction, "Manager API action id");
 var ManagerEmailInboxId = idSchema(
   ID_PREFIXES.managerEmailInbox,
   "Manager email inbox id"
@@ -15802,6 +15805,15 @@ var ApiAuthBase = {
   label: external_exports.string().min(1).max(120),
   description: external_exports.string().max(2e3).nullable()
 };
+var OAuthTokenEndpointAuthMethod = external_exports.enum([
+  "none",
+  "client_secret_basic",
+  "client_secret_post"
+]);
+var OAuthHttpUrl = external_exports.url().max(2e3).refine((value) => {
+  const url3 = new URL(value);
+  return ["http:", "https:"].includes(url3.protocol) && !url3.username && !url3.password;
+}, "OAuth endpoints must be credential-free HTTP(S) URLs");
 var ApiAuthScheme = external_exports.discriminatedUnion("type", [
   external_exports.object({
     ...ApiAuthBase,
@@ -15823,6 +15835,17 @@ var ApiAuthScheme = external_exports.discriminatedUnion("type", [
       external_exports.object({ id: external_exports.literal("username"), label: external_exports.string() }).strict(),
       external_exports.object({ id: external_exports.literal("password"), label: external_exports.string() }).strict()
     ])
+  }).strict(),
+  external_exports.object({
+    ...ApiAuthBase,
+    type: external_exports.literal("oauth2"),
+    authorizationUrl: OAuthHttpUrl,
+    tokenUrl: OAuthHttpUrl,
+    scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100),
+    usePkce: external_exports.boolean().default(true),
+    tokenEndpointAuthMethod: OAuthTokenEndpointAuthMethod.default("none"),
+    /** Optional provider-supported static-token fallback, presented as Bearer auth. */
+    fields: external_exports.array(external_exports.object({ id: external_exports.literal("token"), label: external_exports.string() }).strict()).max(1)
   }).strict()
 ]);
 var ApiAuthSchemeOverrideId = external_exports.string().min(1).max(120).regex(/^[A-Za-z0-9_.:-]+$/);
@@ -15842,9 +15865,22 @@ var ApiBearerAuthSchemeOverride = external_exports.object({
   description: external_exports.string().min(1).max(2e3),
   tokenLabel: external_exports.string().min(1).max(120)
 }).strict();
+var ApiOAuth2AuthSchemeOverride = external_exports.object({
+  schemeId: ApiAuthSchemeOverrideId,
+  type: external_exports.literal("oauth2"),
+  label: external_exports.string().min(1).max(120),
+  description: external_exports.string().min(1).max(2e3),
+  authorizationUrl: OAuthHttpUrl.optional(),
+  tokenUrl: OAuthHttpUrl.optional(),
+  scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100).optional(),
+  usePkce: external_exports.boolean(),
+  tokenEndpointAuthMethod: OAuthTokenEndpointAuthMethod,
+  fallbackTokenLabel: external_exports.string().min(1).max(120).optional()
+}).strict();
 var ApiAuthSchemeOverride = external_exports.discriminatedUnion("type", [
   ApiBasicAuthSchemeOverride,
-  ApiBearerAuthSchemeOverride
+  ApiBearerAuthSchemeOverride,
+  ApiOAuth2AuthSchemeOverride
 ]);
 var NormalizedApiDefinition = external_exports.object({
   sourceFormat: external_exports.enum(["openapi-3.0", "openapi-3.1", "swagger-2.0", "natural-language"]),
@@ -15896,7 +15932,7 @@ var IntegrationDefinitionSummary = external_exports.object({
   isBuiltIn: external_exports.boolean(),
   revision: external_exports.number().int().min(1),
   operationCount: external_exports.number().int().min(0),
-  authKinds: external_exports.array(external_exports.enum(["none", "apiKey", "bearer", "basic"])).max(4),
+  authKinds: external_exports.array(external_exports.enum(["none", "apiKey", "bearer", "basic", "oauth2"])).max(5),
   updatedAt: IsoDate
 }).strict();
 var IntegrationDefinition = IntegrationDefinitionSummary.extend({
@@ -16052,6 +16088,13 @@ var ApiConnection = external_exports.object({
       configuredFields: external_exports.array(external_exports.string().min(1).max(120)).max(10)
     }).strict()
   ),
+  oauth: external_exports.object({
+    schemeId: external_exports.string().min(1).max(120),
+    status: external_exports.enum(["not_connected", "connected", "expired", "error"]),
+    clientIdConfigured: external_exports.boolean(),
+    scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100),
+    callbackUrl: external_exports.url().max(2e3)
+  }).strict().nullable(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)),
   health: ApiConnectionHealth,
   lastCheckedAt: IsoDate.nullable(),
@@ -16060,6 +16103,13 @@ var ApiConnection = external_exports.object({
   createdAt: IsoDate,
   updatedAt: IsoDate
 }).strict();
+var ApiOAuthClientConfig = external_exports.object({
+  schemeId: external_exports.string().min(1).max(120),
+  clientId: external_exports.string().min(1).max(512),
+  /** Write-only. Omit on update to retain the vaulted client secret. */
+  clientSecret: external_exports.string().min(1).max(1e4).optional(),
+  scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100).optional()
+}).strict();
 var ListApiConnectionsResponse = external_exports.object({ connections: external_exports.array(ApiConnection) }).strict();
 var CreateApiConnectionRequest = external_exports.object({
   definitionId: IntegrationDefinitionId,
@@ -16071,6 +16121,7 @@ var CreateApiConnectionRequest = external_exports.object({
     external_exports.string().min(1).max(120),
     external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
   ),
+  oauth: ApiOAuthClientConfig.optional(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)).default([])
 }).strict();
 var UpdateApiConnectionRequest = external_exports.object({
@@ -16082,6 +16133,7 @@ var UpdateApiConnectionRequest = external_exports.object({
     external_exports.string().min(1).max(120),
     external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
   ).optional(),
+  oauth: ApiOAuthClientConfig.nullable().optional(),
   disabledOperationIds: external_exports.array(external_exports.string().min(1).max(240)).optional()
 }).strict();
 var ApiInputScalar = external_exports.union([external_exports.string().max(2e4), external_exports.number().finite(), external_exports.boolean()]);
@@ -18817,7 +18869,9 @@ var ConversationEventProjection = external_exports.discriminatedUnion("kind", [
     /** Present only for a confirmation card; OAuth authority never appears here. */
     integrationActionId: ManagerIntegrationActionId.nullable().optional(),
     /** Present only for a secure Credential entry card; never a value (MG-17). */
-    credentialRequestId: ManagerCredentialRequestId.nullable().optional()
+    credentialRequestId: ManagerCredentialRequestId.nullable().optional(),
+    /** Present only for a generic API setup/invocation card; never credentials (MG-20). */
+    apiActionId: ManagerApiActionId.nullable().optional()
   }).strict(),
   /** A mirrored child-Task event: what the teammate wrote or became. */
   external_exports.object({
@@ -18925,6 +18979,99 @@ var SubmitManagerCredentialRequest = external_exports.object({
     });
   }
 });
+var ManagerApiActionStatus = external_exports.enum([
+  "awaiting_entry",
+  "storing",
+  "awaiting_confirmation",
+  "invoking",
+  "authorizing",
+  "completed",
+  "cancelled",
+  "expired",
+  "failed"
+]);
+var ManagerApiActionBase = {
+  id: ManagerApiActionId,
+  conversationId: ConversationId,
+  status: ManagerApiActionStatus,
+  outcome: external_exports.string().max(2e3).nullable(),
+  createdAt: external_exports.string(),
+  expiresAt: external_exports.string()
+};
+var ManagerApiCredentialScheme = external_exports.object({
+  id: external_exports.string().min(1).max(120),
+  type: external_exports.enum(["apiKey", "bearer", "basic", "oauth2"]),
+  label: external_exports.string().min(1).max(120),
+  description: external_exports.string().max(2e3).nullable(),
+  fields: external_exports.array(
+    external_exports.object({
+      id: external_exports.string().min(1).max(120),
+      label: external_exports.string().min(1).max(200),
+      secret: external_exports.boolean()
+    }).strict()
+  ).max(10),
+  oauth: external_exports.object({
+    scopes: external_exports.array(external_exports.string().min(1).max(500)).max(100),
+    clientSecretRequired: external_exports.boolean(),
+    callbackUrl: external_exports.url().max(2e3),
+    authorizationUrl: external_exports.url().max(2e3)
+  }).strict().nullable()
+}).strict();
+var ManagerApiConnectionActionProjection = external_exports.object({
+  ...ManagerApiActionBase,
+  kind: external_exports.literal("connect"),
+  definition: external_exports.object({
+    id: IntegrationDefinitionId,
+    name: external_exports.string().min(1).max(120),
+    publisher: external_exports.string().min(1).max(120),
+    summary: external_exports.string().min(1).max(500)
+  }).strict(),
+  connectionName: external_exports.string().min(1).max(120),
+  usageNotes: external_exports.string().max(4e3).nullable(),
+  serverUrl: external_exports.url().max(2e3),
+  customServer: external_exports.boolean(),
+  authSchemes: external_exports.array(ManagerApiCredentialScheme).max(20),
+  access: external_exports.object({
+    mode: external_exports.enum(["all", "selected"]),
+    teammates: external_exports.array(external_exports.object({ agentId: AgentId, name: external_exports.string().min(1).max(200) }).strict()).max(100)
+  }).strict(),
+  connectionId: ConnectionId.nullable()
+}).strict();
+var ManagerApiInvocationActionProjection = external_exports.object({
+  ...ManagerApiActionBase,
+  kind: external_exports.literal("invoke"),
+  connection: external_exports.object({
+    id: ConnectionId,
+    name: external_exports.string().min(1).max(120),
+    definitionName: external_exports.string().min(1).max(120)
+  }).strict(),
+  operation: external_exports.object({
+    id: external_exports.string().min(1).max(240),
+    name: external_exports.string().min(1).max(240),
+    method: external_exports.enum(["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"]),
+    path: external_exports.string().min(1).max(2e3),
+    risk: ApiOperationRisk
+  }).strict(),
+  input: ApiOperationInput,
+  result: ApiOperationResult.nullable()
+}).strict();
+var ManagerApiActionProjection = external_exports.discriminatedUnion("kind", [
+  ManagerApiConnectionActionProjection,
+  ManagerApiInvocationActionProjection
+]);
+var SubmitManagerApiConnectionRequest = external_exports.object({
+  requestId: external_exports.uuid(),
+  credentials: external_exports.record(
+    external_exports.string().min(1).max(120),
+    external_exports.record(external_exports.string().min(1).max(120), external_exports.string().min(1).max(2e4))
+  ),
+  oauth: ApiOAuthClientConfig.optional()
+}).strict();
+var ConfirmManagerApiInvocationRequest = external_exports.object({ requestId: external_exports.uuid() }).strict();
+var ManagerApiActionResponse = external_exports.object({
+  action: ManagerApiActionProjection,
+  oauth: ManagerIntegrationOAuthStart.nullable()
+}).strict();
 var NonEmptyTaskRunnerSelection = TaskRunnerSelection.refine(
   (selection) => selection.type !== void 0 || selection.model !== void 0 || selection.effort !== void 0,
   "choose at least one runtime preference"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.93",
+  "version": "0.0.95",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",