picked 0.0.103-next.1 → 0.0.103-next.3

package/docs/reference/dashboard/external-apis.md

@@ -59,6 +59,9 @@ OAuth2 credential.
 
 - Picked sends the token request as a `POST` with a form body, so no secret is in a URL.
 - Picked uses an access token until 60 seconds before it expires.
+- **Refresh credentials** on the page of the external API gets a new access token
+  immediately. The page then shows the time of the last refresh, or the reason for the
+  failure.
 - Picked reads the lifetime from `expires_in_sec`, or else from `expires_in`. Picked keeps
   a token with no lifetime for one hour.
 - Picked counts an answer as a success when its JSON body has an `access_token`, for all
@@ -176,6 +179,7 @@ You can also do this task with the [Management API](/reference/management-api/sc
 | --- | --- | --- | --- |
 | Register an external API | [`externalApiCreate`](/reference/management-api/schema/external-api#externalapicreate) | None | None |
 | Set or replace the authorization header | [`externalApiAuthHeaderSet`](/reference/management-api/schema/external-api#externalapiauthheaderset) | None | None |
+| Get a new OAuth2 access token | [`externalApiOAuth2Refresh`](/reference/management-api/schema/external-api#externalapioauth2refresh) | None | None |
 | Delete a registration | [`externalApiDelete`](/reference/management-api/schema/external-api#externalapidelete) | None | None |
 | Set the arguments of an External API node | [`workflowGraphUpdate`](/reference/management-api/schema/workflow#workflowgraphupdate) | [`update_workflow_graph`](/reference/tools/mcp#update_workflow_graph) | `tools.update_workflow_graph({ workflow_id, update_nodes })` |
 

package/docs/reference/management-api/schema/external-api.md

@@ -78,6 +78,16 @@ Scope: `ORGANIZATION_INTEGRATIONS_UPDATE`.
 externalApiOAuth2Clear(input: ExternalApiOAuth2ClearInput!): ExternalApiOAuth2ClearPayload! @auth(only: USER)
 ```
 
+### `externalApiOAuth2Refresh`
+
+Fetches a new access token for the OAuth2 credential of an external API now, in place of any
+cached one. An external API with no OAuth2 credential is refused.
+Scope: `ORGANIZATION_INTEGRATIONS_UPDATE`.
+
+```graphql
+externalApiOAuth2Refresh(input: ExternalApiOAuth2RefreshInput!): ExternalApiOAuth2RefreshPayload! @auth(only: USER)
+```
+
 ### `externalApiDelete`
 
 Deletes an external API and its credential. Workflows then cannot call its origin.
@@ -521,6 +531,16 @@ input ExternalApiOAuth2ClearInput {
 }
 ```
 
+### `ExternalApiOAuth2RefreshInput`
+
+```graphql
+"""The input of `externalApiOAuth2Refresh`."""
+input ExternalApiOAuth2RefreshInput {
+  """The ID of the external API."""
+  id: ID!
+}
+```
+
 ### `ExternalApiDeleteInput`
 
 ```graphql
@@ -606,6 +626,21 @@ type ExternalApiOAuth2ClearPayload {
 }
 ```
 
+### `ExternalApiOAuth2RefreshPayload`
+
+```graphql
+"""The result of `externalApiOAuth2Refresh`."""
+type ExternalApiOAuth2RefreshPayload {
+  """
+  The external API after the refresh. `oauth2.lastRefreshedAt` moves on a new token, and
+  `oauth2.lastRefreshFailure` says why there is none.
+  """
+  externalApi: ExternalApi
+  """The errors. Always empty."""
+  errors: [UserError!]!
+}
+```
+
 ### `ExternalApiDeletePayload`
 
 ```graphql

package/docs/reference/management-api/schema/index.md

@@ -79,6 +79,7 @@ An operation with `@auth` needs a caller that has authenticated. `@auth(only: US
 | [`externalApiCreate`](/reference/management-api/schema/external-api#externalapicreate) | Mutation | Creates an external API in a project, with an optional credential. Scope: `ORGANIZATION_INTEGRATIONS_CREATE`. |
 | [`externalApiDelete`](/reference/management-api/schema/external-api#externalapidelete) | Mutation | Deletes an external API and its credential. Workflows then cannot call its origin. Scope: `ORGANIZATION_INTEGRATIONS_DELETE`. |
 | [`externalApiOAuth2Clear`](/reference/management-api/schema/external-api#externalapioauth2clear) | Mutation | Removes the OAuth2 credential of an external API, with its secrets and cached access token. An external API with no OAuth2 credential is unchanged. Scope: `ORGANIZATION_INTEGRATIONS_UPDATE`. |
+| [`externalApiOAuth2Refresh`](/reference/management-api/schema/external-api#externalapioauth2refresh) | Mutation | Fetches a new access token for the OAuth2 credential of an external API now, in place of any cached one. An external API with no OAuth2 credential is refused. Scope: `ORGANIZATION_INTEGRATIONS_UPDATE`. |
 | [`externalApiOAuth2Set`](/reference/management-api/schema/external-api#externalapioauth2set) | Mutation | Sets the OAuth2 credential of an external API, and removes any static auth header. The next call fetches a new access token. Scope: `ORGANIZATION_INTEGRATIONS_UPDATE`. |
 | [`externalApiUpdate`](/reference/management-api/schema/external-api#externalapiupdate) | Mutation | Updates the name of an external API. To change the origin, delete it and create another. Scope: `ORGANIZATION_INTEGRATIONS_UPDATE`. |
 | [`feature`](/reference/management-api/schema/feature#feature) | Query | Reads a feature flag by its ID and workspace. Scope: `ORGANIZATION_WORKSPACE_READ`. |

package/docs/reference/management-api/schema/workflow.md

@@ -175,6 +175,12 @@ enum WorkflowEventName {
   CONDITION_DELETED
   """An action was deleted."""
   ACTION_DELETED
+  """A lead was created."""
+  LEAD_CREATED
+  """
+  A person or an API key changed a lead. A change a workflow run makes starts no workflow.
+  """
+  LEAD_UPDATED
 }
 ```
 

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "picked",
   "description": "The Picked SDK front door: the client, the picked.config helpers, and the picked CLI in one install",
-  "version": "0.0.103-next.1",
+  "version": "0.0.103-next.3",
   "bin": {
     "picked": "dist/esm/bin.js"
   },
   "dependencies": {
-    "@picked/cli": "0.0.103-next.1",
-    "@picked/config": "0.0.103-next.1"
+    "@picked/cli": "0.0.103-next.3",
+    "@picked/config": "0.0.103-next.3"
   },
   "devDependencies": {
     "@picked/client": "workspace:*",
@@ -64,7 +64,7 @@
   "main": "./dist/cjs/index.js",
   "module": "./dist/esm/index.js",
   "peerDependencies": {
-    "@picked/client": "0.0.103-next.1"
+    "@picked/client": "0.0.103-next.3"
   },
   "private": false,
   "publishConfig": {