runline 0.32.0 → 0.34.0

package/dist/plugins/npm/src/index.js

@@ -1,29 +1,17 @@
-function getConn(ctx) {
-    const c = ctx.connection.config;
-    const registryUrl = (c.registryUrl ?? "https://registry.npmjs.org").replace(/\/$/, "");
-    const token = c.token;
-    return { registryUrl, token };
-}
-async function apiRequest(conn, method, path, body, contentType) {
-    const headers = {};
-    if (conn.token)
-        headers.Authorization = `Bearer ${conn.token}`;
-    if (contentType)
-        headers["Content-Type"] = contentType;
-    else
-        headers["Content-Type"] = "application/json";
-    const init = { method, headers };
-    if (body !== undefined)
-        init.body = body;
-    const res = await fetch(`${conn.registryUrl}${path}`, init);
-    if (!res.ok)
-        throw new Error(`npm registry error ${res.status}: ${await res.text()}`);
-    const text = await res.text();
-    return text ? JSON.parse(text) : {};
+import { credentialJson, pathSegment, slashEncodedSegment, } from "../../_shared/credentials.js";
+import { npmCredential } from "./credentials.js";
+function apiRequest(ctx, method, path, options = {}) {
+    return credentialJson(ctx, npmCredential, "npm", {
+        target: "registry",
+        path,
+        method,
+        ...options,
+    });
 }
 export default function npm(rl) {
     rl.setName("npm");
     rl.setVersion("0.1.0");
+    rl.setCredential(npmCredential);
     rl.setConnectionSchema({
         registryUrl: {
             type: "string",
@@ -56,7 +44,7 @@ export default function npm(rl) {
         async execute(input, ctx) {
             const { packageName, version } = input;
             const v = version || "latest";
-            return apiRequest(getConn(ctx), "GET", `/${encodeURIComponent(packageName)}/${v}`);
+            return apiRequest(ctx, "GET", `${slashEncodedSegment(packageName)}/${pathSegment(v)}`);
         },
     });
     rl.registerAction("package.getVersions", {
@@ -71,7 +59,7 @@ export default function npm(rl) {
         },
         async execute(input, ctx) {
             const { packageName } = input;
-            const data = (await apiRequest(getConn(ctx), "GET", `/${encodeURIComponent(packageName)}`));
+            const data = (await apiRequest(ctx, "GET", slashEncodedSegment(packageName)));
             const time = (data.time ?? {});
             const versions = Object.entries(time)
                 .filter(([v]) => /^\d+\.\d+\.\d+/.test(v))
@@ -99,12 +87,14 @@ export default function npm(rl) {
         },
         async execute(input, ctx) {
             const p = (input ?? {});
-            const params = new URLSearchParams();
-            params.set("text", p.query);
-            params.set("size", String(p.limit ?? 10));
-            params.set("from", String(p.offset ?? 0));
-            params.set("popularity", "0.99");
-            const data = (await apiRequest(getConn(ctx), "GET", `/-/v1/search?${params.toString()}`));
+            const data = (await apiRequest(ctx, "GET", "-/v1/search", {
+                query: {
+                    text: p.query,
+                    size: p.limit ?? 10,
+                    from: p.offset ?? 0,
+                    popularity: 0.99,
+                },
+            }));
             const objects = (data.objects ?? []);
             return objects.map(({ package: pkg }) => ({
                 name: pkg.name,
@@ -125,7 +115,7 @@ export default function npm(rl) {
         },
         async execute(input, ctx) {
             const { packageName } = input;
-            return apiRequest(getConn(ctx), "GET", `/-/package/${encodeURIComponent(packageName)}/dist-tags`);
+            return apiRequest(ctx, "GET", `-/package/${slashEncodedSegment(packageName)}/dist-tags`);
         },
     });
     rl.registerAction("distTag.update", {
@@ -150,7 +140,7 @@ export default function npm(rl) {
         },
         async execute(input, ctx) {
             const { packageName, tagName, version } = input;
-            return apiRequest(getConn(ctx), "PUT", `/-/package/${encodeURIComponent(packageName)}/dist-tags/${encodeURIComponent(tagName)}`, version, "application/x-www-form-urlencoded");
+            return apiRequest(ctx, "PUT", `-/package/${slashEncodedSegment(packageName)}/dist-tags/${pathSegment(tagName)}`, { json: version });
         },
     });
 }

package/dist/plugins/odoo/src/credentials.js

@@ -0,0 +1,21 @@
+import { httpsBase, staticCredential } from "../../_shared/credentials.js";
+/**
+ * The user's password or API key, which Odoo's JSON-RPC takes as the third
+ * argument of every call; the plugin leaves that slot null and the
+ * transport fills it. The instance URL is public config and must be HTTPS;
+ * the username and database are public config too.
+ */
+export const odooCredential = staticCredential({
+    id: "odoo",
+    auth: {
+        kind: "static",
+        parts: ["password"],
+        placements: [
+            { in: "jsonPointer", part: "password", pointer: "/params/args/2" },
+        ],
+    },
+    local: { password: "password" },
+    targets: (config) => ({
+        rpc: { baseUrl: httpsBase(config.url, ""), methods: ["POST"] },
+    }),
+});

package/dist/plugins/odoo/src/index.js

@@ -1,60 +1,56 @@
-function getConn(ctx) {
-    const c = ctx.connection.config;
-    return {
-        url: c.url.replace(/\/$/, ""),
-        db: c.db,
-        username: c.username,
-        password: c.password,
-    };
+import { AuthError } from "runline";
+import { answerFailed, credentialJson } from "../../_shared/credentials.js";
+import { odooCredential } from "./credentials.js";
+/**
+ * One JSON-RPC call. Every Odoo service takes the password as its third
+ * argument, so `args` carries null there for the transport to fill.
+ */
+async function rpc(ctx, service, method, args) {
+    const answer = await credentialJson(ctx, odooCredential, "odoo", {
+        target: "rpc",
+        path: "jsonrpc",
+        method: "POST",
+        json: {
+            jsonrpc: "2.0",
+            method: "call",
+            params: { service, method, args },
+            id: 1,
+        },
+    });
+    if (answer.error)
+        throw answerFailed("odoo", {
+            code: answer.error.data?.name ?? answer.error.code,
+            message: answer.error.data?.message ?? answer.error.message,
+        });
+    return answer.result;
 }
-function getDBName(db, url) {
-    if (db)
-        return db;
+/** The database the connection names, else the instance's first host label. */
+function database(config) {
+    if (typeof config.db === "string" && config.db)
+        return config.db;
     try {
-        return new URL(url).hostname.split(".")[0];
+        return new URL(String(config.url)).hostname.split(".")[0];
     }
     catch {
-        return "";
+        throw new AuthError("invalid_credentials");
     }
 }
-async function jsonRpc(url, params) {
-    const body = {
-        jsonrpc: "2.0",
-        method: "call",
-        params,
-        id: Math.floor(Math.random() * 1000),
-    };
-    const res = await fetch(`${url}/jsonrpc`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(body),
-    });
-    if (!res.ok)
-        throw new Error(`Odoo HTTP error ${res.status}: ${await res.text()}`);
-    const json = (await res.json());
-    if (json.error) {
-        const err = json.error;
-        const data = (err.data ?? err);
-        throw new Error(`Odoo RPC error: ${data.message ?? JSON.stringify(err)}`);
-    }
-    return json.result;
-}
-async function login(url, db, username, password) {
-    const uid = (await jsonRpc(url, {
-        service: "common",
-        method: "login",
-        args: [db, username, password],
-    }));
-    if (!uid)
-        throw new Error("Odoo login failed — check credentials");
-    return uid;
+/** The database and the logged-in user's ID, which every model call names. */
+async function session(ctx) {
+    const db = database(ctx.connection.config);
+    const uid = await rpc(ctx, "common", "login", [
+        db,
+        ctx.connection.config.username,
+        null,
+    ]);
+    if (typeof uid !== "number")
+        throw new AuthError("invalid_credentials");
+    return { db, uid };
 }
-async function execute(url, db, uid, password, model, method, ...args) {
-    return jsonRpc(url, {
-        service: "object",
-        method: "execute",
-        args: [db, uid, password, model, method, ...args],
-    });
+/** A method on a model, as the logged-in user. */
+async function call(ctx, model, method, ...args) {
+    const { db, uid } = await session(ctx);
+    return rpc(ctx, "object", "execute", [db, uid, null, model, method, ...args]);
 }
 const MODEL_MAP = {
     contact: "res.partner",
@@ -67,6 +63,7 @@ function resolveModel(resource) {
 export default function odoo(rl) {
     rl.setName("odoo");
     rl.setVersion("0.1.0");
+    rl.setCredential(odooCredential);
     rl.setConnectionSchema({
         url: {
             type: "string",
@@ -93,13 +90,6 @@ export default function odoo(rl) {
             env: "ODOO_PASSWORD",
         },
     });
-    // Helper to get authenticated session
-    async function getSession(ctx) {
-        const c = getConn(ctx);
-        const db = getDBName(c.db, c.url);
-        const uid = await login(c.url, db, c.username, c.password);
-        return { url: c.url, db, uid, password: c.password };
-    }
     rl.registerAction("record.create", {
         access: "write",
         description: "Create a record in any Odoo model (contact, opportunity, note, or custom model name)",
@@ -117,8 +107,7 @@ export default function odoo(rl) {
         },
         async execute(input, ctx) {
             const { model, fields } = input;
-            const s = await getSession(ctx);
-            const id = await execute(s.url, s.db, s.uid, s.password, resolveModel(model), "create", fields);
+            const id = await call(ctx, resolveModel(model), "create", fields);
             return { id };
         },
     });
@@ -140,9 +129,8 @@ export default function odoo(rl) {
         },
         async execute(input, ctx) {
             const p = input;
-            const s = await getSession(ctx);
             const fieldsToRead = p.fields ?? [];
-            return execute(s.url, s.db, s.uid, s.password, resolveModel(p.model), "read", [p.id], fieldsToRead);
+            return call(ctx, resolveModel(p.model), "read", [p.id], fieldsToRead);
         },
     });
     rl.registerAction("record.list", {
@@ -177,12 +165,11 @@ export default function odoo(rl) {
         },
         async execute(input, ctx) {
             const p = input;
-            const s = await getSession(ctx);
             const filters = p.filters ?? [];
             const fields = p.fields ?? [];
             const offset = p.offset ?? 0;
             const limit = p.limit ?? 0;
-            return execute(s.url, s.db, s.uid, s.password, resolveModel(p.model), "search_read", filters, fields, offset, limit);
+            return call(ctx, resolveModel(p.model), "search_read", filters, fields, offset, limit);
         },
     });
     rl.registerAction("record.update", {
@@ -203,8 +190,7 @@ export default function odoo(rl) {
         },
         async execute(input, ctx) {
             const p = input;
-            const s = await getSession(ctx);
-            await execute(s.url, s.db, s.uid, s.password, resolveModel(p.model), "write", [p.id], p.fields);
+            await call(ctx, resolveModel(p.model), "write", [p.id], p.fields);
             return { id: p.id };
         },
     });
@@ -221,8 +207,7 @@ export default function odoo(rl) {
         },
         async execute(input, ctx) {
             const p = input;
-            const s = await getSession(ctx);
-            await execute(s.url, s.db, s.uid, s.password, resolveModel(p.model), "unlink", [p.id]);
+            await call(ctx, resolveModel(p.model), "unlink", [p.id]);
             return { success: true };
         },
     });
@@ -238,8 +223,7 @@ export default function odoo(rl) {
         },
         async execute(input, ctx) {
             const { model } = input;
-            const s = await getSession(ctx);
-            return execute(s.url, s.db, s.uid, s.password, resolveModel(model), "fields_get", [], ["string", "type", "help", "required", "name"]);
+            return call(ctx, resolveModel(model), "fields_get", [], ["string", "type", "help", "required", "name"]);
         },
     });
 }

package/dist/plugins/okta/src/credentials.js

@@ -0,0 +1,23 @@
+import { httpsBase, staticCredential } from "../../_shared/credentials.js";
+/**
+ * An SSWS API token, sent as `Authorization: SSWS {token}` to the
+ * configured org's /api/v1/ base. The org URL is public config and must
+ * be HTTPS.
+ */
+export const oktaCredential = staticCredential({
+    id: "okta",
+    auth: { kind: "apiKey", header: "Authorization", prefix: "SSWS " },
+    local: { secret: "apiToken" },
+    targets: (config) => ({
+        api: {
+            baseUrl: httpsBase(config.url, "api/v1/"),
+            methods: ["GET", "POST", "DELETE"],
+        },
+    }),
+    probe: {
+        target: "api",
+        path: "users/me",
+        method: "GET",
+        acceptedStatuses: [200],
+    },
+});

package/dist/plugins/okta/src/index.js

@@ -1,40 +1,34 @@
-function getConn(ctx) {
-    const c = ctx.connection.config;
-    const url = c.url.replace(/\/$/, "");
-    return { url, apiToken: c.apiToken };
-}
-async function apiRequest(conn, method, endpoint, body, qs) {
-    const u = new URL(`${conn.url}${endpoint}`);
-    if (qs) {
-        for (const [k, v] of Object.entries(qs)) {
-            if (v !== undefined && v !== null)
-                u.searchParams.set(k, String(v));
-        }
-    }
-    const init = {
+import { AuthError } from "runline";
+import { credentialOk, pathSegment } from "../../_shared/credentials.js";
+import { oktaCredential } from "./credentials.js";
+async function apiRequest(ctx, method, path, body, qs) {
+    const res = await credentialOk(ctx, oktaCredential, "okta", {
+        target: "api",
+        path,
         method,
-        headers: {
-            Authorization: `SSWS ${conn.apiToken}`,
-            "Content-Type": "application/json",
-        },
-    };
-    if (body && Object.keys(body).length > 0)
-        init.body = JSON.stringify(body);
-    const res = await fetch(u.toString(), init);
-    if (!res.ok)
-        throw new Error(`Okta API error ${res.status}: ${await res.text()}`);
+        query: qs,
+        ...(body && Object.keys(body).length > 0 ? { json: body } : {}),
+    });
     const text = await res.text();
-    const data = text ? JSON.parse(text) : {};
+    let data = {};
+    if (text) {
+        try {
+            data = JSON.parse(text);
+        }
+        catch {
+            throw new AuthError("invalid_response");
+        }
+    }
     return { data, linkHeader: res.headers.get("link") ?? undefined };
 }
-async function paginate(conn, endpoint, qs = {}) {
+async function paginate(ctx, path, qs = {}) {
     const all = [];
     let after;
     do {
         if (after)
             qs.after = after;
         qs.limit = 200;
-        const { data, linkHeader } = await apiRequest(conn, "GET", endpoint, undefined, qs);
+        const { data, linkHeader } = await apiRequest(ctx, "GET", path, undefined, qs);
         const items = Array.isArray(data) ? data : [];
         all.push(...items);
         after = undefined;
@@ -49,6 +43,7 @@ async function paginate(conn, endpoint, qs = {}) {
 export default function okta(rl) {
     rl.setName("okta");
     rl.setVersion("0.1.0");
+    rl.setCredential(oktaCredential);
     rl.setConnectionSchema({
         url: {
             type: "string",
@@ -89,7 +84,6 @@ export default function okta(rl) {
         },
         async execute(input, ctx) {
             const p = input;
-            const conn = getConn(ctx);
             const body = {
                 profile: {
                     firstName: p.firstName,
@@ -105,7 +99,7 @@ export default function okta(rl) {
             const qs = {
                 activate: p.activate !== false ? "true" : "false",
             };
-            const { data } = await apiRequest(conn, "POST", "/api/v1/users/", body, qs);
+            const { data } = await apiRequest(ctx, "POST", "users/", body, qs);
             return data;
         },
     });
@@ -121,7 +115,7 @@ export default function okta(rl) {
         },
         async execute(input, ctx) {
             const { userId } = input;
-            const { data } = await apiRequest(getConn(ctx), "GET", `/api/v1/users/${userId}`);
+            const { data } = await apiRequest(ctx, "GET", `users/${pathSegment(userId)}`);
             return data;
         },
     });
@@ -142,16 +136,15 @@ export default function okta(rl) {
         },
         async execute(input, ctx) {
             const p = (input ?? {});
-            const conn = getConn(ctx);
             const qs = {};
             if (p.search)
                 qs.search = p.search;
             if (p.limit) {
                 qs.limit = p.limit;
-                const { data } = await apiRequest(conn, "GET", "/api/v1/users/", undefined, qs);
+                const { data } = await apiRequest(ctx, "GET", "users/", undefined, qs);
                 return data;
             }
-            return paginate(conn, "/api/v1/users/", qs);
+            return paginate(ctx, "users/", qs);
         },
     });
     rl.registerAction("user.update", {
@@ -167,7 +160,9 @@ export default function okta(rl) {
         },
         async execute(input, ctx) {
             const { userId, profile } = input;
-            const { data } = await apiRequest(getConn(ctx), "POST", `/api/v1/users/${userId}`, { profile });
+            const { data } = await apiRequest(ctx, "POST", `users/${pathSegment(userId)}`, {
+                profile,
+            });
             return data;
         },
     });
@@ -179,7 +174,7 @@ export default function okta(rl) {
         },
         async execute(input, ctx) {
             const { userId } = input;
-            await apiRequest(getConn(ctx), "DELETE", `/api/v1/users/${userId}`);
+            await apiRequest(ctx, "DELETE", `users/${pathSegment(userId)}`);
             return { success: true };
         },
     });

package/dist/plugins/oneSimpleApi/src/credentials.js

@@ -0,0 +1,16 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/**
+ * An API token, appended by the transport as the token query parameter on
+ * OneSimpleAPI's one origin.
+ */
+export const oneSimpleApiCredential = staticCredential({
+    id: "oneSimpleApi",
+    auth: { kind: "queryKey", param: "token" },
+    local: { secret: "apiToken" },
+    targets: {
+        api: {
+            baseUrl: "https://onesimpleapi.com/api/",
+            methods: ["GET"],
+        },
+    },
+});

package/dist/plugins/oneSimpleApi/src/index.js

@@ -1,20 +1,16 @@
-const BASE = "https://onesimpleapi.com/api";
-async function apiRequest(token, endpoint, qs = {}) {
-    const url = new URL(`${BASE}${endpoint}`);
-    url.searchParams.set("token", token);
-    url.searchParams.set("output", "json");
-    for (const [k, v] of Object.entries(qs)) {
-        if (v !== undefined && v !== null)
-            url.searchParams.set(k, String(v));
-    }
-    const res = await fetch(url.toString());
-    if (!res.ok)
-        throw new Error(`OneSimpleAPI error ${res.status}: ${await res.text()}`);
-    return res.json();
+import { credentialJson } from "../../_shared/credentials.js";
+import { oneSimpleApiCredential } from "./credentials.js";
+function apiRequest(ctx, path, qs = {}) {
+    return credentialJson(ctx, oneSimpleApiCredential, "oneSimpleApi", {
+        target: "api",
+        path,
+        query: { output: "json", ...qs },
+    });
 }
 export default function oneSimpleApi(rl) {
     rl.setName("oneSimpleApi");
     rl.setVersion("0.1.0");
+    rl.setCredential(oneSimpleApiCredential);
     rl.setConnectionSchema({
         apiToken: {
             type: "string",
@@ -23,7 +19,6 @@ export default function oneSimpleApi(rl) {
             env: "ONE_SIMPLE_API_TOKEN",
         },
     });
-    const key = (ctx) => ctx.connection.config.apiToken;
     // ── Website ─────────────────────────────────────────
     rl.registerAction("website.pdf", {
         access: "write",
@@ -47,7 +42,7 @@ export default function oneSimpleApi(rl) {
             if (p.page)
                 qs.page = p.page;
             qs.force = p.force ? "yes" : "no";
-            return apiRequest(key(ctx), "/pdf", qs);
+            return apiRequest(ctx, "pdf", qs);
         },
     });
     rl.registerAction("website.screenshot", {
@@ -78,7 +73,7 @@ export default function oneSimpleApi(rl) {
                 qs.screen = p.screen;
             qs.fullpage = p.fullpage ? "yes" : "no";
             qs.force = p.force ? "yes" : "no";
-            return apiRequest(key(ctx), "/screenshot", qs);
+            return apiRequest(ctx, "screenshot", qs);
         },
     });
     rl.registerAction("website.seo", {
@@ -97,7 +92,7 @@ export default function oneSimpleApi(rl) {
             const qs = { url: p.url };
             if (p.headers)
                 qs.headers = "yes";
-            return apiRequest(key(ctx), "/page_info", qs);
+            return apiRequest(ctx, "page_info", qs);
         },
     });
     // ── Social Profile ──────────────────────────────────
@@ -113,7 +108,7 @@ export default function oneSimpleApi(rl) {
         },
         async execute(input, ctx) {
             const { profile } = input;
-            return apiRequest(key(ctx), "/instagram_profile", { profile });
+            return apiRequest(ctx, "instagram_profile", { profile });
         },
     });
     rl.registerAction("socialProfile.spotify", {
@@ -128,7 +123,7 @@ export default function oneSimpleApi(rl) {
         },
         async execute(input, ctx) {
             const { profile } = input;
-            return apiRequest(key(ctx), "/spotify_profile", { profile });
+            return apiRequest(ctx, "spotify_profile", { profile });
         },
     });
     // ── Information ─────────────────────────────────────
@@ -154,7 +149,7 @@ export default function oneSimpleApi(rl) {
         },
         async execute(input, ctx) {
             const { value, fromCurrency, toCurrency } = input;
-            return apiRequest(key(ctx), "/exchange_rate", {
+            return apiRequest(ctx, "exchange_rate", {
                 from_value: value,
                 from_currency: fromCurrency,
                 to_currency: toCurrency,
@@ -169,7 +164,7 @@ export default function oneSimpleApi(rl) {
         },
         async execute(input, ctx) {
             const { url } = input;
-            return apiRequest(key(ctx), "/image_info", { url, raw: true });
+            return apiRequest(ctx, "image_info", { url, raw: true });
         },
     });
     // ── Utility ─────────────────────────────────────────
@@ -185,7 +180,7 @@ export default function oneSimpleApi(rl) {
         },
         async execute(input, ctx) {
             const { email } = input;
-            return apiRequest(key(ctx), "/email", { email });
+            return apiRequest(ctx, "email", { email });
         },
     });
     rl.registerAction("utility.expandUrl", {
@@ -196,7 +191,7 @@ export default function oneSimpleApi(rl) {
         },
         async execute(input, ctx) {
             const { url } = input;
-            return apiRequest(key(ctx), "/unshorten", { url });
+            return apiRequest(ctx, "unshorten", { url });
         },
     });
     rl.registerAction("utility.qrCode", {
@@ -226,7 +221,7 @@ export default function oneSimpleApi(rl) {
                 qs.size = p.size;
             if (p.format)
                 qs.format = p.format;
-            return apiRequest(key(ctx), "/qr_code", qs);
+            return apiRequest(ctx, "qr_code", qs);
         },
     });
 }

package/dist/plugins/onfleet/src/credentials.js

@@ -0,0 +1,23 @@
+import { staticCredential } from "../../_shared/credentials.js";
+/**
+ * An API key as the Basic username, with an empty password, to Onfleet's
+ * one API origin. The fixed User-Agent is a public companion header.
+ */
+export const onfleetCredential = staticCredential({
+    id: "onfleet",
+    auth: { kind: "basic" },
+    local: { username: "apiKey", password: { value: "" } },
+    targets: {
+        api: {
+            baseUrl: "https://onfleet.com/api/v2/",
+            methods: ["GET", "POST", "PUT", "DELETE"],
+            allowedHeaders: ["User-Agent"],
+        },
+    },
+    probe: {
+        target: "api",
+        path: "organization",
+        method: "GET",
+        acceptedStatuses: [200],
+    },
+});