smplkit 1.0.25 → 1.0.27

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c5467982be79b924356216ec4b8a4158589ac70802cefbee82c819f5d390281d
-  data.tar.gz: 93f707d0f9951956db82350eb298d4a14f42ccb2effca770da64f9084e6908d4
+  metadata.gz: 85fc65604b1b3374714d8834023aa65f658f08d275b484f05ab7bb4a3105f6ba
+  data.tar.gz: 72fad8395cc96a5e21b0501d888fd735060da7f7a8c0ca71f6a047b1d371cea5
 SHA512:
-  metadata.gz: 50b0fd8883a16c7b2aff012f26c956a6b5c2f1e3501cb08a02b5641fa360eb1ca60cca85acb0290a141f416497be3a0f0c3a62ced5c6593a357667a149911dec
-  data.tar.gz: 36731f5638835a9939bd712574377f4f6ad7279883ad535f430c986173322c1d30044f95f2b47225c67b85c8eb2d5212ca9e736c4d6f5989b05b8c7260c43d68
+  metadata.gz: 69264993f3f28149eeda7d424ce52559360e5e17a9e32f1db661f6e140fa1afec14b860bd914e8cc42d2d16bc63dd0a9eba65a22a1748afaa33d5b20cef9b807
+  data.tar.gz: 64ecdaa7dbab15ebe416b5af127b4a694a412eae6d8a25d0f55a741bd0caef45d375a769557f323e62eb911dac4940e6c7a29eda29d8d82b178de4662c3af1a9

data/lib/smplkit/_generated/audit/lib/smplkit_audit_client/api/forwarders_api.rb

@@ -217,7 +217,7 @@ module SmplkitGeneratedClient::Audit
     end
 
     # Get Forwarder
-    # Retrieve a single forwarder by id.  Returns 404 if no forwarder with that id exists in the caller's account, including if the forwarder is soft-deleted. Header values in the response are always redacted regardless of caller permission.
+    # Retrieve a single forwarder by id.  Returns 404 if no forwarder with that id exists in the caller's account, including if the forwarder is soft-deleted. Header values in the response are returned in plaintext so callers can perform a GET-modify-PUT round-trip without re-entering secrets (ADR-014). The persisted ``forwarder_delivery.request`` log column is what keeps redaction; that read path is unaffected by this route.
     # @param forwarder_id [String] 
     # @param [Hash] opts the optional parameters
     # @return [ForwarderResponse]
@@ -227,7 +227,7 @@ module SmplkitGeneratedClient::Audit
     end
 
     # Get Forwarder
-    # Retrieve a single forwarder by id.  Returns 404 if no forwarder with that id exists in the caller's account, including if the forwarder is soft-deleted. Header values in the response are always redacted regardless of caller permission.
+    # Retrieve a single forwarder by id.  Returns 404 if no forwarder with that id exists in the caller's account, including if the forwarder is soft-deleted. Header values in the response are returned in plaintext so callers can perform a GET-modify-PUT round-trip without re-entering secrets (ADR-014). The persisted ``forwarder_delivery.request`` log column is what keeps redaction; that read path is unaffected by this route.
     # @param forwarder_id [String] 
     # @param [Hash] opts the optional parameters
     # @return [Array<(ForwarderResponse, Integer, Hash)>] ForwarderResponse data, response status code and response headers
@@ -564,7 +564,7 @@ module SmplkitGeneratedClient::Audit
     end
 
     # Update Forwarder
-    # Full-replace update. PUT semantics — every field is overwritten.  The header values must be re-supplied; the GET path redacts them, but a PUT body that contains ``\"<redacted>\"`` would persist that literal. Customers must round-trip the actual secret back. This is the standard get-mutate-put pattern (see CLAUDE.md \"Updating Resources via the API\"); the SDK helpers track the un-redacted secret client-side so customers don't usually need to re-enter it.
+    # Full-replace update. PUT semantics — every field is overwritten.  The GET path returns plaintext header values, so the standard get-mutate-put round-trip (ADR-014) preserves secrets without any extra work from the caller: GET, change one field, PUT the result.
     # @param forwarder_id [String] 
     # @param forwarder_response [ForwarderResponse] 
     # @param [Hash] opts the optional parameters
@@ -575,7 +575,7 @@ module SmplkitGeneratedClient::Audit
     end
 
     # Update Forwarder
-    # Full-replace update. PUT semantics — every field is overwritten.  The header values must be re-supplied; the GET path redacts them, but a PUT body that contains &#x60;&#x60;\&quot;&lt;redacted&gt;\&quot;&#x60;&#x60; would persist that literal. Customers must round-trip the actual secret back. This is the standard get-mutate-put pattern (see CLAUDE.md \&quot;Updating Resources via the API\&quot;); the SDK helpers track the un-redacted secret client-side so customers don&#39;t usually need to re-enter it.
+    # Full-replace update. PUT semantics — every field is overwritten.  The GET path returns plaintext header values, so the standard get-mutate-put round-trip (ADR-014) preserves secrets without any extra work from the caller: GET, change one field, PUT the result.
     # @param forwarder_id [String] 
     # @param forwarder_response [ForwarderResponse] 
     # @param [Hash] opts the optional parameters

data/lib/smplkit/_generated/audit/lib/smplkit_audit_client/models/event.rb

@@ -14,7 +14,7 @@ require 'date'
 require 'time'
 
 module SmplkitGeneratedClient::Audit
-  # Public-facing event resource.  Attribute set on POST /api/v1/events:     - action (required)     - resource_type (required)     - resource_id (required)     - occurred_at (optional; defaults to ``created_at``)     - snapshot (optional)     - data (optional; defaults to ``{}``)  Attribute set on GET responses includes everything above plus the server-populated fields: ``created_at``, ``actor_type``, ``actor_id``, ``actor_label``, ``idempotency_key``.
+  # Public-facing event resource.  Attribute set on POST /api/v1/events:     - action (required)     - resource_type (required)     - resource_id (required)     - occurred_at (optional; defaults to ``created_at``)     - data (optional; defaults to ``{}``)  There is no top-level ``snapshot`` attribute. Customers wishing to record a resource snapshot place it inside ``data`` -- smplkit's internal convention nests it at ``data.snapshot``, but customers may follow their own convention.  Attribute set on GET responses includes everything above plus the server-populated fields: ``created_at``, ``actor_type``, ``actor_id``, ``actor_label``, ``idempotency_key``.
   class Event < ApiModelBase
     attr_accessor :action
 
@@ -24,8 +24,6 @@ module SmplkitGeneratedClient::Audit
 
     attr_accessor :occurred_at
 
-    attr_accessor :snapshot
-
     attr_accessor :data
 
     # When true, this event is recorded normally but is not forwarded to any configured SIEM forwarder. A forwarder_delivery row with status=skipped_do_not_forward is recorded for each enabled forwarder so the skip is visible in the delivery log.
@@ -48,7 +46,6 @@ module SmplkitGeneratedClient::Audit
         :'resource_type' => :'resource_type',
         :'resource_id' => :'resource_id',
         :'occurred_at' => :'occurred_at',
-        :'snapshot' => :'snapshot',
         :'data' => :'data',
         :'do_not_forward' => :'do_not_forward',
         :'created_at' => :'created_at',
@@ -76,7 +73,6 @@ module SmplkitGeneratedClient::Audit
         :'resource_type' => :'String',
         :'resource_id' => :'String',
         :'occurred_at' => :'Time',
-        :'snapshot' => :'Hash<String, Object>',
         :'data' => :'Hash<String, Object>',
         :'do_not_forward' => :'Boolean',
         :'created_at' => :'Time',
@@ -91,7 +87,6 @@ module SmplkitGeneratedClient::Audit
     def self.openapi_nullable
       Set.new([
         :'occurred_at',
-        :'snapshot',
         :'created_at',
         :'actor_type',
         :'actor_id',
@@ -138,12 +133,6 @@ module SmplkitGeneratedClient::Audit
         self.occurred_at = attributes[:'occurred_at']
       end
 
-      if attributes.key?(:'snapshot')
-        if (value = attributes[:'snapshot']).is_a?(Hash)
-          self.snapshot = value
-        end
-      end
-
       if attributes.key?(:'data')
         if (value = attributes[:'data']).is_a?(Hash)
           self.data = value
@@ -273,7 +262,6 @@ module SmplkitGeneratedClient::Audit
           resource_type == o.resource_type &&
           resource_id == o.resource_id &&
           occurred_at == o.occurred_at &&
-          snapshot == o.snapshot &&
           data == o.data &&
           do_not_forward == o.do_not_forward &&
           created_at == o.created_at &&
@@ -292,7 +280,7 @@ module SmplkitGeneratedClient::Audit
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [action, resource_type, resource_id, occurred_at, snapshot, data, do_not_forward, created_at, actor_type, actor_id, actor_label, idempotency_key].hash
+      [action, resource_type, resource_id, occurred_at, data, do_not_forward, created_at, actor_type, actor_id, actor_label, idempotency_key].hash
     end
 
     # Builds the object from hash

data/lib/smplkit/_generated/audit/spec/api/forwarders_api_spec.rb

@@ -70,7 +70,7 @@ describe 'ForwardersApi' do
 
   # unit tests for get_forwarder
   # Get Forwarder
-  # Retrieve a single forwarder by id.  Returns 404 if no forwarder with that id exists in the caller's account, including if the forwarder is soft-deleted. Header values in the response are always redacted regardless of caller permission.
+  # Retrieve a single forwarder by id.  Returns 404 if no forwarder with that id exists in the caller's account, including if the forwarder is soft-deleted. Header values in the response are returned in plaintext so callers can perform a GET-modify-PUT round-trip without re-entering secrets (ADR-014). The persisted ``forwarder_delivery.request`` log column is what keeps redaction; that read path is unaffected by this route.
   # @param forwarder_id 
   # @param [Hash] opts the optional parameters
   # @return [ForwarderResponse]
@@ -138,7 +138,7 @@ describe 'ForwardersApi' do
 
   # unit tests for update_forwarder
   # Update Forwarder
-  # Full-replace update. PUT semantics — every field is overwritten.  The header values must be re-supplied; the GET path redacts them, but a PUT body that contains ``\"<redacted>\"`` would persist that literal. Customers must round-trip the actual secret back. This is the standard get-mutate-put pattern (see CLAUDE.md \"Updating Resources via the API\"); the SDK helpers track the un-redacted secret client-side so customers don't usually need to re-enter it.
+  # Full-replace update. PUT semantics — every field is overwritten.  The GET path returns plaintext header values, so the standard get-mutate-put round-trip (ADR-014) preserves secrets without any extra work from the caller: GET, change one field, PUT the result.
   # @param forwarder_id 
   # @param forwarder_response 
   # @param [Hash] opts the optional parameters

data/lib/smplkit/_generated/audit/spec/models/event_spec.rb

@@ -51,12 +51,6 @@ describe SmplkitGeneratedClient::Audit::Event do
     end
   end
 
-  describe 'test attribute "snapshot"' do
-    it 'should work' do
-      # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/
-    end
-  end
-
   describe 'test attribute "data"' do
     it 'should work' do
       # assertion here. ref: https://rspec.info/features/3-12/rspec-expectations/built-in-matchers/

data/lib/smplkit/audit/events.rb

@@ -19,7 +19,7 @@ module Smplkit
       # with +smpl.+ are rejected by the server with a 403 (the buffer
       # logs and drops permanent failures).
       def record(action:, resource_type:, resource_id:,
-                 occurred_at: nil, snapshot: nil, data: nil, idempotency_key: nil,
+                 occurred_at: nil, data: nil, idempotency_key: nil,
                  do_not_forward: false)
         raise ArgumentError, "action is required" if action.nil? || action.to_s.empty?
         raise ArgumentError, "resource_type is required" if resource_type.nil? || resource_type.to_s.empty?
@@ -45,7 +45,6 @@ module Smplkit
           resource_type: resource_type,
           resource_id: resource_id,
           occurred_at: normalized_occurred_at,
-          snapshot: snapshot,
           data: data || {},
           do_not_forward: do_not_forward
         )
@@ -119,7 +118,7 @@ module Smplkit
       :id, :action, :resource_type, :resource_id,
       :occurred_at, :created_at,
       :actor_type, :actor_id, :actor_label,
-      :snapshot, :data, :idempotency_key, :do_not_forward,
+      :data, :idempotency_key, :do_not_forward,
       keyword_init: true
     ) do
       def self.from_resource(resource)
@@ -134,7 +133,6 @@ module Smplkit
           actor_type: attrs.actor_type,
           actor_id: attrs.actor_id,
           actor_label: attrs.actor_label,
-          snapshot: attrs.snapshot,
           data: attrs.data || {},
           idempotency_key: attrs.idempotency_key,
           do_not_forward: attrs.do_not_forward || false

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: smplkit
 version: !ruby/object:Gem::Version
-  version: 1.0.25
+  version: 1.0.27
 platform: ruby
 authors:
 - Smpl Solutions LLC