smplkit 3.0.60 → 3.0.61

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '06975d5368d200b5bb4b41bd75a0bcfe2e73719134384a996e1d1329139f5e43'
-  data.tar.gz: a3009fbe825b7504452ed98c620e9dc86011cd127a7be32168130456898960ef
+  metadata.gz: 43242353842d4384ef5fee09749bb8030fe60d62ed0124a368694470adf7341c
+  data.tar.gz: 9149f6dd070aad95584fba15b9d7ced15b1e1103ef2a845d304854c03a51da6a
 SHA512:
-  metadata.gz: a606827a20f3a7e00a34d0ae73cf38803355809a0b2cc0896fa7bbfa7e7489da35ae67973de05433aecd094d5dee307e4ae0e306d4019b3117013d9fa46a8641
-  data.tar.gz: e935a07f39bf40bd0c68ebe7cc668d0476b3a0c8212a6a47185ebf2585626be84ae66211a6bc742f5437a5e1742f4abb3c82e5adc8d608f5f61ce715b1be8170
+  metadata.gz: b8fa96a1fbaaf9e0c7d9c8b5d8064c31c9a1115714c3f3e5a5d4771664c3e3cf655b939b26b6fc90fc2166fd73d9b9c425a50bd47adadd98eac1cb21f9927bbb
+  data.tar.gz: 188a87a5c388d4ebc7277dcdef51633c01fc244e58c5bb53b560ee4d2a602afffc5128c079aa523b7a1135ca9fa831898be4861b8ab1736da84f29f9d3c0ec01

data/lib/smplkit/audit/models.rb

@@ -262,12 +262,32 @@ module Smplkit
     #   @return [String] Status the destination must return for delivery to count
     #     as success — an exact code (+"200"+, +"204"+) or a class (+"2xx"+, +"4xx"+).
     #     Defaults to +"2xx"+.
+    # @!attribute [rw] tls_verify
+    #   @return [Boolean] Whether to verify the destination's TLS certificate
+    #     chain. Defaults to +true+; flip to +false+ only for short-lived
+    #     testing against a destination that serves an untrusted certificate.
+    #     Prefer pinning the issuing CA via +ca_cert+ for long-lived self-signed
+    #     setups.
+    # @!attribute [rw] ca_cert
+    #   @return [String, nil] Optional PEM-encoded certificate (or bundle)
+    #     trusted in addition to the system CA store. Ignored when
+    #     +tls_verify+ is +false+. +nil+ (the default) means "use system CAs
+    #     only".
     #
     # rubocop:disable Lint/StructNewOverride -- ``:method`` matches the
     # API attribute and shadowing Struct#method is the expected ergonomics.
-    HttpConfiguration = Struct.new(:method, :url, :headers, :success_status, keyword_init: true) do
-      def initialize(method: HttpMethod::POST, url: "", headers: nil, success_status: "2xx")
-        super(method: HttpMethod.coerce(method), url: url, headers: headers || [], success_status: success_status)
+    HttpConfiguration = Struct.new(
+      :method, :url, :headers, :success_status, :tls_verify, :ca_cert,
+      keyword_init: true
+    ) do
+      def initialize(
+        method: HttpMethod::POST, url: "", headers: nil,
+        success_status: "2xx", tls_verify: true, ca_cert: nil
+      )
+        super(
+          method: HttpMethod.coerce(method), url: url, headers: headers || [],
+          success_status: success_status, tls_verify: tls_verify, ca_cert: ca_cert
+        )
       end
 
       def self.to_wire(src)
@@ -284,18 +304,29 @@ module Smplkit
                           end
             SmplkitGeneratedClient::Audit::HttpHeader.new(name: name, value: value)
           end,
-          success_status: h.success_status
+          success_status: h.success_status,
+          tls_verify: h.tls_verify,
+          ca_cert: h.ca_cert
         )
       end
 
       def self.from_wire(src)
         return new if src.nil?
 
+        # Absent ``tls_verify`` on the wire means a forwarder persisted
+        # before the field landed — default to verifying so its prior
+        # secure behaviour is preserved.
         new(
           method: src.method || HttpMethod::POST,
           url: src.url || "",
           headers: (src.headers || []).map { |h| HttpHeader.new(name: h.name, value: h.value) },
-          success_status: src.success_status || "2xx"
+          success_status: src.success_status || "2xx",
+          # rubocop:disable Style/RedundantCondition -- nil and false are
+          # distinct: nil means "field absent on the wire" (default to true);
+          # explicit false means "verification disabled".
+          tls_verify: src.tls_verify.nil? ? true : src.tls_verify,
+          # rubocop:enable Style/RedundantCondition
+          ca_cert: src.ca_cert
         )
       end
     end
@@ -311,7 +342,10 @@ module Smplkit
     # Re-supply real values before calling {#save}; the SDK does not cache
     # them client-side.
     class Forwarder
-      # @return [String, nil] Server-assigned UUID, +nil+ until {#save} has run.
+      # @return [String, nil] Caller-supplied unique identifier (key) for this
+      #   forwarder. Unique within an account; immutable for the lifetime of
+      #   the forwarder. +nil+ only while the object represents an unsaved
+      #   instance constructed without an id (which {#save} would then reject).
       attr_accessor :id
 
       # @return [String] Display name. Free-form.

data/lib/smplkit/management/audit.rb

@@ -56,13 +56,14 @@ module Smplkit
       #   nil or both set, or when +transform_type+ is +JSONATA+ and +transform+
       #   is not a +String+.
       # @return [Smplkit::Audit::Forwarder]
-      def new_forwarder(name:, forwarder_type:, configuration:,
+      def new_forwarder(id, forwarder_type:, configuration:, name: nil,
                         enabled: true, description: nil,
                         filter: nil, transform: nil, transform_type: nil)
         Smplkit::Audit::Forwarder.send(:validate_transform_pair!, transform, transform_type)
         Smplkit::Audit::Forwarder.new(
           self,
-          name: name,
+          id: id,
+          name: name || id,
           forwarder_type: forwarder_type,
           configuration: configuration,
           enabled: enabled,
@@ -118,7 +119,11 @@ module Smplkit
       # @api private — POST a new forwarder. Called by
       #   {Smplkit::Audit::Forwarder#save} on unsaved instances.
       def _create_forwarder(forwarder)
-        resp = Smplkit::Audit.call_api { @api.create_forwarder(build_body(forwarder)) }
+        if forwarder.id.nil? || forwarder.id.empty?
+          raise ArgumentError, "Forwarder.id is required on create (caller-supplied key)"
+        end
+
+        resp = Smplkit::Audit.call_api { @api.create_forwarder(build_create_body(forwarder)) }
         Smplkit::Audit::Forwarder.from_resource(resp.data, client: self)
       end
 
@@ -138,8 +143,8 @@ module Smplkit
 
       private
 
-      def build_body(forwarder)
-        attrs = SmplkitGeneratedClient::Audit::Forwarder.new(
+      def build_attrs(forwarder)
+        SmplkitGeneratedClient::Audit::Forwarder.new(
           name: forwarder.name,
           description: forwarder.description,
           forwarder_type: Smplkit::Audit::ForwarderType.coerce(forwarder.forwarder_type),
@@ -149,10 +154,26 @@ module Smplkit
           transform: forwarder.transform,
           configuration: Smplkit::Audit::HttpConfiguration.to_wire(forwarder.configuration)
         )
+      end
+
+      def build_create_body(forwarder)
+        # Create uses the distinct ForwarderCreateRequest envelope; the
+        # audit service requires data.id (the customer-supplied key) on
+        # create and 409s on conflict.
+        resource = SmplkitGeneratedClient::Audit::ForwarderCreateResource.new(
+          id: forwarder.id.to_s,
+          type: "forwarder",
+          attributes: build_attrs(forwarder)
+        )
+        SmplkitGeneratedClient::Audit::ForwarderCreateRequest.new(data: resource)
+      end
+
+      def build_body(forwarder)
+        # Update path uses the generic ForwarderRequest envelope.
         resource = SmplkitGeneratedClient::Audit::ForwarderResource.new(
-          id: forwarder.id ? forwarder.id.to_s : "",
+          id: forwarder.id.to_s,
           type: "forwarder",
-          attributes: attrs
+          attributes: build_attrs(forwarder)
         )
         SmplkitGeneratedClient::Audit::ForwarderRequest.new(data: resource)
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: smplkit
 version: !ruby/object:Gem::Version
-  version: 3.0.60
+  version: 3.0.61
 platform: ruby
 authors:
 - Smpl Solutions LLC