@assembly-js/app-foundation 0.0.40 → 0.0.41
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CLAUDE.md +4 -0
- package/package.json +1 -1
package/CLAUDE.md
CHANGED
|
@@ -329,6 +329,10 @@ export async function POST(request: NextRequest) {
|
|
|
329
329
|
|
|
330
330
|
Pair it with a server-component or page-level guard so the user sees a friendly empty state when the value is missing — never let the app crash because a secret isn't set yet.
|
|
331
331
|
|
|
332
|
+
### When a key is rejected or expires later
|
|
333
|
+
|
|
334
|
+
Values in `requiredSecrets` can be changed after the first publish. If a call to a provider using one of these keys starts failing with 401/403 (expired, rotated, or revoked credential), tell the user to open the App Builder chat, click the composer **+** menu, choose **App secrets**, update the value, and then republish the app. Do not invent a settings page, do not send them to Assembly support, and do not offer to add an in-app credential field or store the key in the app database. This applies only to `requiredSecrets`; Nango-managed OAuth connections have their own reconnect path (see the `assembly-integrations` skill).
|
|
335
|
+
|
|
332
336
|
---
|
|
333
337
|
|
|
334
338
|
## Database — Neon Postgres
|