@cronvello/sdk 0.3.0 → 0.4.0

package/dist/index.js

@@ -1914,6 +1914,112 @@ function field(value, min, max, label) {
   return value;
 }
 
+// src/client/admin-client.ts
+var CronvelloAdminClient = class {
+  transport;
+  /** The resolved base URL in use. */
+  baseUrl;
+  /** Registration, status, key rotation and removal of external apps. */
+  externalApps;
+  constructor(options) {
+    if (!options || !options.serviceKey) {
+      throw new CronvelloConfigError(
+        "CronvelloAdminClient requires a `serviceKey` (Cronvello's backend-to-backend key, not an account apiKey)."
+      );
+    }
+    this.baseUrl = (options.baseUrl ?? CRONVELLO_DEFAULT_BASE_URL).replace(/\/+$/, "");
+    this.transport = new Transport({
+      baseUrl: this.baseUrl,
+      apiKey: options.serviceKey,
+      ...options.timeoutMs !== void 0 ? { timeoutMs: options.timeoutMs } : {},
+      ...options.maxRetries !== void 0 ? { maxRetries: options.maxRetries } : {},
+      ...options.fetch ? { fetch: options.fetch } : {},
+      ...options.onRequest ? { onRequest: options.onRequest } : {}
+    });
+    this.externalApps = new ExternalAppsResource(this.transport);
+  }
+};
+var ExternalAppsResource = class {
+  constructor(t) {
+    this.t = t;
+  }
+  t;
+  /**
+   * Idempotent upsert, keyed on the string `appId`: creates when unknown, updates credentials
+   * and URL when it already exists. Safe to retry and to re-run on every provisioning pass.
+   *
+   * When the server mints the token (`generateApiKey: true` on a *new* app) it comes back as
+   * `generatedApiKey` — plaintext, exactly once. On an update it is `null`.
+   */
+  register(input) {
+    assertRegisterInput(input);
+    return this.t.request({ method: "POST", path: "/external-apps/service/register", body: input });
+  }
+  /** Registration status, last-sync info and job count for one app, by its string `appId`. */
+  status(appId) {
+    assertAppId(appId, "status");
+    return this.t.request({ method: "GET", path: `/external-apps/service/status/${enc2(appId)}` });
+  }
+  /**
+   * Mint a fresh per-app token, by string `appId`. The new token is returned once as `newApiKey`
+   * and must be written into the app's environment — the previous one stops working.
+   *
+   * Use this for drift recovery when the current token is no longer known.
+   */
+  rotateKey(appId) {
+    assertAppId(appId, "rotateKey");
+    return this.t.request({ method: "POST", path: `/external-apps/service/rotate-key/${enc2(appId)}` });
+  }
+  /**
+   * Delete a registration, cascading its jobs and tasks.
+   *
+   * ⚠ This one takes the **numeric** {@link ExternalApp.id}, not the string `appId` the other
+   * three methods take — an asymmetry in the server's route contract. Read the id off a
+   * `register()` result (or a prior lookup); passing a string `appId` here is rejected locally.
+   */
+  delete(id) {
+    if (!Number.isInteger(id) || id <= 0) {
+      throw new CronvelloConfigError(
+        `externalApps.delete() takes the numeric app id (ExternalApp.id), not the string appId \u2014 received ${JSON.stringify(id)}.`
+      );
+    }
+    return this.t.request({ method: "DELETE", path: `/external-apps/service/delete/${id}` });
+  }
+};
+function assertRegisterInput(input) {
+  if (!input || typeof input !== "object") {
+    throw new CronvelloConfigError("externalApps.register() requires an input object.");
+  }
+  if (!input.appId || !input.appId.trim()) {
+    throw new CronvelloConfigError("externalApps.register() requires a non-empty `appId`.");
+  }
+  if (!input.name || !input.name.trim()) {
+    throw new CronvelloConfigError("externalApps.register() requires a non-empty `name`.");
+  }
+  if (!input.base_url && input.targetUrl === void 0) {
+    throw new CronvelloConfigError("externalApps.register() requires either `base_url` or `targetUrl`.");
+  }
+  const authMethod = input.authMethod ?? (input.oauthClientId || input.oauthClientSecret ? "oauth" : "api_key");
+  if (authMethod === "api_key" && !input.apiKey && !input.generateApiKey) {
+    throw new CronvelloConfigError(
+      "externalApps.register() with api_key auth requires either `apiKey` or `generateApiKey: true`."
+    );
+  }
+  if (authMethod === "oauth" && (!input.oauthClientId || !input.oauthClientSecret)) {
+    throw new CronvelloConfigError(
+      "externalApps.register() with oauth auth requires both `oauthClientId` and `oauthClientSecret`."
+    );
+  }
+}
+function assertAppId(appId, method) {
+  if (typeof appId !== "string" || !appId.trim()) {
+    throw new CronvelloConfigError(`externalApps.${method}() requires a non-empty string appId.`);
+  }
+}
+function enc2(segment) {
+  return encodeURIComponent(segment);
+}
+
 // src/index.ts
 function generateDispatchSecret(bytes = 32) {
   const buf = new Uint8Array(bytes);
@@ -1921,6 +2027,6 @@ function generateDispatchSecret(bytes = 32) {
   return Array.from(buf).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 
-export { CRONVELLO_DEFAULT_BASE_URL, CronvelloApiError, CronvelloClient, CronvelloConfigError, CronvelloError, CronvelloNetworkError, cron, daily, defineCronvello, every, everyHours, everyMinutes, formatSyncResult, generateDispatchSecret, hourly, isValidTimeZone, monthly, nextOccurrence, previewSchedule, schedule, validateCron, weekdays, weekends, weekly };
+export { CRONVELLO_DEFAULT_BASE_URL, CronvelloAdminClient, CronvelloApiError, CronvelloClient, CronvelloConfigError, CronvelloError, CronvelloNetworkError, cron, daily, defineCronvello, every, everyHours, everyMinutes, formatSyncResult, generateDispatchSecret, hourly, isValidTimeZone, monthly, nextOccurrence, previewSchedule, schedule, validateCron, weekdays, weekends, weekly };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map