@cronvello/shop-sdk 0.2.0 → 0.2.2

package/dist/openapi.json

@@ -30672,6 +30672,141 @@
         "x-transport": "https"
       }
     },
+    "/external-apps/service/rotate-key/:appId": {
+      "post": {
+        "operationId": "external_apps_service_rotate_key",
+        "tags": [
+          "external-apps"
+        ],
+        "summary": "Rotate external app api key (B2B zero-downtime)",
+        "description": "Rotates the API key of an external app. The previous key remains valid during the specified gracePeriodHours (default: 2h) to prevent downtime during deployments. Authenticated via backend-to-backend API key.",
+        "responses": {
+          "200": {
+            "description": "JSON response",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "success": {
+                      "type": "boolean"
+                    },
+                    "message": {
+                      "anyOf": [
+                        {
+                          "type": "string"
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ]
+                    },
+                    "data": {
+                      "anyOf": [
+                        {
+                          "type": "object",
+                          "properties": {
+                            "appId": {
+                              "type": "string"
+                            },
+                            "name": {
+                              "type": "string"
+                            },
+                            "newApiKey": {
+                              "type": "string"
+                            },
+                            "previousApiKeyMasked": {
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "previousApiKeyExpiresAt": {
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "gracePeriodHours": {
+                              "type": "number"
+                            }
+                          },
+                          "required": [
+                            "appId",
+                            "name",
+                            "newApiKey",
+                            "previousApiKeyMasked",
+                            "previousApiKeyExpiresAt",
+                            "gracePeriodHours"
+                          ],
+                          "additionalProperties": false
+                        },
+                        {
+                          "type": "null"
+                        }
+                      ]
+                    }
+                  },
+                  "required": [
+                    "success",
+                    "data"
+                  ],
+                  "additionalProperties": false
+                }
+              }
+            }
+          }
+        },
+        "parameters": [
+          {
+            "name": "appId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "newApiKey": {
+                    "type": "string",
+                    "minLength": 8
+                  },
+                  "gracePeriodHours": {
+                    "type": "number",
+                    "minimum": 0.1,
+                    "maximum": 168,
+                    "default": 2
+                  }
+                },
+                "additionalProperties": false
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "xApiKey": []
+          }
+        ],
+        "x-transport": "https"
+      }
+    },
     "/external-apps/service/delete/:appId": {
       "delete": {
         "operationId": "external_apps_service_delete",
@@ -30748,7 +30883,7 @@
           "external-apps"
         ],
         "summary": "Get external app registration status (B2B)",
-        "description": "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections.",
+        "description": "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections. Includes authMethod and, for OAuth apps, the oauth client_id we will present to that app plus a truncated SHA-256 fingerprint of the stored client secret, so the other side can prove a rotation actually landed here. Never the secret itself. Also reports the entitlement paths we have stored, because registration is an upsert: a caller that only wants to hand us new credentials must send these back unchanged, or it silently repoints where we fetch entitlements from.",
         "responses": {
           "200": {
             "description": "JSON response",
@@ -30803,6 +30938,56 @@
                                   "type": "null"
                                 }
                               ]
+                            },
+                            "authMethod": {
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "oauthClientId": {
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "oauthClientSecretFingerprint": {
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "entitlementPath": {
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
+                            },
+                            "usageOveragePath": {
+                              "anyOf": [
+                                {
+                                  "type": "string"
+                                },
+                                {
+                                  "type": "null"
+                                }
+                              ]
                             }
                           },
                           "required": [
@@ -30810,7 +30995,12 @@
                             "isActive",
                             "isLive",
                             "lastFetchedAt",
-                            "lastFetchSuccess"
+                            "lastFetchSuccess",
+                            "authMethod",
+                            "oauthClientId",
+                            "oauthClientSecretFingerprint",
+                            "entitlementPath",
+                            "usageOveragePath"
                           ],
                           "additionalProperties": false
                         },
@@ -37402,7 +37592,7 @@
           "b2b"
         ],
         "summary": "Create B2B dynamic checkout session",
-        "description": "Creates a Stripe checkout session with dynamic price_data for trusted external apps. Supports mixed carts (one-time + recurring). Auth: Bearer BACKEND_TO_BACKEND_API_KEY.",
+        "description": "Creates a Stripe checkout session with dynamic price_data for trusted external apps. Supports mixed carts (one-time + recurring). Auth: Bearer BACKEND_TO_BACKEND_API_KEY or App-Scoped API Key.",
         "responses": {
           "200": {
             "description": "JSON response",

package/dist/server.cjs

@@ -498,7 +498,7 @@ var apiRoutes_b2b = {
     meta: {
       tags: ["b2b"],
       summary: "Create B2B dynamic checkout session",
-      description: "Creates a Stripe checkout session with dynamic price_data for trusted external apps. Supports mixed carts (one-time + recurring). Auth: Bearer BACKEND_TO_BACKEND_API_KEY.",
+      description: "Creates a Stripe checkout session with dynamic price_data for trusted external apps. Supports mixed carts (one-time + recurring). Auth: Bearer BACKEND_TO_BACKEND_API_KEY or App-Scoped API Key.",
       bodyContentType: "application/json",
       validated: { "params": false, "query": false, "body": true }
     },
@@ -1710,6 +1710,19 @@ var apiRoutes_external_apps = {
     },
     types: null
   },
+  "external_apps_service_rotate_key": {
+    method: "POST",
+    path: "/external-apps/service/rotate-key/:appId",
+    auth: { "type": "x_api_key_https" },
+    meta: {
+      tags: ["external-apps"],
+      summary: "Rotate external app api key (B2B zero-downtime)",
+      description: "Rotates the API key of an external app. The previous key remains valid during the specified gracePeriodHours (default: 2h) to prevent downtime during deployments. Authenticated via backend-to-backend API key.",
+      bodyContentType: "application/json",
+      validated: { "params": true, "query": true, "body": true }
+    },
+    types: null
+  },
   "external_apps_service_delete": {
     method: "DELETE",
     path: "/external-apps/service/delete/:appId",
@@ -1729,7 +1742,7 @@ var apiRoutes_external_apps = {
     meta: {
       tags: ["external-apps"],
       summary: "Get external app registration status (B2B)",
-      description: "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections."
+      description: "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections. Includes authMethod and, for OAuth apps, the oauth client_id we will present to that app plus a truncated SHA-256 fingerprint of the stored client secret, so the other side can prove a rotation actually landed here. Never the secret itself. Also reports the entitlement paths we have stored, because registration is an upsert: a caller that only wants to hand us new credentials must send these back unchanged, or it silently repoints where we fetch entitlements from."
     },
     types: null
   },
@@ -5372,10 +5385,10 @@ function createShopClient(options = {}) {
 }
 
 // src/contract-hash.ts
-var CONTRACT_SHA256 = "335eed391a2786a4f7f010b056d2a6a5b49d9e1244960a15516a5d77b93693b5";
+var CONTRACT_SHA256 = "05f34929e71fb2fcb3a4c04707facca22ee46f8960a4cc47ce0a3f1a6df36056";
 
 // src/client/diagnose.ts
-var SDK_VERSION = "0.2.0" ;
+var SDK_VERSION = "0.2.2" ;
 async function resolveBaseUrl(options) {
   const provider = options.client?.baseUrl ?? options.baseUrl ?? SHOP_API_URL;
   const value = typeof provider === "function" ? await provider() : provider;