@cronvello/shop-sdk 0.2.0 → 0.2.2

package/dist/browser.d.cts

@@ -1,6 +1,6 @@
-import { S as ShopClientOptions, H as HeaderProvider, a as ShopClient } from './error-C5_qRXMp.cjs';
-export { B as BaseUrlProvider, C as CONTRACT_SHA256, M as MaybePromise, b as SHOP_API_URL, c as ShopApiError, d as ShopAuthType, e as ShopConfigurationError, f as ShopContractStatus, g as ShopDiagnoseOptions, h as ShopDiagnosis, i as ShopRequestContext, j as ShopRequestOptions, k as ShopRoute, l as ShopRouteAuth, m as ShopRouteBody, n as ShopRouteInput, o as ShopRouteKey, p as ShopRouteMethod, q as ShopRouteParams, r as ShopRouteQuery, s as ShopRouteResponse, t as ShopRouteResponseData, u as diagnoseShop } from './error-C5_qRXMp.cjs';
-import './index-CIpUb0vL.cjs';
+import { S as ShopClientOptions, H as HeaderProvider, a as ShopClient } from './error-1WqH-FhJ.cjs';
+export { B as BaseUrlProvider, C as CONTRACT_SHA256, M as MaybePromise, b as SHOP_API_URL, c as ShopApiError, d as ShopAuthType, e as ShopConfigurationError, f as ShopContractStatus, g as ShopDiagnoseOptions, h as ShopDiagnosis, i as ShopRequestContext, j as ShopRequestOptions, k as ShopRoute, l as ShopRouteAuth, m as ShopRouteBody, n as ShopRouteInput, o as ShopRouteKey, p as ShopRouteMethod, q as ShopRouteParams, r as ShopRouteQuery, s as ShopRouteResponse, t as ShopRouteResponseData, u as diagnoseShop } from './error-1WqH-FhJ.cjs';
+import './index-DC6jGVkP.cjs';
 
 type ShopBrowserClientOptions = Omit<ShopClientOptions, "headers"> & {
     headers?: HeadersInit | HeaderProvider;

package/dist/browser.d.ts

@@ -1,6 +1,6 @@
-import { S as ShopClientOptions, H as HeaderProvider, a as ShopClient } from './error-Do0kyiZ6.js';
-export { B as BaseUrlProvider, C as CONTRACT_SHA256, M as MaybePromise, b as SHOP_API_URL, c as ShopApiError, d as ShopAuthType, e as ShopConfigurationError, f as ShopContractStatus, g as ShopDiagnoseOptions, h as ShopDiagnosis, i as ShopRequestContext, j as ShopRequestOptions, k as ShopRoute, l as ShopRouteAuth, m as ShopRouteBody, n as ShopRouteInput, o as ShopRouteKey, p as ShopRouteMethod, q as ShopRouteParams, r as ShopRouteQuery, s as ShopRouteResponse, t as ShopRouteResponseData, u as diagnoseShop } from './error-Do0kyiZ6.js';
-import './index-CIpUb0vL.js';
+import { S as ShopClientOptions, H as HeaderProvider, a as ShopClient } from './error-D3Jrcd-j.js';
+export { B as BaseUrlProvider, C as CONTRACT_SHA256, M as MaybePromise, b as SHOP_API_URL, c as ShopApiError, d as ShopAuthType, e as ShopConfigurationError, f as ShopContractStatus, g as ShopDiagnoseOptions, h as ShopDiagnosis, i as ShopRequestContext, j as ShopRequestOptions, k as ShopRoute, l as ShopRouteAuth, m as ShopRouteBody, n as ShopRouteInput, o as ShopRouteKey, p as ShopRouteMethod, q as ShopRouteParams, r as ShopRouteQuery, s as ShopRouteResponse, t as ShopRouteResponseData, u as diagnoseShop } from './error-D3Jrcd-j.js';
+import './index-DC6jGVkP.js';
 
 type ShopBrowserClientOptions = Omit<ShopClientOptions, "headers"> & {
     headers?: HeadersInit | HeaderProvider;

package/dist/browser.js

@@ -496,7 +496,7 @@ var apiRoutes_b2b = {
     meta: {
       tags: ["b2b"],
       summary: "Create B2B dynamic checkout session",
-      description: "Creates a Stripe checkout session with dynamic price_data for trusted external apps. Supports mixed carts (one-time + recurring). Auth: Bearer BACKEND_TO_BACKEND_API_KEY.",
+      description: "Creates a Stripe checkout session with dynamic price_data for trusted external apps. Supports mixed carts (one-time + recurring). Auth: Bearer BACKEND_TO_BACKEND_API_KEY or App-Scoped API Key.",
       bodyContentType: "application/json",
       validated: { "params": false, "query": false, "body": true }
     },
@@ -1708,6 +1708,19 @@ var apiRoutes_external_apps = {
     },
     types: null
   },
+  "external_apps_service_rotate_key": {
+    method: "POST",
+    path: "/external-apps/service/rotate-key/:appId",
+    auth: { "type": "x_api_key_https" },
+    meta: {
+      tags: ["external-apps"],
+      summary: "Rotate external app api key (B2B zero-downtime)",
+      description: "Rotates the API key of an external app. The previous key remains valid during the specified gracePeriodHours (default: 2h) to prevent downtime during deployments. Authenticated via backend-to-backend API key.",
+      bodyContentType: "application/json",
+      validated: { "params": true, "query": true, "body": true }
+    },
+    types: null
+  },
   "external_apps_service_delete": {
     method: "DELETE",
     path: "/external-apps/service/delete/:appId",
@@ -1727,7 +1740,7 @@ var apiRoutes_external_apps = {
     meta: {
       tags: ["external-apps"],
       summary: "Get external app registration status (B2B)",
-      description: "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections."
+      description: "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections. Includes authMethod and, for OAuth apps, the oauth client_id we will present to that app plus a truncated SHA-256 fingerprint of the stored client secret, so the other side can prove a rotation actually landed here. Never the secret itself. Also reports the entitlement paths we have stored, because registration is an upsert: a caller that only wants to hand us new credentials must send these back unchanged, or it silently repoints where we fetch entitlements from."
     },
     types: null
   },
@@ -5370,10 +5383,10 @@ function createShopClient(options = {}) {
 }
 
 // src/contract-hash.ts
-var CONTRACT_SHA256 = "335eed391a2786a4f7f010b056d2a6a5b49d9e1244960a15516a5d77b93693b5";
+var CONTRACT_SHA256 = "05f34929e71fb2fcb3a4c04707facca22ee46f8960a4cc47ce0a3f1a6df36056";
 
 // src/client/diagnose.ts
-var SDK_VERSION = "0.2.0" ;
+var SDK_VERSION = "0.2.2" ;
 async function resolveBaseUrl(options) {
   const provider = options.client?.baseUrl ?? options.baseUrl ?? SHOP_API_URL;
   const value = typeof provider === "function" ? await provider() : provider;