@cronvello/shop-sdk 0.2.2 → 0.2.3

package/dist/openapi.json

@@ -30883,7 +30883,7 @@
           "external-apps"
         ],
         "summary": "Get external app registration status (B2B)",
-        "description": "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections. Includes authMethod and, for OAuth apps, the oauth client_id we will present to that app plus a truncated SHA-256 fingerprint of the stored client secret, so the other side can prove a rotation actually landed here. Never the secret itself. Also reports the entitlement paths we have stored, because registration is an upsert: a caller that only wants to hand us new credentials must send these back unchanged, or it silently repoints where we fetch entitlements from.",
+        "description": "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections. Includes authMethod and, for OAuth apps, the oauth client_id we will present to that app plus a truncated SHA-256 fingerprint of the stored client secret, so the other side can prove a rotation actually landed here. Never the secret itself. `credentialFingerprints` lists one such fingerprint per credential we hold for that app (api_key, previous_api_key during a rotation grace period, public_api_key, oauth_client_secret). It lets the caller locate the value in the app's runtime environment by equality instead of guessing a variable name - the name differs per app, the value does not. Also reports the entitlement paths we have stored, because registration is an upsert: a caller that only wants to hand us new credentials must send these back unchanged, or it silently repoints where we fetch entitlements from.",
         "responses": {
           "200": {
             "description": "JSON response",
@@ -30969,6 +30969,50 @@
                                 }
                               ]
                             },
+                            "credentialFingerprints": {
+                              "type": "array",
+                              "items": {
+                                "type": "object",
+                                "properties": {
+                                  "role": {
+                                    "type": "string",
+                                    "enum": [
+                                      "api_key",
+                                      "previous_api_key",
+                                      "public_api_key",
+                                      "oauth_client_secret"
+                                    ]
+                                  },
+                                  "fingerprint": {
+                                    "type": "string"
+                                  },
+                                  "current": {
+                                    "type": "boolean"
+                                  },
+                                  "expiresAt": {
+                                    "anyOf": [
+                                      {
+                                        "anyOf": [
+                                          {
+                                            "type": "string"
+                                          },
+                                          {}
+                                        ]
+                                      },
+                                      {
+                                        "type": "null"
+                                      }
+                                    ]
+                                  }
+                                },
+                                "required": [
+                                  "role",
+                                  "fingerprint",
+                                  "current"
+                                ],
+                                "additionalProperties": false
+                              }
+                            },
                             "entitlementPath": {
                               "anyOf": [
                                 {
@@ -30999,6 +31043,7 @@
                             "authMethod",
                             "oauthClientId",
                             "oauthClientSecretFingerprint",
+                            "credentialFingerprints",
                             "entitlementPath",
                             "usageOveragePath"
                           ],

package/dist/server.cjs

@@ -1742,7 +1742,7 @@ var apiRoutes_external_apps = {
     meta: {
       tags: ["external-apps"],
       summary: "Get external app registration status (B2B)",
-      description: "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections. Includes authMethod and, for OAuth apps, the oauth client_id we will present to that app plus a truncated SHA-256 fingerprint of the stored client secret, so the other side can prove a rotation actually landed here. Never the secret itself. Also reports the entitlement paths we have stored, because registration is an upsert: a caller that only wants to hand us new credentials must send these back unchanged, or it silently repoints where we fetch entitlements from."
+      description: "Returns registration status for an app identified by its string appId. Used by AMP to discover existing connections. Includes authMethod and, for OAuth apps, the oauth client_id we will present to that app plus a truncated SHA-256 fingerprint of the stored client secret, so the other side can prove a rotation actually landed here. Never the secret itself. `credentialFingerprints` lists one such fingerprint per credential we hold for that app (api_key, previous_api_key during a rotation grace period, public_api_key, oauth_client_secret). It lets the caller locate the value in the app's runtime environment by equality instead of guessing a variable name - the name differs per app, the value does not. Also reports the entitlement paths we have stored, because registration is an upsert: a caller that only wants to hand us new credentials must send these back unchanged, or it silently repoints where we fetch entitlements from."
     },
     types: null
   },
@@ -5385,10 +5385,10 @@ function createShopClient(options = {}) {
 }
 
 // src/contract-hash.ts
-var CONTRACT_SHA256 = "05f34929e71fb2fcb3a4c04707facca22ee46f8960a4cc47ce0a3f1a6df36056";
+var CONTRACT_SHA256 = "32f132210ee188c28a330c9db5c6db6eaf5b7c3a65ecc041e029aca6e1335a60";
 
 // src/client/diagnose.ts
-var SDK_VERSION = "0.2.2" ;
+var SDK_VERSION = "0.2.3" ;
 async function resolveBaseUrl(options) {
   const provider = options.client?.baseUrl ?? options.baseUrl ?? SHOP_API_URL;
   const value = typeof provider === "function" ? await provider() : provider;