@eide/foir-cli 0.5.7 → 0.6.0

package/dist/cli.js

@@ -978,7 +978,9 @@ function createIdentityMethods(client) {
           id: params.id,
           name: params.name,
           isActive: params.isActive,
-          rateLimitPerHour: params.rateLimitPerHour
+          rateLimitPerHour: params.rateLimitPerHour,
+          scopes: params.scopes,
+          updateScopes: params.updateScopes
         })
       );
       return { apiKey: resp.apiKey ?? null };
@@ -1911,7 +1913,8 @@ import {
   ConfigDirection,
   ListOperationsRequestSchema,
   ApplyConfigRequestSchema,
-  TriggerConfigSyncRequestSchema
+  TriggerConfigSyncRequestSchema,
+  WriteConfigCredentialRequestSchema
 } from "@eide/foir-proto-ts/configs/v1/configs_pb";
 import { ConfigDirection as ConfigDirection2 } from "@eide/foir-proto-ts/configs/v1/configs_pb";
 var DIRECTION_TO_PROTO = {
@@ -2001,6 +2004,18 @@ function createConfigsMethods(client) {
         webhookSecret: resp.webhookSecret ?? null
       };
     },
+    async writeConfigCredential(params) {
+      const resp = await client.writeConfigCredential(
+        create5(WriteConfigCredentialRequestSchema, {
+          configKey: params.configKey,
+          value: params.value
+        })
+      );
+      return {
+        encryptionKeyId: resp.encryptionKeyId,
+        lastWrittenAt: resp.lastWrittenAt
+      };
+    },
     async triggerConfigSync(configId) {
       const resp = await client.triggerConfigSync(
         create5(TriggerConfigSyncRequestSchema, { configId })
@@ -4882,7 +4897,7 @@ async function reconcileConfig(client, configId, manifest) {
   await reconcileAuthProviders(client, manifest.authProviders ?? [], summary);
   await reconcilePlacements(client, configId, manifest.placements ?? [], summary);
   await reconcileProfileSchema(client, manifest, summary);
-  await reconcileApiKeys(client, manifest.apiKeys ?? [], summary);
+  await reconcileApiKeys(client, manifest.key, manifest.apiKeys ?? [], summary);
   return summary;
 }
 async function reconcileModels(client, configId, models, summary) {
@@ -5211,15 +5226,29 @@ async function reconcileProfileSchema(client, manifest, summary) {
   });
   summary.profileSchemaUpdated = true;
 }
-async function reconcileApiKeys(client, apiKeys, summary) {
+async function reconcileApiKeys(client, configKey, apiKeys, summary) {
   if (apiKeys.length === 0) return;
   const existing = await client.identity.listApiKeys({ limit: 200 });
   const existingByName = new Map(
     existing.items.map((k) => [k.name, k])
   );
+  const newKeys = [];
   for (const key of apiKeys) {
     if (!key.name || !key.keyType || !key.envVar) continue;
-    if (existingByName.has(key.name)) continue;
+    const existingKey = existingByName.get(key.name);
+    if (existingKey) {
+      const wantScopes = (key.scopes ?? []).slice().sort();
+      const haveScopes = (existingKey.scopes ?? []).slice().sort();
+      const scopesChanged = wantScopes.length !== haveScopes.length || wantScopes.some((s, i) => s !== haveScopes[i]);
+      if (scopesChanged) {
+        await client.identity.updateApiKey({
+          id: existingKey.id,
+          scopes: key.scopes ?? [],
+          updateScopes: true
+        });
+      }
+      continue;
+    }
     const result = await client.identity.createApiKey({
       name: key.name,
       keyType: key.keyType === "secret" ? 2 : 1,
@@ -5235,6 +5264,21 @@ async function reconcileApiKeys(client, apiKeys, summary) {
         envVar: key.envVar,
         rawKey
       });
+      newKeys.push({ name: key.name, rawKey });
+    }
+  }
+  if (newKeys.length > 0) {
+    const credentialPayload = {};
+    for (const k of newKeys) {
+      credentialPayload.platformApiKey = k.rawKey;
+    }
+    try {
+      await client.configs.writeConfigCredential({
+        configKey,
+        value: new TextEncoder().encode(JSON.stringify(credentialPayload))
+      });
+    } catch (err) {
+      console.warn("Warning: could not write platformApiKey to config credentials:", err);
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eide/foir-cli",
-  "version": "0.5.7",
+  "version": "0.6.0",
   "description": "Universal platform CLI for Foir platform",
   "type": "module",
   "publishConfig": {
@@ -50,7 +50,7 @@
     "@bufbuild/protovalidate": "^1.1.1",
     "@connectrpc/connect": "^2.0.0",
     "@connectrpc/connect-node": "^2.0.0",
-    "@eide/foir-proto-ts": "^0.10.0",
+    "@eide/foir-proto-ts": "^0.11.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",
     "dotenv": "^16.4.5",