@fatagnus/dink-convex 2.6.0 → 2.8.0

package/dist/index.d.ts

@@ -66,6 +66,7 @@ export { syncTriggers, registerSyncedTable, isSyncedTable, getSyncConfig, create
 export { callEdge, scatterCall, discoverEdges, getEdgeRpcConfig, buildCallEdgeUrl, buildScatterCallUrl, buildDiscoverEdgesUrl, buildCallEdgePayload, buildScatterCallPayload, parseCallEdgeResponse, parseScatterCallResponse, parseDiscoverEdgesResponse, EdgeRpcError, EDGE_RPC_ERROR_CODES, type CallEdgeOptions, type ScatterCallOptions, type DiscoverEdgesOptions, type CallEdgeResult, type ScatterCallResult, type ScatterCallResultItem, type EdgeInfo, type EdgeRpcConfig, } from "./edgeRpc.js";
 export { registerReplicateComponent, hasReplicateComponent, getReplicateComponent, clearReplicateComponent, forwardToReplicate, type ReplicateComponent, type DeltaData, type ForwardContext, } from "./replicateBridge.js";
 export { describeEdgeServices, getLLMContext, getIntrospectConfig, buildDescribeUrl, buildLLMContextUrl, parseDescribeResponse, parseLLMContextResponse, IntrospectError, INTROSPECT_ERROR_CODES, type ServiceDescriptor, type MethodDescriptor, type ServiceAIContext, type MethodAIContext, type IntrospectConfig, } from "./introspect.js";
+export { createEdgeKey, listEdgeKeys, revokeEdgeKey, type KeyType, type KeyStatus, type KeyMetadata, type CreateEdgeKeyOptions, type CreateKeyResult, } from "./keys.js";
 export declare const VERSION = "2.4.0";
 export type { SyncedTableConfig } from "./schema.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAGH,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,YAAY,GAClB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,cAAc,GACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAG1E,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,6BAA6B,EAC7B,sCAAsC,EACtC,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,mCAAmC,EACnC,kBAAkB,EAClB,8BAA8B,EAC9B,cAAc,EACd,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,YAAY,EACZ,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,QAAQ,EACb,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AAGzB,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAGH,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,YAAY,GAClB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,cAAc,GACpB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAG1E,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,6BAA6B,EAC7B,sCAAsC,EACtC,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,mCAAmC,EACnC,kBAAkB,EAClB,8BAA8B,EAC9B,cAAc,EACd,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,QAAQ,EACR,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,YAAY,EACZ,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,QAAQ,EACb,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,cAAc,GACpB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,EACb,KAAK,OAAO,EACZ,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,eAAe,GACrB,MAAM,WAAW,CAAC;AAGnB,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -74,6 +74,8 @@ export { callEdge, scatterCall, discoverEdges, getEdgeRpcConfig, buildCallEdgeUr
 export { registerReplicateComponent, hasReplicateComponent, getReplicateComponent, clearReplicateComponent, forwardToReplicate, } from "./replicateBridge.js";
 // Introspection helpers
 export { describeEdgeServices, getLLMContext, getIntrospectConfig, buildDescribeUrl, buildLLMContextUrl, parseDescribeResponse, parseLLMContextResponse, IntrospectError, INTROSPECT_ERROR_CODES, } from "./introspect.js";
+// Key management helpers
+export { createEdgeKey, listEdgeKeys, revokeEdgeKey, } from "./keys.js";
 // Component version
 export const VERSION = "2.4.0";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,iBAAiB;AACjB,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAErB,iBAAiB;AACjB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,WAAW,CAAC;AAEnB,gFAAgF;AAChF,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,GAOhB,MAAM,oBAAoB,CAAC;AAE5B,sEAAsE;AACtE,OAAO,EAAE,kBAAkB,EAAwB,MAAM,gBAAgB,CAAC;AAE1E,+CAA+C;AAC/C,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,6BAA6B,EAC7B,sCAAsC,EACtC,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,mCAAmC,EACnC,kBAAkB,EAClB,8BAA8B,EAC9B,cAAc,GAEf,MAAM,eAAe,CAAC;AAEvB,2BAA2B;AAC3B,OAAO,EACL,QAAQ,EACR,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,YAAY,EACZ,oBAAoB,GASrB,MAAM,cAAc,CAAC;AAEtB,2BAA2B;AAC3B,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,GAInB,MAAM,sBAAsB,CAAC;AAE9B,wBAAwB;AACxB,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,GAMvB,MAAM,iBAAiB,CAAC;AAEzB,oBAAoB;AACpB,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,iBAAiB;AACjB,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAErB,iBAAiB;AACjB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,GAEpB,MAAM,WAAW,CAAC;AAEnB,gFAAgF;AAChF,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,GAOhB,MAAM,oBAAoB,CAAC;AAE5B,sEAAsE;AACtE,OAAO,EAAE,kBAAkB,EAAwB,MAAM,gBAAgB,CAAC;AAE1E,+CAA+C;AAC/C,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,6BAA6B,EAC7B,sCAAsC,EACtC,2BAA2B,EAC3B,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,mCAAmC,EACnC,kBAAkB,EAClB,8BAA8B,EAC9B,cAAc,GAEf,MAAM,eAAe,CAAC;AAEvB,2BAA2B;AAC3B,OAAO,EACL,QAAQ,EACR,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,YAAY,EACZ,oBAAoB,GASrB,MAAM,cAAc,CAAC;AAEtB,2BAA2B;AAC3B,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,kBAAkB,GAInB,MAAM,sBAAsB,CAAC;AAE9B,wBAAwB;AACxB,OAAO,EACL,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,uBAAuB,EACvB,eAAe,EACf,sBAAsB,GAMvB,MAAM,iBAAiB,CAAC;AAEzB,yBAAyB;AACzB,OAAO,EACL,aAAa,EACb,YAAY,EACZ,aAAa,GAMd,MAAM,WAAW,CAAC;AAEnB,oBAAoB;AACpB,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Key Management Helpers for Convex
+ *
+ * These helpers allow Convex actions to manage API keys via dinkd.
+ * They follow the same pattern as edgeRpc.ts for authenticated HTTP calls.
+ *
+ * @module keys
+ */
+/**
+ * Action context type (minimal interface for fetch operations).
+ */
+interface ActionCtx {
+}
+/**
+ * Type of API key
+ */
+export type KeyType = 'edge' | 'center' | 'client' | 'admin' | 'app_master' | 'sync_key';
+/**
+ * Status of an API key
+ */
+export type KeyStatus = 'active' | 'expired' | 'revoked' | 'disabled';
+/**
+ * Metadata about an API key
+ */
+export interface KeyMetadata {
+    /** Unique key identifier */
+    id: string;
+    /** App ID this key belongs to */
+    appId: string;
+    /** Display name of the key */
+    name: string;
+    /** Type of the key */
+    type: KeyType;
+    /** Edge ID (for edge keys) */
+    edgeId?: string;
+    /** Scopes granted to this key */
+    scopes: string[];
+    /** Labels attached to the key */
+    labels?: Record<string, string>;
+    /** Current status of the key */
+    status: KeyStatus;
+    /** When the key was created (ISO string) */
+    createdAt: string;
+    /** When the key expires (ISO string, if set) */
+    expiresAt?: string;
+    /** When the key was last used (ISO string) */
+    lastUsedAt?: string;
+    /** When the key was revoked (ISO string, if revoked) */
+    revokedAt?: string;
+    /** Reason for revocation (if revoked) */
+    revokeReason?: string;
+}
+/**
+ * Options for creating an edge key
+ */
+export interface CreateEdgeKeyOptions {
+    /** Display name for the key */
+    name: string;
+    /** Edge ID (optional, auto-generated if not provided) */
+    edgeId?: string;
+    /** Labels to attach to the key */
+    labels?: Record<string, string>;
+}
+/**
+ * Result from creating an API key
+ */
+export interface CreateKeyResult {
+    /** Key metadata */
+    key: KeyMetadata;
+    /** The actual API key (only shown once!) */
+    apiKey: string;
+}
+/**
+ * Create a new edge key.
+ *
+ * @param _ctx - Convex action context
+ * @param options - Edge key creation options
+ * @returns Created key metadata and API key string
+ * @throws EdgeRpcError if configuration is missing or request fails
+ *
+ * @example
+ * ```typescript
+ * const result = await createEdgeKey(ctx, {
+ *   name: 'my-edge-agent',
+ * });
+ * // IMPORTANT: Save the API key - it won't be shown again!
+ * console.log('API Key:', result.apiKey);
+ * console.log('Edge ID:', result.key.edgeId);
+ * ```
+ */
+export declare function createEdgeKey(_ctx: ActionCtx, options: CreateEdgeKeyOptions): Promise<CreateKeyResult>;
+/**
+ * List edge keys.
+ *
+ * @param _ctx - Convex action context
+ * @returns Array of edge key metadata
+ * @throws EdgeRpcError if configuration is missing or request fails
+ *
+ * @example
+ * ```typescript
+ * const keys = await listEdgeKeys(ctx);
+ * for (const key of keys) {
+ *   console.log(`${key.name}: ${key.status}`);
+ * }
+ * ```
+ */
+export declare function listEdgeKeys(_ctx: ActionCtx): Promise<KeyMetadata[]>;
+/**
+ * Revoke an edge key.
+ *
+ * @param _ctx - Convex action context
+ * @param keyId - The key ID to revoke
+ * @param reason - Optional reason for revocation
+ * @throws EdgeRpcError if configuration is missing or request fails
+ *
+ * @example
+ * ```typescript
+ * await revokeEdgeKey(ctx, 'key-123', 'Agent decommissioned');
+ * ```
+ */
+export declare function revokeEdgeKey(_ctx: ActionCtx, keyId: string, reason?: string): Promise<void>;
+export {};
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH;;GAEG;AACH,UAAU,SAAS;CAElB;AAED;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,CAAC;AAEzF;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,gCAAgC;IAChC,MAAM,EAAE,SAAS,CAAC;IAClB,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB;IACnB,GAAG,EAAE,WAAW,CAAC;IACjB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;CAChB;AAgED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,eAAe,CAAC,CAuD1B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,GACd,OAAO,CAAC,WAAW,EAAE,CAAC,CAyCxB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,SAAS,EACf,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAoDf"}

package/dist/keys.js

@@ -0,0 +1,189 @@
+/**
+ * Key Management Helpers for Convex
+ *
+ * These helpers allow Convex actions to manage API keys via dinkd.
+ * They follow the same pattern as edgeRpc.ts for authenticated HTTP calls.
+ *
+ * @module keys
+ */
+import { getEdgeRpcConfig, EdgeRpcError, EDGE_RPC_ERROR_CODES } from "./edgeRpc.js";
+// ============================================================================
+// URL builders
+// ============================================================================
+function buildKeysUrl(baseUrl, endpoint) {
+    const url = new URL(`/api/keys/${endpoint}`, baseUrl);
+    return url.toString();
+}
+// ============================================================================
+// Configuration validation
+// ============================================================================
+function validateConfig() {
+    const config = getEdgeRpcConfig();
+    if (!config.dinkUrl) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.MISSING_CONFIG, "DINK_URL environment variable is not configured");
+    }
+    if (!config.appSyncKey) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.MISSING_CONFIG, "DINK_APP_SYNC_KEY environment variable is not configured");
+    }
+    return {
+        dinkUrl: config.dinkUrl,
+        appSyncKey: config.appSyncKey,
+    };
+}
+// ============================================================================
+// Response parsing
+// ============================================================================
+function parseKeyMetadata(raw) {
+    return {
+        id: raw.id,
+        appId: raw.app_id || '',
+        name: raw.name,
+        type: raw.type,
+        edgeId: raw.edge_id,
+        scopes: raw.scopes || [],
+        labels: raw.labels,
+        status: raw.status,
+        createdAt: raw.created_at,
+        expiresAt: raw.expires_at,
+        lastUsedAt: raw.last_used_at,
+        revokedAt: raw.revoked_at,
+        revokeReason: raw.revoke_reason,
+    };
+}
+// ============================================================================
+// Main helper functions
+// ============================================================================
+/**
+ * Create a new edge key.
+ *
+ * @param _ctx - Convex action context
+ * @param options - Edge key creation options
+ * @returns Created key metadata and API key string
+ * @throws EdgeRpcError if configuration is missing or request fails
+ *
+ * @example
+ * ```typescript
+ * const result = await createEdgeKey(ctx, {
+ *   name: 'my-edge-agent',
+ * });
+ * // IMPORTANT: Save the API key - it won't be shown again!
+ * console.log('API Key:', result.apiKey);
+ * console.log('Edge ID:', result.key.edgeId);
+ * ```
+ */
+export async function createEdgeKey(_ctx, options) {
+    const config = validateConfig();
+    const payload = {
+        name: options.name,
+        type: 'edge',
+        edge_id: options.edgeId || '',
+        scopes: ['edge:connect', 'services:register', 'services:expose'],
+        scope_bundle: 'bundle:edge',
+        labels: options.labels || {},
+    };
+    const url = buildKeysUrl(config.dinkUrl, 'create');
+    const response = await fetch(url, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${config.appSyncKey}`,
+        },
+        body: JSON.stringify(payload),
+    });
+    if (response.status === 401) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.UNAUTHORIZED, "Invalid authorization token - ensure DINK_APP_SYNC_KEY has keys:manage scope");
+    }
+    if (!response.ok) {
+        const errorText = await response.text().catch(() => "");
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.SERVER_ERROR, `Failed to create key: ${response.status} ${response.statusText} - ${errorText}`);
+    }
+    const json = await response.json();
+    if (!json.success || !json.data) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.SERVER_ERROR, json.error || "Failed to create key");
+    }
+    return {
+        key: parseKeyMetadata(json.data.key),
+        apiKey: json.data.api_key,
+    };
+}
+/**
+ * List edge keys.
+ *
+ * @param _ctx - Convex action context
+ * @returns Array of edge key metadata
+ * @throws EdgeRpcError if configuration is missing or request fails
+ *
+ * @example
+ * ```typescript
+ * const keys = await listEdgeKeys(ctx);
+ * for (const key of keys) {
+ *   console.log(`${key.name}: ${key.status}`);
+ * }
+ * ```
+ */
+export async function listEdgeKeys(_ctx) {
+    const config = validateConfig();
+    const url = buildKeysUrl(config.dinkUrl, 'list') + '?type=edge';
+    const response = await fetch(url, {
+        method: "GET",
+        headers: {
+            Authorization: `Bearer ${config.appSyncKey}`,
+        },
+    });
+    if (response.status === 401) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.UNAUTHORIZED, "Invalid authorization token");
+    }
+    if (!response.ok) {
+        const errorText = await response.text().catch(() => "");
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.SERVER_ERROR, `Failed to list keys: ${response.status} ${response.statusText} - ${errorText}`);
+    }
+    const json = await response.json();
+    if (!json.success || !json.data) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.SERVER_ERROR, json.error || "Failed to list keys");
+    }
+    return (json.data.keys || []).map(parseKeyMetadata);
+}
+/**
+ * Revoke an edge key.
+ *
+ * @param _ctx - Convex action context
+ * @param keyId - The key ID to revoke
+ * @param reason - Optional reason for revocation
+ * @throws EdgeRpcError if configuration is missing or request fails
+ *
+ * @example
+ * ```typescript
+ * await revokeEdgeKey(ctx, 'key-123', 'Agent decommissioned');
+ * ```
+ */
+export async function revokeEdgeKey(_ctx, keyId, reason) {
+    const config = validateConfig();
+    const payload = {
+        key_id: keyId,
+        reason: reason || '',
+    };
+    const url = buildKeysUrl(config.dinkUrl, 'revoke');
+    const response = await fetch(url, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${config.appSyncKey}`,
+        },
+        body: JSON.stringify(payload),
+    });
+    if (response.status === 401) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.UNAUTHORIZED, "Invalid authorization token");
+    }
+    if (response.status === 404) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.EDGE_NOT_FOUND, `Key not found: ${keyId}`);
+    }
+    if (!response.ok) {
+        const errorText = await response.text().catch(() => "");
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.SERVER_ERROR, `Failed to revoke key: ${response.status} ${response.statusText} - ${errorText}`);
+    }
+    const json = await response.json();
+    if (!json.success) {
+        throw new EdgeRpcError(EDGE_RPC_ERROR_CODES.SERVER_ERROR, json.error || "Failed to revoke key");
+    }
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AA6EpF,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,SAAS,YAAY,CAAC,OAAe,EAAE,QAAgB;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,+EAA+E;AAC/E,2BAA2B;AAC3B,+EAA+E;AAE/E,SAAS,cAAc;IACrB,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAElC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,cAAc,EACnC,iDAAiD,CAClD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,cAAc,EACnC,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,gBAAgB,CAAC,GAA4B;IACpD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAY;QACpB,KAAK,EAAG,GAAG,CAAC,MAAiB,IAAI,EAAE;QACnC,IAAI,EAAE,GAAG,CAAC,IAAc;QACxB,IAAI,EAAE,GAAG,CAAC,IAAe;QACzB,MAAM,EAAE,GAAG,CAAC,OAA6B;QACzC,MAAM,EAAG,GAAG,CAAC,MAAmB,IAAI,EAAE;QACtC,MAAM,EAAE,GAAG,CAAC,MAA4C;QACxD,MAAM,EAAE,GAAG,CAAC,MAAmB;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAoB;QACnC,SAAS,EAAE,GAAG,CAAC,UAAgC;QAC/C,UAAU,EAAE,GAAG,CAAC,YAAkC;QAClD,SAAS,EAAE,GAAG,CAAC,UAAgC;QAC/C,YAAY,EAAE,GAAG,CAAC,aAAmC;KACtD,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAe,EACf,OAA6B;IAE7B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC7B,MAAM,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,CAAC;QAChE,YAAY,EAAE,aAAa;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;KAC7B,CAAC;IAEF,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,UAAU,EAAE;SAC7C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAI/B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,IAAI,CAAC,KAAK,IAAI,sBAAsB,CACrC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACpC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAe;IAEf,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,YAAY,CAAC;IAEhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,CAAC,UAAU,EAAE;SAC7C;KACF,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,wBAAwB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAI/B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,IAAI,CAAC,KAAK,IAAI,qBAAqB,CACpC,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAe,EACf,KAAa,EACb,MAAe;IAEf,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAEhC,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,MAAM,IAAI,EAAE;KACrB,CAAC;IAEF,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,MAAM,CAAC,UAAU,EAAE;SAC7C;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,cAAc,EACnC,kBAAkB,KAAK,EAAE,CAC1B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAG/B,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,YAAY,CACpB,oBAAoB,CAAC,YAAY,EACjC,IAAI,CAAC,KAAK,IAAI,sBAAsB,CACrC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fatagnus/dink-convex",
-  "version": "2.6.0",
+  "version": "2.8.0",
   "description": "Dink Convex sync component - bidirectional sync between Convex and edge devices",
   "type": "module",
   "main": "dist/index.js",
@@ -90,11 +90,7 @@
     "convex": "^1.17.0",
     "convex-helpers": "^0.1.0"
   },
-  "peerDependenciesMeta": {
-    "convex-helpers": {
-      "optional": true
-    }
-  },
+
   "engines": {
     "node": ">=18.0.0"
   },