@scalekit-sdk/node 2.4.0 → 2.5.1

package/lib/connected-accounts.js

@@ -0,0 +1,213 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const protobuf_1 = require("@bufbuild/protobuf");
+const errors_1 = require("./errors");
+const connected_accounts_pb_1 = require("./pkg/grpc/scalekit/v1/connected_accounts/connected_accounts_pb");
+/**
+ * Client for managing connected accounts for third-party integrations.
+ *
+ * This mirrors the Python SDK `ConnectedAccountsClient` and exposes a typed,
+ * ergonomic API around the `ConnectedAccountService` to:
+ * - list connected accounts
+ * - create/update/delete connected accounts
+ * - generate magic links for authorization
+ * - fetch full authentication details for a connected account
+ */
+class ConnectedAccountsClient {
+    constructor(grpcConnect, coreClient) {
+        this.grpcConnect = grpcConnect;
+        this.coreClient = coreClient;
+        this.client = this.grpcConnect.createClient(connected_accounts_pb_1.ConnectedAccountService);
+    }
+    /**
+     * Lists connected accounts with optional filters and pagination.
+     *
+     * @param options Optional filtering and pagination parameters
+     * @throws {ScalekitServerException} If a network or server error occurs.
+     */
+    listConnectedAccounts(options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c;
+            return this.coreClient.connectExec(this.client.listConnectedAccounts, (0, protobuf_1.create)(connected_accounts_pb_1.ListConnectedAccountsRequestSchema, Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, ((options === null || options === void 0 ? void 0 : options.organizationId) && {
+                organizationId: options.organizationId,
+            })), ((options === null || options === void 0 ? void 0 : options.userId) && { userId: options.userId })), (((_a = options === null || options === void 0 ? void 0 : options.connector) === null || _a === void 0 ? void 0 : _a.trim()) && {
+                connector: options.connector.trim(),
+            })), (((_b = options === null || options === void 0 ? void 0 : options.identifier) === null || _b === void 0 ? void 0 : _b.trim()) && {
+                identifier: options.identifier.trim(),
+            })), (((_c = options === null || options === void 0 ? void 0 : options.provider) === null || _c === void 0 ? void 0 : _c.trim()) && { provider: options.provider.trim() })), ((options === null || options === void 0 ? void 0 : options.pageSize) !== undefined && { pageSize: options.pageSize })), ((options === null || options === void 0 ? void 0 : options.pageToken) && { pageToken: options.pageToken })), ((options === null || options === void 0 ? void 0 : options.query) && { query: options.query }))));
+        });
+    }
+    /**
+     * Creates a new connected account.
+     *
+     * @param params Connected account creation parameters
+     * @throws {ScalekitServerException} If a network or server error occurs.
+     */
+    createConnectedAccount(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { connector, identifier, connectedAccount, organizationId, userId } = params;
+            return this.coreClient.connectExec(this.client.createConnectedAccount, (0, protobuf_1.create)(connected_accounts_pb_1.CreateConnectedAccountRequestSchema, Object.assign(Object.assign({ connector,
+                identifier,
+                connectedAccount }, (organizationId && { organizationId })), (userId && { userId }))));
+        });
+    }
+    /**
+     * Gets an existing connected account by connector and identifier, or creates one if none exists.
+     * Mirrors the Python SDK `get_or_create_connected_account`. When creating, the backend may require
+     * valid authorization details; if omitted, a minimal payload is sent and the server may return
+     * a validation error.
+     *
+     * @param params Get-or-create parameters
+     * @param params.connector Connector identifier (required)
+     * @param params.identifier Connected account identifier (required)
+     * @param params.authorizationDetails Optional auth details for the create path (OAuth token or static auth)
+     * @param params.organizationId Optional organization ID
+     * @param params.userId Optional user ID
+     * @param params.apiConfig Optional API config for the create path
+     * @throws {ScalekitServerException} If a network or server error occurs.
+     * @throws {ScalekitException} If connector or identifier is missing.
+     */
+    getOrCreateConnectedAccount(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { connector: rawConnector, identifier: rawIdentifier, authorizationDetails, organizationId, userId, apiConfig, } = params;
+            const connector = rawConnector === null || rawConnector === void 0 ? void 0 : rawConnector.trim();
+            const identifier = rawIdentifier === null || rawIdentifier === void 0 ? void 0 : rawIdentifier.trim();
+            if (!connector) {
+                throw new Error('connector is required');
+            }
+            if (!identifier) {
+                throw new Error('identifier is required');
+            }
+            try {
+                const getResponse = yield this.getConnectedAccountByIdentifier({
+                    connector,
+                    identifier,
+                    organizationId,
+                    userId,
+                });
+                return (0, protobuf_1.create)(connected_accounts_pb_1.CreateConnectedAccountResponseSchema, {
+                    connectedAccount: getResponse.connectedAccount,
+                });
+            }
+            catch (err) {
+                if (!(err instanceof errors_1.ScalekitNotFoundException)) {
+                    throw err;
+                }
+            }
+            const resolvedAuthDetails = authorizationDetails
+                ? (0, protobuf_1.create)(connected_accounts_pb_1.AuthorizationDetailsSchema, authorizationDetails)
+                : (0, protobuf_1.create)(connected_accounts_pb_1.AuthorizationDetailsSchema, {
+                    details: { case: 'oauthToken', value: (0, protobuf_1.create)(connected_accounts_pb_1.OauthTokenSchema, {}) },
+                });
+            const connectedAccountPayload = (0, protobuf_1.create)(connected_accounts_pb_1.CreateConnectedAccountSchema, Object.assign({ authorizationDetails: resolvedAuthDetails }, (apiConfig != null && {
+                apiConfig: apiConfig,
+            })));
+            return this.createConnectedAccount({
+                connector,
+                identifier,
+                connectedAccount: connectedAccountPayload,
+                organizationId,
+                userId,
+            });
+        });
+    }
+    /**
+     * Updates an existing connected account.
+     *
+     * You can target the account either by `connectedAccountId` alone, or by the
+     * combination of `connector` and `identifier`.
+     *
+     * @throws {ScalekitServerException} If a network or server error occurs.
+     * @throws {ScalekitException} If required parameters are missing.
+     */
+    updateConnectedAccount(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { connector, identifier, connectedAccount, organizationId, userId, connectedAccountId, } = params;
+            if (!connectedAccountId && !((connector === null || connector === void 0 ? void 0 : connector.trim()) && (identifier === null || identifier === void 0 ? void 0 : identifier.trim()))) {
+                throw new Error('either connectedAccountId or connector + identifier is required');
+            }
+            return this.coreClient.connectExec(this.client.updateConnectedAccount, (0, protobuf_1.create)(connected_accounts_pb_1.UpdateConnectedAccountRequestSchema, Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, ((connector === null || connector === void 0 ? void 0 : connector.trim()) && { connector: connector.trim() })), ((identifier === null || identifier === void 0 ? void 0 : identifier.trim()) && { identifier: identifier.trim() })), { connectedAccount }), (organizationId && { organizationId })), (userId && { userId })), (connectedAccountId && { id: connectedAccountId }))));
+        });
+    }
+    /**
+     * Deletes a connected account and revokes its credentials.
+     *
+     * You can target the account either by `connectedAccountId` alone, or by the
+     * combination of `connector` and `identifier`.
+     *
+     * @throws {ScalekitServerException} If a network or server error occurs.
+     * @throws {ScalekitException} If required parameters are missing.
+     */
+    deleteConnectedAccount(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { connector, identifier, organizationId, userId, connectedAccountId, } = params;
+            if (!connectedAccountId && !((connector === null || connector === void 0 ? void 0 : connector.trim()) && (identifier === null || identifier === void 0 ? void 0 : identifier.trim()))) {
+                throw new Error('either connectedAccountId or connector + identifier is required');
+            }
+            return this.coreClient.connectExec(this.client.deleteConnectedAccount, (0, protobuf_1.create)(connected_accounts_pb_1.DeleteConnectedAccountRequestSchema, Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, ((connector === null || connector === void 0 ? void 0 : connector.trim()) && { connector: connector.trim() })), ((identifier === null || identifier === void 0 ? void 0 : identifier.trim()) && { identifier: identifier.trim() })), (organizationId && { organizationId })), (userId && { userId })), (connectedAccountId && { id: connectedAccountId }))));
+        });
+    }
+    /**
+     * Generates a time-limited magic link for connecting or re-authorizing a third-party account.
+     *
+     * @throws {ScalekitServerException} If a network or server error occurs.
+     */
+    getMagicLinkForConnectedAccount(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { connector, identifier, organizationId, userId, connectedAccountId, state, userVerifyUrl, } = params;
+            return this.coreClient.connectExec(this.client.getMagicLinkForConnectedAccount, (0, protobuf_1.create)(connected_accounts_pb_1.GetMagicLinkForConnectedAccountRequestSchema, Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (connector && { connector })), (identifier && { identifier })), (organizationId && { organizationId })), (userId && { userId })), (connectedAccountId && { id: connectedAccountId })), (state && { state })), (userVerifyUrl && { userVerifyUrl }))));
+        });
+    }
+    /**
+     * Verifies the connected account user after OAuth callback.
+     *
+     * Called by the B2B app server with the `auth_request_id` from the user verify
+     * redirect URL and the current user's identifier. Validates that the asserted
+     * identifier matches the one stored on the auth request and activates the account.
+     *
+     * @throws {ScalekitServerException} If a network or server error occurs.
+     */
+    verifyConnectedAccountUser(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const authRequestId = (_a = params.authRequestId) === null || _a === void 0 ? void 0 : _a.trim();
+            const identifier = (_b = params.identifier) === null || _b === void 0 ? void 0 : _b.trim();
+            if (!authRequestId) {
+                throw new Error('authRequestId is required');
+            }
+            if (!identifier) {
+                throw new Error('identifier is required');
+            }
+            return this.coreClient.connectExec(this.client.verifyConnectedAccountUser, (0, protobuf_1.create)(connected_accounts_pb_1.VerifyConnectedAccountUserRequestSchema, {
+                authRequestId,
+                identifier,
+            }));
+        });
+    }
+    /**
+     * Retrieves complete authentication details for a connected account.
+     *
+     * This method returns sensitive credential information, so ensure you protect access
+     * to this in your application.
+     *
+     * @throws {ScalekitServerException} If a network or server error occurs.
+     * @throws {ScalekitNotFoundException} If no matching connected account is found.
+     */
+    getConnectedAccountByIdentifier(params) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { connector, identifier, organizationId, userId, connectedAccountId, } = params;
+            return this.coreClient.connectExec(this.client.getConnectedAccountAuth, (0, protobuf_1.create)(connected_accounts_pb_1.GetConnectedAccountByIdentifierRequestSchema, Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, (connector && { connector })), (identifier && { identifier })), (organizationId && { organizationId })), (userId && { userId })), (connectedAccountId && { id: connectedAccountId }))));
+        });
+    }
+}
+exports.default = ConnectedAccountsClient;
+//# sourceMappingURL=connected-accounts.js.map

package/lib/connected-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connected-accounts.js","sourceRoot":"","sources":["../src/connected-accounts.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,iDAAmE;AAInE,qCAAwE;AACxE,2GAuByE;AAEzE;;;;;;;;;GASG;AACH,MAAqB,uBAAuB;IAG1C,YACmB,WAAwB,EACxB,UAAsB;QADtB,gBAAW,GAAX,WAAW,CAAa;QACxB,eAAU,GAAV,UAAU,CAAY;QAEvC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,+CAAuB,CAAC,CAAC;IACvE,CAAC;IAED;;;;;OAKG;IACG,qBAAqB,CAAC,OAS3B;;;YACC,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,qBAAqB,EACjC,IAAA,iBAAM,EAAC,0DAAkC,sHACpC,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,cAAc,KAAI;gBAC7B,cAAc,EAAE,OAAO,CAAC,cAAc;aACvC,CAAC,GACC,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,GAC/C,CAAC,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,0CAAE,IAAI,EAAE,KAAI;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE;aACpC,CAAC,GACC,CAAC,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,UAAU,0CAAE,IAAI,EAAE,KAAI;gBACjC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE;aACtC,CAAC,GACC,CAAC,CAAA,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,0CAAE,IAAI,EAAE,KAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,GACpE,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,MAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,GACnE,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,KAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,GACxD,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,KAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,EAC/C,CACH,CAAC;QACJ,CAAC;KAAA;IAED;;;;;OAKG;IACG,sBAAsB,CAAC,MAM5B;;YACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,EAAE,GACvE,MAAM,CAAC;YAET,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAClC,IAAA,iBAAM,EAAC,2DAAmC,gCACxC,SAAS;gBACT,UAAU;gBACV,gBAAgB,IACb,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,CAAC,GACtC,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC,EACzB,CACH,CAAC;QACJ,CAAC;KAAA;IAED;;;;;;;;;;;;;;;OAeG;IACG,2BAA2B,CAAC,MAOjC;;YACC,MAAM,EACJ,SAAS,EAAE,YAAY,EACvB,UAAU,EAAE,aAAa,EACzB,oBAAoB,EACpB,cAAc,EACd,MAAM,EACN,SAAS,GACV,GAAG,MAAM,CAAC;YAEX,MAAM,SAAS,GAAG,YAAY,aAAZ,YAAY,uBAAZ,YAAY,CAAE,IAAI,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,IAAI,EAAE,CAAC;YAEzC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC;oBAC7D,SAAS;oBACT,UAAU;oBACV,cAAc;oBACd,MAAM;iBACP,CAAC,CAAC;gBACH,OAAO,IAAA,iBAAM,EAAC,4DAAoC,EAAE;oBAClD,gBAAgB,EAAE,WAAW,CAAC,gBAAgB;iBAC/C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,kCAAyB,CAAC,EAAE,CAAC;oBAChD,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,MAAM,mBAAmB,GAAyB,oBAAoB;gBACpE,CAAC,CAAC,IAAA,iBAAM,EAAC,kDAA0B,EAAE,oBAAoB,CAAC;gBAC1D,CAAC,CAAC,IAAA,iBAAM,EAAC,kDAA0B,EAAE;oBACjC,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAA,iBAAM,EAAC,wCAAgB,EAAE,EAAE,CAAC,EAAE;iBACrE,CAAC,CAAC;YAEP,MAAM,uBAAuB,GAAG,IAAA,iBAAM,EAAC,oDAA4B,kBACjE,oBAAoB,EAAE,mBAAmB,IACtC,CAAC,SAAS,IAAI,IAAI,IAAI;gBACvB,SAAS,EAAE,SAA2D;aACvE,CAAC,EACF,CAAC;YAEH,OAAO,IAAI,CAAC,sBAAsB,CAAC;gBACjC,SAAS;gBACT,UAAU;gBACV,gBAAgB,EAAE,uBAAuB;gBACzC,cAAc;gBACd,MAAM;aACP,CAAC,CAAC;QACL,CAAC;KAAA;IAED;;;;;;;;OAQG;IACG,sBAAsB,CAAC,MAO5B;;YACC,MAAM,EACJ,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,MAAM,EACN,kBAAkB,GACnB,GAAG,MAAM,CAAC;YAEX,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,IAAI,EAAE,MAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,IAAI,EAAE,CAAA,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAClC,IAAA,iBAAM,EAAC,2DAAmC,0FACrC,CAAC,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,IAAI,EAAE,KAAI,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,GACtD,CAAC,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,IAAI,EAAE,KAAI,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,KAC5D,gBAAgB,KACb,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,CAAC,GACtC,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC,GACtB,CAAC,kBAAkB,IAAI,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EACrD,CACH,CAAC;QACJ,CAAC;KAAA;IAED;;;;;;;;OAQG;IACG,sBAAsB,CAAC,MAM5B;;YACC,MAAM,EACJ,SAAS,EACT,UAAU,EACV,cAAc,EACd,MAAM,EACN,kBAAkB,GACnB,GAAG,MAAM,CAAC;YAEX,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,IAAI,EAAE,MAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,IAAI,EAAE,CAAA,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAClC,IAAA,iBAAM,EAAC,2DAAmC,4EACrC,CAAC,CAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,IAAI,EAAE,KAAI,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,GACtD,CAAC,CAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,IAAI,EAAE,KAAI,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,GACzD,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,CAAC,GACtC,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC,GACtB,CAAC,kBAAkB,IAAI,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EACrD,CACH,CAAC;QACJ,CAAC;KAAA;IAED;;;;OAIG;IACG,+BAA+B,CAAC,MAQrC;;YACC,MAAM,EACJ,SAAS,EACT,UAAU,EACV,cAAc,EACd,MAAM,EACN,kBAAkB,EAClB,KAAK,EACL,aAAa,GACd,GAAG,MAAM,CAAC;YAEX,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,+BAA+B,EAC3C,IAAA,iBAAM,EAAC,oEAA4C,wGAC9C,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,GAC5B,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC,GAC9B,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,CAAC,GACtC,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC,GACtB,CAAC,kBAAkB,IAAI,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,GAClD,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,GACpB,CAAC,aAAa,IAAI,EAAE,aAAa,EAAE,CAAC,EACvC,CACH,CAAC;QACJ,CAAC;KAAA;IAED;;;;;;;;OAQG;IACG,0BAA0B,CAAC,MAGhC;;;YACC,MAAM,aAAa,GAAG,MAAA,MAAM,CAAC,aAAa,0CAAE,IAAI,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,MAAA,MAAM,CAAC,UAAU,0CAAE,IAAI,EAAE,CAAC;YAE7C,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,CAAC;YAED,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,0BAA0B,EACtC,IAAA,iBAAM,EAAC,+DAAuC,EAAE;gBAC9C,aAAa;gBACb,UAAU;aACX,CAAC,CACH,CAAC;QACJ,CAAC;KAAA;IAED;;;;;;;;OAQG;IACG,+BAA+B,CAAC,MAMrC;;YACC,MAAM,EACJ,SAAS,EACT,UAAU,EACV,cAAc,EACd,MAAM,EACN,kBAAkB,GACnB,GAAG,MAAM,CAAC;YAEX,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,CAChC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EACnC,IAAA,iBAAM,EAAC,oEAA4C,4EAC9C,CAAC,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC,GAC5B,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC,GAC9B,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,CAAC,GACtC,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC,GACtB,CAAC,kBAAkB,IAAI,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EACrD,CACH,CAAC;QACJ,CAAC;KAAA;CACF;AA5VD,0CA4VC"}

package/lib/core.d.ts

@@ -38,12 +38,14 @@ export default class CoreClient {
      * @returns {Promise<void>} Returns nothing
      */
     getJwks(): Promise<void>;
+    private sleep;
     /**
-     * Execute a function with error handling and retry logic
+     * Execute a function with error handling and retry logic.
+     *
      * @param fn Function to execute
      * @param data Data to pass to the function
-     * @param retryLeft Number of retries left
      * @returns {Promise<TResponse>} Returns the response
      */
-    connectExec<TRequest, TResponse>(fn: (request: TRequest) => Promise<TResponse>, data: TRequest, retryLeft?: number): Promise<TResponse>;
+    connectExec<TRequest, TResponse>(fn: (request: TRequest) => Promise<TResponse>, data: TRequest): Promise<TResponse>;
+    private _connectExec;
 }

package/lib/core.js

@@ -69,7 +69,8 @@ class CoreClient {
         this.accessToken = null;
         // eslint-disable-next-line @typescript-eslint/no-var-requires
         this.sdkVersion = `Scalekit-Node/${require('../package.json').version}`;
-        this.apiVersion = '20260310';
+        // YYYYMMDD
+        this.apiVersion = '20260402';
         this.userAgent = `${this.sdkVersion} Node/${process.version} (${process.platform}; ${os_1.default.arch()})`;
         this.axios = axios_1.default.create({ baseURL: envUrl });
         this.axios.interceptors.request.use((config) => {
@@ -122,27 +123,43 @@ class CoreClient {
             this.keys = keys;
         });
     }
+    sleep(ms) {
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    }
     /**
-     * Execute a function with error handling and retry logic
+     * Execute a function with error handling and retry logic.
+     *
      * @param fn Function to execute
      * @param data Data to pass to the function
-     * @param retryLeft Number of retries left
      * @returns {Promise<TResponse>} Returns the response
      */
-    connectExec(fn_1, data_1) {
-        return __awaiter(this, arguments, void 0, function* (fn, data, retryLeft = 1) {
+    connectExec(fn, data) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this._connectExec(fn, data, 3, 0);
+        });
+    }
+    _connectExec(fn, data, retryLeft, attempt) {
+        return __awaiter(this, void 0, void 0, function* () {
             try {
-                const res = yield fn(data);
-                return res;
+                return yield fn(data);
             }
             catch (error) {
                 // Handle gRPC Connect errors
                 if (error instanceof connect_1.ConnectError) {
                     if (retryLeft > 0) {
-                        const serverException = new base_exception_1.ScalekitServerException(error);
-                        if (serverException.httpStatus === 401) {
+                        if (error.code === connect_1.Code.Unauthenticated) {
                             yield this.authenticateClient();
-                            return this.connectExec(fn, data, retryLeft - 1);
+                            return this._connectExec(fn, data, retryLeft - 1, attempt + 1);
+                        }
+                        // The Connect transport maps HTTP 429 to Code.Unavailable with a 429 body,
+                        // and gRPC-native rate limits come as Code.ResourceExhausted.
+                        const is429 = error.code === connect_1.Code.ResourceExhausted ||
+                            (error.code === connect_1.Code.Unavailable && error.message.includes('429'));
+                        if (is429) {
+                            const baseBackoff = Math.min(1000 * Math.pow(2, attempt), 30000);
+                            const backoffMs = baseBackoff * (0.5 + Math.random() * 0.5);
+                            yield this.sleep(backoffMs);
+                            return this._connectExec(fn, data, retryLeft - 1, attempt + 1);
                         }
                     }
                     throw base_exception_1.ScalekitServerException.promote(error);
@@ -151,10 +168,15 @@ class CoreClient {
                 if (error instanceof axios_1.AxiosError) {
                     if (error.response) {
                         if (retryLeft > 0) {
-                            const serverException = new base_exception_1.ScalekitServerException(error.response);
-                            if (serverException.httpStatus === 401) {
+                            if (error.response.status === 401) {
                                 yield this.authenticateClient();
-                                return this.connectExec(fn, data, retryLeft - 1);
+                                return this._connectExec(fn, data, retryLeft - 1, attempt + 1);
+                            }
+                            if (error.response.status === 429) {
+                                const baseBackoff = Math.min(1000 * Math.pow(2, attempt), 30000);
+                                const backoffMs = baseBackoff * (0.5 + Math.random() * 0.5);
+                                yield this.sleep(backoffMs);
+                                return this._connectExec(fn, data, retryLeft - 1, attempt + 1);
                             }
                         }
                         throw base_exception_1.ScalekitServerException.promote(error.response);

package/lib/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAyD;AACzD,+CAMe;AAWf,4CAAoB;AACpB,4CAA6B;AAC7B,+CAA6C;AAE7C,4DAGiC;AAEpB,QAAA,OAAO,GAAG;IACrB,YAAY,EAAE,YAAY;IAC1B,eAAe,EAAE,eAAe;IAChC,eAAe,EAAE,eAAe;IAChC,aAAa,EAAE,eAAe;CAC/B,CAAC;AAEF,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAqB,UAAU;IAU7B,YACW,MAAc,EACd,QAAgB,EAChB,YAAoB;QAFpB,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAQ;QAChB,iBAAY,GAAZ,YAAY,CAAQ;QAZxB,SAAI,GAAU,EAAE,CAAC;QACjB,gBAAW,GAAkB,IAAI,CAAC;QAEzC,8DAA8D;QACvD,eAAU,GAAG,iBAAkB,OAAO,CAAC,iBAAiB,CAAyB,CAAC,OAAO,EAAE,CAAC;QAC5F,eAAU,GAAG,UAAU,CAAC;QACxB,cAAS,GAAG,GAAG,IAAI,CAAC,UAAU,SAAS,OAAO,CAAC,OAAO,KAC3D,OAAO,CAAC,QACV,KAAK,YAAE,CAAC,IAAI,EAAE,GAAG,CAAC;QAMhB,IAAI,CAAC,KAAK,GAAG,eAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7C,MAAM,CAAC,OAAO,CAAC,eAAO,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,CAAC,OAAO,CAAC,eAAO,CAAC,eAAe,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAC3D,MAAM,CAAC,OAAO,CAAC,eAAO,CAAC,eAAe,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAC3D,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,MAAM,CAAC,OAAO,CAAC,eAAO,CAAC,aAAa,CAAC,GAAG,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;YACvE,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,8IAA8I;QAC9I,4BAA4B;IAC9B,CAAC;IAEa,kBAAkB;;YAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CACjC,YAAW,CAAC,SAAS,CAAC;gBACpB,UAAU,EAAE,oBAAS,CAAC,iBAAiB;gBACvC,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,aAAa,EAAE,IAAI,CAAC,YAAY;aACjC,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;QAC3C,CAAC;KAAA;IACD;;;;OAIG;IACG,YAAY,CAAC,IAAY;;YAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,aAAa,EAAE,IAAI,EAAE;gBACzD,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;KAAA;IAED;;;OAGG;IACG,OAAO;;YACX,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACrB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,EACJ,IAAI,EAAE,EAAE,IAAI,EAAE,GACf,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,YAAY,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;KAAA;IAED;;;;;;OAMG;IACG,WAAW;6DACf,EAA6C,EAC7C,IAAc,EACd,YAAoB,CAAC;YAErB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC3B,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,6BAA6B;gBAC7B,IAAI,KAAK,YAAY,sBAAY,EAAE,CAAC;oBAClC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;wBAClB,MAAM,eAAe,GAAG,IAAI,wCAAuB,CAAC,KAAK,CAAC,CAAC;wBAC3D,IAAI,eAAe,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;4BACvC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BAChC,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;wBACnD,CAAC;oBACH,CAAC;oBACD,MAAM,wCAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/C,CAAC;gBACD,2BAA2B;gBAC3B,IAAI,KAAK,YAAY,kBAAU,EAAE,CAAC;oBAChC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;wBACnB,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;4BAClB,MAAM,eAAe,GAAG,IAAI,wCAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;4BACpE,IAAI,eAAe,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gCACvC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gCAChC,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;4BACnD,CAAC;wBACH,CAAC;wBACD,MAAM,wCAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACxD,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,kCAAiB,CAAC,KAAK,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBACD,8CAA8C;gBAC9C,IAAI,KAAK,YAAY,kCAAiB,EAAE,CAAC;oBACvC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,wBAAwB;gBACxB,MAAM,IAAI,kCAAiB,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;KAAA;CACF;AAvHD,6BAuHC"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAyD;AACzD,+CAMe;AAWf,4CAAoB;AACpB,4CAA6B;AAC7B,+CAA6C;AAE7C,4DAGiC;AAEpB,QAAA,OAAO,GAAG;IACrB,YAAY,EAAE,YAAY;IAC1B,eAAe,EAAE,eAAe;IAChC,eAAe,EAAE,eAAe;IAChC,aAAa,EAAE,eAAe;CAC/B,CAAC;AAEF,MAAM,aAAa,GAAG,aAAa,CAAC;AACpC,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAqB,UAAU;IAW7B,YACW,MAAc,EACd,QAAgB,EAChB,YAAoB;QAFpB,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAQ;QAChB,iBAAY,GAAZ,YAAY,CAAQ;QAbxB,SAAI,GAAU,EAAE,CAAC;QACjB,gBAAW,GAAkB,IAAI,CAAC;QAEzC,8DAA8D;QACvD,eAAU,GAAG,iBAAkB,OAAO,CAAC,iBAAiB,CAAyB,CAAC,OAAO,EAAE,CAAC;QACnG,WAAW;QACJ,eAAU,GAAG,UAAU,CAAC;QACxB,cAAS,GAAG,GAAG,IAAI,CAAC,UAAU,SAAS,OAAO,CAAC,OAAO,KAC3D,OAAO,CAAC,QACV,KAAK,YAAE,CAAC,IAAI,EAAE,GAAG,CAAC;QAMhB,IAAI,CAAC,KAAK,GAAG,eAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC7C,MAAM,CAAC,OAAO,CAAC,eAAO,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YACvD,MAAM,CAAC,OAAO,CAAC,eAAO,CAAC,eAAe,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAC3D,MAAM,CAAC,OAAO,CAAC,eAAO,CAAC,eAAe,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAC3D,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,MAAM,CAAC,OAAO,CAAC,eAAO,CAAC,aAAa,CAAC,GAAG,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;YACvE,CAAC;YAED,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,8IAA8I;QAC9I,4BAA4B;IAC9B,CAAC;IAEa,kBAAkB;;YAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CACjC,YAAW,CAAC,SAAS,CAAC;gBACpB,UAAU,EAAE,oBAAS,CAAC,iBAAiB;gBACvC,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,aAAa,EAAE,IAAI,CAAC,YAAY;aACjC,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC;QAC3C,CAAC;KAAA;IACD;;;;OAIG;IACG,YAAY,CAAC,IAAY;;YAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,aAAa,EAAE,IAAI,EAAE;gBACzD,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;KAAA;IAED;;;OAGG;IACG,OAAO;;YACX,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACrB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,EACJ,IAAI,EAAE,EAAE,IAAI,EAAE,GACf,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,YAAY,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;KAAA;IAEO,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;;;;;OAMG;IACG,WAAW,CACf,EAA6C,EAC7C,IAAc;;YAEd,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;KAAA;IAEa,YAAY,CACxB,EAA6C,EAC7C,IAAc,EACd,SAAiB,EACjB,OAAe;;YAEf,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,6BAA6B;gBAC7B,IAAI,KAAK,YAAY,sBAAY,EAAE,CAAC;oBAClC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;wBAClB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAI,CAAC,eAAe,EAAE,CAAC;4BACxC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BAChC,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;wBACjE,CAAC;wBACD,2EAA2E;wBAC3E,8DAA8D;wBAC9D,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,KAAK,cAAI,CAAC,iBAAiB;4BACrC,CAAC,KAAK,CAAC,IAAI,KAAK,cAAI,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;wBACrE,IAAI,KAAK,EAAE,CAAC;4BACV,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,SAAA,CAAC,EAAI,OAAO,CAAA,EAAE,KAAK,CAAC,CAAC;4BACzD,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;4BAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;4BAC5B,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;wBACjE,CAAC;oBACH,CAAC;oBACD,MAAM,wCAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC/C,CAAC;gBACD,2BAA2B;gBAC3B,IAAI,KAAK,YAAY,kBAAU,EAAE,CAAC;oBAChC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;wBACnB,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;4BAClB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gCAClC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gCAChC,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;4BACjE,CAAC;4BACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gCAClC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,SAAA,CAAC,EAAI,OAAO,CAAA,EAAE,KAAK,CAAC,CAAC;gCACzD,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;gCAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gCAC5B,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;4BACjE,CAAC;wBACH,CAAC;wBACD,MAAM,wCAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACxD,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,kCAAiB,CAAC,KAAK,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBACD,8CAA8C;gBAC9C,IAAI,KAAK,YAAY,kCAAiB,EAAE,CAAC;oBACvC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,wBAAwB;gBACxB,MAAM,IAAI,kCAAiB,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;KAAA;CACF;AAlJD,6BAkJC"}

package/lib/m2mclient.d.ts

@@ -0,0 +1,122 @@
+import type { MessageShape } from '@bufbuild/protobuf';
+import { EmptySchema } from '@bufbuild/protobuf/wkt';
+import GrpcConnect from './connect';
+import CoreClient from './core';
+import { OrganizationClient, CreateOrganizationClientResponse, GetOrganizationClientResponse, UpdateOrganizationClientResponse, CreateOrganizationClientSecretResponse, ListOrganizationClientsResponse } from './pkg/grpc/scalekit/v1/clients/clients_pb';
+export interface CreateOrganizationClientOptions {
+    /** Human-readable name for the client */
+    name?: string;
+    /** Optional description */
+    description?: string;
+    /** Custom claims to embed in access tokens (key-value pairs) */
+    customClaims?: {
+        [key: string]: string;
+    };
+    /** Audience values for access tokens */
+    audience?: string[];
+    /** Scopes to grant */
+    scopes?: string[];
+}
+export interface UpdateOrganizationClientOptions {
+    /** Updated name */
+    name?: string;
+    /** Updated description */
+    description?: string;
+    /** Custom claims to set (replaces existing) */
+    customClaims?: {
+        [key: string]: string;
+    };
+    /** Updated audience values */
+    audience?: string[];
+    /** Updated scopes */
+    scopes?: string[];
+}
+export interface ListOrganizationClientsOptions {
+    /** Page size (between 10 and 100) */
+    pageSize?: number;
+    /** Pagination cursor for next page */
+    pageToken?: string;
+}
+/**
+ * Client for managing M2M (machine-to-machine) API clients per organization.
+ *
+ * Each organization client represents an automated system credential scoped
+ * to one organization, using the client_credentials OAuth flow.
+ *
+ * @example
+ * const scalekitClient = new ScalekitClient(envUrl, clientId, clientSecret);
+ * const m2m = scalekitClient.m2m;
+ *
+ * @see {@link https://docs.scalekit.com/m2m/overview | M2M Documentation}
+ */
+export default class M2MClient {
+    private readonly grpcConnect;
+    private readonly coreClient;
+    private client;
+    constructor(grpcConnect: GrpcConnect, coreClient: CoreClient);
+    /**
+     * Creates a new M2M API client for an organization.
+     *
+     * Returns a `clientId` and a plain `secret` (only available at creation time).
+     *
+     * @param organizationId - The organization to create the client for
+     * @param options - Optional client properties (name, description, customClaims, audience, scopes)
+     * @returns CreateOrganizationClientResponse with clientId, secret, and client metadata
+     */
+    createOrganizationClient(organizationId: string, options?: CreateOrganizationClientOptions): Promise<CreateOrganizationClientResponse>;
+    /**
+     * Retrieves details of a specific M2M client for an organization.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID (format: skc_xxxxx)
+     * @returns GetOrganizationClientResponse with client metadata and active secrets (values hidden)
+     */
+    getOrganizationClient(organizationId: string, clientId: string): Promise<GetOrganizationClientResponse>;
+    /**
+     * Updates the configuration of an existing M2M client.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID to update
+     * @param options - Fields to update (name, description, customClaims, audience, scopes)
+     * @returns UpdateOrganizationClientResponse with updated client metadata
+     */
+    updateOrganizationClient(organizationId: string, clientId: string, options?: UpdateOrganizationClientOptions): Promise<UpdateOrganizationClientResponse>;
+    /**
+     * Permanently deletes an M2M client from an organization.
+     *
+     * This operation cannot be undone. All associated secrets are invalidated.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID to delete
+     * @returns Empty response on success
+     */
+    deleteOrganizationClient(organizationId: string, clientId: string): Promise<MessageShape<typeof EmptySchema>>;
+    /**
+     * Adds a new secret to an M2M client.
+     *
+     * The plain secret value is returned only at creation time and cannot be retrieved again.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID to add a secret to
+     * @returns CreateOrganizationClientSecretResponse with secretId and plain secret
+     */
+    addOrganizationClientSecret(organizationId: string, clientId: string): Promise<CreateOrganizationClientSecretResponse>;
+    /**
+     * Permanently removes a secret from an M2M client.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID
+     * @param secretId - The secret ID to remove
+     * @returns Empty response on success
+     */
+    removeOrganizationClientSecret(organizationId: string, clientId: string, secretId: string): Promise<MessageShape<typeof EmptySchema>>;
+    /**
+     * Lists all M2M clients for an organization with pagination.
+     *
+     * @param organizationId - The organization ID
+     * @param options - Optional pagination options (pageSize 10–100, pageToken)
+     * @returns ListOrganizationClientsResponse with clients array and pagination cursors
+     */
+    listOrganizationClients(organizationId: string, options?: ListOrganizationClientsOptions): Promise<ListOrganizationClientsResponse>;
+}
+export { OrganizationClient, CreateOrganizationClientResponse, GetOrganizationClientResponse, UpdateOrganizationClientResponse, CreateOrganizationClientSecretResponse, ListOrganizationClientsResponse, };

package/lib/m2mclient.js

@@ -0,0 +1,172 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const protobuf_1 = require("@bufbuild/protobuf");
+const clients_pb_1 = require("./pkg/grpc/scalekit/v1/clients/clients_pb");
+function toCustomClaims(claims) {
+    return Object.entries(claims).map(([key, value]) => (0, protobuf_1.create)(clients_pb_1.CustomClaimSchema, { key, value }));
+}
+/**
+ * Client for managing M2M (machine-to-machine) API clients per organization.
+ *
+ * Each organization client represents an automated system credential scoped
+ * to one organization, using the client_credentials OAuth flow.
+ *
+ * @example
+ * const scalekitClient = new ScalekitClient(envUrl, clientId, clientSecret);
+ * const m2m = scalekitClient.m2m;
+ *
+ * @see {@link https://docs.scalekit.com/m2m/overview | M2M Documentation}
+ */
+class M2MClient {
+    constructor(grpcConnect, coreClient) {
+        this.grpcConnect = grpcConnect;
+        this.coreClient = coreClient;
+        this.client = this.grpcConnect.createClient(clients_pb_1.ClientService);
+    }
+    /**
+     * Creates a new M2M API client for an organization.
+     *
+     * Returns a `clientId` and a plain `secret` (only available at creation time).
+     *
+     * @param organizationId - The organization to create the client for
+     * @param options - Optional client properties (name, description, customClaims, audience, scopes)
+     * @returns CreateOrganizationClientResponse with clientId, secret, and client metadata
+     */
+    createOrganizationClient(organizationId, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!organizationId)
+                throw new Error('organizationId is required');
+            return this.coreClient.connectExec(this.client.createOrganizationClient, {
+                organizationId,
+                client: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, ((options === null || options === void 0 ? void 0 : options.name) && { name: options.name })), ((options === null || options === void 0 ? void 0 : options.description) && { description: options.description })), ((options === null || options === void 0 ? void 0 : options.customClaims) && {
+                    customClaims: toCustomClaims(options.customClaims),
+                })), ((options === null || options === void 0 ? void 0 : options.audience) && { audience: options.audience })), ((options === null || options === void 0 ? void 0 : options.scopes) && { scopes: options.scopes })),
+            });
+        });
+    }
+    /**
+     * Retrieves details of a specific M2M client for an organization.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID (format: skc_xxxxx)
+     * @returns GetOrganizationClientResponse with client metadata and active secrets (values hidden)
+     */
+    getOrganizationClient(organizationId, clientId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!organizationId)
+                throw new Error('organizationId is required');
+            if (!clientId)
+                throw new Error('clientId is required');
+            return this.coreClient.connectExec(this.client.getOrganizationClient, {
+                organizationId,
+                clientId,
+            });
+        });
+    }
+    /**
+     * Updates the configuration of an existing M2M client.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID to update
+     * @param options - Fields to update (name, description, customClaims, audience, scopes)
+     * @returns UpdateOrganizationClientResponse with updated client metadata
+     */
+    updateOrganizationClient(organizationId, clientId, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!organizationId)
+                throw new Error('organizationId is required');
+            if (!clientId)
+                throw new Error('clientId is required');
+            return this.coreClient.connectExec(this.client.updateOrganizationClient, {
+                organizationId,
+                clientId,
+                client: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({}, ((options === null || options === void 0 ? void 0 : options.name) && { name: options.name })), ((options === null || options === void 0 ? void 0 : options.description) && { description: options.description })), ((options === null || options === void 0 ? void 0 : options.customClaims) && {
+                    customClaims: toCustomClaims(options.customClaims),
+                })), ((options === null || options === void 0 ? void 0 : options.audience) && { audience: options.audience })), ((options === null || options === void 0 ? void 0 : options.scopes) && { scopes: options.scopes })),
+            });
+        });
+    }
+    /**
+     * Permanently deletes an M2M client from an organization.
+     *
+     * This operation cannot be undone. All associated secrets are invalidated.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID to delete
+     * @returns Empty response on success
+     */
+    deleteOrganizationClient(organizationId, clientId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!organizationId)
+                throw new Error('organizationId is required');
+            if (!clientId)
+                throw new Error('clientId is required');
+            return this.coreClient.connectExec(this.client.deleteOrganizationClient, {
+                organizationId,
+                clientId,
+            });
+        });
+    }
+    /**
+     * Adds a new secret to an M2M client.
+     *
+     * The plain secret value is returned only at creation time and cannot be retrieved again.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID to add a secret to
+     * @returns CreateOrganizationClientSecretResponse with secretId and plain secret
+     */
+    addOrganizationClientSecret(organizationId, clientId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!organizationId)
+                throw new Error('organizationId is required');
+            if (!clientId)
+                throw new Error('clientId is required');
+            return this.coreClient.connectExec(this.client.createOrganizationClientSecret, { organizationId, clientId });
+        });
+    }
+    /**
+     * Permanently removes a secret from an M2M client.
+     *
+     * @param organizationId - The organization ID
+     * @param clientId - The client ID
+     * @param secretId - The secret ID to remove
+     * @returns Empty response on success
+     */
+    removeOrganizationClientSecret(organizationId, clientId, secretId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!organizationId)
+                throw new Error('organizationId is required');
+            if (!clientId)
+                throw new Error('clientId is required');
+            if (!secretId)
+                throw new Error('secretId is required');
+            return this.coreClient.connectExec(this.client.deleteOrganizationClientSecret, { organizationId, clientId, secretId });
+        });
+    }
+    /**
+     * Lists all M2M clients for an organization with pagination.
+     *
+     * @param organizationId - The organization ID
+     * @param options - Optional pagination options (pageSize 10–100, pageToken)
+     * @returns ListOrganizationClientsResponse with clients array and pagination cursors
+     */
+    listOrganizationClients(organizationId, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!organizationId)
+                throw new Error('organizationId is required');
+            return this.coreClient.connectExec(this.client.listOrganizationClients, Object.assign(Object.assign({ organizationId }, ((options === null || options === void 0 ? void 0 : options.pageSize) !== undefined && { pageSize: options.pageSize })), ((options === null || options === void 0 ? void 0 : options.pageToken) && { pageToken: options.pageToken })));
+        });
+    }
+}
+exports.default = M2MClient;
+//# sourceMappingURL=m2mclient.js.map