@shipstatic/types 0.5.3 → 0.5.4

package/dist/index.d.ts

@@ -156,10 +156,12 @@ export interface DomainValidateResponse {
  * Deployment token for automated deployments
  */
 export interface Token {
-    /** The token hash (not the actual token value) */
+    /** 7-char management identifier */
     readonly token: string;
     /** The account this token belongs to */
     readonly account: string;
+    /** SHA256 hash of the raw credential (auth lookups only, never exposed to users) */
+    readonly hash: string;
     /** IP address locking for security, null if not locked */
     readonly ip: string | null;
     /** Labels for categorization and filtering (lowercase, alphanumeric with separators). Always present, empty array when none. */
@@ -173,10 +175,10 @@ export interface Token {
 }
 /**
  * Token as returned by the list endpoint.
- * Security-redacted: shows truncated prefix instead of full hash, omits account.
+ * Shows 7-char management ID, omits account and hash.
  */
 export interface TokenListItem {
-    /** Truncated token prefix for identification (e.g., "hash12345678...") */
+    /** 7-char management identifier (e.g., "a1b2c3d") */
     readonly token: string;
     /** Labels for categorization and filtering. Always present, empty array when none. */
     labels: string[];
@@ -200,8 +202,10 @@ export interface TokenListResponse {
  * Response for token creation
  */
 export interface TokenCreateResponse {
-    /** The actual token value (only returned on creation) */
+    /** 7-char management identifier */
     token: string;
+    /** The raw credential value (shown once at creation, then never again) */
+    secret: string;
     /** Labels for categorization and filtering. Always present, empty array when none. */
     labels: string[];
     /** Unix timestamp (seconds) when token expires, null for never */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipstatic/types",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "Shared types for Shipstatic platform",
   "type": "module",
   "main": "./dist/index.js",

package/src/index.ts

@@ -182,10 +182,12 @@ export interface DomainValidateResponse {
  * Deployment token for automated deployments
  */
 export interface Token {
-  /** The token hash (not the actual token value) */
+  /** 7-char management identifier */
   readonly token: string;
   /** The account this token belongs to */
   readonly account: string;
+  /** SHA256 hash of the raw credential (auth lookups only, never exposed to users) */
+  readonly hash: string;
   /** IP address locking for security, null if not locked */
   readonly ip: string | null;
   /** Labels for categorization and filtering (lowercase, alphanumeric with separators). Always present, empty array when none. */
@@ -200,10 +202,10 @@ export interface Token {
 
 /**
  * Token as returned by the list endpoint.
- * Security-redacted: shows truncated prefix instead of full hash, omits account.
+ * Shows 7-char management ID, omits account and hash.
  */
 export interface TokenListItem {
-  /** Truncated token prefix for identification (e.g., "hash12345678...") */
+  /** 7-char management identifier (e.g., "a1b2c3d") */
   readonly token: string;
   /** Labels for categorization and filtering. Always present, empty array when none. */
   labels: string[];
@@ -229,8 +231,10 @@ export interface TokenListResponse {
  * Response for token creation
  */
 export interface TokenCreateResponse {
-  /** The actual token value (only returned on creation) */
+  /** 7-char management identifier */
   token: string;
+  /** The raw credential value (shown once at creation, then never again) */
+  secret: string;
   /** Labels for categorization and filtering. Always present, empty array when none. */
   labels: string[];
   /** Unix timestamp (seconds) when token expires, null for never */