skedyul 0.3.12 → 0.3.13

package/dist/.build-stamp

@@ -1 +1 @@
-1771642825820
+1771646139683

package/dist/server/serverless.js

@@ -422,6 +422,64 @@ function createServerlessInstance(config, tools, callTool, state, mcpServer, reg
                         }, headers);
                     }
                 }
+                // Handle /provision endpoint for provision handlers
+                if (path === '/provision' && method === 'POST') {
+                    if (!config.hooks?.provision) {
+                        return (0, utils_1.createResponse)(404, { error: 'Provision handler not configured' }, headers);
+                    }
+                    let provisionBody;
+                    try {
+                        provisionBody = event.body ? JSON.parse(event.body) : {};
+                    }
+                    catch {
+                        return (0, utils_1.createResponse)(400, { error: { code: -32700, message: 'Parse error' } }, headers);
+                    }
+                    if (!provisionBody.context?.app) {
+                        return (0, utils_1.createResponse)(400, { error: { code: -32602, message: 'Missing context (app required)' } }, headers);
+                    }
+                    // SECURITY: Merge process.env (baked-in secrets) with request env (API token).
+                    // This ensures secrets like MAILGUN_API_KEY come from the container,
+                    // while runtime values like SKEDYUL_API_TOKEN come from the request.
+                    const mergedEnv = {};
+                    for (const [key, value] of Object.entries(process.env)) {
+                        if (value !== undefined) {
+                            mergedEnv[key] = value;
+                        }
+                    }
+                    // Request env overrides process.env (e.g., for SKEDYUL_API_TOKEN)
+                    Object.assign(mergedEnv, provisionBody.env ?? {});
+                    const provisionContext = {
+                        env: mergedEnv,
+                        app: provisionBody.context.app,
+                        invocation: provisionBody.invocation,
+                        log: (0, logger_1.createContextLogger)(),
+                    };
+                    // Build request-scoped config for SDK access
+                    const provisionRequestConfig = {
+                        baseUrl: mergedEnv.SKEDYUL_API_URL ?? '',
+                        apiToken: mergedEnv.SKEDYUL_API_TOKEN ?? '',
+                    };
+                    try {
+                        const provisionHook = config.hooks.provision;
+                        const provisionHandler = typeof provisionHook === 'function'
+                            ? provisionHook
+                            : provisionHook.handler;
+                        const result = await (0, context_logger_1.runWithLogContext)({ invocation: provisionBody.invocation }, async () => {
+                            return await (0, client_1.runWithConfig)(provisionRequestConfig, async () => {
+                                return await provisionHandler(provisionContext);
+                            });
+                        });
+                        return (0, utils_1.createResponse)(200, result, headers);
+                    }
+                    catch (err) {
+                        return (0, utils_1.createResponse)(500, {
+                            error: {
+                                code: -32603,
+                                message: err instanceof Error ? err.message : String(err ?? ''),
+                            },
+                        }, headers);
+                    }
+                }
                 // Handle /oauth_callback endpoint for OAuth callbacks (called by platform route)
                 if (path === '/oauth_callback' && method === 'POST') {
                     if (!config.hooks?.oauth_callback) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "skedyul",
-  "version": "0.3.12",
+  "version": "0.3.13",
   "description": "The Skedyul SDK for Node.js",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",