@blinkdotnew/sdk 0.4.1 → 0.4.2

package/README.md

@@ -52,6 +52,14 @@ const text = await blink.data.extractFromUrl("https://example.com/document.pdf")
 const { markdown, metadata, links } = await blink.data.scrape("https://competitor.com")
 const screenshotUrl = await blink.data.screenshot("https://competitor.com")
 
+// Secure API proxy (call external APIs with secret substitution)
+const response = await blink.data.fetch({
+  url: "https://api.sendgrid.com/v3/mail/send",
+  method: "POST",
+  headers: { "Authorization": "Bearer {{sendgrid_api_key}}" },
+  body: { /* email data */ }
+})
+
 // Storage operations (instant - returns public URL directly)
 const { publicUrl } = await blink.storage.upload(
   file,
@@ -76,7 +84,7 @@ This SDK powers every Blink-generated app with:
 - **🔐 Authentication**: JWT-based auth with automatic token management
 - **🗄️ Database**: PostgREST-compatible CRUD operations with advanced filtering  
 - **🤖 AI**: Text generation with web search, object generation, image creation, speech synthesis, and transcription
-- **📄 Data**: Extract text content from documents, spreadsheets, and more
+- **📄 Data**: Extract text content from documents, secure API proxy with secret substitution, web scraping, and screenshots
 - **📁 Storage**: File upload, download, and management
 - **🌐 Universal**: Works on client-side and server-side
 - **📱 Framework Agnostic**: React, Vue, Svelte, vanilla JS, Node.js, Deno
@@ -321,6 +329,77 @@ const fullPageUrl = await blink.data.screenshot('https://example.com', {
   height: 1080
 });
 
+// 🔥 Secure API Proxy (NEW!) - Make API calls with secret substitution
+// Perfect for calling external APIs from frontend while keeping API keys safe
+
+// Basic API call with secret substitution
+const response = await blink.data.fetch({
+  url: 'https://api.sendgrid.com/v3/mail/send',
+  method: 'POST',
+  headers: {
+    'Authorization': 'Bearer {{sendgrid_api_key}}', // Secret replaced server-side
+    'Content-Type': 'application/json'
+  },
+  body: {
+    from: { email: 'me@example.com' },
+    personalizations: [{ to: [{ email: 'user@example.com' }] }],
+    subject: 'Hello from Blink',
+    content: [{ type: 'text/plain', value: 'Sent securely through Blink!' }]
+  }
+});
+
+console.log('Email sent:', response.status === 200);
+console.log('Response:', response.body);
+console.log('Took:', response.durationMs, 'ms');
+
+// GET request with secret in URL and query params
+const weatherData = await blink.data.fetch({
+  url: 'https://api.openweathermap.org/data/2.5/weather',
+  method: 'GET',
+  query: {
+    q: 'London',
+    appid: '{{openweather_api_key}}', // Secret replaced in query params
+    units: 'metric'
+  }
+});
+
+console.log('Weather:', weatherData.body.main.temp, '°C');
+
+// Async/background requests (fire-and-forget)
+const asyncResponse = await blink.data.fetchAsync({
+  url: 'https://api.stripe.com/v1/customers',
+  method: 'POST',
+  headers: {
+    'Authorization': 'Bearer {{stripe_secret_key}}',
+    'Content-Type': 'application/x-www-form-urlencoded'
+  },
+  body: 'email=customer@example.com&name=John Doe'
+});
+
+console.log(asyncResponse.status); // 'triggered'
+console.log(asyncResponse.message); // 'Request triggered in background'
+
+// Multiple secrets in different places
+const complexRequest = await blink.data.fetch({
+  url: 'https://api.github.com/repos/{{github_username}}/{{repo_name}}/issues',
+  method: 'POST',
+  headers: {
+    'Authorization': 'token {{github_token}}',
+    'Accept': 'application/vnd.github.v3+json',
+    'User-Agent': '{{app_name}}'
+  },
+  body: {
+    title: 'Bug Report',
+    body: 'Found via {{app_name}} monitoring'
+  }
+});
+
+// Secret substitution works everywhere:
+// - URL path: /api/{{version}}/users
+// - Query params: ?key={{api_key}}&user={{user_id}}
+// - Headers: Authorization: Bearer {{token}}
+// - Body: { "apiKey": "{{secret}}", "data": "{{value}}" }
+
 // Error handling for data extraction
 try {
   const result = await blink.data.extractFromUrl('https://example.com/huge-file.pdf');
@@ -418,6 +497,47 @@ const todos = await blink.db.todos.list<Todo>({
 // todos is fully typed as ListResponse<Todo>
 ```
 
+### Secret Management for API Proxy
+
+The `blink.data.fetch()` method allows you to make secure API calls with automatic secret substitution. Here's how to set it up:
+
+**Step 1: Store your secrets in your Blink project**
+Visit your project dashboard at [blink.new](https://blink.new) and add your API keys in the "Secrets" section:
+- `sendgrid_api_key` → `SG.abc123...`
+- `openweather_api_key` → `d4f5g6h7...`
+- `stripe_secret_key` → `sk_live_abc123...`
+
+**Step 2: Use secrets in your API calls**
+```typescript
+// Secrets are automatically substituted server-side - never exposed to frontend
+const result = await blink.data.fetch({
+  url: 'https://api.example.com/endpoint',
+  headers: {
+    'Authorization': 'Bearer {{your_secret_key}}' // Replaced with actual value
+  }
+})
+```
+
+**Step 3: Secret substitution works everywhere**
+```typescript
+await blink.data.fetch({
+  url: 'https://api.{{service_domain}}/v{{api_version}}/users/{{user_id}}',
+  query: { 
+    key: '{{api_key}}',
+    format: 'json' 
+  },
+  headers: { 
+    'X-API-Key': '{{secondary_key}}' 
+  },
+  body: {
+    token: '{{auth_token}}',
+    data: 'regular string data'
+  }
+})
+```
+
+All `{{secret_name}}` placeholders are replaced with encrypted values from your project's secret store. Secrets never leave the server and are never visible to your frontend code.
+
 ## 🌍 Framework Examples
 
 ### React
@@ -442,6 +562,42 @@ function App() {
 
   return <div>Welcome, {user.email}!</div>
 }
+
+// React example with secure API calls
+function EmailSender() {
+  const [status, setStatus] = useState('')
+  
+  const sendEmail = async () => {
+    setStatus('Sending...')
+    try {
+      const response = await blink.data.fetch({
+        url: 'https://api.sendgrid.com/v3/mail/send',
+        method: 'POST',
+        headers: {
+          'Authorization': 'Bearer {{sendgrid_api_key}}', // Secret safe on server
+          'Content-Type': 'application/json'
+        },
+        body: {
+          from: { email: 'app@example.com' },
+          personalizations: [{ to: [{ email: user.email }] }],
+          subject: 'Welcome to our app!',
+          content: [{ type: 'text/plain', value: 'Thanks for signing up!' }]
+        }
+      })
+      
+      setStatus(response.status === 202 ? 'Email sent!' : 'Failed to send')
+    } catch (error) {
+      setStatus('Error: ' + error.message)
+    }
+  }
+  
+  return (
+    <div>
+      <button onClick={sendEmail}>Send Welcome Email</button>
+      <p>{status}</p>
+    </div>
+  )
+}
 ```
 
 ### Next.js API Routes

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { BlinkClientConfig, BlinkUser, AuthState, HttpClient, TableOperations, CreateOptions, UpsertOptions, QueryOptions, ListResponse, UpdateOptions, FilterCondition, ScrapeResult, BlinkStorage, BlinkAI, StorageUploadOptions, StorageUploadResponse, TextGenerationRequest, TextGenerationResponse, ObjectGenerationRequest, ObjectGenerationResponse, ImageGenerationRequest, ImageGenerationResponse, SpeechGenerationRequest, SpeechGenerationResponse, TranscriptionRequest, TranscriptionResponse } from '@blink/core';
+import { BlinkClientConfig, BlinkUser, AuthState, HttpClient, TableOperations, CreateOptions, UpsertOptions, QueryOptions, ListResponse, UpdateOptions, FilterCondition, ScrapeResult, FetchRequest, FetchResponse, AsyncFetchResponse, BlinkStorage, BlinkAI, StorageUploadOptions, StorageUploadResponse, TextGenerationRequest, TextGenerationResponse, ObjectGenerationRequest, ObjectGenerationResponse, ImageGenerationRequest, ImageGenerationResponse, SpeechGenerationRequest, SpeechGenerationResponse, TranscriptionRequest, TranscriptionResponse } from '@blink/core';
 export { AuthState, AuthTokens, BlinkAI, BlinkClientConfig, BlinkData, BlinkStorage, BlinkUser, CreateOptions, DataExtraction, FileObject, FilterCondition, ImageGenerationRequest, ImageGenerationResponse, ListResponse, Message, ObjectGenerationRequest, ObjectGenerationResponse, QueryOptions, SpeechGenerationRequest, SpeechGenerationResponse, StorageUploadOptions, StorageUploadResponse, TableOperations, TextGenerationRequest, TextGenerationResponse, TokenUsage, TranscriptionRequest, TranscriptionResponse, UpdateOptions, UpsertOptions } from '@blink/core';
 
 /**
@@ -211,6 +211,8 @@ interface BlinkData {
         width?: number;
         height?: number;
     }): Promise<string>;
+    fetch(request: FetchRequest): Promise<FetchResponse>;
+    fetchAsync(request: Omit<FetchRequest, 'async'>): Promise<AsyncFetchResponse>;
 }
 declare class BlinkDataImpl implements BlinkData {
     private httpClient;
@@ -230,6 +232,8 @@ declare class BlinkDataImpl implements BlinkData {
         width?: number;
         height?: number;
     }): Promise<string>;
+    fetch(request: FetchRequest): Promise<FetchResponse>;
+    fetchAsync(request: Omit<FetchRequest, 'async'>): Promise<AsyncFetchResponse>;
 }
 
 /**

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { BlinkClientConfig, BlinkUser, AuthState, HttpClient, TableOperations, CreateOptions, UpsertOptions, QueryOptions, ListResponse, UpdateOptions, FilterCondition, ScrapeResult, BlinkStorage, BlinkAI, StorageUploadOptions, StorageUploadResponse, TextGenerationRequest, TextGenerationResponse, ObjectGenerationRequest, ObjectGenerationResponse, ImageGenerationRequest, ImageGenerationResponse, SpeechGenerationRequest, SpeechGenerationResponse, TranscriptionRequest, TranscriptionResponse } from '@blink/core';
+import { BlinkClientConfig, BlinkUser, AuthState, HttpClient, TableOperations, CreateOptions, UpsertOptions, QueryOptions, ListResponse, UpdateOptions, FilterCondition, ScrapeResult, FetchRequest, FetchResponse, AsyncFetchResponse, BlinkStorage, BlinkAI, StorageUploadOptions, StorageUploadResponse, TextGenerationRequest, TextGenerationResponse, ObjectGenerationRequest, ObjectGenerationResponse, ImageGenerationRequest, ImageGenerationResponse, SpeechGenerationRequest, SpeechGenerationResponse, TranscriptionRequest, TranscriptionResponse } from '@blink/core';
 export { AuthState, AuthTokens, BlinkAI, BlinkClientConfig, BlinkData, BlinkStorage, BlinkUser, CreateOptions, DataExtraction, FileObject, FilterCondition, ImageGenerationRequest, ImageGenerationResponse, ListResponse, Message, ObjectGenerationRequest, ObjectGenerationResponse, QueryOptions, SpeechGenerationRequest, SpeechGenerationResponse, StorageUploadOptions, StorageUploadResponse, TableOperations, TextGenerationRequest, TextGenerationResponse, TokenUsage, TranscriptionRequest, TranscriptionResponse, UpdateOptions, UpsertOptions } from '@blink/core';
 
 /**
@@ -211,6 +211,8 @@ interface BlinkData {
         width?: number;
         height?: number;
     }): Promise<string>;
+    fetch(request: FetchRequest): Promise<FetchResponse>;
+    fetchAsync(request: Omit<FetchRequest, 'async'>): Promise<AsyncFetchResponse>;
 }
 declare class BlinkDataImpl implements BlinkData {
     private httpClient;
@@ -230,6 +232,8 @@ declare class BlinkDataImpl implements BlinkData {
         width?: number;
         height?: number;
     }): Promise<string>;
+    fetch(request: FetchRequest): Promise<FetchResponse>;
+    fetchAsync(request: Omit<FetchRequest, 'async'>): Promise<AsyncFetchResponse>;
 }
 
 /**

package/dist/index.js

@@ -40,6 +40,12 @@ var BlinkAIError = class extends BlinkError {
     this.name = "BlinkAIError";
   }
 };
+var BlinkDataError = class extends BlinkError {
+  constructor(message, status, details) {
+    super(message, "DATA_ERROR", status, details);
+    this.name = "BlinkDataError";
+  }
+};
 
 // ../core/src/query-builder.ts
 function buildFilterQuery(condition) {
@@ -564,6 +570,12 @@ var HttpClient = class {
       body: JSON.stringify(request)
     });
   }
+  async dataFetch(projectId, request) {
+    return this.request(`/api/data/${projectId}/fetch`, {
+      method: "POST",
+      body: JSON.stringify(request)
+    });
+  }
   /**
    * Private helper methods
    */
@@ -2392,6 +2404,21 @@ var BlinkDataImpl = class {
     const response = await this.httpClient.dataScreenshot(this.projectId, request);
     return response.data.url;
   }
+  async fetch(request) {
+    const response = await this.httpClient.dataFetch(this.projectId, request);
+    if ("status" in response.data && "headers" in response.data) {
+      return response.data;
+    }
+    throw new BlinkDataError("Unexpected response format from fetch endpoint");
+  }
+  async fetchAsync(request) {
+    const asyncRequest = { ...request, async: true };
+    const response = await this.httpClient.dataFetch(this.projectId, asyncRequest);
+    if ("status" in response.data && response.data.status === "triggered") {
+      return response.data;
+    }
+    throw new BlinkDataError("Unexpected response format from async fetch endpoint");
+  }
 };
 
 // src/client.ts