@cubist-labs/cubesigner-sdk 0.4.250 → 0.4.254

package/src/client/api_client.ts

@@ -145,6 +145,8 @@ import {
   type RolePolicy,
   type InvokePolicyResponse,
   type InvokePolicyRequest,
+  type PolicySecretsInfo,
+  type SetPolicySecretRequest,
   type UploadWasmPolicyRequest,
   type UploadWasmPolicyResponse,
   type LoginRequest,
@@ -1538,7 +1540,7 @@ export class ApiClient extends BaseClient {
 
   // #endregion
 
-  // #region POLICY: policy(Create|Get|List|Update|Delete|Invoke|Secrets)
+  // #region POLICY: policy(Create|Get|List|Update|Delete|Invoke), policySecret(Set|Delete), policySecretsGet
 
   /**
    * Create a new named policy.
@@ -1663,6 +1665,59 @@ export class ApiClient extends BaseClient {
     });
   }
 
+  /**
+   * Set or update an org-level policy secret.
+   *
+   * @param secretName The name of the secret to set.
+   * @param request The set secret request.
+   * @param mfaReceipt Optional MFA receipt(s).
+   * @returns The updated policy secrets info.
+   */
+  async policySecretSet(
+    secretName: string,
+    request: SetPolicySecretRequest,
+    mfaReceipt?: MfaReceipts,
+  ): Promise<CubeSignerResponse<PolicySecretsInfo>> {
+    const o = op("/v0/org/{org_id}/policy/secrets/{secret_name}", "put");
+    const reqFn = async (headers?: HeadersInit) =>
+      this.exec(o, {
+        params: { path: { secret_name: secretName } },
+        body: request,
+        headers,
+      });
+    return await CubeSignerResponse.create(this.env, reqFn, mfaReceipt);
+  }
+
+  /**
+   * Get org-level policy secrets.
+   *
+   * @returns The policy secrets info (names and ACLs only; values are not returned).
+   */
+  async policySecretsGet(): Promise<PolicySecretsInfo> {
+    const o = op("/v0/org/{org_id}/policy/secrets", "get");
+    return this.exec(o, {});
+  }
+
+  /**
+   * Delete an org-level policy secret.
+   *
+   * @param secretName The name of the secret to delete.
+   * @param mfaReceipt Optional MFA receipt(s).
+   * @returns The updated policy secrets info.
+   */
+  async policySecretDelete(
+    secretName: string,
+    mfaReceipt?: MfaReceipts,
+  ): Promise<CubeSignerResponse<PolicySecretsInfo>> {
+    const o = op("/v0/org/{org_id}/policy/secrets/{secret_name}", "delete");
+    const reqFn = async (headers?: HeadersInit) =>
+      this.exec(o, {
+        params: { path: { secret_name: secretName } },
+        headers,
+      });
+    return await CubeSignerResponse.create(this.env, reqFn, mfaReceipt);
+  }
+
   // #endregion
 
   // #region BUCKET: bucket(Get|List|Update)

package/src/env.ts

@@ -20,6 +20,7 @@ export interface EnvInterface {
   Region?: string;
   SignerApiRoot: string;
   OrgEventsTopicArn: string;
+  UploadBucket?: string;
 }
 
 export type Region = string;

package/src/key.ts

@@ -30,6 +30,7 @@ import type {
   KeyInfoJwt,
   KeyAttestationQuery,
   BinanceApiProperties,
+  CoinbaseApiProperties,
 } from "./schema_types";
 import type {
   ApiClient,
@@ -101,6 +102,7 @@ export enum Ed25519 {
   Substrate = "Ed25519SubstrateAddr",
   Tendermint = "Ed25519TendermintAddr",
   BinanceApi = "Ed25519BinanceApi",
+  CoinbaseApi = "Ed25519CoinbaseApi",
   Ton = "Ed25519TonAddr",
   Xrp = "Ed25519XrpAddr",
 }
@@ -128,7 +130,9 @@ export type BabyJubjub = typeof BabyJubjub;
 export type KeyType = Secp256k1 | Bls | Ed25519 | Mnemonic | Stark | P256 | BabyJubjub;
 
 /** The type representing all different kinds of key properties. */
-export type KeyPropertiesPatch = { kind: "BinanceApi" } & BinanceApiProperties;
+export type KeyPropertiesPatch =
+  | ({ kind: "BinanceApi" } & BinanceApiProperties)
+  | ({ kind: "CoinbaseApi" } & CoinbaseApiProperties);
 
 /**
  * A representation of a signing key.
@@ -844,6 +848,8 @@ export function fromSchemaKeyType(ty: SchemaKeyType): KeyType {
       return Ed25519.Ton;
     case "Ed25519BinanceApi":
       return Ed25519.BinanceApi;
+    case "Ed25519CoinbaseApi":
+      return Ed25519.CoinbaseApi;
     case "Stark":
       return Stark;
     case "Mnemonic":