@eng-ai/sdk 2.3.0 → 2.7.0

package/CHANGELOG.md

@@ -2,6 +2,69 @@
 
 All notable changes to `@eng-ai/sdk` will be documented in this file.
 
+## 2.7.0 - 2026-04-09
+
+### Added
+
+- External Documents APIs (v2) in SDK:
+  - `listDocuments({ projectId?, tags?, tagMode? })`
+  - `getDocument(documentId)`
+  - `uploadDocument({ file, fileName?, contentType?, projectId?, tags? })`
+  - `updateDocumentTags(documentId, tags)`
+  - `deleteDocument(documentId)`
+- Tag-aware query support for external integrations (`tagMode=any|all` + repeated `tags`).
+
+### Changed
+
+- SDK internals now support multipart requests for file uploads with consistent timeout and error handling.
+
+## 2.6.0 - 2026-04-07
+
+### Added
+
+- Vertex AI BYOK fields in settings APIs:
+  - `setAISettings({ vertexProjectId?, vertexLocation?, vertexServiceAccountJson? })`
+- CLI `eng-ai settings ai set` now supports:
+  - `--provider vertex`
+  - `--vertex-project-id`
+  - `--vertex-location`
+  - `--vertex-service-account-json`
+
+### Security
+
+- SDK debug redaction expanded for service-account sensitive keys (`service_account`, `private_key`, `private_key_id`, `client_email`, `client_id`).
+
+## 2.5.0 - 2026-04-05
+
+### Added
+
+- External profile support (API key owner scope):
+  - `getProfile()`
+  - `updateProfile({ preferredName?, honorific?, crea?, specialty?, avatarUrl? })`
+- CLI `eng-ai` profile commands:
+  - `profile get`
+  - `profile set --preferred-name ... --honorific ... --crea ... --specialty ... --avatar-url ...`
+
+### Changed
+
+- Frontend profile update flow now writes through backend API only (`/api/v1/auth/me/profile`) and no longer depends on direct profile writes in Supabase client.
+
+## 2.4.0 - 2026-04-05
+
+### Added
+
+- External user settings support (API key only):
+  - `getAISettings()`
+  - `setAISettings({ provider, model, projectModel?, apiKey?, googleApiKeyRag?, preferredTimezone? })`
+  - `clearAISettings()`
+  - `setVoiceLiveEnabled(enabled)`
+  - `getGeneralSettings()`
+  - `setGeneralSettings(preferredTimezone?)`
+- CLI `eng-ai` commands for external settings:
+  - `settings ai get|set|clear`
+  - `settings ai voice-live --enabled true|false`
+  - `settings general get|set`
+
 ## 2.3.0 - 2026-04-05
 
 ### Added

package/README.md

@@ -81,6 +81,33 @@ const context = await client.getProjectContext(project.id);
 console.log(context.autonomous_tasks_mode);
 ```
 
+Project documents (tags, filters, upload, update):
+
+```js
+const uploaded = await client.uploadDocument({
+  file: new Blob(["conteudo tecnico"], { type: "text/plain" }),
+  fileName: "escopo.txt",
+  projectId: project.id,
+  tags: ["Marco Estrutural", "Planejamento"]
+});
+
+await client.updateDocumentTags(uploaded.id, ["Marco Estrutural", "Revisado"]);
+
+const docsAny = await client.listDocuments({
+  projectId: project.id,
+  tags: ["Marco Estrutural", "Revisado"],
+  tagMode: "any"
+});
+
+const docsAll = await client.listDocuments({
+  projectId: project.id,
+  tags: ["Marco Estrutural", "Revisado"],
+  tagMode: "all"
+});
+
+console.log(docsAny.length, docsAll.length);
+```
+
 External approval flow (pull):
 
 ```js
@@ -100,6 +127,36 @@ Supported automation plan actions:
 - `rejectAutomationPlan(projectId, planId, note?, { idempotencyKey? })`
 - `applyAutomationPlan(projectId, planId, { idempotencyKey? })`
 
+External user settings (API key owner scope):
+
+```js
+const ai = await client.getAISettings();
+await client.setAISettings({
+  provider: "vertex",
+  model: "gemini-2.5-flash",
+  projectModel: "gemini-2.5-flash",
+  vertexProjectId: "my-gcp-project",
+  vertexLocation: "southamerica-east1",
+  vertexServiceAccountJson: process.env.VERTEX_SERVICE_ACCOUNT_JSON,
+  preferredTimezone: "America/Sao_Paulo",
+});
+await client.setVoiceLiveEnabled(true);
+const general = await client.getGeneralSettings();
+await client.setGeneralSettings(general.preferred_timezone || "America/Sao_Paulo");
+```
+
+External profile (API key owner scope):
+
+```js
+const profile = await client.getProfile();
+await client.updateProfile({
+  preferredName: "Felipe",
+  honorific: "Eng.",
+  crea: "123456/D",
+  specialty: "Geotecnia",
+});
+```
+
 CLI (`eng-ai`) included in package:
 
 ```bash
@@ -108,6 +165,13 @@ ENG_AI_API_KEY=sk_xxx eng-ai plans actionable list --limit 30
 ENG_AI_API_KEY=sk_xxx eng-ai plans approve --project-id <id> --plan-id <id> --note "Approved"
 ENG_AI_API_KEY=sk_xxx eng-ai plans apply --project-id <id> --plan-id <id>
 ENG_AI_API_KEY=sk_xxx eng-ai plans watch --interval 15 --limit 30
+ENG_AI_API_KEY=sk_xxx eng-ai settings ai get
+ENG_AI_API_KEY=sk_xxx eng-ai settings ai set --provider google --model gemini-3.1-flash-lite-preview --preferred-timezone America/Sao_Paulo
+ENG_AI_API_KEY=sk_xxx eng-ai settings ai set --provider vertex --model gemini-2.5-flash --vertex-project-id my-gcp-project --vertex-location southamerica-east1 --vertex-service-account-json "$VERTEX_SERVICE_ACCOUNT_JSON"
+ENG_AI_API_KEY=sk_xxx eng-ai settings ai voice-live --enabled true
+ENG_AI_API_KEY=sk_xxx eng-ai settings general set --preferred-timezone America/Sao_Paulo
+ENG_AI_API_KEY=sk_xxx eng-ai profile get
+ENG_AI_API_KEY=sk_xxx eng-ai profile set --preferred-name Felipe --honorific "Eng." --crea "123456/D" --specialty Geotecnia
 ```
 
 Default base URL: `https://api.eng-ai.com/api/v2`.

package/bin/eng-ai.js

@@ -40,6 +40,14 @@ function toPositiveInt(value, fallback) {
   return Math.floor(parsed);
 }
 
+function toBoolean(value, fallback = undefined) {
+  if (value === undefined || value === null) return fallback;
+  const normalized = String(value).trim().toLowerCase();
+  if (["1", "true", "yes", "y", "on"].includes(normalized)) return true;
+  if (["0", "false", "no", "n", "off"].includes(normalized)) return false;
+  return fallback;
+}
+
 function maskId(value) {
   const text = String(value || "");
   if (text.length <= 8) return text;
@@ -57,6 +65,14 @@ Usage:
   eng-ai plans reject --project-id <id> --plan-id <id> [--note <text>] [--idempotency-key <key>]
   eng-ai plans apply --project-id <id> --plan-id <id> [--idempotency-key <key>]
   eng-ai plans watch [--interval <seconds>] [--limit <n>]
+  eng-ai settings ai get
+  eng-ai settings ai set --provider <openai|anthropic|google|vertex> --model <name> [--project-model <name>] [--api-key <key>] [--google-api-key-rag <key>] [--preferred-timezone <IANA_TZ>] [--vertex-project-id <id>] [--vertex-location <region>] [--vertex-service-account-json <json>]
+  eng-ai settings ai clear
+  eng-ai settings ai voice-live --enabled <true|false>
+  eng-ai settings general get
+  eng-ai settings general set [--preferred-timezone <IANA_TZ>]
+  eng-ai profile get
+  eng-ai profile set [--preferred-name <name>] [--honorific <text>] [--crea <text>] [--specialty <text>] [--avatar-url <url>]
 
 Environment:
   ENG_AI_API_KEY   (required)
@@ -192,6 +208,112 @@ async function runPlansCommand(client, subTokens, options) {
   console.log(JSON.stringify(result, null, 2));
 }
 
+async function runSettingsCommand(client, subTokens, options) {
+  const section = String(subTokens[0] || "").trim().toLowerCase();
+  const action = String(subTokens[1] || "").trim().toLowerCase();
+
+  if (!section || !action) {
+    throw new Error("Unsupported settings command. Use: settings ai|get ...");
+  }
+
+  if (section === "ai") {
+    if (action === "get") {
+      const result = await client.getAISettings();
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+
+    if (action === "clear") {
+      const result = await client.clearAISettings();
+      console.log("AI settings removed.");
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+
+    if (action === "set") {
+      const provider = options.provider;
+      const model = options.model;
+      if (!provider || !model) {
+        throw new Error("Missing required options: --provider and --model");
+      }
+
+      const result = await client.setAISettings({
+        provider,
+        model,
+        projectModel: options["project-model"],
+        apiKey: options["api-key"],
+        googleApiKeyRag: options["google-api-key-rag"],
+        preferredTimezone: options["preferred-timezone"],
+        vertexProjectId: options["vertex-project-id"],
+        vertexLocation: options["vertex-location"],
+        vertexServiceAccountJson: options["vertex-service-account-json"],
+      });
+      console.log("AI settings updated.");
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+
+    if (action === "voice-live") {
+      const enabled = toBoolean(options.enabled, undefined);
+      if (enabled === undefined) {
+        throw new Error("Missing or invalid --enabled. Use --enabled true|false");
+      }
+      const result = await client.setVoiceLiveEnabled(enabled);
+      console.log("Voice-live toggle updated.");
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+  }
+
+  if (section === "general") {
+    if (action === "get") {
+      const result = await client.getGeneralSettings();
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+
+    if (action === "set") {
+      const result = await client.setGeneralSettings(options["preferred-timezone"] || null);
+      console.log("General settings updated.");
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+  }
+
+  throw new Error("Unsupported settings command. Use ai|get/set/clear/voice-live or general|get/set");
+}
+
+async function runProfileCommand(client, subTokens, options) {
+  const action = String(subTokens[0] || "").trim().toLowerCase();
+  if (action === "get") {
+    const result = await client.getProfile();
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+
+  if (action === "set") {
+    const payload = {
+      preferredName: options["preferred-name"],
+      honorific: options.honorific,
+      crea: options.crea,
+      specialty: options.specialty,
+      avatarUrl: options["avatar-url"],
+    };
+    const hasAnyField = Object.values(payload).some((value) => value !== undefined);
+    if (!hasAnyField) {
+      throw new Error(
+        "Missing profile fields. Use at least one: --preferred-name, --honorific, --crea, --specialty, --avatar-url"
+      );
+    }
+    const result = await client.updateProfile(payload);
+    console.log("Profile updated.");
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+
+  throw new Error("Unsupported profile command. Use: profile get|set");
+}
+
 async function main() {
   const { tokens, options } = parseArgs(process.argv.slice(2));
   const command = tokens[0];
@@ -209,6 +331,14 @@ async function main() {
     await runPlansCommand(client, tokens.slice(1), options);
     return;
   }
+  if (command === "settings") {
+    await runSettingsCommand(client, tokens.slice(1), options);
+    return;
+  }
+  if (command === "profile") {
+    await runProfileCommand(client, tokens.slice(1), options);
+    return;
+  }
 
   throw new Error(`Unknown command: ${command}`);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eng-ai/sdk",
-  "version": "2.3.0",
+  "version": "2.7.0",
   "description": "Official JavaScript SDK for ENG-AI External API v2",
   "type": "module",
   "main": "./src/client.js",

package/src/client.js

@@ -1,11 +1,13 @@
 const DEFAULT_BASE_URL = "https://api.eng-ai.com/api/v2";
 const DEFAULT_TIMEOUT_MS = 60000;
-const REDACT_KEY_PATTERN = /api[-_]?key|authorization|token|secret|password|cookie|set-cookie/i;
+const REDACT_KEY_PATTERN =
+  /api[-_]?key|authorization|token|secret|password|cookie|set-cookie|service[-_]?account|private[-_]?key|private[-_]?key[-_]?id|client[-_]?email|client[-_]?id/i;
 const VALID_AUTONOMOUS_TASKS_MODES = new Set([
   "approval_required",
   "approval_delete_only",
   "full_autonomy",
 ]);
+const VALID_DOCUMENT_TAG_MODES = new Set(["any", "all"]);
 
 function isPlainObject(value) {
   return !!value && Object.prototype.toString.call(value) === "[object Object]";
@@ -165,6 +167,28 @@ export class EngAIClient {
     return { ...this.defaultHeaders, ...extra };
   }
 
+  _normalizeTagArray(tags, fieldName = "tags") {
+    if (tags === undefined || tags === null) return [];
+    if (!Array.isArray(tags)) {
+      throw new EngAIError(`${fieldName} must be an array of strings`, {
+        status: 400,
+        code: "validation_error",
+        detail: `${fieldName} must be an array`,
+      });
+    }
+    const normalized = [];
+    const seen = new Set();
+    for (const rawTag of tags) {
+      const tag = String(rawTag || "").trim().replace(/\s+/g, " ");
+      if (!tag) continue;
+      const key = tag.toLowerCase();
+      if (seen.has(key)) continue;
+      seen.add(key);
+      normalized.push(tag);
+    }
+    return normalized;
+  }
+
   async _parseResponseBody(response) {
     const contentType = String(response.headers.get("content-type") || "").toLowerCase();
     if (contentType.includes("application/json") || contentType.includes("+json")) {
@@ -282,6 +306,77 @@ export class EngAIClient {
     }
   }
 
+  async _requestMultipart(pathname, { method = "POST", formData, headers = {} } = {}) {
+    if (!(formData instanceof FormData)) {
+      throw new EngAIError("formData must be a FormData instance", {
+        status: 400,
+        code: "validation_error",
+        detail: "multipart request requires FormData",
+      });
+    }
+
+    const url = this._buildUrl(pathname);
+    const requestHeaders = {
+      ...this.defaultHeaders,
+      ...headers,
+    };
+    delete requestHeaders["Content-Type"];
+
+    this._log("info", "request.start", {
+      method,
+      url,
+      headers: requestHeaders,
+      body: { type: "form-data" },
+      timeout_ms: this.timeoutMs,
+    });
+
+    try {
+      const response = await this._fetchWithTimeout(url, {
+        method,
+        headers: requestHeaders,
+        body: formData,
+      });
+      const parsedBody = await this._parseResponseBody(response);
+      if (!response.ok) {
+        const err = this._buildHttpError(response, parsedBody, method, url);
+        this._log("warn", "request.error", err.toJSON());
+        throw err;
+      }
+      this._log("info", "request.success", {
+        method,
+        url,
+        status: response.status,
+        request_id: extractRequestId(parsedBody),
+      });
+      return parsedBody;
+    } catch (error) {
+      if (error instanceof EngAIError) throw error;
+      if (error?.name === "AbortError") {
+        const timeoutErr = new EngAIError(
+          `ENG-AI request timeout after ${this.timeoutMs}ms`,
+          { status: 408, code: "request_timeout", method, url, detail: "Request timeout" },
+          error
+        );
+        this._log("warn", "request.timeout", timeoutErr.toJSON());
+        throw timeoutErr;
+      }
+
+      const networkErr = new EngAIError(
+        "ENG-AI network error",
+        {
+          status: 0,
+          code: "network_error",
+          detail: error?.message || "Unknown network error",
+          method,
+          url,
+        },
+        error
+      );
+      this._log("warn", "request.network_error", networkErr.toJSON());
+      throw networkErr;
+    }
+  }
+
   _requireNonEmptyString(value, fieldName) {
     const normalized = String(value || "").trim();
     if (!normalized) {
@@ -378,6 +473,204 @@ export class EngAIClient {
     });
   }
 
+  async listDocuments(options = {}) {
+    const query = new URLSearchParams();
+    if (options.projectId ?? options.project_id) {
+      query.set("project_id", String(options.projectId ?? options.project_id));
+    }
+
+    const tagMode = options.tagMode ?? options.tag_mode;
+    if (tagMode !== undefined && tagMode !== null) {
+      const normalizedTagMode = String(tagMode).trim().toLowerCase();
+      if (!VALID_DOCUMENT_TAG_MODES.has(normalizedTagMode)) {
+        throw new EngAIError("invalid tagMode for listDocuments", {
+          status: 400,
+          code: "validation_error",
+          detail: "tagMode must be one of: any, all",
+        });
+      }
+      query.set("tag_mode", normalizedTagMode);
+    }
+
+    const normalizedTags = this._normalizeTagArray(options.tags, "tags");
+    for (const tag of normalizedTags) {
+      query.append("tags", tag);
+    }
+
+    const suffix = query.toString() ? `?${query.toString()}` : "";
+    return await this._request(`/documents/${suffix}`, {
+      method: "GET",
+    });
+  }
+
+  async getDocument(documentId) {
+    const normalizedDocumentId = this._requireNonEmptyString(documentId, "documentId");
+    return await this._request(`/documents/${encodeURIComponent(normalizedDocumentId)}`, {
+      method: "GET",
+    });
+  }
+
+  async uploadDocument(payload = {}) {
+    const file = payload.file ?? payload.content;
+    if (file === undefined || file === null) {
+      throw new EngAIError("file is required for uploadDocument", {
+        status: 400,
+        code: "validation_error",
+        detail: "payload.file must be provided",
+      });
+    }
+
+    const formData = new FormData();
+    const filename = String(payload.fileName ?? payload.filename ?? "document.bin");
+    const contentType = payload.contentType ?? payload.content_type;
+    const normalizedProjectId = payload.projectId ?? payload.project_id;
+    const normalizedTags = this._normalizeTagArray(payload.tags, "tags");
+
+    if (
+      file instanceof Blob ||
+      (typeof File !== "undefined" && file instanceof File)
+    ) {
+      formData.append("file", file, filename);
+    } else if (file instanceof ArrayBuffer) {
+      formData.append(
+        "file",
+        new Blob([file], {
+          type: contentType ? String(contentType) : "application/octet-stream",
+        }),
+        filename
+      );
+    } else if (ArrayBuffer.isView(file)) {
+      formData.append(
+        "file",
+        new Blob([file], {
+          type: contentType ? String(contentType) : "application/octet-stream",
+        }),
+        filename
+      );
+    } else {
+      throw new EngAIError("unsupported file type for uploadDocument", {
+        status: 400,
+        code: "validation_error",
+        detail: "file must be Blob, File, ArrayBuffer, Buffer, or Uint8Array",
+      });
+    }
+
+    if (normalizedProjectId) {
+      formData.append("project_id", String(normalizedProjectId));
+    }
+    if (normalizedTags.length > 0) {
+      formData.append("tags", JSON.stringify(normalizedTags));
+    }
+
+    return await this._requestMultipart("/documents/upload", {
+      method: "POST",
+      formData,
+    });
+  }
+
+  async updateDocumentTags(documentId, tags = []) {
+    const normalizedDocumentId = this._requireNonEmptyString(documentId, "documentId");
+    const normalizedTags = this._normalizeTagArray(tags, "tags");
+    return await this._request(`/documents/${encodeURIComponent(normalizedDocumentId)}/tags`, {
+      method: "PATCH",
+      body: { tags: normalizedTags },
+    });
+  }
+
+  async deleteDocument(documentId) {
+    const normalizedDocumentId = this._requireNonEmptyString(documentId, "documentId");
+    return await this._request(`/documents/${encodeURIComponent(normalizedDocumentId)}`, {
+      method: "DELETE",
+    });
+  }
+
+  async getAISettings() {
+    return await this._request("/settings/llm", {
+      method: "GET",
+    });
+  }
+
+  async setAISettings(payload) {
+    const provider = this._requireNonEmptyString(payload?.provider, "provider").toLowerCase();
+    const model = this._requireNonEmptyString(payload?.model, "model");
+    const body = {
+      provider,
+      model,
+      project_model: payload?.projectModel ?? payload?.project_model,
+      api_key: payload?.apiKey ?? payload?.api_key,
+      google_api_key_rag: payload?.googleApiKeyRag ?? payload?.google_api_key_rag,
+      vertex_project_id: payload?.vertexProjectId ?? payload?.vertex_project_id,
+      vertex_location: payload?.vertexLocation ?? payload?.vertex_location,
+      vertex_service_account_json:
+        payload?.vertexServiceAccountJson ?? payload?.vertex_service_account_json,
+      preferred_timezone: payload?.preferredTimezone ?? payload?.preferred_timezone,
+    };
+
+    return await this._request("/settings/llm", {
+      method: "PUT",
+      body,
+    });
+  }
+
+  async clearAISettings() {
+    return await this._request("/settings/llm", {
+      method: "DELETE",
+    });
+  }
+
+  async setVoiceLiveEnabled(enabled) {
+    return await this._request("/settings/voice-live", {
+      method: "PUT",
+      body: { enabled: !!enabled },
+    });
+  }
+
+  async getGeneralSettings() {
+    return await this._request("/settings/general", {
+      method: "GET",
+    });
+  }
+
+  async setGeneralSettings(preferredTimezone = null) {
+    return await this._request("/settings/general", {
+      method: "PUT",
+      body: {
+        preferred_timezone: preferredTimezone || null,
+      },
+    });
+  }
+
+  async getProfile() {
+    return await this._request("/profile", {
+      method: "GET",
+    });
+  }
+
+  async updateProfile(payload = {}) {
+    const body = {
+      preferred_name: payload?.preferredName ?? payload?.preferred_name,
+      honorific: payload?.honorific,
+      crea: payload?.crea ?? payload?.crea_cau,
+      specialty: payload?.specialty,
+      avatar_url: payload?.avatarUrl ?? payload?.avatar_url,
+    };
+
+    const hasAnyField = Object.values(body).some((value) => value !== undefined);
+    if (!hasAnyField) {
+      throw new EngAIError("at least one profile field is required for updateProfile", {
+        status: 400,
+        code: "validation_error",
+        detail:
+          "provide one of: preferred_name, honorific, crea, specialty, avatar_url",
+      });
+    }
+
+    return await this._request("/profile", {
+      method: "PUT",
+      body,
+    });
+  }
+
   async getProjectContext(projectId) {
     const normalizedProjectId = this._requireNonEmptyString(projectId, "projectId");
     return await this._request(`/projects/${encodeURIComponent(normalizedProjectId)}/context`, {