@fluxbase/sdk 0.0.1-rc.96 → 0.0.1-rc.98

package/dist/index.cjs

@@ -4113,6 +4113,99 @@ var AppSettingsManager = class {
   async deleteSetting(key) {
     await this.fetch.delete(`/api/v1/admin/settings/custom/${key}`);
   }
+  // ============================================================================
+  // System Secret Settings (encrypted, server-side access only)
+  // ============================================================================
+  /**
+   * Set a system-level secret setting (encrypted)
+   *
+   * Creates or updates an encrypted system secret. The value is encrypted server-side
+   * and can only be accessed by edge functions, background jobs, or custom handlers.
+   * The SDK never returns the decrypted value.
+   *
+   * @param key - Secret key
+   * @param value - Secret value (will be encrypted server-side)
+   * @param options - Optional description
+   * @returns Promise resolving to SecretSettingMetadata (never includes the value)
+   *
+   * @example
+   * ```typescript
+   * await client.admin.settings.app.setSecretSetting('stripe_api_key', 'sk-live-xxx', {
+   *   description: 'Stripe API key for payment processing'
+   * })
+   * ```
+   */
+  async setSecretSetting(key, value, options) {
+    try {
+      return await this.fetch.put(
+        `/api/v1/admin/settings/custom/secret/${key}`,
+        {
+          value,
+          description: options?.description
+        }
+      );
+    } catch (error) {
+      if (error.status === 404 || error.message?.includes("not found")) {
+        return await this.fetch.post(
+          "/api/v1/admin/settings/custom/secret",
+          {
+            key,
+            value,
+            description: options?.description
+          }
+        );
+      }
+      throw error;
+    }
+  }
+  /**
+   * Get metadata for a system secret setting (never returns the value)
+   *
+   * @param key - Secret key
+   * @returns Promise resolving to SecretSettingMetadata
+   *
+   * @example
+   * ```typescript
+   * const metadata = await client.admin.settings.app.getSecretSetting('stripe_api_key')
+   * console.log(metadata.key, metadata.updated_at)
+   * // Note: metadata.value is never included
+   * ```
+   */
+  async getSecretSetting(key) {
+    return await this.fetch.get(
+      `/api/v1/admin/settings/custom/secret/${key}`
+    );
+  }
+  /**
+   * List all system secret settings (metadata only, never includes values)
+   *
+   * @returns Promise resolving to array of SecretSettingMetadata
+   *
+   * @example
+   * ```typescript
+   * const secrets = await client.admin.settings.app.listSecretSettings()
+   * secrets.forEach(s => console.log(s.key, s.description))
+   * ```
+   */
+  async listSecretSettings() {
+    return await this.fetch.get(
+      "/api/v1/admin/settings/custom/secrets"
+    );
+  }
+  /**
+   * Delete a system secret setting
+   *
+   * @param key - Secret key to delete
+   * @returns Promise<void>
+   *
+   * @example
+   * ```typescript
+   * await client.admin.settings.app.deleteSecretSetting('stripe_api_key')
+   * ```
+   */
+  async deleteSecretSetting(key) {
+    await this.fetch.delete(`/api/v1/admin/settings/custom/secret/${key}`);
+  }
 };
 var EmailTemplateManager = class {
   constructor(fetch2) {
@@ -4447,6 +4540,103 @@ var SettingsClient = class {
       {}
     );
   }
+  // ============================================================================
+  // User Secret Settings (encrypted, user-specific, server-side access only)
+  // ============================================================================
+  /**
+   * Set a user secret setting (encrypted)
+   *
+   * Creates or updates an encrypted secret that belongs to the current user.
+   * The value is encrypted server-side with a user-specific key and can only be
+   * accessed by edge functions, background jobs, or custom handlers running on
+   * behalf of this user. Even admins cannot see the decrypted value.
+   *
+   * @param key - Secret key
+   * @param value - Secret value (will be encrypted server-side)
+   * @param options - Optional description
+   * @returns Promise resolving to SecretSettingMetadata (never includes the value)
+   *
+   * @example
+   * ```typescript
+   * // Store user's API key for a third-party service
+   * await client.settings.setSecret('openai_api_key', 'sk-abc123', {
+   *   description: 'My OpenAI API key'
+   * })
+   * ```
+   */
+  async setSecret(key, value, options) {
+    try {
+      return await this.fetch.put(
+        `/api/v1/settings/secret/${encodeURIComponent(key)}`,
+        {
+          value,
+          description: options?.description
+        }
+      );
+    } catch (error) {
+      if (error.status === 404 || error.message?.includes("not found")) {
+        return await this.fetch.post(
+          "/api/v1/settings/secret/",
+          {
+            key,
+            value,
+            description: options?.description
+          }
+        );
+      }
+      throw error;
+    }
+  }
+  /**
+   * Get metadata for a user secret setting (never returns the value)
+   *
+   * @param key - Secret key
+   * @returns Promise resolving to SecretSettingMetadata
+   *
+   * @example
+   * ```typescript
+   * const metadata = await client.settings.getSecret('openai_api_key')
+   * console.log(metadata.key, metadata.updated_at)
+   * // Note: The actual secret value is never returned
+   * ```
+   */
+  async getSecret(key) {
+    return await this.fetch.get(
+      `/api/v1/settings/secret/${encodeURIComponent(key)}`
+    );
+  }
+  /**
+   * List all user's secret settings (metadata only, never includes values)
+   *
+   * @returns Promise resolving to array of SecretSettingMetadata
+   *
+   * @example
+   * ```typescript
+   * const secrets = await client.settings.listSecrets()
+   * secrets.forEach(s => console.log(s.key, s.description))
+   * ```
+   */
+  async listSecrets() {
+    return await this.fetch.get(
+      "/api/v1/settings/secret/"
+    );
+  }
+  /**
+   * Delete a user secret setting
+   *
+   * @param key - Secret key to delete
+   * @returns Promise<void>
+   *
+   * @example
+   * ```typescript
+   * await client.settings.deleteSecret('openai_api_key')
+   * ```
+   */
+  async deleteSecret(key) {
+    await this.fetch.delete(
+      `/api/v1/settings/secret/${encodeURIComponent(key)}`
+    );
+  }
 };
 
 // src/ddl.ts