@fluxbase/sdk 0.0.1-rc.96 → 0.0.1-rc.98

package/dist/index.d.cts

@@ -961,6 +961,20 @@ interface CustomSetting {
     created_at: string;
     updated_at: string;
 }
+/**
+ * Metadata for a secret setting (value is never exposed via API)
+ * Secret values can only be accessed server-side (in edge functions, jobs, handlers)
+ */
+interface SecretSettingMetadata {
+    id: string;
+    key: string;
+    description?: string;
+    user_id?: string;
+    created_by?: string;
+    updated_by?: string;
+    created_at: string;
+    updated_at: string;
+}
 /**
  * Authentication settings for the application
  */
@@ -4983,6 +4997,66 @@ declare class AppSettingsManager {
      * ```
      */
     deleteSetting(key: string): Promise<void>;
+    /**
+     * Set a system-level secret setting (encrypted)
+     *
+     * Creates or updates an encrypted system secret. The value is encrypted server-side
+     * and can only be accessed by edge functions, background jobs, or custom handlers.
+     * The SDK never returns the decrypted value.
+     *
+     * @param key - Secret key
+     * @param value - Secret value (will be encrypted server-side)
+     * @param options - Optional description
+     * @returns Promise resolving to SecretSettingMetadata (never includes the value)
+     *
+     * @example
+     * ```typescript
+     * await client.admin.settings.app.setSecretSetting('stripe_api_key', 'sk-live-xxx', {
+     *   description: 'Stripe API key for payment processing'
+     * })
+     * ```
+     */
+    setSecretSetting(key: string, value: string, options?: {
+        description?: string;
+    }): Promise<SecretSettingMetadata>;
+    /**
+     * Get metadata for a system secret setting (never returns the value)
+     *
+     * @param key - Secret key
+     * @returns Promise resolving to SecretSettingMetadata
+     *
+     * @example
+     * ```typescript
+     * const metadata = await client.admin.settings.app.getSecretSetting('stripe_api_key')
+     * console.log(metadata.key, metadata.updated_at)
+     * // Note: metadata.value is never included
+     * ```
+     */
+    getSecretSetting(key: string): Promise<SecretSettingMetadata>;
+    /**
+     * List all system secret settings (metadata only, never includes values)
+     *
+     * @returns Promise resolving to array of SecretSettingMetadata
+     *
+     * @example
+     * ```typescript
+     * const secrets = await client.admin.settings.app.listSecretSettings()
+     * secrets.forEach(s => console.log(s.key, s.description))
+     * ```
+     */
+    listSecretSettings(): Promise<SecretSettingMetadata[]>;
+    /**
+     * Delete a system secret setting
+     *
+     * @param key - Secret key to delete
+     * @returns Promise<void>
+     *
+     * @example
+     * ```typescript
+     * await client.admin.settings.app.deleteSecretSetting('stripe_api_key')
+     * ```
+     */
+    deleteSecretSetting(key: string): Promise<void>;
 }
 /**
  * Email Template Manager
@@ -5371,6 +5445,68 @@ declare class SettingsClient {
      * ```
      */
     getMany(keys: string[]): Promise<Record<string, any>>;
+    /**
+     * Set a user secret setting (encrypted)
+     *
+     * Creates or updates an encrypted secret that belongs to the current user.
+     * The value is encrypted server-side with a user-specific key and can only be
+     * accessed by edge functions, background jobs, or custom handlers running on
+     * behalf of this user. Even admins cannot see the decrypted value.
+     *
+     * @param key - Secret key
+     * @param value - Secret value (will be encrypted server-side)
+     * @param options - Optional description
+     * @returns Promise resolving to SecretSettingMetadata (never includes the value)
+     *
+     * @example
+     * ```typescript
+     * // Store user's API key for a third-party service
+     * await client.settings.setSecret('openai_api_key', 'sk-abc123', {
+     *   description: 'My OpenAI API key'
+     * })
+     * ```
+     */
+    setSecret(key: string, value: string, options?: {
+        description?: string;
+    }): Promise<SecretSettingMetadata>;
+    /**
+     * Get metadata for a user secret setting (never returns the value)
+     *
+     * @param key - Secret key
+     * @returns Promise resolving to SecretSettingMetadata
+     *
+     * @example
+     * ```typescript
+     * const metadata = await client.settings.getSecret('openai_api_key')
+     * console.log(metadata.key, metadata.updated_at)
+     * // Note: The actual secret value is never returned
+     * ```
+     */
+    getSecret(key: string): Promise<SecretSettingMetadata>;
+    /**
+     * List all user's secret settings (metadata only, never includes values)
+     *
+     * @returns Promise resolving to array of SecretSettingMetadata
+     *
+     * @example
+     * ```typescript
+     * const secrets = await client.settings.listSecrets()
+     * secrets.forEach(s => console.log(s.key, s.description))
+     * ```
+     */
+    listSecrets(): Promise<SecretSettingMetadata[]>;
+    /**
+     * Delete a user secret setting
+     *
+     * @param key - Secret key to delete
+     * @returns Promise<void>
+     *
+     * @example
+     * ```typescript
+     * await client.settings.deleteSecret('openai_api_key')
+     * ```
+     */
+    deleteSecret(key: string): Promise<void>;
 }
 
 /**

package/dist/index.d.ts

@@ -961,6 +961,20 @@ interface CustomSetting {
     created_at: string;
     updated_at: string;
 }
+/**
+ * Metadata for a secret setting (value is never exposed via API)
+ * Secret values can only be accessed server-side (in edge functions, jobs, handlers)
+ */
+interface SecretSettingMetadata {
+    id: string;
+    key: string;
+    description?: string;
+    user_id?: string;
+    created_by?: string;
+    updated_by?: string;
+    created_at: string;
+    updated_at: string;
+}
 /**
  * Authentication settings for the application
  */
@@ -4983,6 +4997,66 @@ declare class AppSettingsManager {
      * ```
      */
     deleteSetting(key: string): Promise<void>;
+    /**
+     * Set a system-level secret setting (encrypted)
+     *
+     * Creates or updates an encrypted system secret. The value is encrypted server-side
+     * and can only be accessed by edge functions, background jobs, or custom handlers.
+     * The SDK never returns the decrypted value.
+     *
+     * @param key - Secret key
+     * @param value - Secret value (will be encrypted server-side)
+     * @param options - Optional description
+     * @returns Promise resolving to SecretSettingMetadata (never includes the value)
+     *
+     * @example
+     * ```typescript
+     * await client.admin.settings.app.setSecretSetting('stripe_api_key', 'sk-live-xxx', {
+     *   description: 'Stripe API key for payment processing'
+     * })
+     * ```
+     */
+    setSecretSetting(key: string, value: string, options?: {
+        description?: string;
+    }): Promise<SecretSettingMetadata>;
+    /**
+     * Get metadata for a system secret setting (never returns the value)
+     *
+     * @param key - Secret key
+     * @returns Promise resolving to SecretSettingMetadata
+     *
+     * @example
+     * ```typescript
+     * const metadata = await client.admin.settings.app.getSecretSetting('stripe_api_key')
+     * console.log(metadata.key, metadata.updated_at)
+     * // Note: metadata.value is never included
+     * ```
+     */
+    getSecretSetting(key: string): Promise<SecretSettingMetadata>;
+    /**
+     * List all system secret settings (metadata only, never includes values)
+     *
+     * @returns Promise resolving to array of SecretSettingMetadata
+     *
+     * @example
+     * ```typescript
+     * const secrets = await client.admin.settings.app.listSecretSettings()
+     * secrets.forEach(s => console.log(s.key, s.description))
+     * ```
+     */
+    listSecretSettings(): Promise<SecretSettingMetadata[]>;
+    /**
+     * Delete a system secret setting
+     *
+     * @param key - Secret key to delete
+     * @returns Promise<void>
+     *
+     * @example
+     * ```typescript
+     * await client.admin.settings.app.deleteSecretSetting('stripe_api_key')
+     * ```
+     */
+    deleteSecretSetting(key: string): Promise<void>;
 }
 /**
  * Email Template Manager
@@ -5371,6 +5445,68 @@ declare class SettingsClient {
      * ```
      */
     getMany(keys: string[]): Promise<Record<string, any>>;
+    /**
+     * Set a user secret setting (encrypted)
+     *
+     * Creates or updates an encrypted secret that belongs to the current user.
+     * The value is encrypted server-side with a user-specific key and can only be
+     * accessed by edge functions, background jobs, or custom handlers running on
+     * behalf of this user. Even admins cannot see the decrypted value.
+     *
+     * @param key - Secret key
+     * @param value - Secret value (will be encrypted server-side)
+     * @param options - Optional description
+     * @returns Promise resolving to SecretSettingMetadata (never includes the value)
+     *
+     * @example
+     * ```typescript
+     * // Store user's API key for a third-party service
+     * await client.settings.setSecret('openai_api_key', 'sk-abc123', {
+     *   description: 'My OpenAI API key'
+     * })
+     * ```
+     */
+    setSecret(key: string, value: string, options?: {
+        description?: string;
+    }): Promise<SecretSettingMetadata>;
+    /**
+     * Get metadata for a user secret setting (never returns the value)
+     *
+     * @param key - Secret key
+     * @returns Promise resolving to SecretSettingMetadata
+     *
+     * @example
+     * ```typescript
+     * const metadata = await client.settings.getSecret('openai_api_key')
+     * console.log(metadata.key, metadata.updated_at)
+     * // Note: The actual secret value is never returned
+     * ```
+     */
+    getSecret(key: string): Promise<SecretSettingMetadata>;
+    /**
+     * List all user's secret settings (metadata only, never includes values)
+     *
+     * @returns Promise resolving to array of SecretSettingMetadata
+     *
+     * @example
+     * ```typescript
+     * const secrets = await client.settings.listSecrets()
+     * secrets.forEach(s => console.log(s.key, s.description))
+     * ```
+     */
+    listSecrets(): Promise<SecretSettingMetadata[]>;
+    /**
+     * Delete a user secret setting
+     *
+     * @param key - Secret key to delete
+     * @returns Promise<void>
+     *
+     * @example
+     * ```typescript
+     * await client.settings.deleteSecret('openai_api_key')
+     * ```
+     */
+    deleteSecret(key: string): Promise<void>;
 }
 
 /**

package/dist/index.js

@@ -4111,6 +4111,99 @@ var AppSettingsManager = class {
   async deleteSetting(key) {
     await this.fetch.delete(`/api/v1/admin/settings/custom/${key}`);
   }
+  // ============================================================================
+  // System Secret Settings (encrypted, server-side access only)
+  // ============================================================================
+  /**
+   * Set a system-level secret setting (encrypted)
+   *
+   * Creates or updates an encrypted system secret. The value is encrypted server-side
+   * and can only be accessed by edge functions, background jobs, or custom handlers.
+   * The SDK never returns the decrypted value.
+   *
+   * @param key - Secret key
+   * @param value - Secret value (will be encrypted server-side)
+   * @param options - Optional description
+   * @returns Promise resolving to SecretSettingMetadata (never includes the value)
+   *
+   * @example
+   * ```typescript
+   * await client.admin.settings.app.setSecretSetting('stripe_api_key', 'sk-live-xxx', {
+   *   description: 'Stripe API key for payment processing'
+   * })
+   * ```
+   */
+  async setSecretSetting(key, value, options) {
+    try {
+      return await this.fetch.put(
+        `/api/v1/admin/settings/custom/secret/${key}`,
+        {
+          value,
+          description: options?.description
+        }
+      );
+    } catch (error) {
+      if (error.status === 404 || error.message?.includes("not found")) {
+        return await this.fetch.post(
+          "/api/v1/admin/settings/custom/secret",
+          {
+            key,
+            value,
+            description: options?.description
+          }
+        );
+      }
+      throw error;
+    }
+  }
+  /**
+   * Get metadata for a system secret setting (never returns the value)
+   *
+   * @param key - Secret key
+   * @returns Promise resolving to SecretSettingMetadata
+   *
+   * @example
+   * ```typescript
+   * const metadata = await client.admin.settings.app.getSecretSetting('stripe_api_key')
+   * console.log(metadata.key, metadata.updated_at)
+   * // Note: metadata.value is never included
+   * ```
+   */
+  async getSecretSetting(key) {
+    return await this.fetch.get(
+      `/api/v1/admin/settings/custom/secret/${key}`
+    );
+  }
+  /**
+   * List all system secret settings (metadata only, never includes values)
+   *
+   * @returns Promise resolving to array of SecretSettingMetadata
+   *
+   * @example
+   * ```typescript
+   * const secrets = await client.admin.settings.app.listSecretSettings()
+   * secrets.forEach(s => console.log(s.key, s.description))
+   * ```
+   */
+  async listSecretSettings() {
+    return await this.fetch.get(
+      "/api/v1/admin/settings/custom/secrets"
+    );
+  }
+  /**
+   * Delete a system secret setting
+   *
+   * @param key - Secret key to delete
+   * @returns Promise<void>
+   *
+   * @example
+   * ```typescript
+   * await client.admin.settings.app.deleteSecretSetting('stripe_api_key')
+   * ```
+   */
+  async deleteSecretSetting(key) {
+    await this.fetch.delete(`/api/v1/admin/settings/custom/secret/${key}`);
+  }
 };
 var EmailTemplateManager = class {
   constructor(fetch2) {
@@ -4445,6 +4538,103 @@ var SettingsClient = class {
       {}
     );
   }
+  // ============================================================================
+  // User Secret Settings (encrypted, user-specific, server-side access only)
+  // ============================================================================
+  /**
+   * Set a user secret setting (encrypted)
+   *
+   * Creates or updates an encrypted secret that belongs to the current user.
+   * The value is encrypted server-side with a user-specific key and can only be
+   * accessed by edge functions, background jobs, or custom handlers running on
+   * behalf of this user. Even admins cannot see the decrypted value.
+   *
+   * @param key - Secret key
+   * @param value - Secret value (will be encrypted server-side)
+   * @param options - Optional description
+   * @returns Promise resolving to SecretSettingMetadata (never includes the value)
+   *
+   * @example
+   * ```typescript
+   * // Store user's API key for a third-party service
+   * await client.settings.setSecret('openai_api_key', 'sk-abc123', {
+   *   description: 'My OpenAI API key'
+   * })
+   * ```
+   */
+  async setSecret(key, value, options) {
+    try {
+      return await this.fetch.put(
+        `/api/v1/settings/secret/${encodeURIComponent(key)}`,
+        {
+          value,
+          description: options?.description
+        }
+      );
+    } catch (error) {
+      if (error.status === 404 || error.message?.includes("not found")) {
+        return await this.fetch.post(
+          "/api/v1/settings/secret/",
+          {
+            key,
+            value,
+            description: options?.description
+          }
+        );
+      }
+      throw error;
+    }
+  }
+  /**
+   * Get metadata for a user secret setting (never returns the value)
+   *
+   * @param key - Secret key
+   * @returns Promise resolving to SecretSettingMetadata
+   *
+   * @example
+   * ```typescript
+   * const metadata = await client.settings.getSecret('openai_api_key')
+   * console.log(metadata.key, metadata.updated_at)
+   * // Note: The actual secret value is never returned
+   * ```
+   */
+  async getSecret(key) {
+    return await this.fetch.get(
+      `/api/v1/settings/secret/${encodeURIComponent(key)}`
+    );
+  }
+  /**
+   * List all user's secret settings (metadata only, never includes values)
+   *
+   * @returns Promise resolving to array of SecretSettingMetadata
+   *
+   * @example
+   * ```typescript
+   * const secrets = await client.settings.listSecrets()
+   * secrets.forEach(s => console.log(s.key, s.description))
+   * ```
+   */
+  async listSecrets() {
+    return await this.fetch.get(
+      "/api/v1/settings/secret/"
+    );
+  }
+  /**
+   * Delete a user secret setting
+   *
+   * @param key - Secret key to delete
+   * @returns Promise<void>
+   *
+   * @example
+   * ```typescript
+   * await client.settings.deleteSecret('openai_api_key')
+   * ```
+   */
+  async deleteSecret(key) {
+    await this.fetch.delete(
+      `/api/v1/settings/secret/${encodeURIComponent(key)}`
+    );
+  }
 };
 
 // src/ddl.ts