@fluxbase/sdk 2026.2.8 → 2026.3.2-rc.3

package/dist/index.js

@@ -5591,7 +5591,9 @@ var OAuthProviderManager = class {
    * ```
    */
   async listProviders() {
-    const providers = await this.fetch.get("/api/v1/admin/oauth/providers");
+    const providers = await this.fetch.get(
+      "/api/v1/admin/oauth/providers"
+    );
     return Array.isArray(providers) ? providers : [];
   }
   /**
@@ -5613,7 +5615,9 @@ var OAuthProviderManager = class {
    * ```
    */
   async getProvider(providerId) {
-    return await this.fetch.get(`/api/v1/admin/oauth/providers/${providerId}`);
+    return await this.fetch.get(
+      `/api/v1/admin/oauth/providers/${providerId}`
+    );
   }
   /**
    * Create a new OAuth provider
@@ -5652,7 +5656,7 @@ var OAuthProviderManager = class {
    *   client_id: 'client-id',
    *   client_secret: 'client-secret',
    *   redirect_url: 'https://yourapp.com/auth/callback',
-   *   scopes: ['openid', 'profile', 'email'],
+   *   scopes: ['openid', 'profile', 'email', 'offline_access'],
    *   is_custom: true,
    *   authorization_url: 'https://sso.example.com/oauth/authorize',
    *   token_url: 'https://sso.example.com/oauth/token',
@@ -5661,7 +5665,10 @@ var OAuthProviderManager = class {
    * ```
    */
   async createProvider(request) {
-    return await this.fetch.post("/api/v1/admin/oauth/providers", request);
+    return await this.fetch.post(
+      "/api/v1/admin/oauth/providers",
+      request
+    );
   }
   /**
    * Update an existing OAuth provider
@@ -5831,7 +5838,10 @@ var AuthSettingsManager = class {
    * ```
    */
   async update(request) {
-    return await this.fetch.put("/api/v1/admin/auth/settings", request);
+    return await this.fetch.put(
+      "/api/v1/admin/auth/settings",
+      request
+    );
   }
 };
 var FluxbaseOAuth = class {
@@ -10105,6 +10115,312 @@ var FluxbaseAdmin = class {
   }
 };
 
+// src/secrets.ts
+var SecretsManager = class {
+  constructor(fetch2) {
+    this.fetch = fetch2;
+  }
+  /**
+   * Create a new secret
+   *
+   * Creates a new secret with the specified name, value, and scope.
+   * The value is encrypted at rest and never returned by the API.
+   *
+   * @param request - Secret creation request
+   * @returns Promise resolving to the created secret (metadata only)
+   *
+   * @example
+   * ```typescript
+   * // Create a global secret
+   * const secret = await client.secrets.create({
+   *   name: 'SENDGRID_API_KEY',
+   *   value: 'SG.xxx',
+   *   description: 'SendGrid API key for transactional emails'
+   * })
+   *
+   * // Create a namespace-scoped secret
+   * const secret = await client.secrets.create({
+   *   name: 'DATABASE_URL',
+   *   value: 'postgres://user:pass@host:5432/db',
+   *   scope: 'namespace',
+   *   namespace: 'production',
+   *   description: 'Production database URL'
+   * })
+   *
+   * // Create a secret with expiration
+   * const secret = await client.secrets.create({
+   *   name: 'TEMP_TOKEN',
+   *   value: 'xyz123',
+   *   expires_at: '2025-12-31T23:59:59Z'
+   * })
+   * ```
+   */
+  async create(request) {
+    return await this.fetch.post("/api/v1/secrets", request);
+  }
+  /**
+   * Get a secret by name (metadata only, never includes value)
+   *
+   * @param name - Secret name
+   * @param options - Optional namespace for namespace-scoped secrets
+   * @returns Promise resolving to the secret
+   *
+   * @example
+   * ```typescript
+   * // Get a global secret
+   * const secret = await client.secrets.get('API_KEY')
+   *
+   * // Get a namespace-scoped secret
+   * const secret = await client.secrets.get('DATABASE_URL', { namespace: 'production' })
+   * ```
+   */
+  async get(name, options) {
+    const params = new URLSearchParams();
+    if (options?.namespace) {
+      params.set("namespace", options.namespace);
+    }
+    const query = params.toString() ? `?${params.toString()}` : "";
+    return await this.fetch.get(`/api/v1/secrets/by-name/${encodeURIComponent(name)}${query}`);
+  }
+  /**
+   * Update a secret by name
+   *
+   * Updates the secret's value, description, or expiration.
+   * Only provided fields will be updated.
+   *
+   * @param name - Secret name
+   * @param request - Update request
+   * @param options - Optional namespace for namespace-scoped secrets
+   * @returns Promise resolving to the updated secret
+   *
+   * @example
+   * ```typescript
+   * // Update secret value
+   * const secret = await client.secrets.update('API_KEY', { value: 'new-value' })
+   *
+   * // Update description
+   * const secret = await client.secrets.update('API_KEY', { description: 'Updated description' })
+   *
+   * // Update namespace-scoped secret
+   * const secret = await client.secrets.update('DATABASE_URL',
+   *   { value: 'postgres://new-host:5432/db' },
+   *   { namespace: 'production' }
+   * )
+   * ```
+   */
+  async update(name, request, options) {
+    const params = new URLSearchParams();
+    if (options?.namespace) {
+      params.set("namespace", options.namespace);
+    }
+    const query = params.toString() ? `?${params.toString()}` : "";
+    return await this.fetch.put(`/api/v1/secrets/by-name/${encodeURIComponent(name)}${query}`, request);
+  }
+  /**
+   * Delete a secret by name
+   *
+   * Permanently deletes the secret and all its versions.
+   *
+   * @param name - Secret name
+   * @param options - Optional namespace for namespace-scoped secrets
+   * @returns Promise resolving when deletion is complete
+   *
+   * @example
+   * ```typescript
+   * // Delete a global secret
+   * await client.secrets.delete('OLD_API_KEY')
+   *
+   * // Delete a namespace-scoped secret
+   * await client.secrets.delete('DATABASE_URL', { namespace: 'staging' })
+   * ```
+   */
+  async delete(name, options) {
+    const params = new URLSearchParams();
+    if (options?.namespace) {
+      params.set("namespace", options.namespace);
+    }
+    const query = params.toString() ? `?${params.toString()}` : "";
+    await this.fetch.delete(`/api/v1/secrets/by-name/${encodeURIComponent(name)}${query}`);
+  }
+  /**
+   * Get version history for a secret by name
+   *
+   * Returns all historical versions of the secret (values are never included).
+   *
+   * @param name - Secret name
+   * @param options - Optional namespace for namespace-scoped secrets
+   * @returns Promise resolving to array of secret versions
+   *
+   * @example
+   * ```typescript
+   * const versions = await client.secrets.getVersions('API_KEY')
+   *
+   * versions.forEach(v => {
+   *   console.log(`Version ${v.version} created at ${v.created_at}`)
+   * })
+   * ```
+   */
+  async getVersions(name, options) {
+    const params = new URLSearchParams();
+    if (options?.namespace) {
+      params.set("namespace", options.namespace);
+    }
+    const query = params.toString() ? `?${params.toString()}` : "";
+    return await this.fetch.get(`/api/v1/secrets/by-name/${encodeURIComponent(name)}/versions${query}`);
+  }
+  /**
+   * Rollback a secret to a previous version by name
+   *
+   * Restores the secret to a previous version's value.
+   * This creates a new version with the old value.
+   *
+   * @param name - Secret name
+   * @param version - Version number to rollback to
+   * @param options - Optional namespace for namespace-scoped secrets
+   * @returns Promise resolving to the updated secret
+   *
+   * @example
+   * ```typescript
+   * // Rollback to version 2
+   * const secret = await client.secrets.rollback('API_KEY', 2)
+   * console.log(`Secret now at version ${secret.version}`)
+   * ```
+   */
+  async rollback(name, version, options) {
+    const params = new URLSearchParams();
+    if (options?.namespace) {
+      params.set("namespace", options.namespace);
+    }
+    const query = params.toString() ? `?${params.toString()}` : "";
+    return await this.fetch.post(
+      `/api/v1/secrets/by-name/${encodeURIComponent(name)}/rollback/${version}${query}`,
+      {}
+    );
+  }
+  /**
+   * List all secrets (metadata only, never includes values)
+   *
+   * @param options - Filter options for scope and namespace
+   * @returns Promise resolving to array of secret summaries
+   *
+   * @example
+   * ```typescript
+   * // List all secrets
+   * const secrets = await client.secrets.list()
+   *
+   * // List only global secrets
+   * const secrets = await client.secrets.list({ scope: 'global' })
+   *
+   * // List secrets for a specific namespace
+   * const secrets = await client.secrets.list({ namespace: 'production' })
+   *
+   * secrets.forEach(s => {
+   *   console.log(`${s.name}: version ${s.version}, expired: ${s.is_expired}`)
+   * })
+   * ```
+   */
+  async list(options) {
+    const params = new URLSearchParams();
+    if (options?.scope) {
+      params.set("scope", options.scope);
+    }
+    if (options?.namespace) {
+      params.set("namespace", options.namespace);
+    }
+    const query = params.toString() ? `?${params.toString()}` : "";
+    return await this.fetch.get(`/api/v1/secrets${query}`);
+  }
+  /**
+   * Get statistics about secrets
+   *
+   * @returns Promise resolving to secret statistics
+   *
+   * @example
+   * ```typescript
+   * const stats = await client.secrets.stats()
+   * console.log(`Total: ${stats.total}, Expiring soon: ${stats.expiring_soon}, Expired: ${stats.expired}`)
+   * ```
+   */
+  async stats() {
+    return await this.fetch.get("/api/v1/secrets/stats");
+  }
+  // UUID-based methods for backward compatibility
+  /**
+   * Get a secret by ID (metadata only)
+   *
+   * @param id - Secret UUID
+   * @returns Promise resolving to the secret
+   *
+   * @example
+   * ```typescript
+   * const secret = await client.secrets.getById('550e8400-e29b-41d4-a716-446655440000')
+   * ```
+   */
+  async getById(id) {
+    return await this.fetch.get(`/api/v1/secrets/${encodeURIComponent(id)}`);
+  }
+  /**
+   * Update a secret by ID
+   *
+   * @param id - Secret UUID
+   * @param request - Update request
+   * @returns Promise resolving to the updated secret
+   *
+   * @example
+   * ```typescript
+   * const secret = await client.secrets.updateById('550e8400-e29b-41d4-a716-446655440000', {
+   *   value: 'new-value'
+   * })
+   * ```
+   */
+  async updateById(id, request) {
+    return await this.fetch.put(`/api/v1/secrets/${encodeURIComponent(id)}`, request);
+  }
+  /**
+   * Delete a secret by ID
+   *
+   * @param id - Secret UUID
+   * @returns Promise resolving when deletion is complete
+   *
+   * @example
+   * ```typescript
+   * await client.secrets.deleteById('550e8400-e29b-41d4-a716-446655440000')
+   * ```
+   */
+  async deleteById(id) {
+    await this.fetch.delete(`/api/v1/secrets/${encodeURIComponent(id)}`);
+  }
+  /**
+   * Get version history for a secret by ID
+   *
+   * @param id - Secret UUID
+   * @returns Promise resolving to array of secret versions
+   *
+   * @example
+   * ```typescript
+   * const versions = await client.secrets.getVersionsById('550e8400-e29b-41d4-a716-446655440000')
+   * ```
+   */
+  async getVersionsById(id) {
+    return await this.fetch.get(`/api/v1/secrets/${encodeURIComponent(id)}/versions`);
+  }
+  /**
+   * Rollback a secret to a previous version by ID
+   *
+   * @param id - Secret UUID
+   * @param version - Version number to rollback to
+   * @returns Promise resolving to the updated secret
+   *
+   * @example
+   * ```typescript
+   * const secret = await client.secrets.rollbackById('550e8400-e29b-41d4-a716-446655440000', 2)
+   * ```
+   */
+  async rollbackById(id, version) {
+    return await this.fetch.post(`/api/v1/secrets/${encodeURIComponent(id)}/rollback/${version}`, {});
+  }
+};
+
 // src/ai.ts
 var FluxbaseAIChat = class {
   constructor(options) {
@@ -12589,6 +12905,7 @@ var FluxbaseClient = class {
     this.admin = new FluxbaseAdmin(this.fetch);
     this.management = new FluxbaseManagement(this.fetch);
     this.settings = new SettingsClient(this.fetch);
+    this.secrets = new SecretsManager(this.fetch);
     const wsProtocol = fluxbaseUrl.startsWith("https") ? "wss" : "ws";
     const wsBaseUrl = fluxbaseUrl.replace(/^https?:/, wsProtocol + ":");
     this.ai = new FluxbaseAI(this.fetch, wsBaseUrl);
@@ -12851,6 +13168,6 @@ function assertType(value, validator, errorMessage = "Type assertion failed") {
   }
 }
 
-export { APIKeysManager, AppSettingsManager, AuthSettingsManager, ClientKeysManager, DDLManager, EmailSettingsManager, EmailTemplateManager, ExecutionLogsChannel, FluxbaseAI, FluxbaseAIChat, FluxbaseAdmin, FluxbaseAdminAI, FluxbaseAdminFunctions, FluxbaseAdminJobs, FluxbaseAdminMigrations, FluxbaseAdminRPC, FluxbaseAdminRealtime, FluxbaseAdminStorage, FluxbaseAuth, FluxbaseBranching, FluxbaseClient, FluxbaseFetch, FluxbaseFunctions, FluxbaseGraphQL, FluxbaseJobs, FluxbaseManagement, FluxbaseOAuth, FluxbaseRPC, FluxbaseRealtime, FluxbaseSettings, FluxbaseStorage, FluxbaseVector, ImpersonationManager, InvitationsManager, OAuthProviderManager, QueryBuilder, RealtimeChannel, SchemaQueryBuilder, SettingsClient, StorageBucket, SystemSettingsManager, WebhooksManager, assertType, bundleCode, createClient, denoExternalPlugin, hasPostgrestError, isArray, isAuthError, isAuthSuccess, isBoolean, isFluxbaseError, isFluxbaseSuccess, isNumber, isObject, isPostgrestSuccess, isString, loadImportMap };
+export { APIKeysManager, AppSettingsManager, AuthSettingsManager, ClientKeysManager, DDLManager, EmailSettingsManager, EmailTemplateManager, ExecutionLogsChannel, FluxbaseAI, FluxbaseAIChat, FluxbaseAdmin, FluxbaseAdminAI, FluxbaseAdminFunctions, FluxbaseAdminJobs, FluxbaseAdminMigrations, FluxbaseAdminRPC, FluxbaseAdminRealtime, FluxbaseAdminStorage, FluxbaseAuth, FluxbaseBranching, FluxbaseClient, FluxbaseFetch, FluxbaseFunctions, FluxbaseGraphQL, FluxbaseJobs, FluxbaseManagement, FluxbaseOAuth, FluxbaseRPC, FluxbaseRealtime, FluxbaseSettings, FluxbaseStorage, FluxbaseVector, ImpersonationManager, InvitationsManager, OAuthProviderManager, QueryBuilder, RealtimeChannel, SchemaQueryBuilder, SecretsManager, SettingsClient, StorageBucket, SystemSettingsManager, WebhooksManager, assertType, bundleCode, createClient, denoExternalPlugin, hasPostgrestError, isArray, isAuthError, isAuthSuccess, isBoolean, isFluxbaseError, isFluxbaseSuccess, isNumber, isObject, isPostgrestSuccess, isString, loadImportMap };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map