@hush-hush/sdk 3.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 alrayyes
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to
+deal in the Software without restriction, including without limitation the
+rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
+sell copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,64 @@
+# hush-hush-node
+
+[![ci](https://github.com/alrayyes/hush-hush-node/actions/workflows/ci.yml/badge.svg)](https://github.com/alrayyes/hush-hush-node/actions/workflows/ci.yml)
+[![Codecov](https://codecov.io/gh/alrayyes/hush-hush-node/graph/badge.svg)](https://codecov.io/gh/alrayyes/hush-hush-node)
+[![npm](https://img.shields.io/npm/v/hush-hush)](https://www.npmjs.com/package/hush-hush)
+[![release](https://img.shields.io/github/v/release/alrayyes/hush-hush-node)](https://github.com/alrayyes/hush-hush-node/releases)
+[![license](https://img.shields.io/github/license/alrayyes/hush-hush-node)](LICENSE)
+
+The official Node.js/TypeScript SDK for
+[hush-hush](https://github.com/alrayyes/hush-hush), generated from its
+OpenAPI spec and kept in sync with it automatically.
+
+## Install
+
+```sh
+npm install hush-hush
+```
+
+Requires Node.js 22 or newer.
+
+## Quickstart
+
+```ts
+import { Client } from "hush-hush";
+
+const client = new Client("https://hush-hush.example.com", {
+  apiKey: "your-api-key", // or set HUSH_HUSH_API_KEY
+});
+
+// Create is a write operation — it needs the credential above.
+await client.createObject(
+  "my-first-secret",
+  new TextEncoder().encode("already-sealed-ciphertext"),
+);
+
+// Get needs no credential — hush-hush's confidentiality boundary is
+// "who holds a matching private key," not who's calling this endpoint.
+const value = await client.getObject("my-first-secret");
+console.log(`got ${value.byteLength} bytes of sealed ciphertext`);
+
+// The audit log records every read and write; querying it needs no
+// credential either, and resolves with the full matching result set
+// (there's no pagination on this endpoint).
+for (const entry of await client.queryAuditLog()) {
+  console.log(entry.action, entry.object_id, entry.timestamp);
+}
+```
+
+The API key is only required for write operations (create/update/delete);
+reads (get, used-by, audit-log query) work without one. A per-call `caller`
+option, accepted by create/get/update/delete, is optional. The package
+ships both ESM and CommonJS builds. See the
+[full API reference](https://alrayyes.github.io/hush-hush-node/) for
+everything else.
+
+## Versioning
+
+This SDK's version tracks hush-hush's OpenAPI spec, not this repo's own
+commit history — see [CONTRIBUTING.md](CONTRIBUTING.md) for how a spec
+change becomes a release.
+
+## License
+
+[MIT](LICENSE)

package/package.json

@@ -0,0 +1,79 @@
+{
+  "name": "@hush-hush/sdk",
+  "version": "3.0.0",
+  "description": "Official Node.js/TypeScript SDK for hush-hush, generated from its OpenAPI spec",
+  "keywords": [
+    "hush-hush",
+    "secrets",
+    "sdk"
+  ],
+  "homepage": "https://github.com/alrayyes/hush-hush-node",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/alrayyes/hush-hush-node.git"
+  },
+  "license": "MIT",
+  "author": "alrayyes",
+  "type": "module",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "codegen": "./scripts/generate.sh",
+    "docs": "typedoc",
+    "format:check": "prettier --check \"**/*.{md,yml,yaml}\"",
+    "format:write": "prettier --write \"**/*.{md,yml,yaml}\"",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "lint:md": "markdownlint-cli2 \"**/*.md\"",
+    "prepare": "lefthook install",
+    "test": "vitest run test/unit --coverage",
+    "test:contract": "vitest run test/contract",
+    "test:e2e": "vitest run test/e2e",
+    "test:pact": "vitest run test/pact",
+    "typecheck": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "2.5.11",
+    "@commitlint/cli": "21.2.2",
+    "@commitlint/config-conventional": "21.2.2",
+    "@pact-foundation/pact": "17.1.3",
+    "@types/node": "26.4.0",
+    "@vitest/coverage-v8": "4.1.11",
+    "lefthook": "2.1.12",
+    "markdownlint-cli2": "0.23.2",
+    "openapi-typescript": "7.13.0",
+    "prettier": "3.9.6",
+    "sort-package-json": "4.0.0",
+    "tsup": "8.5.1",
+    "typedoc": "0.28.20",
+    "typescript": "5.9.3",
+    "vitest": "4.1.11"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "allowScripts": {
+    "lefthook@2.1.12": true,
+    "esbuild@0.27.7": true
+  }
+}