@inneropen/marvin-sdk 3.2.0-next.13 → 3.2.0-next.15

package/dist/platform.cjs

@@ -1796,6 +1796,68 @@ var FormsModule = class {
   }
 };
 
+// src/platform/secrets.ts
+var SecretsModule = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /**
+   * List all secrets (metadata only — no values)
+   */
+  async list() {
+    return this.http.get("/api/groups/secrets");
+  }
+  /**
+   * List available slugs for {{SLUG}} autocomplete
+   */
+  async slugs() {
+    return this.http.get("/api/groups/secrets/slugs");
+  }
+  /**
+   * Create a new secret. Value is encrypted on write and never returned.
+   */
+  async create(data) {
+    return this.http.post("/api/groups/secrets", data);
+  }
+  /**
+   * Update a secret's name, description, or value.
+   */
+  async update(id, data) {
+    const validId = this.http.validatePathParam(id, "secret ID");
+    return this.http.patch(`/api/groups/secrets/${validId}`, data);
+  }
+  /**
+   * Delete a secret.
+   */
+  async delete(id) {
+    const validId = this.http.validatePathParam(id, "secret ID");
+    await this.http.delete(`/api/groups/secrets/${validId}`);
+  }
+};
+
+// src/platform/variables.ts
+var VariablesModule = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async list() {
+    return this.http.get("/api/groups/variables");
+  }
+  async create(data) {
+    return this.http.post("/api/groups/variables", data);
+  }
+  async update(id, data) {
+    const validId = this.http.validatePathParam(id, "variable ID");
+    return this.http.patch(`/api/groups/variables/${validId}`, data);
+  }
+  async delete(id) {
+    const validId = this.http.validatePathParam(id, "variable ID");
+    await this.http.delete(`/api/groups/variables/${validId}`);
+  }
+};
+
 // src/platform/client.ts
 function getEnv2(key) {
   if (typeof process !== "undefined" && process.env) {
@@ -1830,6 +1892,8 @@ var PlatformClient = class extends HttpClient {
   emailTemplates;
   scheduledTasks;
   forms;
+  secrets;
+  variables;
   // Admin modules
   adminUsers;
   adminSystem;
@@ -1860,6 +1924,8 @@ var PlatformClient = class extends HttpClient {
     this.emailTemplates = new EmailTemplatesClient(this);
     this.scheduledTasks = new ScheduledTasksModule(this);
     this.forms = new FormsModule(this);
+    this.secrets = new SecretsModule(this);
+    this.variables = new VariablesModule(this);
     this.adminUsers = new AdminUsersModule(this);
     this.adminSystem = new AdminSystemModule(this);
     this.adminMaintenance = new AdminMaintenanceModule(this);

package/dist/platform.d.cts

@@ -1164,6 +1164,94 @@ declare class FormsModule {
     submitForm(slug: string, data: Record<string, unknown>): Promise<PlatformFormSubmission>;
 }
 
+/**
+ * Workspace Secrets Module - Platform API
+ *
+ * Manage workspace secrets referenced by {{SLUG}} in webhook headers
+ * and other integration configs. Values are write-only — never returned
+ * in list or read responses (like GitHub Secrets).
+ */
+
+interface WorkspaceSecret {
+    id: string;
+    groupId: string;
+    name: string;
+    slug: string;
+    description: string | null;
+}
+interface WorkspaceSecretCreate {
+    name: string;
+    slug: string;
+    description?: string | null;
+    value: string;
+}
+interface WorkspaceSecretUpdate {
+    name?: string;
+    description?: string | null;
+    value?: string;
+}
+declare class SecretsModule {
+    private http;
+    constructor(http: HttpClient);
+    /**
+     * List all secrets (metadata only — no values)
+     */
+    list(): Promise<WorkspaceSecret[]>;
+    /**
+     * List available slugs for {{SLUG}} autocomplete
+     */
+    slugs(): Promise<string[]>;
+    /**
+     * Create a new secret. Value is encrypted on write and never returned.
+     */
+    create(data: WorkspaceSecretCreate): Promise<WorkspaceSecret>;
+    /**
+     * Update a secret's name, description, or value.
+     */
+    update(id: string, data: WorkspaceSecretUpdate): Promise<WorkspaceSecret>;
+    /**
+     * Delete a secret.
+     */
+    delete(id: string): Promise<void>;
+}
+
+/**
+ * Workspace Variables Module - Platform API
+ *
+ * Plain-text key-value config scoped to a workspace. Values are visible
+ * in API responses (unlike Secrets which are write-only).
+ * Referenced in webhook headers, email templates, and other configs
+ * via {{SLUG}} syntax. Secrets take priority on slug collision.
+ */
+
+interface WorkspaceVariable {
+    id: string;
+    groupId: string;
+    name: string;
+    slug: string;
+    description: string | null;
+    value: string;
+}
+interface WorkspaceVariableCreate {
+    name: string;
+    slug: string;
+    description?: string | null;
+    value: string;
+}
+interface WorkspaceVariableUpdate {
+    name?: string;
+    description?: string | null;
+    value?: string;
+}
+declare class VariablesModule {
+    private http;
+    constructor(http: HttpClient);
+    list(): Promise<WorkspaceVariable[]>;
+    create(data: WorkspaceVariableCreate): Promise<WorkspaceVariable>;
+    update(id: string, data: WorkspaceVariableUpdate): Promise<WorkspaceVariable>;
+    delete(id: string): Promise<void>;
+}
+
 /**
  * Platform API Client
  *
@@ -1196,6 +1284,8 @@ declare class PlatformClient extends HttpClient {
     emailTemplates: EmailTemplatesClient;
     scheduledTasks: ScheduledTasksModule;
     forms: FormsModule;
+    secrets: SecretsModule;
+    variables: VariablesModule;
     adminUsers: AdminUsersModule;
     adminSystem: AdminSystemModule;
     adminMaintenance: AdminMaintenanceModule;

package/dist/platform.d.ts

@@ -1164,6 +1164,94 @@ declare class FormsModule {
     submitForm(slug: string, data: Record<string, unknown>): Promise<PlatformFormSubmission>;
 }
 
+/**
+ * Workspace Secrets Module - Platform API
+ *
+ * Manage workspace secrets referenced by {{SLUG}} in webhook headers
+ * and other integration configs. Values are write-only — never returned
+ * in list or read responses (like GitHub Secrets).
+ */
+
+interface WorkspaceSecret {
+    id: string;
+    groupId: string;
+    name: string;
+    slug: string;
+    description: string | null;
+}
+interface WorkspaceSecretCreate {
+    name: string;
+    slug: string;
+    description?: string | null;
+    value: string;
+}
+interface WorkspaceSecretUpdate {
+    name?: string;
+    description?: string | null;
+    value?: string;
+}
+declare class SecretsModule {
+    private http;
+    constructor(http: HttpClient);
+    /**
+     * List all secrets (metadata only — no values)
+     */
+    list(): Promise<WorkspaceSecret[]>;
+    /**
+     * List available slugs for {{SLUG}} autocomplete
+     */
+    slugs(): Promise<string[]>;
+    /**
+     * Create a new secret. Value is encrypted on write and never returned.
+     */
+    create(data: WorkspaceSecretCreate): Promise<WorkspaceSecret>;
+    /**
+     * Update a secret's name, description, or value.
+     */
+    update(id: string, data: WorkspaceSecretUpdate): Promise<WorkspaceSecret>;
+    /**
+     * Delete a secret.
+     */
+    delete(id: string): Promise<void>;
+}
+
+/**
+ * Workspace Variables Module - Platform API
+ *
+ * Plain-text key-value config scoped to a workspace. Values are visible
+ * in API responses (unlike Secrets which are write-only).
+ * Referenced in webhook headers, email templates, and other configs
+ * via {{SLUG}} syntax. Secrets take priority on slug collision.
+ */
+
+interface WorkspaceVariable {
+    id: string;
+    groupId: string;
+    name: string;
+    slug: string;
+    description: string | null;
+    value: string;
+}
+interface WorkspaceVariableCreate {
+    name: string;
+    slug: string;
+    description?: string | null;
+    value: string;
+}
+interface WorkspaceVariableUpdate {
+    name?: string;
+    description?: string | null;
+    value?: string;
+}
+declare class VariablesModule {
+    private http;
+    constructor(http: HttpClient);
+    list(): Promise<WorkspaceVariable[]>;
+    create(data: WorkspaceVariableCreate): Promise<WorkspaceVariable>;
+    update(id: string, data: WorkspaceVariableUpdate): Promise<WorkspaceVariable>;
+    delete(id: string): Promise<void>;
+}
+
 /**
  * Platform API Client
  *
@@ -1196,6 +1284,8 @@ declare class PlatformClient extends HttpClient {
     emailTemplates: EmailTemplatesClient;
     scheduledTasks: ScheduledTasksModule;
     forms: FormsModule;
+    secrets: SecretsModule;
+    variables: VariablesModule;
     adminUsers: AdminUsersModule;
     adminSystem: AdminSystemModule;
     adminMaintenance: AdminMaintenanceModule;

package/dist/platform.js

@@ -1353,6 +1353,68 @@ var FormsModule = class {
   }
 };
 
+// src/platform/secrets.ts
+var SecretsModule = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /**
+   * List all secrets (metadata only — no values)
+   */
+  async list() {
+    return this.http.get("/api/groups/secrets");
+  }
+  /**
+   * List available slugs for {{SLUG}} autocomplete
+   */
+  async slugs() {
+    return this.http.get("/api/groups/secrets/slugs");
+  }
+  /**
+   * Create a new secret. Value is encrypted on write and never returned.
+   */
+  async create(data) {
+    return this.http.post("/api/groups/secrets", data);
+  }
+  /**
+   * Update a secret's name, description, or value.
+   */
+  async update(id, data) {
+    const validId = this.http.validatePathParam(id, "secret ID");
+    return this.http.patch(`/api/groups/secrets/${validId}`, data);
+  }
+  /**
+   * Delete a secret.
+   */
+  async delete(id) {
+    const validId = this.http.validatePathParam(id, "secret ID");
+    await this.http.delete(`/api/groups/secrets/${validId}`);
+  }
+};
+
+// src/platform/variables.ts
+var VariablesModule = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  async list() {
+    return this.http.get("/api/groups/variables");
+  }
+  async create(data) {
+    return this.http.post("/api/groups/variables", data);
+  }
+  async update(id, data) {
+    const validId = this.http.validatePathParam(id, "variable ID");
+    return this.http.patch(`/api/groups/variables/${validId}`, data);
+  }
+  async delete(id) {
+    const validId = this.http.validatePathParam(id, "variable ID");
+    await this.http.delete(`/api/groups/variables/${validId}`);
+  }
+};
+
 // src/platform/client.ts
 function getEnv2(key) {
   if (typeof process !== "undefined" && process.env) {
@@ -1387,6 +1449,8 @@ var PlatformClient = class extends HttpClient {
   emailTemplates;
   scheduledTasks;
   forms;
+  secrets;
+  variables;
   // Admin modules
   adminUsers;
   adminSystem;
@@ -1417,6 +1481,8 @@ var PlatformClient = class extends HttpClient {
     this.emailTemplates = new EmailTemplatesClient(this);
     this.scheduledTasks = new ScheduledTasksModule(this);
     this.forms = new FormsModule(this);
+    this.secrets = new SecretsModule(this);
+    this.variables = new VariablesModule(this);
     this.adminUsers = new AdminUsersModule(this);
     this.adminSystem = new AdminSystemModule(this);
     this.adminMaintenance = new AdminMaintenanceModule(this);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inneropen/marvin-sdk",
-  "version": "3.2.0-next.13",
+  "version": "3.2.0-next.15",
   "description": "Official TypeScript SDK for Marvin CMS",
   "type": "module",
   "main": "./dist/index.cjs",