@primitivedotdev/sdk 0.19.0 → 0.20.0

package/dist/{index-oRkCqj6u.d.ts → index-C6ObsYjq.d.ts}

@@ -1500,6 +1500,221 @@ type DiscardContentResult = {
    */
   already_discarded: boolean;
 };
+/**
+ * Lifecycle state of the latest deploy attempt:
+ * * `pending` — deploy in flight; the runtime has not yet
+ * confirmed the new bundle is live.
+ * * `deployed` — the running edge handler is the latest code.
+ * * `failed` — the most recent deploy attempt failed; the
+ * previously-live code (if any) is still running. The
+ * `deploy_error` field carries the error message.
+ *
+ */
+type FunctionDeployStatus = 'pending' | 'deployed' | 'failed';
+/**
+ * One row from the function listing.
+ */
+type FunctionListItem = {
+  /**
+   * Function id, also the script name in the edge runtime.
+   */
+  id: string;
+  /**
+   * Slug-style name set on creation. Stable; cannot be changed.
+   */
+  name: string;
+  deploy_status: FunctionDeployStatus;
+  /**
+   * Timestamp of the most recent successful deploy. Null until the first deploy succeeds.
+   */
+  deployed_at?: string | null;
+  /**
+   * URL the platform's webhook delivery loop posts to in order
+   * to invoke the function. Reference only; not directly
+   * callable from outside.
+   *
+   */
+  gateway_url: string;
+  created_at: string;
+  updated_at: string;
+};
+/**
+ * Full function record returned by GET / PUT.
+ */
+type FunctionDetail = {
+  id: string;
+  name: string;
+  /**
+   * The bundled handler source. UTF-8 string up to 1 MiB. The
+   * same value most recently passed as `code` to POST or PUT.
+   *
+   */
+  code: string;
+  deploy_status: FunctionDeployStatus;
+  /**
+   * Error message from the most recent failed deploy, or null
+   * after a successful deploy. Surface this to users to explain
+   * a `failed` status without polling.
+   *
+   */
+  deploy_error?: string | null;
+  deployed_at?: string | null;
+  gateway_url: string;
+  created_at: string;
+  updated_at: string;
+};
+type CreateFunctionInput = {
+  /**
+   * Slug-style name. Lowercase letters, digits, hyphens, and
+   * underscores. 1 to 64 characters. Must be unique within the
+   * org; a 409 is returned on collision.
+   *
+   */
+  name: string;
+  /**
+   * Bundled handler as a single ESM module. Up to 1 MiB UTF-8.
+   * Must export a default `{ async fetch(req, env, ctx) { ... } }`
+   * object.
+   *
+   */
+  code: string;
+  /**
+   * Optional source map for the bundle. Up to 5 MiB UTF-8.
+   * Stored only on the runtime side (not in Primitive's
+   * database) and used to symbolicate stack traces in the
+   * function's logs.
+   *
+   */
+  sourceMap?: string;
+};
+/**
+ * Returned by POST /functions on a successful deploy.
+ */
+type CreateFunctionResult = {
+  id: string;
+  name: string;
+  deploy_status: FunctionDeployStatus;
+  gateway_url: string;
+};
+type UpdateFunctionInput = {
+  /**
+   * New bundled handler. Same rules as CreateFunctionInput.code.
+   */
+  code: string;
+  sourceMap?: string;
+};
+/**
+ * Metadata returned by POST /functions/{id}/test. The send is
+ * queued; the actual invocation lands on the function's
+ * invocations list a few seconds later as the inbound mail
+ * traverses the MX path.
+ *
+ */
+type TestInvocationResult = {
+  /**
+   * Verified inbound domain the test email was sent to.
+   */
+  inbound_domain: string;
+  /**
+   * Synthetic local-part plus inbound_domain. Visible in the org's inbox.
+   */
+  to: string;
+  /**
+   * Primitive-controlled outbound sender used for the test.
+   */
+  from: string;
+  /**
+   * Outbound message id from the underlying send. NOT the
+   * inbound email's id; the inbound id is created when the
+   * email arrives via MX and lands on the function's
+   * invocations list.
+   *
+   */
+  send_id: string;
+  /**
+   * Subject placed on the test email so it can be located in the inbox.
+   */
+  subject: string;
+  /**
+   * ISO timestamp suitable as a `since` lower bound when
+   * polling /emails for the inbound's arrival. Captured
+   * slightly before the send to absorb light clock skew.
+   *
+   */
+  poll_since: string;
+  /**
+   * Function detail page where invocations show up live.
+   */
+  watch_url: string;
+};
+/**
+ * One row from GET /functions/{id}/secrets. Discriminate on the
+ * `managed` field:
+ * * `managed = true`  — system secret provisioned by Primitive.
+ * `description` is set; `created_at` / `updated_at` are
+ * null because the row is virtual (resolved at deploy time
+ * from the managed registry, not stored in the secrets
+ * table).
+ * * `managed = false` — secret the user set via the API.
+ * `created_at` / `updated_at` are set; `description` is
+ * null.
+ *
+ */
+type FunctionSecretListItem = {
+  key: string;
+  /**
+   * True for managed system secrets, false for user-set entries.
+   */
+  managed: boolean;
+  /**
+   * Set on managed entries only; null on user-set entries.
+   */
+  description?: string | null;
+  /**
+   * Set on user-set entries only; null on managed entries.
+   */
+  created_at?: string | null;
+  /**
+   * Set on user-set entries only; null on managed entries.
+   */
+  updated_at?: string | null;
+};
+/**
+ * Body for POST /functions/{id}/secrets.
+ */
+type CreateFunctionSecretInput = {
+  /**
+   * Uppercase letters, digits, and underscores. Must start with
+   * a letter or underscore. System-managed keys (e.g.
+   * PRIMITIVE_WEBHOOK_SECRET) are reserved.
+   *
+   */
+  key: string;
+  /**
+   * Secret value, up to 4096 UTF-8 bytes. Encrypted at rest.
+   * Never returned by any read endpoint.
+   *
+   */
+  value: string;
+};
+/**
+ * Body for PUT /functions/{id}/secrets/{key}. Key comes from the path.
+ */
+type SetFunctionSecretInput = {
+  value: string;
+};
+/**
+ * Returned by POST and PUT secret routes.
+ */
+type FunctionSecretWriteResult = {
+  key: string;
+  created_at: string;
+  updated_at: string;
+  /**
+   * True if this call inserted a new row, false if it updated an existing one.
+   */
+  created: boolean;
+};
 /**
  * Resource UUID
  */
@@ -2827,8 +3042,374 @@ type GetSentEmailResponses = {
   };
 };
 type GetSentEmailResponse = GetSentEmailResponses[keyof GetSentEmailResponses];
+type ListFunctionsData = {
+  body?: never;
+  path?: never;
+  query?: never;
+  url: '/functions';
+};
+type ListFunctionsErrors = {
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+};
+type ListFunctionsError = ListFunctionsErrors[keyof ListFunctionsErrors];
+type ListFunctionsResponses = {
+  /**
+   * List of functions
+   */
+  200: SuccessEnvelope & {
+    data?: Array<FunctionListItem>;
+  };
+};
+type ListFunctionsResponse = ListFunctionsResponses[keyof ListFunctionsResponses];
+type CreateFunctionData = {
+  body: CreateFunctionInput;
+  path?: never;
+  query?: never;
+  url: '/functions';
+};
+type CreateFunctionErrors = {
+  /**
+   * Invalid request parameters
+   */
+  400: ErrorResponse;
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * A function with this name already exists in the org
+   */
+  409: ErrorResponse;
+  /**
+   * Primitive could not complete the downstream SMTP request
+   */
+  502: ErrorResponse;
+};
+type CreateFunctionError = CreateFunctionErrors[keyof CreateFunctionErrors];
+type CreateFunctionResponses = {
+  /**
+   * Function created and deployed
+   */
+  201: SuccessEnvelope & {
+    data?: CreateFunctionResult;
+  };
+};
+type CreateFunctionResponse = CreateFunctionResponses[keyof CreateFunctionResponses];
+type DeleteFunctionData = {
+  body?: never;
+  path: {
+    /**
+     * Resource UUID
+     */
+    id: string;
+  };
+  query?: never;
+  url: '/functions/{id}';
+};
+type DeleteFunctionErrors = {
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * Resource not found
+   */
+  404: ErrorResponse;
+  /**
+   * Primitive could not complete the downstream SMTP request
+   */
+  502: ErrorResponse;
+};
+type DeleteFunctionError = DeleteFunctionErrors[keyof DeleteFunctionErrors];
+type DeleteFunctionResponses = {
+  /**
+   * Resource deleted
+   */
+  200: SuccessEnvelope & {
+    data?: {
+      deleted: boolean;
+    };
+  };
+};
+type DeleteFunctionResponse = DeleteFunctionResponses[keyof DeleteFunctionResponses];
+type GetFunctionData = {
+  body?: never;
+  path: {
+    /**
+     * Resource UUID
+     */
+    id: string;
+  };
+  query?: never;
+  url: '/functions/{id}';
+};
+type GetFunctionErrors = {
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * Resource not found
+   */
+  404: ErrorResponse;
+};
+type GetFunctionError = GetFunctionErrors[keyof GetFunctionErrors];
+type GetFunctionResponses = {
+  /**
+   * Function record
+   */
+  200: SuccessEnvelope & {
+    data?: FunctionDetail;
+  };
+};
+type GetFunctionResponse = GetFunctionResponses[keyof GetFunctionResponses];
+type UpdateFunctionData = {
+  body: UpdateFunctionInput;
+  path: {
+    /**
+     * Resource UUID
+     */
+    id: string;
+  };
+  query?: never;
+  url: '/functions/{id}';
+};
+type UpdateFunctionErrors = {
+  /**
+   * Invalid request parameters
+   */
+  400: ErrorResponse;
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * Resource not found
+   */
+  404: ErrorResponse;
+  /**
+   * Primitive could not complete the downstream SMTP request
+   */
+  502: ErrorResponse;
+};
+type UpdateFunctionError = UpdateFunctionErrors[keyof UpdateFunctionErrors];
+type UpdateFunctionResponses = {
+  /**
+   * Updated function
+   */
+  200: SuccessEnvelope & {
+    data?: FunctionDetail;
+  };
+};
+type UpdateFunctionResponse = UpdateFunctionResponses[keyof UpdateFunctionResponses];
+type TestFunctionData = {
+  body?: never;
+  path: {
+    /**
+     * Resource UUID
+     */
+    id: string;
+  };
+  query?: never;
+  url: '/functions/{id}/test';
+};
+type TestFunctionErrors = {
+  /**
+   * Invalid request parameters
+   */
+  400: ErrorResponse;
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * Resource not found
+   */
+  404: ErrorResponse;
+  /**
+   * Function not in a state that can be invoked, or no inbound domain configured
+   */
+  422: ErrorResponse;
+  /**
+   * Primitive could not complete the downstream SMTP request
+   */
+  502: ErrorResponse;
+  /**
+   * Sending agent misconfigured
+   */
+  503: ErrorResponse;
+};
+type TestFunctionError = TestFunctionErrors[keyof TestFunctionErrors];
+type TestFunctionResponses = {
+  /**
+   * Test send queued
+   */
+  200: SuccessEnvelope & {
+    data?: TestInvocationResult;
+  };
+};
+type TestFunctionResponse = TestFunctionResponses[keyof TestFunctionResponses];
+type ListFunctionSecretsData = {
+  body?: never;
+  path: {
+    /**
+     * Resource UUID
+     */
+    id: string;
+  };
+  query?: never;
+  url: '/functions/{id}/secrets';
+};
+type ListFunctionSecretsErrors = {
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * Resource not found
+   */
+  404: ErrorResponse;
+};
+type ListFunctionSecretsError = ListFunctionSecretsErrors[keyof ListFunctionSecretsErrors];
+type ListFunctionSecretsResponses = {
+  /**
+   * List of secrets (metadata only, no values)
+   */
+  200: SuccessEnvelope & {
+    data?: {
+      items: Array<FunctionSecretListItem>;
+    };
+  };
+};
+type ListFunctionSecretsResponse = ListFunctionSecretsResponses[keyof ListFunctionSecretsResponses];
+type CreateFunctionSecretData = {
+  body: CreateFunctionSecretInput;
+  path: {
+    /**
+     * Resource UUID
+     */
+    id: string;
+  };
+  query?: never;
+  url: '/functions/{id}/secrets';
+};
+type CreateFunctionSecretErrors = {
+  /**
+   * Invalid request parameters
+   */
+  400: ErrorResponse;
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * Resource not found
+   */
+  404: ErrorResponse;
+};
+type CreateFunctionSecretError = CreateFunctionSecretErrors[keyof CreateFunctionSecretErrors];
+type CreateFunctionSecretResponses = {
+  /**
+   * Secret updated
+   */
+  200: SuccessEnvelope & {
+    data?: FunctionSecretWriteResult;
+  };
+  /**
+   * Secret created
+   */
+  201: SuccessEnvelope & {
+    data?: FunctionSecretWriteResult;
+  };
+};
+type CreateFunctionSecretResponse = CreateFunctionSecretResponses[keyof CreateFunctionSecretResponses];
+type DeleteFunctionSecretData = {
+  body?: never;
+  path: {
+    /**
+     * Resource UUID
+     */
+    id: string;
+    /**
+     * Secret key. Must match `^[A-Z_][A-Z0-9_]*$`.
+     */
+    key: string;
+  };
+  query?: never;
+  url: '/functions/{id}/secrets/{key}';
+};
+type DeleteFunctionSecretErrors = {
+  /**
+   * Invalid request parameters
+   */
+  400: ErrorResponse;
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * Resource not found
+   */
+  404: ErrorResponse;
+};
+type DeleteFunctionSecretError = DeleteFunctionSecretErrors[keyof DeleteFunctionSecretErrors];
+type DeleteFunctionSecretResponses = {
+  /**
+   * Secret deleted
+   */
+  204: void;
+};
+type DeleteFunctionSecretResponse = DeleteFunctionSecretResponses[keyof DeleteFunctionSecretResponses];
+type SetFunctionSecretData = {
+  body: SetFunctionSecretInput;
+  path: {
+    /**
+     * Resource UUID
+     */
+    id: string;
+    /**
+     * Secret key. Must match `^[A-Z_][A-Z0-9_]*$`.
+     */
+    key: string;
+  };
+  query?: never;
+  url: '/functions/{id}/secrets/{key}';
+};
+type SetFunctionSecretErrors = {
+  /**
+   * Invalid request parameters
+   */
+  400: ErrorResponse;
+  /**
+   * Invalid or missing API key
+   */
+  401: ErrorResponse;
+  /**
+   * Resource not found
+   */
+  404: ErrorResponse;
+};
+type SetFunctionSecretError = SetFunctionSecretErrors[keyof SetFunctionSecretErrors];
+type SetFunctionSecretResponses = {
+  /**
+   * Secret updated
+   */
+  200: SuccessEnvelope & {
+    data?: FunctionSecretWriteResult;
+  };
+  /**
+   * Secret created
+   */
+  201: SuccessEnvelope & {
+    data?: FunctionSecretWriteResult;
+  };
+};
+type SetFunctionSecretResponse = SetFunctionSecretResponses[keyof SetFunctionSecretResponses];
 declare namespace sdk_gen_d_exports {
-  export { Options, addDomain, cliLogout, createEndpoint, createFilter, deleteDomain, deleteEmail, deleteEndpoint, deleteFilter, discardEmailContent, downloadAttachments, downloadRawEmail, getAccount, getEmail, getSendPermissions, getSentEmail, getStorageStats, getWebhookSecret, listDeliveries, listDomains, listEmails, listEndpoints, listFilters, listSentEmails, pollCliLogin, replayDelivery, replayEmailWebhooks, replyToEmail, rotateWebhookSecret, sendEmail, startCliLogin, testEndpoint, updateAccount, updateDomain, updateEndpoint, updateFilter, verifyDomain };
+  export { Options, addDomain, cliLogout, createEndpoint, createFilter, createFunction, createFunctionSecret, deleteDomain, deleteEmail, deleteEndpoint, deleteFilter, deleteFunction, deleteFunctionSecret, discardEmailContent, downloadAttachments, downloadRawEmail, getAccount, getEmail, getFunction, getSendPermissions, getSentEmail, getStorageStats, getWebhookSecret, listDeliveries, listDomains, listEmails, listEndpoints, listFilters, listFunctionSecrets, listFunctions, listSentEmails, pollCliLogin, replayDelivery, replayEmailWebhooks, replyToEmail, rotateWebhookSecret, sendEmail, setFunctionSecret, startCliLogin, testEndpoint, testFunction, updateAccount, updateDomain, updateEndpoint, updateFilter, updateFunction, verifyDomain };
 }
 type Options<TData extends TDataShape = TDataShape, ThrowOnError extends boolean = boolean, TResponse = unknown> = Options$1<TData, ThrowOnError, TResponse> & {
   /**
@@ -3252,6 +3833,155 @@ declare const listSentEmails: <ThrowOnError extends boolean = false>(options?: O
  *
  */
 declare const getSentEmail: <ThrowOnError extends boolean = false>(options: Options<GetSentEmailData, ThrowOnError>) => RequestResult<GetSentEmailResponses, GetSentEmailErrors, ThrowOnError, "fields">;
+/**
+ * List functions
+ *
+ * Returns every active (non-deleted) function in the org, newest
+ * first. Each entry carries the deploy status and the gateway URL
+ * that the platform's webhook delivery loop posts to. To inspect
+ * the source code or deploy errors, use `GET /functions/{id}`.
+ *
+ */
+declare const listFunctions: <ThrowOnError extends boolean = false>(options?: Options<ListFunctionsData, ThrowOnError>) => RequestResult<ListFunctionsResponses, ListFunctionsErrors, ThrowOnError, "fields">;
+/**
+ * Deploy a function
+ *
+ * Creates and deploys a new function. The handler must be a single
+ * ESM module that exports a default async function receiving the
+ * `email.received` event (see the Webhook payload section for the
+ * full schema). Code is bundled before being uploaded; ship a
+ * single self-contained file rather than relying on external
+ * imports.
+ *
+ * **Code limits.** `code` is capped at 1 MiB UTF-8. `sourceMap`
+ * (optional) is capped at 5 MiB UTF-8 and is stored only on the
+ * edge runtime side; it is not persisted in Primitive's database.
+ *
+ * **Auto-wiring.** On successful deploy, Primitive automatically
+ * creates a webhook endpoint that delivers inbound mail to the
+ * function. There is nothing to configure on the Endpoints API
+ * for this to work; the gateway URL returned here is for
+ * reference only and is not directly callable from outside.
+ *
+ * **Secrets.** New functions ship with the managed secrets
+ * (`PRIMITIVE_WEBHOOK_SECRET`, `PRIMITIVE_API_KEY`) already
+ * bound. Add user-set secrets via
+ * `POST /functions/{id}/secrets`; secret writes only land in the
+ * running handler on the next redeploy.
+ *
+ */
+declare const createFunction: <ThrowOnError extends boolean = false>(options: Options<CreateFunctionData, ThrowOnError>) => RequestResult<CreateFunctionResponses, CreateFunctionErrors, ThrowOnError, "fields">;
+/**
+ * Delete a function
+ *
+ * Soft-deletes the function row, removes the script from the edge
+ * runtime, and deactivates the auto-wired webhook endpoint so no
+ * further inbound mail is delivered. Past deploy history,
+ * invocations, and logs are retained.
+ *
+ * Returns 502 if the runtime delete fails partway; the function
+ * row stays in place and the call is safe to retry until it
+ * succeeds.
+ *
+ */
+declare const deleteFunction: <ThrowOnError extends boolean = false>(options: Options<DeleteFunctionData, ThrowOnError>) => RequestResult<DeleteFunctionResponses, DeleteFunctionErrors, ThrowOnError, "fields">;
+/**
+ * Get a function
+ *
+ * Returns the full record for a function, including its current
+ * source code and the deploy status / error from the most recent
+ * deploy attempt.
+ *
+ */
+declare const getFunction: <ThrowOnError extends boolean = false>(options: Options<GetFunctionData, ThrowOnError>) => RequestResult<GetFunctionResponses, GetFunctionErrors, ThrowOnError, "fields">;
+/**
+ * Update and redeploy a function
+ *
+ * Replaces the function's source code with the body's `code` and
+ * triggers a redeploy. Same size limits as `POST /functions`.
+ * Use this verb to push secret writes into the running handler:
+ * passing the same `code` re-runs the deploy and refreshes the
+ * binding set with the latest values from the secrets table.
+ *
+ * On a 502 deploy failure, the previously-deployed code stays
+ * live; the runtime never serves a half-built bundle. The
+ * `deploy_error` field on the returned record carries the error
+ * that came back from the runtime so you can surface it to users
+ * without polling.
+ *
+ */
+declare const updateFunction: <ThrowOnError extends boolean = false>(options: Options<UpdateFunctionData, ThrowOnError>) => RequestResult<UpdateFunctionResponses, UpdateFunctionErrors, ThrowOnError, "fields">;
+/**
+ * Send a test invocation
+ *
+ * Sends a real test email from a Primitive-controlled sender to a
+ * synthetic local-part on one of the org's verified inbound
+ * domains. The function fires through the normal MX delivery
+ * path, so reply / send-mail calls from inside the handler
+ * against the inbound's `email.id` work the same as in
+ * production. Returns immediately after the send is queued; the
+ * invocation appears on the function's invocations list within a
+ * few seconds.
+ *
+ * Requires that the function is currently `deployed`. Returns 422
+ * if the function is in `pending` or `failed` state, or if the
+ * org has no verified inbound domain to receive the test mail.
+ *
+ */
+declare const testFunction: <ThrowOnError extends boolean = false>(options: Options<TestFunctionData, ThrowOnError>) => RequestResult<TestFunctionResponses, TestFunctionErrors, ThrowOnError, "fields">;
+/**
+ * List a function's secrets
+ *
+ * Returns metadata for every secret bound to the function, with
+ * managed entries (provisioned by Primitive) listed first and
+ * user-set entries listed alphabetically after. **Values are
+ * never returned.** Secret writes are write-only.
+ *
+ * Managed entries (e.g. `PRIMITIVE_WEBHOOK_SECRET`,
+ * `PRIMITIVE_API_KEY`) carry a `description` instead of
+ * `created_at` / `updated_at`. They cannot be created, updated,
+ * or deleted via this API.
+ *
+ */
+declare const listFunctionSecrets: <ThrowOnError extends boolean = false>(options: Options<ListFunctionSecretsData, ThrowOnError>) => RequestResult<ListFunctionSecretsResponses, ListFunctionSecretsErrors, ThrowOnError, "fields">;
+/**
+ * Create or update a secret
+ *
+ * Idempotent insert-or-update keyed on `(function_id, key)`.
+ * Returns 201 the first time the key is set, 200 on subsequent
+ * updates. Values are encrypted at rest and only become visible
+ * to the running handler on the next deploy (`PUT /functions/{id}`
+ * with the existing code is sufficient to refresh bindings).
+ *
+ * Keys must match `^[A-Z_][A-Z0-9_]*$` (uppercase letters,
+ * digits, underscores; first character is a letter or
+ * underscore). Values are at most 4096 UTF-8 bytes. System-
+ * managed keys are reserved and rejected.
+ *
+ */
+declare const createFunctionSecret: <ThrowOnError extends boolean = false>(options: Options<CreateFunctionSecretData, ThrowOnError>) => RequestResult<CreateFunctionSecretResponses, CreateFunctionSecretErrors, ThrowOnError, "fields">;
+/**
+ * Delete a secret
+ *
+ * Removes the secret. The binding stays live in the running
+ * handler until the next deploy refreshes the binding set
+ * (`PUT /functions/{id}` with the existing code is sufficient).
+ * Returns 404 if the key did not exist. Managed system keys
+ * cannot be deleted.
+ *
+ */
+declare const deleteFunctionSecret: <ThrowOnError extends boolean = false>(options: Options<DeleteFunctionSecretData, ThrowOnError>) => RequestResult<DeleteFunctionSecretResponses, DeleteFunctionSecretErrors, ThrowOnError, "fields">;
+/**
+ * Set a secret by key
+ *
+ * Path-keyed companion to `POST /functions/{id}/secrets`.
+ * Idempotent: returns 201 the first time the key is set, 200 on
+ * subsequent updates. Same validation rules and same write-only
+ * guarantees as the POST verb; the new value lands in the running
+ * handler on the next deploy.
+ *
+ */
+declare const setFunctionSecret: <ThrowOnError extends boolean = false>(options: Options<SetFunctionSecretData, ThrowOnError>) => RequestResult<SetFunctionSecretResponses, SetFunctionSecretErrors, ThrowOnError, "fields">;
 //#endregion
 //#region src/api/index.d.ts
 declare const DEFAULT_BASE_URL = "https://www.primitive.dev/api/v1";
@@ -3388,4 +4118,4 @@ declare function createPrimitiveClient(options?: PrimitiveClientOptions): Primit
 declare function client(options?: PrimitiveClientOptions): PrimitiveClient;
 declare const operations: typeof sdk_gen_d_exports;
 //#endregion
-export { updateFilter as $, UpdateDomainResponses as $i, GetWebhookSecretData as $n, ReplayResult as $r, DeliverySummary as $t, getAccount as A, StartCliLoginInput as Ai, GetAccountErrors as An, ListFiltersResponses as Ar, CreateFilterResponses as At, listFilters as B, TestResult as Bi, GetSendPermissionsErrors as Bn, PollCliLoginInput as Br, DeleteEmailResponse as Bt, deleteDomain as C, Options$1 as Ca, SendPermissionsMeta as Ci, Endpoint as Cn, ListEndpointsResponse as Cr, CreateEndpointResponse as Ct, discardEmailContent as D, Auth as Da, StartCliLoginData as Di, GateFix as Dn, ListFiltersError as Dr, CreateFilterErrors as Dt, deleteFilter as E, ResponseStyle as Ea, SentEmailSummary as Ei, GateDenial as En, ListFiltersData as Er, CreateFilterError as Et, getWebhookSecret as F, TestEndpointData as Fi, GetEmailErrors as Fn, ListSentEmailsResponses as Fr, DeleteDomainResponse as Ft, replyToEmail as G, UpdateAccountInput as Gi, GetSentEmailErrors as Gn, ReplayDeliveryErrors as Gr, DeleteEndpointResponse as Gt, pollCliLogin as H, UpdateAccountData as Hi, GetSendPermissionsResponses as Hn, PollCliLoginResponses as Hr, DeleteEndpointData as Ht, listDeliveries as I, TestEndpointError as Ii, GetEmailResponse as In, PaginationMeta as Ir, DeleteDomainResponses as It, startCliLogin as J, UpdateDomainData as Ji, GetStorageStatsData as Jn, ReplayEmailWebhooksData as Jr, DeleteFilterError as Jt, rotateWebhookSecret as K, UpdateAccountResponse as Ki, GetSentEmailResponse as Kn, ReplayDeliveryResponse as Kr, DeleteEndpointResponses as Kt, listDomains as L, TestEndpointErrors as Li, GetEmailResponses as Ln, PollCliLoginData as Lr, DeleteEmailData as Lt, getSendPermissions as M, StartCliLoginResponses as Mi, GetAccountResponses as Mn, ListSentEmailsError as Mr, DeleteDomainData as Mt, getSentEmail as N, StorageStats as Ni, GetEmailData as Nn, ListSentEmailsErrors as Nr, DeleteDomainError as Nt, downloadAttachments as O, StartCliLoginError as Oi, GetAccountData as On, ListFiltersErrors as Or, CreateFilterInput as Ot, getStorageStats as P, SuccessEnvelope as Pi, GetEmailError as Pn, ListSentEmailsResponse as Pr, DeleteDomainErrors as Pt, updateEndpoint as Q, UpdateDomainResponse as Qi, GetStorageStatsResponses as Qn, ReplayEmailWebhooksResponses as Qr, DeliveryStatus as Qt, listEmails as R, TestEndpointResponse as Ri, GetSendPermissionsData as Rn, PollCliLoginError as Rr, DeleteEmailError as Rt, createFilter as S, CreateClientConfig as Sa, SendPermissionYourDomain as Si, EmailWebhookStatus as Sn, ListEndpointsErrors as Sr, CreateEndpointInput as St, deleteEndpoint as T, RequestResult as Ta, SentEmailStatus as Ti, Filter as Tn, ListEnvelope as Tr, CreateFilterData as Tt, replayDelivery as U, UpdateAccountError as Ui, GetSentEmailData as Un, ReplayDeliveryData as Ur, DeleteEndpointError as Ut, listSentEmails as V, UnverifiedDomain as Vi, GetSendPermissionsResponse as Vn, PollCliLoginResponse as Vr, DeleteEmailResponses as Vt, replayEmailWebhooks as W, UpdateAccountErrors as Wi, GetSentEmailError as Wn, ReplayDeliveryError as Wr, DeleteEndpointErrors as Wt, updateAccount as X, UpdateDomainErrors as Xi, GetStorageStatsErrors as Xn, ReplayEmailWebhooksErrors as Xr, DeleteFilterResponse as Xt, testEndpoint as Y, UpdateDomainError as Yi, GetStorageStatsError as Yn, ReplayEmailWebhooksError as Yr, DeleteFilterErrors as Yt, updateDomain as Z, UpdateDomainInput as Zi, GetStorageStatsResponse as Zn, ReplayEmailWebhooksResponse as Zr, DeleteFilterResponses as Zt, operations as _, VerifyDomainResponses as _a, SendMailResult as _i, DownloadRawEmailResponses as _n, ListEmailsErrors as _r, CliLogoutResult as _t, PrimitiveApiError as a, UpdateEndpointResponses as aa, ResourceId as ai, DiscardEmailContentResponses as an, ListDeliveriesData as ar, AddDomainErrors as at, cliLogout as b, ClientOptions$1 as ba, SendPermissionManagedZone as bi, EmailStatus as bn, ListEndpointsData as br, CreateEndpointError as bt, PrimitiveClientOptions as c, UpdateFilterErrors as ca, RotateWebhookSecretErrors as ci, DownloadAttachmentsData as cn, ListDeliveriesResponse as cr, AddDomainResponses as ct, SendInput as d, UpdateFilterResponses as da, SendEmailData as di, DownloadAttachmentsResponse as dn, ListDomainsError as dr, CliLogoutData as dt, UpdateEndpointData as ea, ReplyToEmailData as ei, DiscardContentResult as en, GetWebhookSecretError as er, verifyDomain as et, SendResult as f, VerifiedDomain as fa, SendEmailError as fi, DownloadAttachmentsResponses as fn, ListDomainsErrors as fr, CliLogoutError as ft, createPrimitiveClient as g, VerifyDomainResponse as ga, SendMailInput as gi, DownloadRawEmailResponse as gn, ListEmailsError as gr, CliLogoutResponses as gt, createPrimitiveApiClient as h, VerifyDomainErrors as ha, SendEmailResponses as hi, DownloadRawEmailErrors as hn, ListEmailsData as hr, CliLogoutResponse as ht, PrimitiveApiClientOptions as i, UpdateEndpointResponse as ia, ReplyToEmailResponses as ii, DiscardEmailContentResponse as in, Limit as ir, AddDomainError as it, getEmail as j, StartCliLoginResponse as ji, GetAccountResponse as jn, ListSentEmailsData as jr, Cursor as jt, downloadRawEmail as k, StartCliLoginErrors as ki, GetAccountError as kn, ListFiltersResponse as kr, CreateFilterResponse as kt, ReplyInput as l, UpdateFilterInput as la, RotateWebhookSecretResponse as li, DownloadAttachmentsError as ln, ListDeliveriesResponses as lr, CliLoginPollResult as lt, client as m, VerifyDomainError as ma, SendEmailResponse as mi, DownloadRawEmailError as mn, ListDomainsResponses as mr, CliLogoutInput as mt, ForwardInput as n, UpdateEndpointErrors as na, ReplyToEmailErrors as ni, DiscardEmailContentError as nn, GetWebhookSecretResponse as nr, AccountUpdated as nt, PrimitiveApiErrorDetails as o, UpdateFilterData as oa, RotateWebhookSecretData as oi, Domain as on, ListDeliveriesError as or, AddDomainInput as ot, SendThreadInput as p, VerifyDomainData as pa, SendEmailErrors as pi, DownloadRawEmailData as pn, ListDomainsResponse as pr, CliLogoutErrors as pt, sendEmail as q, UpdateAccountResponses as qi, GetSentEmailResponses as qn, ReplayDeliveryResponses as qr, DeleteFilterData as qt, PrimitiveApiClient as r, UpdateEndpointInput as ra, ReplyToEmailResponse as ri, DiscardEmailContentErrors as rn, GetWebhookSecretResponses as rr, AddDomainData as rt, PrimitiveClient as s, UpdateFilterError as sa, RotateWebhookSecretError as si, DomainVerifyResult as sn, ListDeliveriesErrors as sr, AddDomainResponse as st, DEFAULT_BASE_URL as t, UpdateEndpointError as ta, ReplyToEmailError as ti, DiscardEmailContentData as tn, GetWebhookSecretErrors as tr, Account as tt, RequestOptions as u, UpdateFilterResponse as ua, RotateWebhookSecretResponses as ui, DownloadAttachmentsErrors as un, ListDomainsData as ur, CliLoginStartResult as ut, Options as v, WebhookSecret as va, SendPermissionAddress as vi, EmailDetail as vn, ListEmailsResponse as vr, ClientOptions as vt, deleteEmail as w, RequestOptions$1 as wa, SentEmailDetail as wi, ErrorResponse as wn, ListEndpointsResponses as wr, CreateEndpointResponses as wt, createEndpoint as x, Config as xa, SendPermissionRule as xi, EmailSummary as xn, ListEndpointsError as xr, CreateEndpointErrors as xt, addDomain as y, Client as ya, SendPermissionAnyRecipient as yi, EmailDetailReply as yn, ListEmailsResponses as yr, CreateEndpointData as yt, listEndpoints as z, TestEndpointResponses as zi, GetSendPermissionsError as zn, PollCliLoginErrors as zr, DeleteEmailErrors as zt };
+export { rotateWebhookSecret as $, UpdateAccountData as $a, ReplyToEmailData as $i, EmailStatus as $n, ListDomainsData as $r, CreateFunctionSecretResponses as $t, deleteFunctionSecret as A, SetFunctionSecretResponse as Aa, ListSentEmailsData as Ai, DeleteFunctionSecretResponses as An, VerifyDomainData as Ao, GetSendPermissionsResponse as Ar, CreateEndpointError as At, getWebhookSecret as B, TestEndpointData as Ba, PollCliLoginResponse as Bi, DomainVerifyResult as Bn, Options$1 as Bo, GetStorageStatsResponse as Br, CreateFilterResponses as Bt, createFunction as C, SentEmailDetail as Ca, ListFunctionSecretsResponse as Ci, DeleteFunctionErrors as Cn, UpdateFunctionData as Co, GetFunctionError as Cr, CliLogoutErrors as Ct, deleteEndpoint as D, SetFunctionSecretError as Da, ListFunctionsErrors as Di, DeleteFunctionSecretError as Dn, UpdateFunctionResponse as Do, GetSendPermissionsData as Dr, CliLogoutResult as Dt, deleteEmail as E, SetFunctionSecretData as Ea, ListFunctionsError as Ei, DeleteFunctionSecretData as En, UpdateFunctionInput as Eo, GetFunctionResponses as Er, CliLogoutResponses as Et, getEmail as F, StartCliLoginInput as Fa, PaginationMeta as Fi, DiscardEmailContentError as Fn, WebhookSecret as Fo, GetSentEmailResponse as Fr, CreateFilterData as Ft, listFilters as G, TestFunctionData as Ga, ReplayDeliveryResponse as Gi, DownloadAttachmentsResponses as Gn, GetWebhookSecretResponse as Gr, CreateFunctionResponse as Gt, listDomains as H, TestEndpointErrors as Ha, ReplayDeliveryData as Hi, DownloadAttachmentsError as Hn, RequestResult as Ho, GetWebhookSecretData as Hr, CreateFunctionError as Ht, getFunction as I, StartCliLoginResponse as Ia, PollCliLoginData as Ii, DiscardEmailContentErrors as In, Client as Io, GetSentEmailResponses as Ir, CreateFilterError as It, listSentEmails as J, TestFunctionResponse as Ja, ReplayEmailWebhooksError as Ji, DownloadRawEmailErrors as Jn, ListDeliveriesData as Jr, CreateFunctionSecretData as Jt, listFunctionSecrets as K, TestFunctionError as Ka, ReplayDeliveryResponses as Ki, DownloadRawEmailData as Kn, GetWebhookSecretResponses as Kr, CreateFunctionResponses as Kt, getSendPermissions as L, StartCliLoginResponses as La, PollCliLoginError as Li, DiscardEmailContentResponse as Ln, ClientOptions$1 as Lo, GetStorageStatsData as Lr, CreateFilterErrors as Lt, downloadAttachments as M, StartCliLoginData as Ma, ListSentEmailsErrors as Mi, DeliverySummary as Mn, VerifyDomainErrors as Mo, GetSentEmailData as Mr, CreateEndpointInput as Mt, downloadRawEmail as N, StartCliLoginError as Na, ListSentEmailsResponse as Ni, DiscardContentResult as Nn, VerifyDomainResponse as No, GetSentEmailError as Nr, CreateEndpointResponse as Nt, deleteFilter as O, SetFunctionSecretErrors as Oa, ListFunctionsResponse as Oi, DeleteFunctionSecretErrors as On, UpdateFunctionResponses as Oo, GetSendPermissionsError as Or, ClientOptions as Ot, getAccount as P, StartCliLoginErrors as Pa, ListSentEmailsResponses as Pi, DiscardEmailContentData as Pn, VerifyDomainResponses as Po, GetSentEmailErrors as Pr, CreateEndpointResponses as Pt, replyToEmail as Q, UnverifiedDomain as Qa, ReplayResult as Qi, EmailDetailReply as Qn, ListDeliveriesResponses as Qr, CreateFunctionSecretResponse as Qt, getSentEmail as R, StorageStats as Ra, PollCliLoginErrors as Ri, DiscardEmailContentResponses as Rn, Config as Ro, GetStorageStatsError as Rr, CreateFilterInput as Rt, createFilter as S, SendPermissionsMeta as Sa, ListFunctionSecretsErrors as Si, DeleteFunctionError as Sn, UpdateFilterResponses as So, GetFunctionData as Sr, CliLogoutError as St, deleteDomain as T, SentEmailSummary as Ta, ListFunctionsData as Ti, DeleteFunctionResponses as Tn, UpdateFunctionErrors as To, GetFunctionResponse as Tr, CliLogoutResponse as Tt, listEmails as U, TestEndpointResponse as Ua, ReplayDeliveryError as Ui, DownloadAttachmentsErrors as Un, ResponseStyle as Uo, GetWebhookSecretError as Ur, CreateFunctionErrors as Ut, listDeliveries as V, TestEndpointError as Va, PollCliLoginResponses as Vi, DownloadAttachmentsData as Vn, RequestOptions$1 as Vo, GetStorageStatsResponses as Vr, CreateFunctionData as Vt, listEndpoints as W, TestEndpointResponses as Wa, ReplayDeliveryErrors as Wi, DownloadAttachmentsResponse as Wn, Auth as Wo, GetWebhookSecretErrors as Wr, CreateFunctionInput as Wt, replayDelivery as X, TestInvocationResult as Xa, ReplayEmailWebhooksResponse as Xi, DownloadRawEmailResponses as Xn, ListDeliveriesErrors as Xr, CreateFunctionSecretErrors as Xt, pollCliLogin as Y, TestFunctionResponses as Ya, ReplayEmailWebhooksErrors as Yi, DownloadRawEmailResponse as Yn, ListDeliveriesError as Yr, CreateFunctionSecretError as Yt, replayEmailWebhooks as Z, TestResult as Za, ReplayEmailWebhooksResponses as Zi, EmailDetail as Zn, ListDeliveriesResponse as Zr, CreateFunctionSecretInput as Zt, operations as _, SendPermissionAddress as _a, ListFiltersErrors as _i, DeleteFilterError as _n, UpdateFilterData as _o, GetEmailData as _r, AddDomainResponse as _t, PrimitiveApiError as a, RotateWebhookSecretData as aa, ListEmailsError as ai, DeleteDomainResponses as an, UpdateDomainData as ao, FunctionDeployStatus as ar, updateAccount as at, cliLogout as b, SendPermissionRule as ba, ListFunctionSecretsData as bi, DeleteFilterResponses as bn, UpdateFilterInput as bo, GetEmailResponse as br, CliLoginStartResult as bt, PrimitiveClientOptions as c, RotateWebhookSecretResponse as ca, ListEmailsResponses as ci, DeleteEmailErrors as cn, UpdateDomainInput as co, FunctionSecretListItem as cr, updateFilter as ct, SendInput as d, SendEmailError as da, ListEndpointsErrors as di, DeleteEndpointData as dn, UpdateEndpointData as do, GateFix as dr, Account as dt, ReplyToEmailError as ea, ListDomainsError as ei, Cursor as en, UpdateAccountError as eo, EmailSummary as er, sendEmail as et, SendResult as f, SendEmailErrors as fa, ListEndpointsResponse as fi, DeleteEndpointError as fn, UpdateEndpointError as fo, GetAccountData as fr, AccountUpdated as ft, createPrimitiveClient as g, SendMailResult as ga, ListFiltersError as gi, DeleteFilterData as gn, UpdateEndpointResponses as go, GetAccountResponses as gr, AddDomainInput as gt, createPrimitiveApiClient as h, SendMailInput as ha, ListFiltersData as hi, DeleteEndpointResponses as hn, UpdateEndpointResponse as ho, GetAccountResponse as hr, AddDomainErrors as ht, PrimitiveApiClientOptions as i, ResourceId as ia, ListEmailsData as ii, DeleteDomainResponse as in, UpdateAccountResponses as io, Filter as ir, testFunction as it, discardEmailContent as j, SetFunctionSecretResponses as ja, ListSentEmailsError as ji, DeliveryStatus as jn, VerifyDomainError as jo, GetSendPermissionsResponses as jr, CreateEndpointErrors as jt, deleteFunction as k, SetFunctionSecretInput as ka, ListFunctionsResponses as ki, DeleteFunctionSecretResponse as kn, VerifiedDomain as ko, GetSendPermissionsErrors as kr, CreateEndpointData as kt, ReplyInput as l, RotateWebhookSecretResponses as la, ListEndpointsData as li, DeleteEmailResponse as ln, UpdateDomainResponse as lo, FunctionSecretWriteResult as lr, updateFunction as lt, client as m, SendEmailResponses as ma, ListEnvelope as mi, DeleteEndpointResponse as mn, UpdateEndpointInput as mo, GetAccountErrors as mr, AddDomainError as mt, ForwardInput as n, ReplyToEmailResponse as na, ListDomainsResponse as ni, DeleteDomainError as nn, UpdateAccountInput as no, Endpoint as nr, startCliLogin as nt, PrimitiveApiErrorDetails as o, RotateWebhookSecretError as oa, ListEmailsErrors as oi, DeleteEmailData as on, UpdateDomainError as oo, FunctionDetail as or, updateDomain as ot, SendThreadInput as p, SendEmailResponse as pa, ListEndpointsResponses as pi, DeleteEndpointErrors as pn, UpdateEndpointErrors as po, GetAccountError as pr, AddDomainData as pt, listFunctions as q, TestFunctionErrors as qa, ReplayEmailWebhooksData as qi, DownloadRawEmailError as qn, Limit as qr, CreateFunctionResult as qt, PrimitiveApiClient as r, ReplyToEmailResponses as ra, ListDomainsResponses as ri, DeleteDomainErrors as rn, UpdateAccountResponse as ro, ErrorResponse as rr, testEndpoint as rt, PrimitiveClient as s, RotateWebhookSecretErrors as sa, ListEmailsResponse as si, DeleteEmailError as sn, UpdateDomainErrors as so, FunctionListItem as sr, updateEndpoint as st, DEFAULT_BASE_URL as t, ReplyToEmailErrors as ta, ListDomainsErrors as ti, DeleteDomainData as tn, UpdateAccountErrors as to, EmailWebhookStatus as tr, setFunctionSecret as tt, RequestOptions as u, SendEmailData as ua, ListEndpointsError as ui, DeleteEmailResponses as un, UpdateDomainResponses as uo, GateDenial as ur, verifyDomain as ut, Options as v, SendPermissionAnyRecipient as va, ListFiltersResponse as vi, DeleteFilterErrors as vn, UpdateFilterError as vo, GetEmailError as vr, AddDomainResponses as vt, createFunctionSecret as w, SentEmailStatus as wa, ListFunctionSecretsResponses as wi, DeleteFunctionResponse as wn, UpdateFunctionError as wo, GetFunctionErrors as wr, CliLogoutInput as wt, createEndpoint as x, SendPermissionYourDomain as xa, ListFunctionSecretsError as xi, DeleteFunctionData as xn, UpdateFilterResponse as xo, GetEmailResponses as xr, CliLogoutData as xt, addDomain as y, SendPermissionManagedZone as ya, ListFiltersResponses as yi, DeleteFilterResponse as yn, UpdateFilterErrors as yo, GetEmailErrors as yr, CliLoginPollResult as yt, getStorageStats as z, SuccessEnvelope as za, PollCliLoginInput as zi, Domain as zn, CreateClientConfig as zo, GetStorageStatsErrors as zr, CreateFilterResponse as zt };