learn-secrets-sdk 1.11.7 → 1.11.12

package/dist/browser-global.global.js

@@ -1 +1,288 @@
-"use strict";var SecretsSDK=(()=>{var h=Object.defineProperty;var C=Object.getOwnPropertyDescriptor;var I=Object.getOwnPropertyNames;var T=Object.prototype.hasOwnProperty;var y=(n=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(n,{get:(e,t)=>(typeof require<"u"?require:e)[t]}):n)(function(n){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+n+'" is not supported')});var _=(n,e)=>()=>(n&&(e=n(n=0)),e);var P=(n,e)=>{for(var t in e)h(n,t,{get:e[t],enumerable:!0})},D=(n,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of I(e))!T.call(n,s)&&s!==t&&h(n,s,{get:()=>e[s],enumerable:!(r=C(e,s))||r.enumerable});return n};var R=n=>D(h({},"__esModule",{value:!0}),n);var x=_(()=>{"use strict"});var A={};P(A,{SecretsSDK:()=>c,default:()=>j});var i=class extends Error{constructor(t,r,s){super(t);this.status=r;this.response=s;this.name="SecretsSDKError"}},l=class extends i{constructor(e="Origin not allowed for this token"){super(e,403),this.name="OriginMismatchError"}},u=class extends i{constructor(e="Rate limit exceeded",t=60,r=0,s=100){super(e,429),this.name="RateLimitError",this.retryAfter=t,this.remaining=r,this.limit=s}},p=class extends i{constructor(e="Invalid or expired token"){super(e,401),this.name="InvalidTokenError"}};var c=class{constructor(e={}){this.rateLimitInfo=null;this.appId=e.appId||null,this.token=e.token||e.sessionToken||null,this.baseUrl=e.baseUrl||"https://cloudprototype.org",this.timeout=e.timeout||3e4,this.retryOn429=e.retryOn429!==void 0?e.retryOn429:!0,this.zeroConfigMode=!this.appId&&!this.token}getUsage(){return this.rateLimitInfo}parseRateLimitHeaders(e){let t=e.get("X-RateLimit-Limit"),r=e.get("X-RateLimit-Remaining"),s=e.get("X-RateLimit-Reset");t&&r&&s&&(this.rateLimitInfo={limit:parseInt(t),remaining:parseInt(r),reset:parseInt(s)})}sleep(e){return new Promise(t=>setTimeout(t,e))}async fetchWithTimeout(e,t,r){let s=new AbortController,g=setTimeout(()=>s.abort(),r);try{return await fetch(e,{...t,signal:s.signal})}finally{clearTimeout(g)}}async call(e,t,r={}){let s=0,g=this.retryOn429?3:0;for(;;)try{let o=this.zeroConfigMode?`${this.baseUrl}/api/sdk/proxy`:`${this.baseUrl}/api/sdk/${this.appId}/proxy`,f={"Content-Type":"application/json"};!this.zeroConfigMode&&this.token&&(f.Authorization=`Bearer ${this.token}`);let a=await this.fetchWithTimeout(o,{method:"POST",headers:f,body:JSON.stringify({keyName:e,endpoint:t,method:r.method||"GET",body:r.body,headers:r.headers})},this.timeout);this.parseRateLimitHeaders(a.headers);let m=await a.json();if(!a.ok){let d=m.data?.message||m?.message||`Request failed with status ${a.status}`;if(a.status===403&&d.includes("Origin"))throw new l(d);if(a.status===401)throw new p(d);if(a.status===429){let b=this.rateLimitInfo?this.rateLimitInfo.reset-Math.floor(Date.now()/1e3):60,k=new u(d,b,this.rateLimitInfo?.remaining||0,this.rateLimitInfo?.limit||100);if(this.retryOn429&&s<g){s++;let v=Math.min(1e3*Math.pow(2,s-1),8e3);await this.sleep(v);continue}throw k}throw new i(d,a.status,m)}return m.data}catch(o){throw o instanceof i?o:o instanceof Error&&o.name==="AbortError"?new i("Request timeout",408):new i(o instanceof Error?o.message:"Unknown error occurred",500)}}async get(e,t,r){return this.call(e,t,{method:"GET",headers:r})}async post(e,t,r,s){return this.call(e,t,{method:"POST",body:r,headers:s})}async put(e,t,r,s){return this.call(e,t,{method:"PUT",body:r,headers:s})}async delete(e,t,r){return this.call(e,t,{method:"DELETE",headers:r})}async patch(e,t,r,s){return this.call(e,t,{method:"PATCH",body:r,headers:s})}setAppId(e){this.appId=e}async secretsRequest(e,t){if(!this.appId)throw new i("App ID required for secrets management. Call setAppId() first.",400);let r=await this.fetchWithTimeout(`${this.baseUrl}/api/projects/${this.appId}/secrets/manage?action=${e}`,{method:"POST",headers:{"Content-Type":"application/json"},body:t?JSON.stringify(t):void 0},this.timeout);if(!r.ok){let s=await r.json().catch(()=>({}));throw new i(s.message||`Secrets management failed: ${r.statusText}`,r.status,s)}return r.json()}async listSecrets(){return this.secretsRequest("list")}async createSecret(e){return this.secretsRequest("create",e)}async updateSecret(e){return this.secretsRequest("update",e)}async deleteSecret(e){return this.secretsRequest("delete",{name:e})}async syncEnv(e,t){return this.secretsRequest("sync",{secrets:e,provider:t})}};var w=y("child_process"),S=y("util");var N=(0,S.promisify)(w.exec);x();typeof window<"u"&&(window.SecretsSDK=c);var j=c;return R(A);})();
+"use strict";
+(() => {
+  // src/types.ts
+  var SecretsSDKError = class extends Error {
+    constructor(message, status, response) {
+      super(message);
+      this.status = status;
+      this.response = response;
+      this.name = "SecretsSDKError";
+    }
+  };
+  var OriginMismatchError = class extends SecretsSDKError {
+    constructor(message = "Origin not allowed for this token") {
+      super(message, 403);
+      this.name = "OriginMismatchError";
+    }
+  };
+  var RateLimitError = class extends SecretsSDKError {
+    constructor(message = "Rate limit exceeded", retryAfter = 60, remaining = 0, limit = 100) {
+      super(message, 429);
+      this.name = "RateLimitError";
+      this.retryAfter = retryAfter;
+      this.remaining = remaining;
+      this.limit = limit;
+    }
+  };
+  var InvalidTokenError = class extends SecretsSDKError {
+    constructor(message = "Invalid or expired token") {
+      super(message, 401);
+      this.name = "InvalidTokenError";
+    }
+  };
+
+  // src/client.ts
+  var SecretsSDK = class {
+    /**
+     * Create a new SecretsSDK instance
+     *
+     * Zero-config mode (recommended for static sites):
+     *   const sdk = new SecretsSDK();
+     *   // Origin header is used for authentication
+     *
+     * Token mode (for backward compatibility):
+     *   const sdk = new SecretsSDK({ appId: '...', token: 'sk_live_...' });
+     */
+    constructor(options = {}) {
+      this.rateLimitInfo = null;
+      this.appId = options.appId || null;
+      this.token = options.token || options.sessionToken || null;
+      this.baseUrl = options.baseUrl || "https://ctklearn.carsontkempf.workers.dev";
+      this.timeout = options.timeout || 3e4;
+      this.retryOn429 = options.retryOn429 !== void 0 ? options.retryOn429 : true;
+      this.zeroConfigMode = !this.appId && !this.token;
+    }
+    /**
+     * Get current rate limit information
+     */
+    getUsage() {
+      return this.rateLimitInfo;
+    }
+    /**
+     * Parse rate limit headers from response
+     */
+    parseRateLimitHeaders(headers) {
+      const limit = headers.get("X-RateLimit-Limit");
+      const remaining = headers.get("X-RateLimit-Remaining");
+      const reset = headers.get("X-RateLimit-Reset");
+      if (limit && remaining && reset) {
+        this.rateLimitInfo = {
+          limit: parseInt(limit),
+          remaining: parseInt(remaining),
+          reset: parseInt(reset)
+        };
+      }
+    }
+    /**
+     * Sleep utility for retry backoff
+     */
+    sleep(ms) {
+      return new Promise((resolve) => setTimeout(resolve, ms));
+    }
+    /**
+     * Make fetch request with timeout
+     */
+    async fetchWithTimeout(url, options, timeout) {
+      const controller = new AbortController();
+      const timeoutId = setTimeout(() => controller.abort(), timeout);
+      try {
+        const response = await fetch(url, {
+          ...options,
+          signal: controller.signal
+        });
+        return response;
+      } finally {
+        clearTimeout(timeoutId);
+      }
+    }
+    /**
+     * Call an external API securely through the proxy
+     * @param keyName - Name of the API key to use
+     * @param endpoint - API endpoint path (e.g., '/v1/chat/completions')
+     * @param options - Request options (method, body, headers)
+     * @returns Promise with the API response
+     */
+    async call(keyName, endpoint, options = {}) {
+      let retries = 0;
+      const maxRetries = this.retryOn429 ? 3 : 0;
+      while (true) {
+        try {
+          const proxyUrl = this.zeroConfigMode ? `${this.baseUrl}/api/sdk/proxy` : `${this.baseUrl}/api/sdk/${this.appId}/proxy`;
+          const requestHeaders = {
+            "Content-Type": "application/json"
+          };
+          if (!this.zeroConfigMode && this.token) {
+            requestHeaders["Authorization"] = `Bearer ${this.token}`;
+          }
+          const response = await this.fetchWithTimeout(
+            proxyUrl,
+            {
+              method: "POST",
+              headers: requestHeaders,
+              body: JSON.stringify({
+                keyName,
+                endpoint,
+                method: options.method || "GET",
+                body: options.body,
+                headers: options.headers
+              })
+            },
+            this.timeout
+          );
+          this.parseRateLimitHeaders(response.headers);
+          const result = await response.json();
+          if (!response.ok) {
+            const errorMessage = result.data?.message || result?.message || `Request failed with status ${response.status}`;
+            if (response.status === 403 && errorMessage.includes("Origin")) {
+              throw new OriginMismatchError(errorMessage);
+            }
+            if (response.status === 401) {
+              throw new InvalidTokenError(errorMessage);
+            }
+            if (response.status === 429) {
+              const retryAfter = this.rateLimitInfo ? this.rateLimitInfo.reset - Math.floor(Date.now() / 1e3) : 60;
+              const error = new RateLimitError(
+                errorMessage,
+                retryAfter,
+                this.rateLimitInfo?.remaining || 0,
+                this.rateLimitInfo?.limit || 100
+              );
+              if (this.retryOn429 && retries < maxRetries) {
+                retries++;
+                const backoffMs = Math.min(1e3 * Math.pow(2, retries - 1), 8e3);
+                await this.sleep(backoffMs);
+                continue;
+              }
+              throw error;
+            }
+            throw new SecretsSDKError(errorMessage, response.status, result);
+          }
+          return result.data;
+        } catch (err) {
+          if (err instanceof SecretsSDKError) {
+            throw err;
+          }
+          if (err instanceof Error && err.name === "AbortError") {
+            throw new SecretsSDKError("Request timeout", 408);
+          }
+          throw new SecretsSDKError(
+            err instanceof Error ? err.message : "Unknown error occurred",
+            500
+          );
+        }
+      }
+    }
+    /**
+     * Make a GET request
+     */
+    async get(keyName, endpoint, headers) {
+      return this.call(keyName, endpoint, { method: "GET", headers });
+    }
+    /**
+     * Make a POST request
+     */
+    async post(keyName, endpoint, body, headers) {
+      return this.call(keyName, endpoint, { method: "POST", body, headers });
+    }
+    /**
+     * Make a PUT request
+     */
+    async put(keyName, endpoint, body, headers) {
+      return this.call(keyName, endpoint, { method: "PUT", body, headers });
+    }
+    /**
+     * Make a DELETE request
+     */
+    async delete(keyName, endpoint, headers) {
+      return this.call(keyName, endpoint, { method: "DELETE", headers });
+    }
+    /**
+     * Make a PATCH request
+     */
+    async patch(keyName, endpoint, body, headers) {
+      return this.call(keyName, endpoint, { method: "PATCH", body, headers });
+    }
+    /**
+     * Secrets Management API (zero-config mode)
+     * These methods allow programmatic CRUD operations on project secrets
+     * Requires appId to be set (can be set in constructor or via setAppId)
+     */
+    /**
+     * Set App ID for secrets management
+     * Required before calling secrets management methods
+     */
+    setAppId(appId) {
+      this.appId = appId;
+    }
+    /**
+     * Make authenticated request to secrets management API
+     */
+    async secretsRequest(action, body) {
+      if (!this.appId) {
+        throw new SecretsSDKError("App ID required for secrets management. Call setAppId() first.", 400);
+      }
+      const response = await this.fetchWithTimeout(
+        `${this.baseUrl}/api/projects/${this.appId}/secrets/manage?action=${action}`,
+        {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: body ? JSON.stringify(body) : void 0
+        },
+        this.timeout
+      );
+      if (!response.ok) {
+        const errorData = await response.json().catch(() => ({}));
+        throw new SecretsSDKError(
+          errorData.message || `Secrets management failed: ${response.statusText}`,
+          response.status,
+          errorData
+        );
+      }
+      return response.json();
+    }
+    /**
+     * List all secrets for the project
+     * Returns secret metadata (no API keys)
+     */
+    async listSecrets() {
+      return this.secretsRequest("list");
+    }
+    /**
+     * Create a new secret
+     */
+    async createSecret(secret) {
+      return this.secretsRequest("create", secret);
+    }
+    /**
+     * Update an existing secret
+     */
+    async updateSecret(update) {
+      return this.secretsRequest("update", update);
+    }
+    /**
+     * Delete a secret
+     */
+    async deleteSecret(name) {
+      return this.secretsRequest("delete", { name });
+    }
+    /**
+     * Sync secrets from .env file format
+     * Bulk upload/update secrets
+     */
+    async syncEnv(secrets, provider) {
+      return this.secretsRequest("sync", { secrets, provider });
+    }
+  };
+
+  // src/browser-global.ts
+  if (typeof window !== "undefined") {
+    console.log("[SecretsSDK] Setting window.SecretsSDK, typeof:", typeof SecretsSDK);
+    window.SecretsSDK = SecretsSDK;
+    console.log("[SecretsSDK] Set complete, window.SecretsSDK:", typeof window.SecretsSDK);
+  } else {
+    console.log("[SecretsSDK] window is undefined, not in browser?");
+  }
+  var browser_global_default = SecretsSDK;
+})();

package/dist/cli/index.mjs

@@ -178,7 +178,7 @@ async function getWindowsId() {
 var SecretsManagement = class {
   constructor(options) {
     this.appId = options.appId;
-    this.baseUrl = options.baseUrl || "https://cloudprototype.org";
+    this.baseUrl = options.baseUrl || "https://ctklearn.carsontkempf.workers.dev";
     this.timeout = options.timeout || 3e4;
   }
   /**
@@ -444,7 +444,7 @@ Log in on ${this.baseUrl}`);
 // src/cli/commands/login.ts
 async function loginCommand(options = {}) {
   console.log("Authenticating with Learn Secrets...\n");
-  const baseUrl = options.baseUrl || "https://cloudprototype.org";
+  const baseUrl = options.baseUrl || "https://ctklearn.carsontkempf.workers.dev";
   const mgmt = new SecretsManagement({
     appId: "temp",
     // Will be set after login
@@ -471,7 +471,7 @@ Logged in as: ${result.user}`);
     const { projects } = await projectsResponse.json();
     if (projects.length === 0) {
       console.log("\nNo projects found.");
-      console.log("Create a project at: https://cloudprototype.org/dashboard");
+      console.log("Create a project at: https://ctklearn.carsontkempf.workers.dev/dashboard");
       console.log("\nAfter creating a project, run: learn-secrets login");
       return;
     }
@@ -764,7 +764,7 @@ Onboarding site for project: ${projectId}`);
         console.log(`    - ${failure.name}: ${failure.error}`);
       }
     }
-    const dashboardUrl = options.baseUrl || "https://cloudprototype.org";
+    const dashboardUrl = options.baseUrl || "https://ctklearn.carsontkempf.workers.dev";
     console.log("\nYour site is ready!");
     console.log("\nAdd to your static site code:");
     console.log("    const sdk = new SecretsSDK();");
@@ -930,7 +930,7 @@ Deploying secrets to project: ${config.project}`);
         console.log(`  - ${failure.name}: ${failure.error}`);
       }
     }
-    const dashboardUrl = options.baseUrl || "https://cloudprototype.org";
+    const dashboardUrl = options.baseUrl || "https://ctklearn.carsontkempf.workers.dev";
     console.log("\nSecrets deployed successfully!");
     console.log(`
 View your secrets in the dashboard:`);

package/dist/index.d.mts

@@ -12,7 +12,7 @@ interface SecretsSDKOptions {
     sessionToken?: string;
     /**
      * Base URL of the proxy server
-     * Default: https://cloudprototype.org
+     * Default: https://ctklearn.carsontkempf.workers.dev
      */
     baseUrl?: string;
     timeout?: number;

package/dist/index.mjs

@@ -52,7 +52,7 @@ var SecretsSDK = class {
     this.rateLimitInfo = null;
     this.appId = options.appId || null;
     this.token = options.token || options.sessionToken || null;
-    this.baseUrl = options.baseUrl || "https://cloudprototype.org";
+    this.baseUrl = options.baseUrl || "https://ctklearn.carsontkempf.workers.dev";
     this.timeout = options.timeout || 3e4;
     this.retryOn429 = options.retryOn429 !== void 0 ? options.retryOn429 : true;
     this.zeroConfigMode = !this.appId && !this.token;
@@ -458,7 +458,7 @@ async function getWindowsId() {
 var SecretsManagement = class {
   constructor(options) {
     this.appId = options.appId;
-    this.baseUrl = options.baseUrl || "https://cloudprototype.org";
+    this.baseUrl = options.baseUrl || "https://ctklearn.carsontkempf.workers.dev";
     this.timeout = options.timeout || 3e4;
   }
   /**

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "learn-secrets-sdk",
-	"version": "1.11.7",
+	"version": "1.11.12",
 	"description": "Secrets management SDK for static sites with Learn platform",
 	"main": "dist/index.js",
 	"module": "dist/index.esm.js",
@@ -39,7 +39,7 @@
 		"typescript": "^5.0.0"
 	},
 	"scripts": {
-		"build": "tsup src/index.ts --format esm --dts && tsup src/browser-global.ts --format iife --minify --global-name SecretsSDK --no-splitting && tsup src/cli/index.ts --format esm --dts --out-dir dist/cli --external commander",
+		"build": "tsup src/index.ts --format esm --dts && tsup src/browser-global.ts --format iife --no-splitting && tsup src/cli/index.ts --format esm --dts --out-dir dist/cli --external commander",
 		"prepublishOnly": "npm run build"
 	}
 }

package/dist/browser.fixed.js

@@ -1,7 +0,0 @@
-"use strict";var SecretsSDK=(()=>{var h=Object.defineProperty;var x=Object.getOwnPropertyDescriptor;var R=Object.getOwnPropertyNames;var I=Object.prototype.hasOwnProperty;var _=(n,e)=>{for(var t in e)h(n,t,{get:e[t],enumerable:!0})},k=(n,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of R(e))!I.call(n,s)&&s!==t&&h(n,s,{get:()=>e[s],enumerable:!(r=x(e,s))||r.enumerable});return n};var S=n=>k(h({},"__esModule",{value:!0}),n);var w={};_(w,{SecretsSDK:()=>p});var i=class extends Error{constructor(t,r,s){super(t);this.status=r;this.response=s;this.name="SecretsSDKError"}},g=class extends i{constructor(e="Origin not allowed for this token"){super(e,403),this.name="OriginMismatchError"}},m=class extends i{constructor(e="Rate limit exceeded",t=60,r=0,s=100){super(e,429),this.name="RateLimitError",this.retryAfter=t,this.remaining=r,this.limit=s}},d=class extends i{constructor(e="Invalid or expired token"){super(e,401),this.name="InvalidTokenError"}};var p=class{constructor(e={}){this.rateLimitInfo=null;this.appId=e.appId||null,this.token=e.token||e.sessionToken||null,this.baseUrl=e.baseUrl||"https://cloudprototype.org",this.timeout=e.timeout||3e4,this.retryOn429=e.retryOn429!==void 0?e.retryOn429:!0,this.zeroConfigMode=!this.appId&&!this.token}getUsage(){return this.rateLimitInfo}parseRateLimitHeaders(e){let t=e.get("X-RateLimit-Limit"),r=e.get("X-RateLimit-Remaining"),s=e.get("X-RateLimit-Reset");t&&r&&s&&(this.rateLimitInfo={limit:parseInt(t),remaining:parseInt(r),reset:parseInt(s)})}sleep(e){return new Promise(t=>setTimeout(t,e))}async fetchWithTimeout(e,t,r){let s=new AbortController,l=setTimeout(()=>s.abort(),r);try{return await fetch(e,{...t,signal:s.signal})}finally{clearTimeout(l)}}async call(e,t,r={}){let s=0,l=this.retryOn429?3:0;for(;;)try{let a=this.zeroConfigMode?`${this.baseUrl}/api/sdk/proxy`:`${this.baseUrl}/api/sdk/${this.appId}/proxy`,f={"Content-Type":"application/json"};!this.zeroConfigMode&&this.token&&(f.Authorization=`Bearer ${this.token}`);let o=await this.fetchWithTimeout(a,{method:"POST",headers:f,body:JSON.stringify({keyName:e,endpoint:t,method:r.method||"GET",body:r.body,headers:r.headers})},this.timeout);this.parseRateLimitHeaders(o.headers);let u=await o.json();if(!o.ok){let c=u.data?.message||u?.message||`Request failed with status ${o.status}`;if(o.status===403&&c.includes("Origin"))throw new g(c);if(o.status===401)throw new d(c);if(o.status===429){let y=this.rateLimitInfo?this.rateLimitInfo.reset-Math.floor(Date.now()/1e3):60,b=new m(c,y,this.rateLimitInfo?.remaining||0,this.rateLimitInfo?.limit||100);if(this.retryOn429&&s<l){s++;let T=Math.min(1e3*Math.pow(2,s-1),8e3);await this.sleep(T);continue}throw b}throw new i(c,o.status,u)}return u.data}catch(a){throw a instanceof i?a:a instanceof Error&&a.name==="AbortError"?new i("Request timeout",408):new i(a instanceof Error?a.message:"Unknown error occurred",500)}}async get(e,t,r){return this.call(e,t,{method:"GET",headers:r})}async post(e,t,r,s){return this.call(e,t,{method:"POST",body:r,headers:s})}async put(e,t,r,s){return this.call(e,t,{method:"PUT",body:r,headers:s})}async delete(e,t,r){return this.call(e,t,{method:"DELETE",headers:r})}async patch(e,t,r,s){return this.call(e,t,{method:"PATCH",body:r,headers:s})}setAppId(e){this.appId=e}async secretsRequest(e,t){if(!this.appId)throw new i("App ID required for secrets management. Call setAppId() first.",400);let r=await this.fetchWithTimeout(`${this.baseUrl}/api/projects/${this.appId}/secrets/manage?action=${e}`,{method:"POST",headers:{"Content-Type":"application/json"},body:t?JSON.stringify(t):void 0},this.timeout);if(!r.ok){let s=await r.json().catch(()=>({}));throw new i(s.message||`Secrets management failed: ${r.statusText}`,r.status,s)}return r.json()}async listSecrets(){return this.secretsRequest("list")}async createSecret(e){return this.secretsRequest("create",e)}async updateSecret(e){return this.secretsRequest("update",e)}async deleteSecret(e){return this.secretsRequest("delete",{name:e})}async syncEnv(e,t){return this.secretsRequest("sync",{secrets:e,provider:t})}};return S(w);})();
-
-// Fix: Extract the class from the module exports and reassign to global
-if (typeof SecretsSDK !== 'undefined' && SecretsSDK.SecretsSDK) {
-  var _SDK = SecretsSDK.SecretsSDK;
-  SecretsSDK = _SDK;
-}