spaps-sdk 1.1.7 → 1.1.8

package/README.md

@@ -193,6 +193,57 @@ console.log(`Credits: ${balance.data.balance}`);
 await spaps.recordUsage('api-call', 1);
 ```
 
+### ✉️ Secure Messaging
+```javascript
+// Create a secure message (content encrypted server-side when pii_enabled)
+const message = await spaps.secureMessages.create({
+  patientId: 'patient-123',
+  practitionerId: 'practitioner-456',
+  content: 'Patient is experiencing intermittent headaches.',
+  metadata: { urgency: 'high' }
+});
+
+// List secure messages for the current application
+const messages = await spaps.secureMessages.list();
+console.log(messages[0].content);
+```
+> Ensure your application has `settings.pii_enabled = true` so payloads are encrypted automatically.
+
+```typescript
+// Provide a strongly typed metadata shape for downstream usage
+type SecureMessageMetadata = { urgency: 'low' | 'high'; tags?: string[] };
+
+const spaps = new SPAPSClient<SecureMessageMetadata>({ apiKey: process.env.SPAPS_API_KEY });
+
+await spaps.secureMessages.create({
+  patientId: 'patient-123',
+  practitionerId: 'practitioner-456',
+  content: 'Follow up scheduled for next week.',
+  metadata: { urgency: 'low', tags: ['follow-up'] }
+});
+
+const typedMessages = await spaps.secureMessages.list();
+typedMessages[0].metadata.urgency; // "low" | "high"
+```
+
+Need runtime validation too? Reuse the shared schemas that ship with the SDK:
+
+```typescript
+import { z } from 'zod';
+import { createSecureMessageRequestSchema } from 'spaps-sdk';
+
+const secureMessageRequestSchema = createSecureMessageRequestSchema(
+  z.object({ urgency: z.enum(['low', 'high']), tags: z.array(z.string()).optional() })
+);
+
+secureMessageRequestSchema.parse({
+  patientId: 'patient-123',
+  practitionerId: 'practitioner-456',
+  content: 'All clear.',
+  metadata: { urgency: 'low' }
+});
+```
+
 ## Configuration
 
 ### Production Mode

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import * as spaps_types from 'spaps-types';
-import { CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
-export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreatePriceRequest, CreateProductRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, Price, Product, ProductSyncResult, Subscription, TokenPair, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+import { CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, Price, Product, ProductSyncResult, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, createSecureMessageRequestSchema, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
 
 /**
  * Permission checking utilities for SPAPS SDK
@@ -92,13 +92,16 @@ interface SPAPSConfig {
     timeout?: number;
 }
 
-declare class SPAPSClient {
+declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Record<string, any>> {
     private client;
     private apiKey?;
     private accessToken?;
     private refreshToken?;
     private _isLocalMode;
     private unwrapApiResponse;
+    private isAxiosResponse;
+    private isResponseLikeWithData;
+    private isApiResponse;
     admin: {
         createProduct: (productData: CreateProductRequest) => Promise<{
             data: Product;
@@ -132,6 +135,10 @@ declare class SPAPSClient {
             cursor?: Record<string, unknown>;
         }>;
     };
+    secureMessages: {
+        create: (payload: CreateSecureMessageRequest<SecureMessageMetadata>) => Promise<SecureMessage<SecureMessageMetadata>>;
+        list: () => Promise<SecureMessage<SecureMessageMetadata>[]>;
+    };
     constructor(config?: SPAPSConfig);
     /** Raw API request helper that returns an ApiResponse-like shape */
     request<T = any>(method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH', url: string, data?: any, requiresAuth?: boolean): Promise<{
@@ -275,12 +282,20 @@ declare class SPAPSClient {
             cancel_url: string;
             trial_period_days?: number;
         }) => Promise<CheckoutSession>;
-        getCheckoutSession: (sessionId: string) => Promise<any>;
+        getCheckoutSession: (sessionId: string) => Promise<CheckoutSession>;
         listCheckoutSessions: (query?: {
             limit?: number;
             starting_after?: string;
-        }) => Promise<any>;
-        expireCheckoutSession: (sessionId: string) => Promise<any>;
+        }) => Promise<{
+            sessions: any[];
+            has_more: boolean;
+            next_cursor?: string;
+        }>;
+        expireCheckoutSession: (sessionId: string) => Promise<{
+            id: string;
+            status: string;
+            expired: boolean;
+        }>;
         listProducts: (query?: {
             category?: string;
             active?: boolean;
@@ -289,6 +304,7 @@ declare class SPAPSClient {
         }) => Promise<{
             products: Product[];
             total: number;
+            adminMetadata?: any;
         }>;
         getProduct: (productId: string) => Promise<Product>;
         createCustomerPortalSession: (payload: {
@@ -352,6 +368,8 @@ declare class SPAPSClient {
         data: UsageBalance;
     }>;
     recordUsage(feature: string, amount: number): Promise<void>;
+    private createSecureMessage;
+    private listSecureMessages;
     /**
      * Create a new Stripe product (Admin required)
      */

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import * as spaps_types from 'spaps-types';
-import { CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
-export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreatePriceRequest, CreateProductRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, Price, Product, ProductSyncResult, Subscription, TokenPair, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+import { CreateProductRequest, Product, UpdateProductRequest, CreatePriceRequest, Price, ProductSyncResult, CryptoReconcileRequest, CreateSecureMessageRequest, SecureMessage, AuthResponse, User as User$1, CreateCryptoInvoiceRequest, CryptoInvoiceStatusSnapshot, CheckoutSession, Subscription, UsageBalance, VerifyCryptoWebhookSignatureOptions } from 'spaps-types';
+export { AdminPermission, AdminRole, AdminUser, ApiResponse, AuthResponse, CheckoutSession, CreateCryptoInvoiceRequest, CreatePriceRequest, CreateProductRequest, CreateSecureMessageInput, CreateSecureMessageRequest, CryptoInvoice, CryptoInvoiceResponse, CryptoInvoiceStatusSnapshot, CryptoReconcileRequest, Price, Product, ProductSyncResult, SecureMessage, SecureMessageOutput, Subscription, TokenPair, UpdateProductRequest, UsageBalance, User, UserProfile, UserRole, UserWallet, VerifyCryptoWebhookSignatureOptions, createSecureMessageRequestSchema, secureMessageMetadataSchema, secureMessageSchema } from 'spaps-types';
 
 /**
  * Permission checking utilities for SPAPS SDK
@@ -92,13 +92,16 @@ interface SPAPSConfig {
     timeout?: number;
 }
 
-declare class SPAPSClient {
+declare class SPAPSClient<SecureMessageMetadata extends Record<string, any> = Record<string, any>> {
     private client;
     private apiKey?;
     private accessToken?;
     private refreshToken?;
     private _isLocalMode;
     private unwrapApiResponse;
+    private isAxiosResponse;
+    private isResponseLikeWithData;
+    private isApiResponse;
     admin: {
         createProduct: (productData: CreateProductRequest) => Promise<{
             data: Product;
@@ -132,6 +135,10 @@ declare class SPAPSClient {
             cursor?: Record<string, unknown>;
         }>;
     };
+    secureMessages: {
+        create: (payload: CreateSecureMessageRequest<SecureMessageMetadata>) => Promise<SecureMessage<SecureMessageMetadata>>;
+        list: () => Promise<SecureMessage<SecureMessageMetadata>[]>;
+    };
     constructor(config?: SPAPSConfig);
     /** Raw API request helper that returns an ApiResponse-like shape */
     request<T = any>(method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH', url: string, data?: any, requiresAuth?: boolean): Promise<{
@@ -275,12 +282,20 @@ declare class SPAPSClient {
             cancel_url: string;
             trial_period_days?: number;
         }) => Promise<CheckoutSession>;
-        getCheckoutSession: (sessionId: string) => Promise<any>;
+        getCheckoutSession: (sessionId: string) => Promise<CheckoutSession>;
         listCheckoutSessions: (query?: {
             limit?: number;
             starting_after?: string;
-        }) => Promise<any>;
-        expireCheckoutSession: (sessionId: string) => Promise<any>;
+        }) => Promise<{
+            sessions: any[];
+            has_more: boolean;
+            next_cursor?: string;
+        }>;
+        expireCheckoutSession: (sessionId: string) => Promise<{
+            id: string;
+            status: string;
+            expired: boolean;
+        }>;
         listProducts: (query?: {
             category?: string;
             active?: boolean;
@@ -289,6 +304,7 @@ declare class SPAPSClient {
         }) => Promise<{
             products: Product[];
             total: number;
+            adminMetadata?: any;
         }>;
         getProduct: (productId: string) => Promise<Product>;
         createCustomerPortalSession: (payload: {
@@ -352,6 +368,8 @@ declare class SPAPSClient {
         data: UsageBalance;
     }>;
     recordUsage(feature: string, amount: number): Promise<void>;
+    private createSecureMessage;
+    private listSecureMessages;
     /**
      * Create a new Stripe product (Admin required)
      */

package/dist/index.js

@@ -202,6 +202,7 @@ __export(index_exports, {
   WalletUtils: () => WalletUtils,
   canAccessAdmin: () => canAccessAdmin,
   createPermissionChecker: () => createPermissionChecker,
+  createSecureMessageRequestSchema: () => import_spaps_types.createSecureMessageRequestSchema,
   default: () => index_default,
   defaultPermissionChecker: () => defaultPermissionChecker,
   getRoleAwareErrorMessage: () => getRoleAwareErrorMessage,
@@ -209,11 +210,14 @@ __export(index_exports, {
   getUserRole: () => getUserRole,
   hasPermission: () => hasPermission,
   isAdminAccount: () => isAdminAccount,
+  secureMessageMetadataSchema: () => import_spaps_types.secureMessageMetadataSchema,
+  secureMessageSchema: () => import_spaps_types.secureMessageSchema,
   verifyCryptoWebhookSignature: () => verifyCryptoWebhookSignature
 });
 module.exports = __toCommonJS(index_exports);
 var import_crypto = __toESM(require("crypto"));
 var import_axios = __toESM(require("axios"));
+var import_spaps_types = require("spaps-types");
 init_permissions();
 if (typeof globalThis.fetch === "undefined") {
   require("cross-fetch/polyfill");
@@ -225,11 +229,39 @@ var SPAPSClient = class {
   refreshToken;
   _isLocalMode = false;
   unwrapApiResponse(response, fallback) {
-    const body = response?.data ?? response;
-    if (body?.success === false) {
-      throw new Error(body?.error?.message || fallback);
+    if (!response) {
+      throw new Error(fallback);
     }
-    return body?.data ?? body;
+    const payload = this.isAxiosResponse(response) ? response.data : this.isResponseLikeWithData(response) ? response.data : response;
+    if (this.isApiResponse(payload)) {
+      if (payload.success === false) {
+        throw new Error(payload.error?.message || fallback);
+      }
+      if (payload.data !== void 0) {
+        return payload.data;
+      }
+      return void 0;
+    }
+    return payload;
+  }
+  isAxiosResponse(value) {
+    if (!value || typeof value !== "object") {
+      return false;
+    }
+    const record = value;
+    return "data" in record && "status" in record;
+  }
+  isResponseLikeWithData(value) {
+    if (!value || typeof value !== "object") return false;
+    const record = value;
+    return "data" in record && !("success" in record);
+  }
+  isApiResponse(value) {
+    if (!value || typeof value !== "object") {
+      return false;
+    }
+    const record = value;
+    return "success" in record && typeof record.success === "boolean";
   }
   // Admin namespace for cleaner API
   admin = {
@@ -241,6 +273,10 @@ var SPAPSClient = class {
     getProducts: () => this.getProducts(),
     triggerCryptoReconcile: (opts) => this.payments.crypto.reconcile(opts || {})
   };
+  secureMessages = {
+    create: (payload) => this.createSecureMessage(payload),
+    list: () => this.listSecureMessages()
+  };
   constructor(config = {}) {
     const apiUrl = config.apiUrl || process.env.SPAPS_API_URL || process.env.NEXT_PUBLIC_SPAPS_API_URL;
     if (!apiUrl || apiUrl.includes("localhost") || apiUrl.includes("127.0.0.1")) {
@@ -422,68 +458,66 @@ var SPAPSClient = class {
      */
     verifyMagicLink: async (payload) => {
       const res = await this.client.post("/api/auth/verify-magic-link", payload);
-      const body = res.data;
-      if (body?.success === false) throw new Error(body?.error?.message || "Failed to verify magic link");
-      return body?.data || body || { success: true };
+      return this.unwrapApiResponse(res, "Failed to verify magic link");
     },
     solana: {
       linkWallet: async (payload) => {
         const res = await this.client.post("/api/auth/solana/link-wallet", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to link Solana wallet");
       },
       verifySignature: async (payload) => {
         const res = await this.client.post("/api/auth/solana/verify-signature", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to verify Solana signature");
       },
       generateMessage: async (wallet_address) => {
         const res = await this.client.get(`/api/auth/solana/generate-message/${wallet_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to generate Solana auth message");
       },
       getWallets: async () => {
         const res = await this.client.get("/api/auth/solana/wallets");
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Solana wallets");
       },
       networkInfo: async () => {
         const res = await this.client.get("/api/auth/solana/network-info");
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Solana network info");
       }
     },
     ethereum: {
       linkWallet: async (payload) => {
         const res = await this.client.post("/api/auth/ethereum/link-wallet", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to link Ethereum wallet");
       },
       verifySignature: async (payload) => {
         const res = await this.client.post("/api/auth/ethereum/verify-signature", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to verify Ethereum signature");
       },
       verifyTypedData: async (payload) => {
         const res = await this.client.post("/api/auth/ethereum/verify-typed-data", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to verify EIP-712 typed data");
       },
       generateMessage: async (wallet_address) => {
         const res = await this.client.get(`/api/auth/ethereum/generate-message/${wallet_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to generate Ethereum auth message");
       },
       generateTypedData: async (wallet_address) => {
         const res = await this.client.get(`/api/auth/ethereum/generate-typed-data/${wallet_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to generate Ethereum typed data");
       },
       getWallets: async () => {
         const res = await this.client.get("/api/auth/ethereum/wallets");
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Ethereum wallets");
       },
       networkInfo: async () => {
         const res = await this.client.get("/api/auth/ethereum/network-info");
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Ethereum network info");
       },
       balance: async (wallet_address) => {
         const res = await this.client.get(`/api/auth/ethereum/balance/${wallet_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Ethereum balance");
       },
       contractCheck: async (wallet_address, contract_address) => {
         const res = await this.client.get(`/api/auth/ethereum/contract-check/${wallet_address}/${contract_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to check contract");
       }
     },
     refreshToken: async (refreshToken) => {
@@ -563,7 +597,7 @@ var SPAPSClient = class {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.post("/api/stripe/checkout-sessions", payload, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create checkout session");
     },
     createPaymentCheckout: async (params) => {
       const payload = { mode: "payment", line_items: [{ price_id: params.price_id, quantity: params.quantity ?? 1 }], success_url: params.success_url, cancel_url: params.cancel_url };
@@ -576,18 +610,18 @@ var SPAPSClient = class {
     },
     getCheckoutSession: async (sessionId) => {
       const res = await this.client.get(`/api/stripe/checkout-sessions/${sessionId}`);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to get checkout session");
     },
     listCheckoutSessions: async (query = {}) => {
       const q = new URLSearchParams();
       if (query.limit) q.append("limit", String(query.limit));
       if (query.starting_after) q.append("starting_after", query.starting_after);
       const res = await this.client.get(`/api/stripe/checkout-sessions${q.toString() ? `?${q.toString()}` : ""}`);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list checkout sessions");
     },
     expireCheckoutSession: async (sessionId) => {
       const res = await this.client.post(`/api/stripe/checkout-sessions/${sessionId}/expire`);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to expire checkout session");
     },
     listProducts: async (query = {}) => {
       const q = new URLSearchParams();
@@ -598,32 +632,32 @@ var SPAPSClient = class {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.get(`/api/stripe/products${q.toString() ? `?${q.toString()}` : ""}`, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list products");
     },
     getProduct: async (productId) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.get(`/api/stripe/products/${productId}`, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to get product");
     },
     createCustomerPortalSession: async (payload) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.post("/api/stripe/portal-session", payload, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create portal session");
     },
     // Guest checkout helpers
     createGuestCheckoutSession: async (payload) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.post("/api/stripe/guest-checkout-sessions", payload, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create guest checkout session");
     },
     getGuestCheckoutSession: async (sessionId) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.get(`/api/stripe/guest-checkout-sessions/${sessionId}`, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to get guest checkout session");
     },
     listGuestCheckoutSessions: async (query = {}) => {
       const q = new URLSearchParams();
@@ -632,55 +666,55 @@ var SPAPSClient = class {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.get(`/api/stripe/guest-checkout-sessions${q.toString() ? `?${q.toString()}` : ""}`, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list guest checkout sessions");
     },
     convertGuestCheckoutSession: async (payload) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.post("/api/stripe/guest-checkout-sessions/convert", payload, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to convert guest checkout session");
     },
     convertGuestCheckout: async (payload) => this.payments.convertGuestCheckoutSession(payload),
     // Super-admin product helpers (admin token required)
     listAllProductsSuperAdmin: async () => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.get("/api/stripe/products/super-admin/all", { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list all products (super admin)");
     },
     updateProductSuperAdmin: async (productId, updates) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.put(`/api/stripe/products/super-admin/${productId}`, updates, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to update product (super admin)");
     },
     deleteProductSuperAdmin: async (productId) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.delete(`/api/stripe/products/super-admin/${productId}`, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to archive product (super admin)");
     },
     createProductWithPrice: async (payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post("/api/stripe/products/with-price", payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create product with price");
     },
     createProductWithPriceSuperAdmin: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/super-admin/${productId}/with-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create product with price (super admin)");
     },
     setDefaultPrice: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/${productId}/default-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to set default price");
     },
     setDefaultPriceSuperAdmin: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.put(`/api/stripe/products/super-admin/${productId}/default-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to set default price (super admin)");
     },
     createDefaultNewPrice: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/${productId}/prices/default-new`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create default price");
     },
     superAdminListAllProducts: async () => this.payments.listAllProductsSuperAdmin(),
     superAdminUpdateProduct: async (productId, updates) => this.payments.updateProductSuperAdmin(productId, updates),
@@ -688,42 +722,42 @@ var SPAPSClient = class {
     superAdminCreateProductWithPrice: async (applicationId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/super-admin/${applicationId}/with-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create product with price for application (super admin)");
     },
     superAdminCreatePriceAndSetDefault: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/super-admin/${productId}/prices/default-new`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create price and set default (super admin)");
     },
     superAdminSetDefaultPrice: async (productId, payload) => this.payments.setDefaultPriceSuperAdmin(productId, payload)
   };
   sessions = {
     getCurrent: async () => {
       const res = await this.client.get("/api/sessions/current", this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to get current session");
     },
     list: async (params = {}) => {
       const q = new URLSearchParams();
       if (params.limit) q.append("limit", String(params.limit));
       if (params.starting_after) q.append("starting_after", params.starting_after);
       const res = await this.client.get(`/api/sessions${q.toString() ? `?${q.toString()}` : ""}`, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list sessions");
     },
     validate: async () => {
       const res = await this.client.post("/api/sessions/validate", {}, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data || { valid: true };
+      return this.unwrapApiResponse(res, "Failed to validate session");
     },
     revoke: async (sessionId) => {
       const res = await this.client.delete(`/api/sessions/${sessionId}`, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data || { revoked: true };
+      return this.unwrapApiResponse(res, "Failed to revoke session");
     },
     revokeAll: async () => {
       const res = await this.client.delete("/api/sessions/all", this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data || { revoked: true };
+      return this.unwrapApiResponse(res, "Failed to revoke all sessions");
     },
     touch: async () => {
       const res = await this.client.post("/api/sessions/touch", {}, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data || { touched: true };
+      return this.unwrapApiResponse(res, "Failed to touch session");
     }
   };
   // Stripe Methods
@@ -750,6 +784,19 @@ var SPAPSClient = class {
       amount
     });
   }
+  // Secure Messaging Methods
+  async createSecureMessage(payload) {
+    const response = await this.client.post("/api/secure-messages", payload);
+    return this.unwrapApiResponse(response, "Failed to create secure message");
+  }
+  async listSecureMessages() {
+    const response = await this.client.get("/api/secure-messages");
+    const payload = this.unwrapApiResponse(response, "Failed to list secure messages");
+    if (payload && Array.isArray(payload.messages)) {
+      return payload.messages;
+    }
+    return payload;
+  }
   // Admin Methods (Require admin privileges)
   /**
    * Create a new Stripe product (Admin required)
@@ -989,11 +1036,14 @@ var WalletUtils = class _WalletUtils {
   WalletUtils,
   canAccessAdmin,
   createPermissionChecker,
+  createSecureMessageRequestSchema,
   defaultPermissionChecker,
   getRoleAwareErrorMessage,
   getUserDisplay,
   getUserRole,
   hasPermission,
   isAdminAccount,
+  secureMessageMetadataSchema,
+  secureMessageSchema,
   verifyCryptoWebhookSignature
 });

package/dist/index.mjs

@@ -190,6 +190,11 @@ var init_permissions = __esm({
 init_permissions();
 import crypto from "crypto";
 import axios from "axios";
+import {
+  createSecureMessageRequestSchema,
+  secureMessageSchema,
+  secureMessageMetadataSchema
+} from "spaps-types";
 if (typeof globalThis.fetch === "undefined") {
   __require("cross-fetch/polyfill");
 }
@@ -200,11 +205,39 @@ var SPAPSClient = class {
   refreshToken;
   _isLocalMode = false;
   unwrapApiResponse(response, fallback) {
-    const body = response?.data ?? response;
-    if (body?.success === false) {
-      throw new Error(body?.error?.message || fallback);
+    if (!response) {
+      throw new Error(fallback);
     }
-    return body?.data ?? body;
+    const payload = this.isAxiosResponse(response) ? response.data : this.isResponseLikeWithData(response) ? response.data : response;
+    if (this.isApiResponse(payload)) {
+      if (payload.success === false) {
+        throw new Error(payload.error?.message || fallback);
+      }
+      if (payload.data !== void 0) {
+        return payload.data;
+      }
+      return void 0;
+    }
+    return payload;
+  }
+  isAxiosResponse(value) {
+    if (!value || typeof value !== "object") {
+      return false;
+    }
+    const record = value;
+    return "data" in record && "status" in record;
+  }
+  isResponseLikeWithData(value) {
+    if (!value || typeof value !== "object") return false;
+    const record = value;
+    return "data" in record && !("success" in record);
+  }
+  isApiResponse(value) {
+    if (!value || typeof value !== "object") {
+      return false;
+    }
+    const record = value;
+    return "success" in record && typeof record.success === "boolean";
   }
   // Admin namespace for cleaner API
   admin = {
@@ -216,6 +249,10 @@ var SPAPSClient = class {
     getProducts: () => this.getProducts(),
     triggerCryptoReconcile: (opts) => this.payments.crypto.reconcile(opts || {})
   };
+  secureMessages = {
+    create: (payload) => this.createSecureMessage(payload),
+    list: () => this.listSecureMessages()
+  };
   constructor(config = {}) {
     const apiUrl = config.apiUrl || process.env.SPAPS_API_URL || process.env.NEXT_PUBLIC_SPAPS_API_URL;
     if (!apiUrl || apiUrl.includes("localhost") || apiUrl.includes("127.0.0.1")) {
@@ -397,68 +434,66 @@ var SPAPSClient = class {
      */
     verifyMagicLink: async (payload) => {
       const res = await this.client.post("/api/auth/verify-magic-link", payload);
-      const body = res.data;
-      if (body?.success === false) throw new Error(body?.error?.message || "Failed to verify magic link");
-      return body?.data || body || { success: true };
+      return this.unwrapApiResponse(res, "Failed to verify magic link");
     },
     solana: {
       linkWallet: async (payload) => {
         const res = await this.client.post("/api/auth/solana/link-wallet", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to link Solana wallet");
       },
       verifySignature: async (payload) => {
         const res = await this.client.post("/api/auth/solana/verify-signature", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to verify Solana signature");
       },
       generateMessage: async (wallet_address) => {
         const res = await this.client.get(`/api/auth/solana/generate-message/${wallet_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to generate Solana auth message");
       },
       getWallets: async () => {
         const res = await this.client.get("/api/auth/solana/wallets");
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Solana wallets");
       },
       networkInfo: async () => {
         const res = await this.client.get("/api/auth/solana/network-info");
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Solana network info");
       }
     },
     ethereum: {
       linkWallet: async (payload) => {
         const res = await this.client.post("/api/auth/ethereum/link-wallet", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to link Ethereum wallet");
       },
       verifySignature: async (payload) => {
         const res = await this.client.post("/api/auth/ethereum/verify-signature", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to verify Ethereum signature");
       },
       verifyTypedData: async (payload) => {
         const res = await this.client.post("/api/auth/ethereum/verify-typed-data", payload);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to verify EIP-712 typed data");
       },
       generateMessage: async (wallet_address) => {
         const res = await this.client.get(`/api/auth/ethereum/generate-message/${wallet_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to generate Ethereum auth message");
       },
       generateTypedData: async (wallet_address) => {
         const res = await this.client.get(`/api/auth/ethereum/generate-typed-data/${wallet_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to generate Ethereum typed data");
       },
       getWallets: async () => {
         const res = await this.client.get("/api/auth/ethereum/wallets");
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Ethereum wallets");
       },
       networkInfo: async () => {
         const res = await this.client.get("/api/auth/ethereum/network-info");
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Ethereum network info");
       },
       balance: async (wallet_address) => {
         const res = await this.client.get(`/api/auth/ethereum/balance/${wallet_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to fetch Ethereum balance");
       },
       contractCheck: async (wallet_address, contract_address) => {
         const res = await this.client.get(`/api/auth/ethereum/contract-check/${wallet_address}/${contract_address}`);
-        return res.data;
+        return this.unwrapApiResponse(res, "Failed to check contract");
       }
     },
     refreshToken: async (refreshToken) => {
@@ -538,7 +573,7 @@ var SPAPSClient = class {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.post("/api/stripe/checkout-sessions", payload, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create checkout session");
     },
     createPaymentCheckout: async (params) => {
       const payload = { mode: "payment", line_items: [{ price_id: params.price_id, quantity: params.quantity ?? 1 }], success_url: params.success_url, cancel_url: params.cancel_url };
@@ -551,18 +586,18 @@ var SPAPSClient = class {
     },
     getCheckoutSession: async (sessionId) => {
       const res = await this.client.get(`/api/stripe/checkout-sessions/${sessionId}`);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to get checkout session");
     },
     listCheckoutSessions: async (query = {}) => {
       const q = new URLSearchParams();
       if (query.limit) q.append("limit", String(query.limit));
       if (query.starting_after) q.append("starting_after", query.starting_after);
       const res = await this.client.get(`/api/stripe/checkout-sessions${q.toString() ? `?${q.toString()}` : ""}`);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list checkout sessions");
     },
     expireCheckoutSession: async (sessionId) => {
       const res = await this.client.post(`/api/stripe/checkout-sessions/${sessionId}/expire`);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to expire checkout session");
     },
     listProducts: async (query = {}) => {
       const q = new URLSearchParams();
@@ -573,32 +608,32 @@ var SPAPSClient = class {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.get(`/api/stripe/products${q.toString() ? `?${q.toString()}` : ""}`, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list products");
     },
     getProduct: async (productId) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.get(`/api/stripe/products/${productId}`, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to get product");
     },
     createCustomerPortalSession: async (payload) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.post("/api/stripe/portal-session", payload, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create portal session");
     },
     // Guest checkout helpers
     createGuestCheckoutSession: async (payload) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.post("/api/stripe/guest-checkout-sessions", payload, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create guest checkout session");
     },
     getGuestCheckoutSession: async (sessionId) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.get(`/api/stripe/guest-checkout-sessions/${sessionId}`, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to get guest checkout session");
     },
     listGuestCheckoutSessions: async (query = {}) => {
       const q = new URLSearchParams();
@@ -607,55 +642,55 @@ var SPAPSClient = class {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.get(`/api/stripe/guest-checkout-sessions${q.toString() ? `?${q.toString()}` : ""}`, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list guest checkout sessions");
     },
     convertGuestCheckoutSession: async (payload) => {
       const headers = {};
       if (this.accessToken) headers["Authorization"] = `Bearer ${this.accessToken}`;
       const res = await this.client.post("/api/stripe/guest-checkout-sessions/convert", payload, { headers });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to convert guest checkout session");
     },
     convertGuestCheckout: async (payload) => this.payments.convertGuestCheckoutSession(payload),
     // Super-admin product helpers (admin token required)
     listAllProductsSuperAdmin: async () => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.get("/api/stripe/products/super-admin/all", { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list all products (super admin)");
     },
     updateProductSuperAdmin: async (productId, updates) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.put(`/api/stripe/products/super-admin/${productId}`, updates, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to update product (super admin)");
     },
     deleteProductSuperAdmin: async (productId) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.delete(`/api/stripe/products/super-admin/${productId}`, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to archive product (super admin)");
     },
     createProductWithPrice: async (payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post("/api/stripe/products/with-price", payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create product with price");
     },
     createProductWithPriceSuperAdmin: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/super-admin/${productId}/with-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create product with price (super admin)");
     },
     setDefaultPrice: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/${productId}/default-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to set default price");
     },
     setDefaultPriceSuperAdmin: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.put(`/api/stripe/products/super-admin/${productId}/default-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to set default price (super admin)");
     },
     createDefaultNewPrice: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/${productId}/prices/default-new`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create default price");
     },
     superAdminListAllProducts: async () => this.payments.listAllProductsSuperAdmin(),
     superAdminUpdateProduct: async (productId, updates) => this.payments.updateProductSuperAdmin(productId, updates),
@@ -663,42 +698,42 @@ var SPAPSClient = class {
     superAdminCreateProductWithPrice: async (applicationId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/super-admin/${applicationId}/with-price`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create product with price for application (super admin)");
     },
     superAdminCreatePriceAndSetDefault: async (productId, payload) => {
       if (!this.accessToken) throw new Error("Authentication required. Please authenticate first.");
       const res = await this.client.post(`/api/stripe/products/super-admin/${productId}/prices/default-new`, payload, { headers: { Authorization: `Bearer ${this.accessToken}` } });
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to create price and set default (super admin)");
     },
     superAdminSetDefaultPrice: async (productId, payload) => this.payments.setDefaultPriceSuperAdmin(productId, payload)
   };
   sessions = {
     getCurrent: async () => {
       const res = await this.client.get("/api/sessions/current", this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to get current session");
     },
     list: async (params = {}) => {
       const q = new URLSearchParams();
       if (params.limit) q.append("limit", String(params.limit));
       if (params.starting_after) q.append("starting_after", params.starting_after);
       const res = await this.client.get(`/api/sessions${q.toString() ? `?${q.toString()}` : ""}`, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data;
+      return this.unwrapApiResponse(res, "Failed to list sessions");
     },
     validate: async () => {
       const res = await this.client.post("/api/sessions/validate", {}, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data || { valid: true };
+      return this.unwrapApiResponse(res, "Failed to validate session");
     },
     revoke: async (sessionId) => {
       const res = await this.client.delete(`/api/sessions/${sessionId}`, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data || { revoked: true };
+      return this.unwrapApiResponse(res, "Failed to revoke session");
     },
     revokeAll: async () => {
       const res = await this.client.delete("/api/sessions/all", this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data || { revoked: true };
+      return this.unwrapApiResponse(res, "Failed to revoke all sessions");
     },
     touch: async () => {
       const res = await this.client.post("/api/sessions/touch", {}, this.accessToken ? { headers: { Authorization: `Bearer ${this.accessToken}` } } : void 0);
-      return res.data || { touched: true };
+      return this.unwrapApiResponse(res, "Failed to touch session");
     }
   };
   // Stripe Methods
@@ -725,6 +760,19 @@ var SPAPSClient = class {
       amount
     });
   }
+  // Secure Messaging Methods
+  async createSecureMessage(payload) {
+    const response = await this.client.post("/api/secure-messages", payload);
+    return this.unwrapApiResponse(response, "Failed to create secure message");
+  }
+  async listSecureMessages() {
+    const response = await this.client.get("/api/secure-messages");
+    const payload = this.unwrapApiResponse(response, "Failed to list secure messages");
+    if (payload && Array.isArray(payload.messages)) {
+      return payload.messages;
+    }
+    return payload;
+  }
   // Admin Methods (Require admin privileges)
   /**
    * Create a new Stripe product (Admin required)
@@ -963,6 +1011,7 @@ export {
   WalletUtils,
   canAccessAdmin,
   createPermissionChecker,
+  createSecureMessageRequestSchema,
   index_default as default,
   defaultPermissionChecker,
   getRoleAwareErrorMessage,
@@ -970,5 +1019,7 @@ export {
   getUserRole,
   hasPermission,
   isAdminAccount,
+  secureMessageMetadataSchema,
+  secureMessageSchema,
   verifyCryptoWebhookSignature
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spaps-sdk",
-  "version": "1.1.7",
+  "version": "1.1.8",
   "description": "Sweet Potato Authentication & Payment Service SDK - Zero-config client with built-in permission checking and role-based access control",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -44,7 +44,7 @@
     "email": "buildooor@gmail.com"
   },
   "dependencies": {
-    "spaps-types": "^1.0.12",
+    "spaps-types": "^1.0.14",
     "axios": "^1.6.0",
     "cross-fetch": "^4.0.0"
   },
@@ -72,4 +72,4 @@
   "engines": {
     "node": ">=14.0.0"
   }
-}
+}