Initial public release of Warp.

Repo-Sync-Origin: warpdotdev/warp-internal@12af1d983b

crates/managed_secrets_wasm/src/lib.rs

@@ -0,0 +1,55 @@
+use warp_managed_secrets::{ManagedSecretValue, UploadKey, init_envelope};
+use wasm_bindgen::prelude::*;
+
+/// Called once when the WASM module is instantiated.
+#[wasm_bindgen(start)]
+pub fn start() {
+    init_envelope();
+}
+
+/// Helper: import keyset and encrypt a secret value.
+fn do_encrypt(
+    public_key_base64: &str,
+    actor_uid: &str,
+    secret_name: &str,
+    secret: &ManagedSecretValue,
+) -> Result<String, JsValue> {
+    let upload_key = UploadKey::import_public_keyset(public_key_base64)
+        .map_err(|e| JsValue::from_str(&format!("failed to import public key: {e}")))?;
+
+    upload_key
+        .encrypt_secret(actor_uid, secret_name, secret)
+        .map_err(|e| JsValue::from_str(&format!("encryption failed: {e}")))
+}
+
+/// Encrypt a raw secret value.
+#[wasm_bindgen]
+pub fn encrypt_raw_secret(
+    public_key_base64: &str,
+    actor_uid: &str,
+    secret_name: &str,
+    secret_value: &str,
+) -> Result<String, JsValue> {
+    do_encrypt(
+        public_key_base64,
+        actor_uid,
+        secret_name,
+        &ManagedSecretValue::raw_value(secret_value),
+    )
+}
+
+/// Encrypt an Anthropic API key secret.
+#[wasm_bindgen]
+pub fn encrypt_anthropic_api_key_secret(
+    public_key_base64: &str,
+    actor_uid: &str,
+    secret_name: &str,
+    api_key: &str,
+) -> Result<String, JsValue> {
+    do_encrypt(
+        public_key_base64,
+        actor_uid,
+        secret_name,
+        &ManagedSecretValue::anthropic_api_key(api_key),
+    )
+}