@suronai/sdk

Node.js secrets SDK — fetch secrets with Telegram approval, powered by SURON.

npm install @suronai/sdk

Usage

import 'dotenv/config'           // loads SURON_URL + SURON_TOKEN
import { SURON } from '@suronai/sdk'

const env = await SURON.connect()

// Single secret — blocks until approved via Telegram
const key = await env.get('API_KEY')

// Multiple secrets at startup — one Telegram prompt per key, in order
const { DB, REDIS, API } = await env.getAll(['DB', 'REDIS', 'API'])

Required .env

SURON_URL=https://your-deployment.convex.cloud
SURON_TOKEN=sk_your_app_token_here

Get your token with the CLI: suron apps create --name my-app

How it works

1. App calls env.get('KEY') at runtime
2. SURON checks if approved for this session → returns cached value if yes
3. If not → Telegram notification sent to the owner
4. Owner taps Approve or Deny
5. Approved → secret returned and cached until app restarts
6. Denied → throws Error: Access denied for 'KEY'

Full documentation

→ github.com/your-org/suron

License

MIT