// POST /api/credentials
{
  "provider_id": "uuid-of-openai",
  "name": "Production OpenAI",
  "environment": "production",
  "credential": "sk-proj-xxxxxxxxxxxxx",
  "scopes": ["chat", "embeddings", "images"]
}

{
  "id": "uuid",
  "name": "Production OpenAI",
  "environment": "production",
  "key_hint": "...xxxxx",
  "provider": {
    "name": "OpenAI",
    "icon_url": "..."
  }
}

// Server-side: Get decrypted credential
import { getCredential } from '@trendingsociety/db/credentials';

const openaiKey = await getCredential({
  tenantId: 'xxx',
  providerSlug: 'openai',
  environment: 'production'
});

// Use with OpenAI SDK
const openai = new OpenAI({ apiKey: openaiKey });

// POST /api/api-keys
{
  "name": "Mobile App - Production",
  "environment": "production",
  "scopes": ["content:read", "jarvis:invoke"],
  "rate_limit_per_minute": 100,
  "expires_at": "2026-01-01T00:00:00Z"  // Optional
}

{
  "id": "uuid",
  "name": "Mobile App - Production",
  "key": "ts_live_xxxxxxxxxxxxxxxxxxxxxxxx",
  "key_prefix": "ts_live_xxx",
  "scopes": ["content:read", "jarvis:invoke"],
  "rate_limit_per_minute": 100
}

curl https://api.trendingsociety.com/v1/content \
  -H "Authorization: Bearer ts_live_xxxxxxxx"

import { TrendingEngine } from '@trendingsociety/sdk';

const client = new TrendingEngine({
  apiKey: process.env.TRENDING_ENGINE_API_KEY
});

const articles = await client.content.list({ limit: 10 });

// POST /api/usage-alerts
{
  "product_id": "uuid-of-jarvis",
  "threshold_percent": 80,
  "notification_type": "email",
  "notification_target": "[email protected]"
}

// POST /api/webhooks
{
  "url": "https://your-app.com/webhooks/trending",
  "events": [
    "content.published",
    "user.joined",
    "api_key.created"
  ]
}

{
  "id": "uuid",
  "url": "https://your-app.com/webhooks/trending",
  "events": ["content.published", "user.joined", "api_key.created"],
  "secret": "whsec_xxxxxxxxxxxxxxxx"
}

import { createHmac } from 'crypto';

function verifyWebhook(payload: string, signature: string, secret: string) {
  const expected = createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  
  return `sha256=${expected}` === signature;
}

// In your handler
app.post('/webhooks/trending', (req, res) => {
  const isValid = verifyWebhook(
    JSON.stringify(req.body),
    req.headers['x-trending-signature'],
    process.env.WEBHOOK_SECRET
  );
  
  if (!isValid) {
    return res.status(401).send('Invalid signature');
  }
  
  // Process webhook...
});

{
  "id": "evt_xxxxx",
  "type": "content.published",
  "created_at": "2025-01-15T10:30:00Z",
  "data": {
    "article_id": "uuid",
    "title": "10 AI Trends for 2025",
    "site_id": "uuid",
    "published_at": "2025-01-15T10:30:00Z"
  }
}