feat(api): split credentials and secrets

Author: TheodoreSpeaks

apps/docs/openapi-v2-resources.json

@@ -4766,6 +4766,11 @@
           "data": {
             "$ref": "#/components/schemas/RowData"
           },
+          "__privateSecretProvenance": {
+            "type": "object",
+            "writeOnly": true,
+            "description": "Opaque Sim-managed encrypted provenance metadata. External callers should omit this field."
+          },
           "afterRowId": {
             "type": "string",
             "minLength": 1,
@@ -4788,6 +4793,11 @@
             "minLength": 1,
             "description": "The workspace that owns the table."
           },
+          "__privateSecretProvenance": {
+            "type": "object",
+            "writeOnly": true,
+            "description": "Opaque Sim-managed encrypted provenance metadata. External callers should omit this field."
+          },
           "rows": {
             "type": "array",
             "minItems": 1,
@@ -4826,6 +4836,11 @@
           "data": {
             "$ref": "#/components/schemas/RowData"
           },
+          "__privateSecretProvenance": {
+            "type": "object",
+            "writeOnly": true,
+            "description": "Opaque Sim-managed encrypted provenance metadata. External callers should omit this field."
+          },
           "limit": {
             "type": "integer",
             "minimum": 1,
@@ -4906,6 +4921,11 @@
           },
           "data": {
             "$ref": "#/components/schemas/RowData"
+          },
+          "__privateSecretProvenance": {
+            "type": "object",
+            "writeOnly": true,
+            "description": "Opaque Sim-managed encrypted provenance metadata. External callers should omit this field."
           }
         }
       },
@@ -4922,6 +4942,11 @@
           "data": {
             "$ref": "#/components/schemas/RowData"
           },
+          "__privateSecretProvenance": {
+            "type": "object",
+            "writeOnly": true,
+            "description": "Opaque Sim-managed encrypted provenance metadata. External callers should omit this field."
+          },
           "conflictTarget": {
             "type": "string",
             "minLength": 1,

apps/docs/openapi-v2-tables.json

@@ -219,7 +219,7 @@ export const GET = withRouteHandler(async (request: NextRequest) => {
       workspaceId,
       userId: session.user.id,
       workspaceAccess,
-      type,
+      types: type ? [type] : undefined,
       providerId,
     })
     const credentials = visible.map(({ hasServiceAccountKey: _hasKey, ...rest }) => rest)

apps/sim/app/api/credentials/route.ts

@@ -66,7 +66,8 @@ export type ApiEndpoint =
   | 'custom-tools'
   | 'custom-tool-detail'
   | 'credentials'
-  | 'credential-detail'
+  | 'secrets'
+  | 'secret-detail'
 
 export interface RateLimitResult {
   allowed: boolean