import os
from wirebox.vault import VaultSecretType, LoginPayload, parse_totp_uri

vault = wb.vault.unlock(os.environ["WIREBOX_VAULT_KEY"])

# Create (payload encrypted locally before upload)
vault.create_secret(
    type=VaultSecretType.LOGIN,
    name="GitHub",
    payload=LoginPayload(
        username="eva",
        password="s3cr3t",
        totp=parse_totp_uri("otpauth://totp/GitHub:eva?secret=JBSWY3DPEHPK3PXP"),
    ),
)

# Read (by name or id) and update with the full payload
login = vault.get_login("GitHub")
login.password = "rotated"
vault.update_secret("GitHub", payload=login)
vault.delete_secret("GitHub")

import { VaultSecretType, parseTotpUri } from "@wirebox-sh/sdk";

const vault = await wb.vault.unlock(process.env.WIREBOX_VAULT_KEY);

// Create (payload encrypted locally before upload)
await vault.createSecret({
  type: VaultSecretType.LOGIN,
  name: "GitHub",
  payload: {
    username: "eva",
    password: "s3cr3t",
    totp: parseTotpUri("otpauth://totp/GitHub:eva?secret=JBSWY3DPEHPK3PXP"),
  },
});

// Read (by name or id) and update
const login = vault.getLogin("GitHub");
await vault.updateSecret("GitHub", { payload: { ...login, password: "rotated" } });
await vault.deleteSecret("GitHub");

wirebox vault list --type login
wirebox vault add --type login --name GitHub --username eva --password
wirebox vault get GitHub --reveal
wirebox vault set GitHub --password
wirebox vault rm GitHub

{
  "secrets": [
    {
      "id": "vsec_01J8ABC123XYZ",
      "type": "login",
      "name": "GitHub",
      "description": null,
      "created_at": "2026-10-10T10:00:00Z",
      "updated_at": "2026-10-10T10:00:00Z"
    }
  ]
}