import { QnspClient } from "@cuilabs/qnsp";

const qnsp = new QnspClient({ apiKey: process.env.QNSP_API_KEY! });

// Self-serve tenant creation (called from your signup handler)
const tenant = await qnsp.tenant.createTenant({
  slug: workspace.slug,
  name: workspace.name,
  // Healthcare/finance customers get strict tier; others default
  cryptoPolicyTier: workspace.industry === "healthcare" ? "strict" : "default",
});

// Subsequent SDK calls scoped to this tenant via the tenant token
const tenantQnsp = new QnspClient({
  apiKey: process.env.QNSP_API_KEY!,
  tenantId: tenant.id,
});

await tenantQnsp.vault.createSecret({
  name: "first-secret",
  payloadB64: payload,
});