@ax-hub/admin-sdk 2.0.0 → 2.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -34,6 +34,20 @@ const admin = new AdminClient({
|
|
|
34
34
|
})
|
|
35
35
|
```
|
|
36
36
|
|
|
37
|
+
## Agent operating notes
|
|
38
|
+
|
|
39
|
+
Use `@ax-hub/admin-sdk` only when the token is authorized for governance routes. Ordinary member/PAT workflows for creating apps, dynamic tables, rows, and deployments belong in [`@ax-hub/sdk`](../sdk/README.md). If an agent sees `403 permission_denied` or `not_admin`, treat it as an authorization result, not an SDK bug.
|
|
40
|
+
|
|
41
|
+
The app/data SDKs were live-verified against production tenant `test` on 2026-06-08. That QA created and deleted apps, env vars, tables, columns, grants, and rows. For app/data cleanup semantics, table grant revocation is proven by `revokedAt`, while row/table delete is proven by follow-up `404` or `410`. Admin-specific tenant governance calls still require a real admin token and should be run only against disposable tenant fixtures.
|
|
42
|
+
|
|
43
|
+
Safety checklist for admin agents:
|
|
44
|
+
|
|
45
|
+
1. Confirm the token is intended for admin/governance work.
|
|
46
|
+
2. Use timestamp-suffixed fixture slugs, domains, tags, and subjects.
|
|
47
|
+
3. Delete only fixtures created by the current run.
|
|
48
|
+
4. Branch on typed `AxHubError` category/code, not localized `message` text.
|
|
49
|
+
5. Never print admin tokens or raw OAuth/client secrets.
|
|
50
|
+
|
|
37
51
|
## Resource Catalog
|
|
38
52
|
|
|
39
53
|
| Namespace | Methods |
|