@crvouga/mockingbird-service-infisical 1.1.0 → 1.3.0

package/CHANGELOG.md

@@ -1,6 +1,18 @@
 # Changelog — @crvouga/mockingbird-service-infisical
 
-## 1.1.0 (2026-10-09)
+## 1.3.0 (2026-10-15)
+
+### Features
+
+- unify the emulator control plane ([2068547](https://github.com/crvouga/mockingbird/commit/2068547bedde4e2e2331c1657c1a78120e84428b))
+
+## 1.2.0 (2026-10-08)
+
+### Features
+
+- match Emulate provider coverage ([16b65ce](https://github.com/crvouga/mockingbird/commit/16b65ce791fa216f28ec1521df636f57771d9c5e))
+
+## 1.1.0 (2026-10-08)
 
 ### Features
 

package/DISCOVERY.md

@@ -35,6 +35,7 @@ repository; live parity is an additional oracle check, not a substitute for the
 
 - `GET /__admin/health`
 - `GET /__admin`
+- `GET /__admin/controls`
 - `GET /__admin/state`
 - `GET /__admin/requests`
 - `GET /__admin/metrics`
@@ -45,6 +46,28 @@ For HTTP services, use `x-mockingbird-namespace` (or the documented credential/p
 parallel tests do not share state. Admin state, journal, metrics and fault-preset endpoints are
 designed for assertions and diagnosis by consuming test suites.
 
+## Admin controls
+
+Every HTTP emulator takes the same controls, and each means the same thing at boot
+(`createRuntime({ adminControls })`, `serve --admin-controls`), over `/__admin`, and in a request header:
+
+| Control | Admin API | Request header | Interface |
+| --- | --- | --- | --- |
+| Isolate state by key | `GET /__admin/namespaces` | `x-mockingbird-namespace: <key>` | [Namespaces](https://mockingbird.chrisvouga.dev/docs/admin-controls/namespaces) |
+| Reset to boot | `POST /__admin/reset` | `x-mockingbird-reset: true` | [Reset](https://mockingbird.chrisvouga.dev/docs/admin-controls/reset) |
+| Snapshot and restore | `POST /__admin/snapshots`, `POST /__admin/snapshots/<id>/restore` | `x-mockingbird-snapshot: <name>`, `x-mockingbird-restore: <name>` | [Snapshot and restore](https://mockingbird.chrisvouga.dev/docs/admin-controls/snapshot-and-restore) |
+| Move the clock | `POST /__admin/clock` | `x-mockingbird-time: <instant>`, `x-mockingbird-advance: <duration>` | [Clock](https://mockingbird.chrisvouga.dev/docs/admin-controls/clock) |
+| Read or branch from old state | `GET /__admin/timeline` | `x-mockingbird-at: <checkpoint>`, `x-mockingbird-branch: <name>` | [Checkpoints and branches](https://mockingbird.chrisvouga.dev/docs/admin-controls/checkpoints-and-branches) |
+| Inject a fault | `POST /__admin/faults` | `x-mockingbird-fault: <fault>` | [Faults](https://mockingbird.chrisvouga.dev/docs/admin-controls/faults) |
+| Latency and timeouts | `PUT /__admin/latency` | `x-mockingbird-delay: <duration>`, `x-mockingbird-timeout: <duration>` | [Latency and timeouts](https://mockingbird.chrisvouga.dev/docs/admin-controls/latency-and-timeouts) |
+| Replay from a seed | `PUT /__admin/controls` | `x-mockingbird-seed: <seed>` | [Seed and determinism](https://mockingbird.chrisvouga.dev/docs/admin-controls/seed-and-determinism) |
+| See what happened | `GET /__admin/requests`, `GET /__admin/state` | | [Journal, metrics and state](https://mockingbird.chrisvouga.dev/docs/admin-controls/journal-and-state) |
+
+`GET /__admin` lists every route and header with a one-line summary, and `GET /__admin/controls`
+is the namespace's current control document. The same seed and the same requests give the same
+bytes. Setting controls as an emulator starts is [Boot](https://mockingbird.chrisvouga.dev/docs/admin-controls/boot); every route and header is in
+the [Reference](https://mockingbird.chrisvouga.dev/docs/admin-controls/reference). The full guide: <https://mockingbird.chrisvouga.dev/docs/admin-controls>.
+
 ## Report a mismatch or missing capability
 
 Follow the [agent reporting contract](https://github.com/crvouga/mockingbird/blob/main/docs/REPORTING_ISSUES.md). Include package version,

package/README.md

@@ -16,25 +16,34 @@ bun add @crvouga/mockingbird-service-infisical
 ## Usage
 
 ```ts
-import { createRuntime } from "@crvouga/mockingbird-service-infisical"
-
-const emulator = createRuntime()
-const response = await emulator.fetch(new Request(
-  "http://emulator.local/api/v3/secrets/raw?workspaceId=fixture-project&environment=dev&secretPath=/app",
-  { headers: { authorization: "Bearer fixture-service-token" } },
-))
-const result = await response.json() as { secrets: { secretKey: string; version: number }[] }
+import { InfisicalSDK } from "@infisical/sdk"
+import { createServer } from "@crvouga/mockingbird-service-infisical/server"
+
+const emulator = await createServer()
+
+// The application's client. Only siteUrl changes.
+const sdk = new InfisicalSDK({ siteUrl: emulator.url })
+sdk.auth().accessToken("fixture-service-token")
+const result = await sdk.secrets().listSecrets({
+  projectId: "fixture-project",
+  environment: "dev",
+  secretPath: "/app",
+})
 console.log(result.secrets.map((secret) => ({ key: secret.secretKey, version: secret.version })))
+
+await emulator.close()
 ```
 
-For the SDK walkthrough, also install `@infisical/sdk@3.0.91`. The SDK is an optional consumer
-dependency; the emulator's runtime does not depend on it.
+The examples need `@infisical/sdk@3.0.91`. The SDK is an optional consumer dependency; the
+emulator's runtime does not depend on it. A machine identity logs in with Universal Auth, and a
+`/__admin/ns/<name>` prefix on `siteUrl` gives a suite its own namespace:
 
-```js
-import { createServer } from "@crvouga/mockingbird-service-infisical/server"
+```ts
 import { InfisicalSDK } from "@infisical/sdk"
+import { createServer } from "@crvouga/mockingbird-service-infisical/server"
 
 const emulator = await createServer({ adminKey: "fixture-infisical-admin" })
+
 const sdk = new InfisicalSDK({ siteUrl: `${emulator.url}/__admin/ns/test-suite` })
 await sdk.auth().universalAuth.login({
   clientId: "fixture-machine",
@@ -46,6 +55,7 @@ const result = await sdk.secrets().listSecrets({
   secretPath: "/app",
 })
 console.log(result.secrets.map((secret) => ({ key: secret.secretKey, version: secret.version })))
+
 await emulator.close()
 ```