@fonderie/admin 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fonderie, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,53 @@
+# @fonderie/admin
+
+The operator's surface. One reserved path (default `/_admin`) behind one admin
+token, answering what the founder cannot see after deploy: **which bricks are
+installed, at what version, whether they are ready, and every route that is
+exposed.**
+
+Status: **experimental** (0.x). Design and roadmap: `docs/ADMIN-BRICK-DESIGN.md`.
+
+## Use it
+
+```ts
+import { AdminModule } from '@fonderie/admin';
+
+app.register(new AdminModule({ adminToken: process.env.ADMIN_TOKEN }));
+```
+
+```sh
+curl -H "Authorization: Bearer $ADMIN_TOKEN" https://api.example.com/_admin/manifest
+```
+
+- **No token, no surface.** Unset `adminToken` ⇒ nothing is registered (404),
+  never an open route. Same rule as every other brick's admin routes
+  (`docs/ADMIN-AUTH-SPEC.md`); the token is strength-checked at boot.
+- **The prefix is reserved.** No other module can mount under it — a collision
+  fails boot, naming both sides. `path` moves the whole surface
+  (`{ path: '/ops' }`); it is relative to the app's `basePath`, like every route.
+
+## `GET /_admin/manifest`
+
+```json
+{
+  "generatedAt": "…", "env": "production",
+  "admin": { "version": "0.1.0" },
+  "modules": [
+    { "name": "@fonderie/auth", "version": null, "readiness": { "ok": true, "problems": [] } },
+    { "name": "@fonderie/config", "version": null, "readiness": { "ok": true, "problems": [ { "severity": "warning", "message": "no secretEncryptor configured — …" } ] } }
+  ],
+  "readiness": { "ok": true, "problems": [ … ] },
+  "routes": [ { "method": "POST", "path": "/auth/login", "module": "@fonderie/auth" }, … ]
+}
+```
+
+`version` is `null` until a brick reports one (`IFonderieModule.version`).
+Readiness problems are shown here in production — unlike `/readyz`, which is
+public — because the operator is the audience.
+
+## Why it's a brick
+
+The model that assembled the app knows what is installed, wired and
+configured. The human who deployed it does not, unless they are back in a
+development session and can ask. `@fonderie/core` already computes the
+answer (`securityReport()`, `app.routes()`); this brick gives it an address.

package/brain/outcomes.md

@@ -0,0 +1,14 @@
+<!-- GENERATED — do not edit. Regenerate with: npm run docs:signatures -->
+
+# @fonderie/admin — outcomes
+
+What this package does to a running app: tables its migrations create,
+rows it seeds, routes it registers. Generated from the migration SQL and
+route tables in source — trust this file instead of reading `dist/` or
+downloading tarballs.
+
+## HTTP routes registered
+
+| Method | Path | Middleware chain (auth / validation / handler) |
+|---|---|---|
+| GET | `/_admin/manifest` | `g(async () => setApiResponse( HTTP.OK, 'ADMIN_MANIFEST', 'Deployment manifest', buildManifest(app, { version: this.version }), ), )` |

package/brain/signatures.md

@@ -0,0 +1,42 @@
+<!-- GENERATED — do not edit. Regenerate with: npm run docs:signatures -->
+
+# @fonderie/admin — signatures
+
+## @fonderie/admin
+
+```ts
+new AdminModule(options?: IAdminOptions): AdminModule
+  .name: "@fonderie/admin"
+  .version: string
+  .path: string
+  .install(app: IFonderieApp): void
+  .checkReadiness(): IReadinessProblem[]
+
+const ADMIN_VERSION: string
+
+const DEFAULT_ADMIN_PATH: "/_admin"
+
+function buildManifest(app: IFonderieApp, admin: { version: string; }): IAdminManifest
+
+interface IAdminOptions {
+    adminToken?: string;
+    path?: string;
+}
+
+interface IAdminManifest {
+    generatedAt: string;
+    env: string;
+    admin: {
+        version: string;
+    };
+    modules: IAdminModuleEntry[];
+    readiness: IReadinessReport;
+    routes: IRouteEntry[];
+}
+
+interface IAdminModuleEntry {
+    name: string;
+    version: string | null;
+    readiness: IReadinessReport;
+}
+```

package/dist/index.cjs

@@ -0,0 +1,107 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  ADMIN_VERSION: () => ADMIN_VERSION,
+  AdminModule: () => AdminModule,
+  DEFAULT_ADMIN_PATH: () => DEFAULT_ADMIN_PATH,
+  buildManifest: () => buildManifest
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/module.ts
+var import_core = require("@fonderie/core");
+var import_middlewares = require("@fonderie/core/middlewares");
+
+// src/manifest.ts
+function buildManifest(app, admin) {
+  const report = app.securityReport();
+  const byModule = /* @__PURE__ */ new Map();
+  for (const p of report.readiness.problems) {
+    const list = byModule.get(p.module) ?? [];
+    list.push(p);
+    byModule.set(p.module, list);
+  }
+  const modules = report.modules.map(({ name, version }) => {
+    const problems = byModule.get(name) ?? [];
+    return {
+      name,
+      version: version ?? null,
+      readiness: { ok: !problems.some((p) => p.severity === "error"), problems }
+    };
+  });
+  return {
+    generatedAt: report.generatedAt,
+    env: report.env,
+    admin,
+    modules,
+    readiness: report.readiness,
+    routes: app.routes()
+  };
+}
+
+// src/module.ts
+var DEFAULT_ADMIN_PATH = "/_admin";
+var ADMIN_VERSION = "0.1.0";
+var AdminModule = class {
+  constructor(options = {}) {
+    this.options = options;
+    this.path = (options.path ?? DEFAULT_ADMIN_PATH).replace(/\/+$/, "");
+  }
+  options;
+  name = "@fonderie/admin";
+  version = ADMIN_VERSION;
+  path;
+  install(app) {
+    const token = this.options.adminToken;
+    if (!token) return;
+    app.reserve(this.path);
+    const guard = (0, import_middlewares.requireAdminToken)(token);
+    const g = (h) => (ctx, next) => guard(ctx, () => h(ctx, next));
+    const at = (p) => this.path + p.slice(DEFAULT_ADMIN_PATH.length);
+    const routes = [
+      [
+        "GET",
+        "/_admin/manifest",
+        g(
+          async () => (0, import_core.setApiResponse)(
+            import_core.HTTP.OK,
+            "ADMIN_MANIFEST",
+            "Deployment manifest",
+            buildManifest(app, { version: this.version })
+          )
+        )
+      ]
+    ];
+    for (const [method, path, handler] of routes) app.addRoute(method, at(path), handler);
+  }
+  checkReadiness() {
+    return (0, import_middlewares.validateAdminToken)(this.options.adminToken, { module: this.name });
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ADMIN_VERSION,
+  AdminModule,
+  DEFAULT_ADMIN_PATH,
+  buildManifest
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/module.ts","../src/manifest.ts"],"sourcesContent":["export { AdminModule, ADMIN_VERSION, DEFAULT_ADMIN_PATH } from './module';\nexport { buildManifest } from './manifest';\nexport type { IAdminOptions, IAdminManifest, IAdminModuleEntry } from './types';\n","import type { IFonderieApp, IFonderieModule, IReadinessProblem, Middleware } from '@fonderie/core';\nimport { HTTP, setApiResponse } from '@fonderie/core';\nimport { requireAdminToken, validateAdminToken } from '@fonderie/core/middlewares';\n\nimport { buildManifest } from './manifest';\nimport type { IAdminOptions } from './types';\n\nexport const DEFAULT_ADMIN_PATH = '/_admin';\n\n// Replaced at build time (tsup env); the fallback is what tests see.\nexport const ADMIN_VERSION: string = process.env['FONDERIE_ADMIN_VERSION'] ?? '0.0.0-dev';\n\nexport class AdminModule implements IFonderieModule {\n\treadonly name = '@fonderie/admin';\n\treadonly version = ADMIN_VERSION;\n\treadonly path: string;\n\n\tconstructor(private options: IAdminOptions = {}) {\n\t\tthis.path = (options.path ?? DEFAULT_ADMIN_PATH).replace(/\\/+$/, '');\n\t}\n\n\tinstall(app: IFonderieApp): void {\n\t\tconst token = this.options.adminToken;\n\t\tif (!token) return;\n\n\t\tapp.reserve(this.path);\n\t\tconst guard = requireAdminToken(token);\n\t\tconst g =\n\t\t\t(h: Middleware): Middleware =>\n\t\t\t(ctx, next) =>\n\t\t\t\tguard(ctx, () => h(ctx, next));\n\t\t// Declared at the default path so the route table reads literally; re-based when configured.\n\t\tconst at = (p: string): string => this.path + p.slice(DEFAULT_ADMIN_PATH.length);\n\n\t\tconst routes: Array<[string, string, Middleware]> = [\n\t\t\t[\n\t\t\t\t'GET',\n\t\t\t\t'/_admin/manifest',\n\t\t\t\tg(async () =>\n\t\t\t\t\tsetApiResponse(\n\t\t\t\t\t\tHTTP.OK,\n\t\t\t\t\t\t'ADMIN_MANIFEST',\n\t\t\t\t\t\t'Deployment manifest',\n\t\t\t\t\t\tbuildManifest(app, { version: this.version }),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t],\n\t\t];\n\t\tfor (const [method, path, handler] of routes) app.addRoute(method, at(path), handler);\n\t}\n\n\tcheckReadiness(): IReadinessProblem[] {\n\t\treturn validateAdminToken(this.options.adminToken, { module: this.name });\n\t}\n}\n","import type { IFonderieApp, IReadinessProblem } from '@fonderie/core';\n\nimport type { IAdminManifest, IAdminModuleEntry } from './types';\n\nexport function buildManifest(app: IFonderieApp, admin: { version: string }): IAdminManifest {\n\tconst report = app.securityReport();\n\tconst byModule = new Map<string, IReadinessProblem[]>();\n\tfor (const p of report.readiness.problems) {\n\t\tconst list = byModule.get(p.module) ?? [];\n\t\tlist.push(p);\n\t\tbyModule.set(p.module, list);\n\t}\n\tconst modules: IAdminModuleEntry[] = report.modules.map(({ name, version }) => {\n\t\tconst problems = byModule.get(name) ?? [];\n\t\treturn {\n\t\t\tname,\n\t\t\tversion: version ?? null,\n\t\t\treadiness: { ok: !problems.some((p) => p.severity === 'error'), problems },\n\t\t};\n\t});\n\treturn {\n\t\tgeneratedAt: report.generatedAt,\n\t\tenv: report.env,\n\t\tadmin,\n\t\tmodules,\n\t\treadiness: report.readiness,\n\t\troutes: app.routes(),\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACCA,kBAAqC;AACrC,yBAAsD;;;ACE/C,SAAS,cAAc,KAAmB,OAA4C;AAC5F,QAAM,SAAS,IAAI,eAAe;AAClC,QAAM,WAAW,oBAAI,IAAiC;AACtD,aAAW,KAAK,OAAO,UAAU,UAAU;AAC1C,UAAM,OAAO,SAAS,IAAI,EAAE,MAAM,KAAK,CAAC;AACxC,SAAK,KAAK,CAAC;AACX,aAAS,IAAI,EAAE,QAAQ,IAAI;AAAA,EAC5B;AACA,QAAM,UAA+B,OAAO,QAAQ,IAAI,CAAC,EAAE,MAAM,QAAQ,MAAM;AAC9E,UAAM,WAAW,SAAS,IAAI,IAAI,KAAK,CAAC;AACxC,WAAO;AAAA,MACN;AAAA,MACA,SAAS,WAAW;AAAA,MACpB,WAAW,EAAE,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,aAAa,OAAO,GAAG,SAAS;AAAA,IAC1E;AAAA,EACD,CAAC;AACD,SAAO;AAAA,IACN,aAAa,OAAO;AAAA,IACpB,KAAK,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,QAAQ,IAAI,OAAO;AAAA,EACpB;AACD;;;ADrBO,IAAM,qBAAqB;AAG3B,IAAM,gBAAwB;AAE9B,IAAM,cAAN,MAA6C;AAAA,EAKnD,YAAoB,UAAyB,CAAC,GAAG;AAA7B;AACnB,SAAK,QAAQ,QAAQ,QAAQ,oBAAoB,QAAQ,QAAQ,EAAE;AAAA,EACpE;AAAA,EAFoB;AAAA,EAJX,OAAO;AAAA,EACP,UAAU;AAAA,EACV;AAAA,EAMT,QAAQ,KAAyB;AAChC,UAAM,QAAQ,KAAK,QAAQ;AAC3B,QAAI,CAAC,MAAO;AAEZ,QAAI,QAAQ,KAAK,IAAI;AACrB,UAAM,YAAQ,sCAAkB,KAAK;AACrC,UAAM,IACL,CAAC,MACD,CAAC,KAAK,SACL,MAAM,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC;AAE/B,UAAM,KAAK,CAAC,MAAsB,KAAK,OAAO,EAAE,MAAM,mBAAmB,MAAM;AAE/E,UAAM,SAA8C;AAAA,MACnD;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,UAAE,gBACD;AAAA,YACC,iBAAK;AAAA,YACL;AAAA,YACA;AAAA,YACA,cAAc,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC;AAAA,UAC7C;AAAA,QACD;AAAA,MACD;AAAA,IACD;AACA,eAAW,CAAC,QAAQ,MAAM,OAAO,KAAK,OAAQ,KAAI,SAAS,QAAQ,GAAG,IAAI,GAAG,OAAO;AAAA,EACrF;AAAA,EAEA,iBAAsC;AACrC,eAAO,uCAAmB,KAAK,QAAQ,YAAY,EAAE,QAAQ,KAAK,KAAK,CAAC;AAAA,EACzE;AACD;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,39 @@
+import { IReadinessReport, IRouteEntry, IFonderieModule, IFonderieApp, IReadinessProblem } from '@fonderie/core';
+
+interface IAdminOptions {
+    adminToken?: string;
+    path?: string;
+}
+interface IAdminModuleEntry {
+    name: string;
+    version: string | null;
+    readiness: IReadinessReport;
+}
+interface IAdminManifest {
+    generatedAt: string;
+    env: string;
+    admin: {
+        version: string;
+    };
+    modules: IAdminModuleEntry[];
+    readiness: IReadinessReport;
+    routes: IRouteEntry[];
+}
+
+declare const DEFAULT_ADMIN_PATH = "/_admin";
+declare const ADMIN_VERSION: string;
+declare class AdminModule implements IFonderieModule {
+    private options;
+    readonly name = "@fonderie/admin";
+    readonly version: string;
+    readonly path: string;
+    constructor(options?: IAdminOptions);
+    install(app: IFonderieApp): void;
+    checkReadiness(): IReadinessProblem[];
+}
+
+declare function buildManifest(app: IFonderieApp, admin: {
+    version: string;
+}): IAdminManifest;
+
+export { ADMIN_VERSION, AdminModule, DEFAULT_ADMIN_PATH, type IAdminManifest, type IAdminModuleEntry, type IAdminOptions, buildManifest };

package/dist/index.d.ts

@@ -0,0 +1,39 @@
+import { IReadinessReport, IRouteEntry, IFonderieModule, IFonderieApp, IReadinessProblem } from '@fonderie/core';
+
+interface IAdminOptions {
+    adminToken?: string;
+    path?: string;
+}
+interface IAdminModuleEntry {
+    name: string;
+    version: string | null;
+    readiness: IReadinessReport;
+}
+interface IAdminManifest {
+    generatedAt: string;
+    env: string;
+    admin: {
+        version: string;
+    };
+    modules: IAdminModuleEntry[];
+    readiness: IReadinessReport;
+    routes: IRouteEntry[];
+}
+
+declare const DEFAULT_ADMIN_PATH = "/_admin";
+declare const ADMIN_VERSION: string;
+declare class AdminModule implements IFonderieModule {
+    private options;
+    readonly name = "@fonderie/admin";
+    readonly version: string;
+    readonly path: string;
+    constructor(options?: IAdminOptions);
+    install(app: IFonderieApp): void;
+    checkReadiness(): IReadinessProblem[];
+}
+
+declare function buildManifest(app: IFonderieApp, admin: {
+    version: string;
+}): IAdminManifest;
+
+export { ADMIN_VERSION, AdminModule, DEFAULT_ADMIN_PATH, type IAdminManifest, type IAdminModuleEntry, type IAdminOptions, buildManifest };

package/dist/index.js

@@ -0,0 +1,77 @@
+// src/module.ts
+import { HTTP, setApiResponse } from "@fonderie/core";
+import { requireAdminToken, validateAdminToken } from "@fonderie/core/middlewares";
+
+// src/manifest.ts
+function buildManifest(app, admin) {
+  const report = app.securityReport();
+  const byModule = /* @__PURE__ */ new Map();
+  for (const p of report.readiness.problems) {
+    const list = byModule.get(p.module) ?? [];
+    list.push(p);
+    byModule.set(p.module, list);
+  }
+  const modules = report.modules.map(({ name, version }) => {
+    const problems = byModule.get(name) ?? [];
+    return {
+      name,
+      version: version ?? null,
+      readiness: { ok: !problems.some((p) => p.severity === "error"), problems }
+    };
+  });
+  return {
+    generatedAt: report.generatedAt,
+    env: report.env,
+    admin,
+    modules,
+    readiness: report.readiness,
+    routes: app.routes()
+  };
+}
+
+// src/module.ts
+var DEFAULT_ADMIN_PATH = "/_admin";
+var ADMIN_VERSION = "0.1.0";
+var AdminModule = class {
+  constructor(options = {}) {
+    this.options = options;
+    this.path = (options.path ?? DEFAULT_ADMIN_PATH).replace(/\/+$/, "");
+  }
+  options;
+  name = "@fonderie/admin";
+  version = ADMIN_VERSION;
+  path;
+  install(app) {
+    const token = this.options.adminToken;
+    if (!token) return;
+    app.reserve(this.path);
+    const guard = requireAdminToken(token);
+    const g = (h) => (ctx, next) => guard(ctx, () => h(ctx, next));
+    const at = (p) => this.path + p.slice(DEFAULT_ADMIN_PATH.length);
+    const routes = [
+      [
+        "GET",
+        "/_admin/manifest",
+        g(
+          async () => setApiResponse(
+            HTTP.OK,
+            "ADMIN_MANIFEST",
+            "Deployment manifest",
+            buildManifest(app, { version: this.version })
+          )
+        )
+      ]
+    ];
+    for (const [method, path, handler] of routes) app.addRoute(method, at(path), handler);
+  }
+  checkReadiness() {
+    return validateAdminToken(this.options.adminToken, { module: this.name });
+  }
+};
+export {
+  ADMIN_VERSION,
+  AdminModule,
+  DEFAULT_ADMIN_PATH,
+  buildManifest
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/module.ts","../src/manifest.ts"],"sourcesContent":["import type { IFonderieApp, IFonderieModule, IReadinessProblem, Middleware } from '@fonderie/core';\nimport { HTTP, setApiResponse } from '@fonderie/core';\nimport { requireAdminToken, validateAdminToken } from '@fonderie/core/middlewares';\n\nimport { buildManifest } from './manifest';\nimport type { IAdminOptions } from './types';\n\nexport const DEFAULT_ADMIN_PATH = '/_admin';\n\n// Replaced at build time (tsup env); the fallback is what tests see.\nexport const ADMIN_VERSION: string = process.env['FONDERIE_ADMIN_VERSION'] ?? '0.0.0-dev';\n\nexport class AdminModule implements IFonderieModule {\n\treadonly name = '@fonderie/admin';\n\treadonly version = ADMIN_VERSION;\n\treadonly path: string;\n\n\tconstructor(private options: IAdminOptions = {}) {\n\t\tthis.path = (options.path ?? DEFAULT_ADMIN_PATH).replace(/\\/+$/, '');\n\t}\n\n\tinstall(app: IFonderieApp): void {\n\t\tconst token = this.options.adminToken;\n\t\tif (!token) return;\n\n\t\tapp.reserve(this.path);\n\t\tconst guard = requireAdminToken(token);\n\t\tconst g =\n\t\t\t(h: Middleware): Middleware =>\n\t\t\t(ctx, next) =>\n\t\t\t\tguard(ctx, () => h(ctx, next));\n\t\t// Declared at the default path so the route table reads literally; re-based when configured.\n\t\tconst at = (p: string): string => this.path + p.slice(DEFAULT_ADMIN_PATH.length);\n\n\t\tconst routes: Array<[string, string, Middleware]> = [\n\t\t\t[\n\t\t\t\t'GET',\n\t\t\t\t'/_admin/manifest',\n\t\t\t\tg(async () =>\n\t\t\t\t\tsetApiResponse(\n\t\t\t\t\t\tHTTP.OK,\n\t\t\t\t\t\t'ADMIN_MANIFEST',\n\t\t\t\t\t\t'Deployment manifest',\n\t\t\t\t\t\tbuildManifest(app, { version: this.version }),\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t],\n\t\t];\n\t\tfor (const [method, path, handler] of routes) app.addRoute(method, at(path), handler);\n\t}\n\n\tcheckReadiness(): IReadinessProblem[] {\n\t\treturn validateAdminToken(this.options.adminToken, { module: this.name });\n\t}\n}\n","import type { IFonderieApp, IReadinessProblem } from '@fonderie/core';\n\nimport type { IAdminManifest, IAdminModuleEntry } from './types';\n\nexport function buildManifest(app: IFonderieApp, admin: { version: string }): IAdminManifest {\n\tconst report = app.securityReport();\n\tconst byModule = new Map<string, IReadinessProblem[]>();\n\tfor (const p of report.readiness.problems) {\n\t\tconst list = byModule.get(p.module) ?? [];\n\t\tlist.push(p);\n\t\tbyModule.set(p.module, list);\n\t}\n\tconst modules: IAdminModuleEntry[] = report.modules.map(({ name, version }) => {\n\t\tconst problems = byModule.get(name) ?? [];\n\t\treturn {\n\t\t\tname,\n\t\t\tversion: version ?? null,\n\t\t\treadiness: { ok: !problems.some((p) => p.severity === 'error'), problems },\n\t\t};\n\t});\n\treturn {\n\t\tgeneratedAt: report.generatedAt,\n\t\tenv: report.env,\n\t\tadmin,\n\t\tmodules,\n\t\treadiness: report.readiness,\n\t\troutes: app.routes(),\n\t};\n}\n"],"mappings":";AACA,SAAS,MAAM,sBAAsB;AACrC,SAAS,mBAAmB,0BAA0B;;;ACE/C,SAAS,cAAc,KAAmB,OAA4C;AAC5F,QAAM,SAAS,IAAI,eAAe;AAClC,QAAM,WAAW,oBAAI,IAAiC;AACtD,aAAW,KAAK,OAAO,UAAU,UAAU;AAC1C,UAAM,OAAO,SAAS,IAAI,EAAE,MAAM,KAAK,CAAC;AACxC,SAAK,KAAK,CAAC;AACX,aAAS,IAAI,EAAE,QAAQ,IAAI;AAAA,EAC5B;AACA,QAAM,UAA+B,OAAO,QAAQ,IAAI,CAAC,EAAE,MAAM,QAAQ,MAAM;AAC9E,UAAM,WAAW,SAAS,IAAI,IAAI,KAAK,CAAC;AACxC,WAAO;AAAA,MACN;AAAA,MACA,SAAS,WAAW;AAAA,MACpB,WAAW,EAAE,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,EAAE,aAAa,OAAO,GAAG,SAAS;AAAA,IAC1E;AAAA,EACD,CAAC;AACD,SAAO;AAAA,IACN,aAAa,OAAO;AAAA,IACpB,KAAK,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,OAAO;AAAA,IAClB,QAAQ,IAAI,OAAO;AAAA,EACpB;AACD;;;ADrBO,IAAM,qBAAqB;AAG3B,IAAM,gBAAwB;AAE9B,IAAM,cAAN,MAA6C;AAAA,EAKnD,YAAoB,UAAyB,CAAC,GAAG;AAA7B;AACnB,SAAK,QAAQ,QAAQ,QAAQ,oBAAoB,QAAQ,QAAQ,EAAE;AAAA,EACpE;AAAA,EAFoB;AAAA,EAJX,OAAO;AAAA,EACP,UAAU;AAAA,EACV;AAAA,EAMT,QAAQ,KAAyB;AAChC,UAAM,QAAQ,KAAK,QAAQ;AAC3B,QAAI,CAAC,MAAO;AAEZ,QAAI,QAAQ,KAAK,IAAI;AACrB,UAAM,QAAQ,kBAAkB,KAAK;AACrC,UAAM,IACL,CAAC,MACD,CAAC,KAAK,SACL,MAAM,KAAK,MAAM,EAAE,KAAK,IAAI,CAAC;AAE/B,UAAM,KAAK,CAAC,MAAsB,KAAK,OAAO,EAAE,MAAM,mBAAmB,MAAM;AAE/E,UAAM,SAA8C;AAAA,MACnD;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,UAAE,YACD;AAAA,YACC,KAAK;AAAA,YACL;AAAA,YACA;AAAA,YACA,cAAc,KAAK,EAAE,SAAS,KAAK,QAAQ,CAAC;AAAA,UAC7C;AAAA,QACD;AAAA,MACD;AAAA,IACD;AACA,eAAW,CAAC,QAAQ,MAAM,OAAO,KAAK,OAAQ,KAAI,SAAS,QAAQ,GAAG,IAAI,GAAG,OAAO;AAAA,EACrF;AAAA,EAEA,iBAAsC;AACrC,WAAO,mBAAmB,KAAK,QAAQ,YAAY,EAAE,QAAQ,KAAK,KAAK,CAAC;AAAA,EACzE;AACD;","names":[]}

package/package.json

@@ -0,0 +1,67 @@
+{
+	"name": "@fonderie/admin",
+	"version": "0.1.0",
+	"fonderie": { "stability": "experimental" },
+	"description": "The operator's surface for a Fonderie deployment. Owns one reserved path (default /_admin) behind one admin token, and answers what the founder cannot see after deploy: which bricks are installed, at what version, whether they are ready, and every route that is exposed. The run-time counterpart to the SDK's brain — read by the human through a panel and by a model through curl.",
+	"keywords": [
+		"fonderiejs",
+		"admin",
+		"manifest",
+		"operations",
+		"observability",
+		"saas",
+		"typescript"
+	],
+	"license": "MIT",
+	"type": "module",
+	"engines": {
+		"node": ">=20"
+	},
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js",
+			"require": "./dist/index.cjs"
+		}
+	},
+	"main": "./dist/index.cjs",
+	"module": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"scripts": {
+		"build": "tsup",
+		"dev": "tsup --watch",
+		"typecheck": "tsc --noEmit",
+		"test": "tsx --test src/__tests__/*.test.ts",
+		"lint": "biome lint src",
+		"format": "biome format --write src",
+		"check": "biome check --write src"
+	},
+	"peerDependencies": {
+		"@fonderie/core": "^0.17.0"
+	},
+	"devDependencies": {
+		"@fonderie/core": "../core",
+		"@types/node": "^26.5.1",
+		"tsup": "^8.5.1",
+		"tsx": "^4.23.13",
+		"typescript": "^6.0.3"
+	},
+	"publishConfig": {
+		"access": "public"
+	},
+	"files": [
+		"dist",
+		"brain",
+		"LICENSE",
+		"README.md"
+	],
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/fonderiejs/fonderie.git",
+		"directory": "packages/admin"
+	},
+	"homepage": "https://github.com/fonderiejs/fonderie/tree/main/packages/admin#readme",
+	"bugs": {
+		"url": "https://github.com/fonderiejs/fonderie/issues"
+	}
+}