@fonderie/cli 0.4.0 → 0.5.0

package/bin/fonderie.mjs

@@ -328,6 +328,7 @@ const ADMIN_PAGES = {
   routes:    { path: '/routes',              about: 'every exposed route with its guard' },
   tokens:    { path: '/access/tokens',       about: 'the admin token verdict + legacy per-brick tokens' },
   log:       { path: '/activity/admin-log',  about: 'who did what through the surface (--limit, --before)' },
+  user:      { path: '/users',               about: 'look up a user: admin user <email|id> [sessions|history|revoke-sessions|suspend|unsuspend]' },
 };
 async function adminCmd() {
   const pageName = argv[1];
@@ -338,6 +339,20 @@ async function adminCmd() {
     process.exit(2);
   }
   const prefix = (process.env.FONDERIE_ADMIN_PREFIX || '/_admin').replace(/\/$/, '');
+  if (pageName === 'user') {
+    // fonderie admin user <email|id> [sessions|history|revoke-sessions|suspend|unsuspend]
+    const who = argv[2]; const verb = argv[3] ?? 'show';
+    if (!who) { console.error('fonderie admin user <email|id> [sessions|history|revoke-sessions|suspend|unsuspend]'); process.exit(2); }
+    const byEmail = who.includes('@');
+    const base = byEmail ? `${prefix}/users?email=${encodeURIComponent(who)}` : `${prefix}/users/${encodeURIComponent(who)}`;
+    if (verb === 'show') return adminFetch('GET', base);
+    if (byEmail) { console.error('sessions/history/revoke-sessions/suspend/unsuspend need the user id (run `admin user <email>` first).'); process.exit(2); }
+    const sub = { sessions: ['GET', '/sessions'], history: ['GET', '/login-history'], 'revoke-sessions': ['DELETE', '/sessions'], suspend: ['POST', '/suspend'], unsuspend: ['POST', '/unsuspend'] }[verb];
+    if (!sub) { console.error(`unknown verb "${verb}"`); process.exit(2); }
+    const q = new URLSearchParams(); const limit = arg('--limit', undefined); if (limit && verb === 'history') q.set('limit', limit);
+    const qs = q.toString();
+    return adminFetch(sub[0], base + sub[1] + (qs ? `?${qs}` : ''));
+  }
   const q = new URLSearchParams();
   const limit = arg('--limit', undefined);
   const before = arg('--before', undefined);
@@ -443,6 +458,7 @@ else {
   fonderie template <get|set|delete|history|rollback> [type] [text] [--locale <l>] [--subject <s>] [--html <h>] ...
       manage a live deployment over its admin API — set FONDERIE_ADMIN_URL + FONDERIE_ADMIN_TOKEN
   fonderie admin <attention|manifest|doctor|config|routes|tokens|log> [--limit <n>] [--before <cursor>]
+  fonderie admin user <email|id> [sessions|history|revoke-sessions|suspend|unsuspend]
       read a deployment's operator surface (@fonderie/admin) — same env; FONDERIE_ADMIN_PREFIX if moved
 
 Zero deps. No MCP server. A binary + markdown that runs in any agent harness.`);

package/bin/fonderie.test.mjs

@@ -141,6 +141,15 @@ await (async () => {
   if (!find('GET', '/_admin')) fail('admin attention: should hit the prefix root');
   if (!find('GET', '/_admin/activity/admin-log?limit=5&before=abc')) fail('admin log: flags not forwarded');
   if (!find('GET', '/ops/doctor')) fail('admin doctor: FONDERIE_ADMIN_PREFIX not honoured');
+  await cli(['admin', 'user', 'ada@example.com']);
+  await cli(['admin', 'user', 'u1', 'history', '--limit', '3']);
+  await cli(['admin', 'user', 'u1', 'suspend']);
+  if (!find('GET', '/_admin/users?email=ada%40example.com')) fail('admin user <email>: wrong lookup path');
+  if (!find('GET', '/_admin/users/u1/login-history?limit=3')) fail('admin user history: flags not forwarded');
+  if (!find('POST', '/_admin/users/u1/suspend')) fail('admin user suspend: wrong request');
+  let needsId = 0;
+  try { await cli(['admin', 'user', 'ada@example.com', 'suspend']); } catch (e) { needsId = e.code; }
+  if (needsId !== 2) fail(`admin user <email> suspend should exit 2, got ${needsId}`);
   let unknown = 0;
   try { await cli(['admin', 'nope']); } catch (e) { unknown = e.code; }
   if (unknown !== 2) fail(`admin <unknown page> should exit 2, got ${unknown}`);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fonderie/cli",
-	"version": "0.4.0",
+	"version": "0.5.0",
 	"description": "The Fonderie CLI — teaches any coding agent the SDK without loading it eagerly. `fonderie skill` writes a lazy skill (a small router + per-package bodies read on demand); `fonderie query` answers what to install for a capability. Zero deps, runs anywhere.",
 	"keywords": [
 		"fonderiejs",