@fonderie/cli 0.6.0 → 0.8.0

package/bin/fonderie.mjs

@@ -331,6 +331,8 @@ const ADMIN_PAGES = {
   user:      { path: '/users',               about: 'look up a user: admin user <email|id> [sessions|history|revoke-sessions|suspend|unsuspend]' },
   catalog:   { path: '/catalog',             about: 'plans as configured and as stored' },
   subscriber:{ path: '/subscriptions',       about: 'admin subscriber <user|workspace> <id> [subscription|wallet|ledger]' },
+  audit:     { path: '/audit',               about: 'events across every workspace (--workspace, --type, --actor, --from, --to, --limit, --cursor)' },
+  token:     { path: '/access/tokens',       about: 'admin token issue <name> --scopes read[,write[,secrets]] [--days <n>] · admin token revoke <id> (root token only)' },
 };
 async function adminCmd() {
   const pageName = argv[1];
@@ -355,6 +357,19 @@ async function adminCmd() {
     const qs = q.toString();
     return adminFetch(sub[0], base + sub[1] + (qs ? `?${qs}` : ''));
   }
+  if (pageName === 'token') {
+    const verb = argv[2];
+    if (verb === 'issue') {
+      const name = argv[3]; const scopes = (arg('--scopes', '') || '').split(',').map((x) => x.trim()).filter(Boolean); const days = arg('--days', undefined);
+      if (!name || scopes.length === 0) { console.error('fonderie admin token issue <name> --scopes read[,write[,secrets]] [--days <n>]'); process.exit(2); }
+      return adminFetch('POST', `${prefix}/access/tokens`, { name, scopes, ...(days ? { expiresInDays: Number(days) } : {}) });
+    }
+    if (verb === 'revoke') {
+      const id = argv[3]; if (!id) { console.error('fonderie admin token revoke <id>'); process.exit(2); }
+      return adminFetch('DELETE', `${prefix}/access/tokens/${encodeURIComponent(id)}`);
+    }
+    console.error('fonderie admin token <issue|revoke> …'); process.exit(2);
+  }
   if (pageName === 'subscriber') {
     const type = argv[2]; const id = argv[3]; const verb = argv[4] ?? 'subscription';
     if ((type !== 'user' && type !== 'workspace') || !id) { console.error('fonderie admin subscriber <user|workspace> <id> [subscription|wallet|ledger] [--currency <c>] [--limit <n>]'); process.exit(2); }
@@ -372,6 +387,11 @@ async function adminCmd() {
   const before = arg('--before', undefined);
   if (pageName === 'log' && limit) q.set('limit', limit);
   if (pageName === 'log' && before) q.set('before', before);
+  if (pageName === 'audit') {
+    for (const [flag, param] of [['--workspace', 'workspaceId'], ['--type', 'type'], ['--actor', 'actorId'], ['--from', 'from'], ['--to', 'to'], ['--limit', 'limit'], ['--cursor', 'cursor']]) {
+      const v = arg(flag, undefined); if (v) q.set(param, v);
+    }
+  }
   const qs = q.toString();
   return adminFetch('GET', prefix + page.path + (qs ? `?${qs}` : ''));
 }
@@ -474,6 +494,8 @@ else {
   fonderie admin <attention|manifest|doctor|config|routes|tokens|log> [--limit <n>] [--before <cursor>]
   fonderie admin user <email|id> [sessions|history|revoke-sessions|suspend|unsuspend]
   fonderie admin catalog · admin subscriber <user|workspace> <id> [subscription|wallet|ledger] [--currency <c>]
+  fonderie admin audit [--workspace <id>] [--type <t>] [--actor <id>] [--from <iso>] [--to <iso>] [--limit <n>]
+  fonderie admin token issue <name> --scopes read[,write[,secrets]] [--days <n>] · admin token revoke <id>   (root token only)
       read a deployment's operator surface (@fonderie/admin) — same env; FONDERIE_ADMIN_PREFIX if moved
 
 Zero deps. No MCP server. A binary + markdown that runs in any agent harness.`);

package/bin/fonderie.test.mjs

@@ -153,6 +153,13 @@ await (async () => {
   if (!find('GET', '/_admin/catalog')) fail('admin catalog: wrong path');
   if (!find('GET', '/_admin/subscriptions/workspace/w1')) fail('admin subscriber: wrong path');
   if (!find('GET', '/_admin/wallet/user/u1/ledger?currency=eur&limit=7')) fail('admin subscriber ledger: flags not forwarded');
+  await cli(['admin', 'audit', '--workspace', 'w1', '--type', 'user.login', '--limit', '9']);
+  if (!find('GET', '/_admin/audit?workspaceId=w1&type=user.login&limit=9')) fail('admin audit: flags not forwarded');
+  await cli(['admin', 'token', 'issue', 'dashboard', '--scopes', 'read,write', '--days', '30']);
+  await cli(['admin', 'token', 'revoke', 't1']);
+  const iss = find('POST', '/_admin/access/tokens');
+  if (!iss || iss.body?.name !== 'dashboard' || iss.body?.scopes?.join() !== 'read,write' || iss.body?.expiresInDays !== 30) fail('admin token issue: wrong body');
+  if (!find('DELETE', '/_admin/access/tokens/t1')) fail('admin token revoke: wrong path');
   let badType = 0;
   try { await cli(['admin', 'subscriber', 'team', 'x']); } catch (e) { badType = e.code; }
   if (badType !== 2) fail(`admin subscriber <bad type> should exit 2, got ${badType}`);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@fonderie/cli",
-	"version": "0.6.0",
+	"version": "0.8.0",
 	"description": "The Fonderie CLI — teaches any coding agent the SDK without loading it eagerly. `fonderie skill` writes a lazy skill (a small router + per-package bodies read on demand); `fonderie query` answers what to install for a capability. Zero deps, runs anywhere.",
 	"keywords": [
 		"fonderiejs",