@fonderie/client 0.22.0 → 0.24.0

package/brain/signatures.md

@@ -143,6 +143,7 @@ new AuthClient(http: HttpClient, tokens: TokenStore): AuthClient
   .mfa: MfaClient
   .setAccessToken(token: string | undefined): void
   .providers(): Promise<IApiResponse<IAuthProvidersResult>>
+  .unlinkOauth(provider: string): Promise<IApiResponse<null>>
   .register(input: IRegisterInput): Promise<IApiResponse<IRegisterResult>>
   .login(input: ILoginInput): Promise<IApiResponse<ILoginResult | IMfaRequiredResult>>
   .appleNative(input: IAppleNativeInput): Promise<IApiResponse<ILoginResult>>
@@ -261,6 +262,27 @@ new ConfigAdminClient(opts: IConfigAdminClientOptions): ConfigAdminClient
   .rollbackSecret(key: string, input: IRollbackInput, environment?: string | undefined): Promise<IApiResponse<ISecretEntry>>
   .revealSecret(key: string, environment?: string | undefined): Promise<IApiResponse<IRevealSecretResult>>
 
+interface IAdminClientOptions {
+    baseUrl: string;
+    adminToken: string;
+    prefix?: string;
+    actor?: string;
+}
+
+interface IAdminLogQuery {
+    limit?: number;
+    before?: string;
+}
+
+new AdminClient(opts: IAdminClientOptions): AdminClient
+  .attention(): Promise<IApiResponse<IAdminAttention>>
+  .manifest(): Promise<IApiResponse<IAdminManifest>>
+  .doctor(): Promise<IApiResponse<IAdminDoctorReport>>
+  .config(): Promise<IApiResponse<IAdminConfigReport>>
+  .routes(): Promise<IApiResponse<IAdminRoutesReport>>
+  .tokens(): Promise<IApiResponse<IAdminTokensReport>>
+  .adminLog(query?: IAdminLogQuery): Promise<IApiResponse<IAdminLogPage>>
+
 interface ICourierAdminClientOptions {
     baseUrl: string;
     adminToken: string;
@@ -598,6 +620,122 @@ interface ICheckoutUrlResult {
     url: string;
 }
 
+type AdminRouteGuard = 'admin' | 'probe' | 'app';
+
+interface IAdminAttention {
+    generatedAt: string;
+    ok: boolean;
+    items: IAdminAttentionItem[];
+}
+
+interface IAdminAttentionItem {
+    source: string;
+    severity: 'error' | 'advice';
+    message: string;
+}
+
+interface IAdminCheckResult {
+    name: string;
+    module: string;
+    ok: boolean;
+    findings: string[];
+    skipped?: string;
+    durationMs: number;
+}
+
+interface IAdminConfigReport {
+    generatedAt: string;
+    readiness: IAdminReadiness;
+    modules: Array<{
+        name: string;
+        problems: IAdminReadinessProblem[];
+    }>;
+    env: Array<{
+        name: string;
+        set: boolean;
+    }>;
+}
+
+interface IAdminDoctorReport {
+    generatedAt: string;
+    ok: boolean;
+    checks: IAdminCheckResult[];
+}
+
+interface IAdminLogEntry {
+    id: string;
+    at: string;
+    actor: string;
+    method: string;
+    path: string;
+    route: string;
+    module: string;
+    status: number;
+    durationMs: number;
+    requestId: string | null;
+    clientIp: string | null;
+}
+
+interface IAdminLogPage {
+    entries: IAdminLogEntry[];
+    next: string | null;
+}
+
+interface IAdminManifest {
+    generatedAt: string;
+    env: string;
+    admin: {
+        version: string;
+        log: boolean;
+    };
+    modules: IAdminModuleEntry[];
+    readiness: IAdminReadiness;
+    routes: IAdminRouteEntry[];
+}
+
+interface IAdminModuleEntry {
+    name: string;
+    version: string | null;
+    readiness: IAdminReadiness;
+    describesAdmin: boolean;
+}
+
+interface IAdminReadiness {
+    ok: boolean;
+    problems: IAdminReadinessProblem[];
+}
+
+interface IAdminReadinessProblem {
+    module: string;
+    severity: 'error' | 'warning';
+    message: string;
+}
+
+interface IAdminRouteEntry {
+    method: string;
+    path: string;
+    module?: string;
+}
+
+interface IAdminRoutesReport {
+    generatedAt: string;
+    routes: Array<IAdminRouteEntry & {
+        guard: AdminRouteGuard;
+    }>;
+}
+
+interface IAdminTokensReport {
+    generatedAt: string;
+    admin: {
+        ok: boolean;
+        problems: IAdminReadinessProblem[];
+    };
+    legacy: Array<{
+        module: string;
+        set: boolean;
+    }>;
+}
+
 interface IConfigEntry {
     key: string;
     value: unknown;
@@ -1055,6 +1193,8 @@ interface IUserDTO {
     isEmailVerified: boolean;
     isPhoneVerified: boolean;
     mfaEnabled: boolean;
+    provider: string;
+    hasPassword: boolean;
     suspended: boolean;
     whitelist: boolean;
     ipWhitelist: string[];

package/dist/index.cjs

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  AdminClient: () => AdminClient,
   AuditClient: () => AuditClient,
   AuthClient: () => AuthClient,
   BillingClient: () => BillingClient,
@@ -295,6 +296,20 @@ var AuthClient = class {
       path: "/auth/providers"
     });
   }
+  /**
+   * Disconnect the OAuth provider linked to the signed-in account.
+   *
+   * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+   * removing the only credential is account deletion, not a settings toggle.
+   * Check `user.hasPassword` before offering the control so the user is asked
+   * to set a password first rather than shown an error they can't act on.
+   */
+  unlinkOauth(provider) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/auth/oauth/${encodeURIComponent(provider)}`
+    });
+  }
   register(input) {
     return this.http.request({
       method: "POST",
@@ -1688,6 +1703,53 @@ var ConfigAdminClient = class {
   }
 };
 
+// src/modules/admin.ts
+var AdminClient = class {
+  http;
+  adminToken;
+  prefix;
+  actorHeaders;
+  constructor(opts) {
+    this.http = new HttpClient(opts.baseUrl);
+    this.adminToken = opts.adminToken;
+    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
+  }
+  get(suffix) {
+    return this.http.request({
+      method: "GET",
+      path: `${this.prefix}${suffix}`,
+      token: this.adminToken,
+      headers: this.actorHeaders
+    });
+  }
+  attention() {
+    return this.get("");
+  }
+  manifest() {
+    return this.get("/manifest");
+  }
+  doctor() {
+    return this.get("/doctor");
+  }
+  config() {
+    return this.get("/config");
+  }
+  routes() {
+    return this.get("/routes");
+  }
+  tokens() {
+    return this.get("/access/tokens");
+  }
+  adminLog(query = {}) {
+    const q = new URLSearchParams();
+    if (query.limit) q.set("limit", String(query.limit));
+    if (query.before) q.set("before", query.before);
+    const qs = q.toString();
+    return this.get(`/activity/admin-log${qs ? `?${qs}` : ""}`);
+  }
+};
+
 // src/modules/courier-admin.ts
 var CourierAdminClient = class {
   http;
@@ -1758,6 +1820,7 @@ function isMfaRequired(result) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AdminClient,
   AuditClient,
   AuthClient,
   BillingClient,