@fonderie/client 0.22.0 → 0.24.0

package/dist/index.d.cts

@@ -95,6 +95,8 @@ interface IUserDTO {
     isEmailVerified: boolean;
     isPhoneVerified: boolean;
     mfaEnabled: boolean;
+    provider: string;
+    hasPassword: boolean;
     suspended: boolean;
     whitelist: boolean;
     ipWhitelist: string[];
@@ -399,6 +401,107 @@ interface ITemplateRevision {
     actor: string | null;
     createdAt: string;
 }
+interface IAdminReadinessProblem {
+    module: string;
+    severity: 'error' | 'warning';
+    message: string;
+}
+interface IAdminReadiness {
+    ok: boolean;
+    problems: IAdminReadinessProblem[];
+}
+interface IAdminModuleEntry {
+    name: string;
+    version: string | null;
+    readiness: IAdminReadiness;
+    describesAdmin: boolean;
+}
+interface IAdminRouteEntry {
+    method: string;
+    path: string;
+    module?: string;
+}
+interface IAdminManifest {
+    generatedAt: string;
+    env: string;
+    admin: {
+        version: string;
+        log: boolean;
+    };
+    modules: IAdminModuleEntry[];
+    readiness: IAdminReadiness;
+    routes: IAdminRouteEntry[];
+}
+interface IAdminCheckResult {
+    name: string;
+    module: string;
+    ok: boolean;
+    findings: string[];
+    skipped?: string;
+    durationMs: number;
+}
+interface IAdminDoctorReport {
+    generatedAt: string;
+    ok: boolean;
+    checks: IAdminCheckResult[];
+}
+interface IAdminAttentionItem {
+    source: string;
+    severity: 'error' | 'advice';
+    message: string;
+}
+interface IAdminAttention {
+    generatedAt: string;
+    ok: boolean;
+    items: IAdminAttentionItem[];
+}
+interface IAdminConfigReport {
+    generatedAt: string;
+    readiness: IAdminReadiness;
+    modules: Array<{
+        name: string;
+        problems: IAdminReadinessProblem[];
+    }>;
+    env: Array<{
+        name: string;
+        set: boolean;
+    }>;
+}
+type AdminRouteGuard = 'admin' | 'probe' | 'app';
+interface IAdminRoutesReport {
+    generatedAt: string;
+    routes: Array<IAdminRouteEntry & {
+        guard: AdminRouteGuard;
+    }>;
+}
+interface IAdminTokensReport {
+    generatedAt: string;
+    admin: {
+        ok: boolean;
+        problems: IAdminReadinessProblem[];
+    };
+    legacy: Array<{
+        module: string;
+        set: boolean;
+    }>;
+}
+interface IAdminLogEntry {
+    id: string;
+    at: string;
+    actor: string;
+    method: string;
+    path: string;
+    route: string;
+    module: string;
+    status: number;
+    durationMs: number;
+    requestId: string | null;
+    clientIp: string | null;
+}
+interface IAdminLogPage {
+    entries: IAdminLogEntry[];
+    next: string | null;
+}
 interface IConfigEntry {
     key: string;
     value: unknown;
@@ -759,6 +862,15 @@ declare class AuthClient {
      * error page, which the app cannot explain.
      */
     providers(): Promise<IApiResponse<IAuthProvidersResult>>;
+    /**
+     * Disconnect the OAuth provider linked to the signed-in account.
+     *
+     * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+     * removing the only credential is account deletion, not a settings toggle.
+     * Check `user.hasPassword` before offering the control so the user is asked
+     * to set a password first rather than shown an error they can't act on.
+     */
+    unlinkOauth(provider: string): Promise<IApiResponse<null>>;
     register(input: IRegisterInput): Promise<IApiResponse<IRegisterResult>>;
     login(input: ILoginInput): Promise<IApiResponse<ILoginResult | IMfaRequiredResult>>;
     appleNative(input: IAppleNativeInput): Promise<IApiResponse<ILoginResult>>;
@@ -1170,6 +1282,32 @@ declare class ConfigAdminClient {
     revealSecret(key: string, environment?: string): Promise<IApiResponse<IRevealSecretResult>>;
 }
 
+interface IAdminClientOptions {
+    baseUrl: string;
+    adminToken: string;
+    prefix?: string;
+    actor?: string;
+}
+interface IAdminLogQuery {
+    limit?: number;
+    before?: string;
+}
+declare class AdminClient {
+    private http;
+    private adminToken;
+    private prefix;
+    private actorHeaders;
+    constructor(opts: IAdminClientOptions);
+    private get;
+    attention(): Promise<IApiResponse<IAdminAttention>>;
+    manifest(): Promise<IApiResponse<IAdminManifest>>;
+    doctor(): Promise<IApiResponse<IAdminDoctorReport>>;
+    config(): Promise<IApiResponse<IAdminConfigReport>>;
+    routes(): Promise<IApiResponse<IAdminRoutesReport>>;
+    tokens(): Promise<IApiResponse<IAdminTokensReport>>;
+    adminLog(query?: IAdminLogQuery): Promise<IApiResponse<IAdminLogPage>>;
+}
+
 interface ISetTemplateInput {
     text: string;
     subject?: string;
@@ -1198,4 +1336,4 @@ declare class CourierAdminClient {
     rollback(type: string, input: IRollbackTemplateInput, locale?: string | null): Promise<IApiResponse<ITemplateEntry>>;
 }
 
-export { AuditClient, AuthClient, BillingClient, ConfigAdminClient, CourierAdminClient, type CustomerLabelType, type CustomerSex, type CustomerType, CustomersClient, FonderieApiError, FonderieClient, type IAcceptInvitationResult, type IAddAddressInput, type IAddEmailInput, type IAddPhoneInput, type IAddRelationshipInput, type IAddressDTO, type IApiError, type IApiResponse, type IAppleNativeInput, type IAuditEventDTO, type IAuditPageResult, type IBlacklistCustomerInput, type ICache, type ICancelSubscriptionInput, type IChangePasswordInput, type ICheckoutInput, type ICheckoutUrlResult, type IClientAuthConfig, type IConfigAdminClientOptions, type IConfigEntry, type IConfigRevision, type ICourierAdminClientOptions, type ICreateCustomerInput, type ICreatePlanInput, type ICreateRoleInput, type ICreateWebhookEndpointInput, type ICreateWorkspaceInput, type ICustomerAddressDTO, type ICustomerAddressListResult, type ICustomerAddressResult, type ICustomerDTO, type ICustomerDetailD2DTO, type ICustomerDetailDTO, type ICustomerEmailDTO, type ICustomerEmailListResult, type ICustomerEmailResult, type ICustomerLabelDTO, type ICustomerLabelListResult, type ICustomerListResult, type ICustomerNoteDTO, type ICustomerNoteListResult, type ICustomerNoteResult, type ICustomerPhoneDTO, type ICustomerPhoneListResult, type ICustomerPhoneResult, type ICustomerRelationshipDTO, type ICustomerRelationshipExpandedD2DTO, type ICustomerRelationshipExpandedDTO, type ICustomerRelationshipListResult, type ICustomerRelationshipResult, type ICustomerResult, type ICustomerShallowDTO, type ICustomerTagListResult, type IFonderieClientOptions, type IGetCustomerInput, type IGetLoginHistoryInput, type IInvitationDTO, type IInvitationListResult, type IInviteEntry, type IInviteResult, type IInvoiceDTO, type IInvoicesResult, type IListAuditEventsInput, type IListCustomersInput, type ILoginEventDTO, type ILoginHistoryPageResult, type ILoginInput, type ILoginResult, type IMeResult, type IMediaAssetDTO, type IMediaAssetResult, type IMemberDTO, type IMemberListResult, type IMemoryCacheOptions, type IMfaEnabledResult, type IMfaRequiredResult, type IMfaSetupResult, type IPaymentMethodDTO, type IPaymentMethodResult, type IPlanDTO, type IPlanFeature, type IPlanListResult, type IPlanResult, type IPortalUrlResult, type IReadOptions, type IRecordUsageInput, type IRefreshResult, type IRegisterInput, type IRegisterResult, type IRequestConfig, type IResendVerificationResult, type IResetPasswordInput, type IRevealSecretResult, type IRoleDTO, type IRoleListResult, type IRolePermission, type IRolePermissionInput, type IRolePermissionsResult, type IRoleResult, type IRollbackInput, type IRollbackTemplateInput, type ISecretEntry, type ISecretRevision, type ISessionDTO, type ISessionsResult, type ISetConfigInput, type ISetSecretInput, type ISetTemplateInput, type ISubscriptionChangeResult, type ISubscriptionDTO, type ISubscriptionResult, type ITemplateEntry, type ITemplateRevision, type ITestWebhookResult, type ITokens, type IUpdateCustomerInput, type IUpdatePlanInput, type IUpdatePreferencesInput, type IUpdateProfileInput, type IUpdateRoleInput, type IUpdateSettingsInput, type IUpdateWebhookEndpointInput, type IUpdateWorkspaceInput, type IUploadMediaInput, type IUsageResult, type IUserDTO, type IUserPreferences, type IVerifyEmailResult, type IWalletCheckoutInput, type IWalletDTO, type IWalletPreferencesInput, type IWalletPurchaseInput, type IWalletPurchaseResult, type IWalletResult, type IWalletTransactionDTO, type IWalletTransactionsResult, type IWebhookDeliveryDTO, type IWebhookDeliveryListResult, type IWebhookEndpointCreatedDTO, type IWebhookEndpointDTO, type IWebhookEndpointListResult, type IWorkspaceAddressDTO, type IWorkspaceDTO, type IWorkspaceListResult, type IWorkspaceResult, type IWorkspaceSettingsDTO, type IWorkspaceSettingsResult, MediaClient, type SubscriberType, WebhooksClient, WorkspacesClient, createMemoryCache, isMfaRequired };
+export { AdminClient, type AdminRouteGuard, AuditClient, AuthClient, BillingClient, ConfigAdminClient, CourierAdminClient, type CustomerLabelType, type CustomerSex, type CustomerType, CustomersClient, FonderieApiError, FonderieClient, type IAcceptInvitationResult, type IAddAddressInput, type IAddEmailInput, type IAddPhoneInput, type IAddRelationshipInput, type IAddressDTO, type IAdminAttention, type IAdminAttentionItem, type IAdminCheckResult, type IAdminClientOptions, type IAdminConfigReport, type IAdminDoctorReport, type IAdminLogEntry, type IAdminLogPage, type IAdminLogQuery, type IAdminManifest, type IAdminModuleEntry, type IAdminReadiness, type IAdminReadinessProblem, type IAdminRouteEntry, type IAdminRoutesReport, type IAdminTokensReport, type IApiError, type IApiResponse, type IAppleNativeInput, type IAuditEventDTO, type IAuditPageResult, type IBlacklistCustomerInput, type ICache, type ICancelSubscriptionInput, type IChangePasswordInput, type ICheckoutInput, type ICheckoutUrlResult, type IClientAuthConfig, type IConfigAdminClientOptions, type IConfigEntry, type IConfigRevision, type ICourierAdminClientOptions, type ICreateCustomerInput, type ICreatePlanInput, type ICreateRoleInput, type ICreateWebhookEndpointInput, type ICreateWorkspaceInput, type ICustomerAddressDTO, type ICustomerAddressListResult, type ICustomerAddressResult, type ICustomerDTO, type ICustomerDetailD2DTO, type ICustomerDetailDTO, type ICustomerEmailDTO, type ICustomerEmailListResult, type ICustomerEmailResult, type ICustomerLabelDTO, type ICustomerLabelListResult, type ICustomerListResult, type ICustomerNoteDTO, type ICustomerNoteListResult, type ICustomerNoteResult, type ICustomerPhoneDTO, type ICustomerPhoneListResult, type ICustomerPhoneResult, type ICustomerRelationshipDTO, type ICustomerRelationshipExpandedD2DTO, type ICustomerRelationshipExpandedDTO, type ICustomerRelationshipListResult, type ICustomerRelationshipResult, type ICustomerResult, type ICustomerShallowDTO, type ICustomerTagListResult, type IFonderieClientOptions, type IGetCustomerInput, type IGetLoginHistoryInput, type IInvitationDTO, type IInvitationListResult, type IInviteEntry, type IInviteResult, type IInvoiceDTO, type IInvoicesResult, type IListAuditEventsInput, type IListCustomersInput, type ILoginEventDTO, type ILoginHistoryPageResult, type ILoginInput, type ILoginResult, type IMeResult, type IMediaAssetDTO, type IMediaAssetResult, type IMemberDTO, type IMemberListResult, type IMemoryCacheOptions, type IMfaEnabledResult, type IMfaRequiredResult, type IMfaSetupResult, type IPaymentMethodDTO, type IPaymentMethodResult, type IPlanDTO, type IPlanFeature, type IPlanListResult, type IPlanResult, type IPortalUrlResult, type IReadOptions, type IRecordUsageInput, type IRefreshResult, type IRegisterInput, type IRegisterResult, type IRequestConfig, type IResendVerificationResult, type IResetPasswordInput, type IRevealSecretResult, type IRoleDTO, type IRoleListResult, type IRolePermission, type IRolePermissionInput, type IRolePermissionsResult, type IRoleResult, type IRollbackInput, type IRollbackTemplateInput, type ISecretEntry, type ISecretRevision, type ISessionDTO, type ISessionsResult, type ISetConfigInput, type ISetSecretInput, type ISetTemplateInput, type ISubscriptionChangeResult, type ISubscriptionDTO, type ISubscriptionResult, type ITemplateEntry, type ITemplateRevision, type ITestWebhookResult, type ITokens, type IUpdateCustomerInput, type IUpdatePlanInput, type IUpdatePreferencesInput, type IUpdateProfileInput, type IUpdateRoleInput, type IUpdateSettingsInput, type IUpdateWebhookEndpointInput, type IUpdateWorkspaceInput, type IUploadMediaInput, type IUsageResult, type IUserDTO, type IUserPreferences, type IVerifyEmailResult, type IWalletCheckoutInput, type IWalletDTO, type IWalletPreferencesInput, type IWalletPurchaseInput, type IWalletPurchaseResult, type IWalletResult, type IWalletTransactionDTO, type IWalletTransactionsResult, type IWebhookDeliveryDTO, type IWebhookDeliveryListResult, type IWebhookEndpointCreatedDTO, type IWebhookEndpointDTO, type IWebhookEndpointListResult, type IWorkspaceAddressDTO, type IWorkspaceDTO, type IWorkspaceListResult, type IWorkspaceResult, type IWorkspaceSettingsDTO, type IWorkspaceSettingsResult, MediaClient, type SubscriberType, WebhooksClient, WorkspacesClient, createMemoryCache, isMfaRequired };

package/dist/index.d.ts

@@ -95,6 +95,8 @@ interface IUserDTO {
     isEmailVerified: boolean;
     isPhoneVerified: boolean;
     mfaEnabled: boolean;
+    provider: string;
+    hasPassword: boolean;
     suspended: boolean;
     whitelist: boolean;
     ipWhitelist: string[];
@@ -399,6 +401,107 @@ interface ITemplateRevision {
     actor: string | null;
     createdAt: string;
 }
+interface IAdminReadinessProblem {
+    module: string;
+    severity: 'error' | 'warning';
+    message: string;
+}
+interface IAdminReadiness {
+    ok: boolean;
+    problems: IAdminReadinessProblem[];
+}
+interface IAdminModuleEntry {
+    name: string;
+    version: string | null;
+    readiness: IAdminReadiness;
+    describesAdmin: boolean;
+}
+interface IAdminRouteEntry {
+    method: string;
+    path: string;
+    module?: string;
+}
+interface IAdminManifest {
+    generatedAt: string;
+    env: string;
+    admin: {
+        version: string;
+        log: boolean;
+    };
+    modules: IAdminModuleEntry[];
+    readiness: IAdminReadiness;
+    routes: IAdminRouteEntry[];
+}
+interface IAdminCheckResult {
+    name: string;
+    module: string;
+    ok: boolean;
+    findings: string[];
+    skipped?: string;
+    durationMs: number;
+}
+interface IAdminDoctorReport {
+    generatedAt: string;
+    ok: boolean;
+    checks: IAdminCheckResult[];
+}
+interface IAdminAttentionItem {
+    source: string;
+    severity: 'error' | 'advice';
+    message: string;
+}
+interface IAdminAttention {
+    generatedAt: string;
+    ok: boolean;
+    items: IAdminAttentionItem[];
+}
+interface IAdminConfigReport {
+    generatedAt: string;
+    readiness: IAdminReadiness;
+    modules: Array<{
+        name: string;
+        problems: IAdminReadinessProblem[];
+    }>;
+    env: Array<{
+        name: string;
+        set: boolean;
+    }>;
+}
+type AdminRouteGuard = 'admin' | 'probe' | 'app';
+interface IAdminRoutesReport {
+    generatedAt: string;
+    routes: Array<IAdminRouteEntry & {
+        guard: AdminRouteGuard;
+    }>;
+}
+interface IAdminTokensReport {
+    generatedAt: string;
+    admin: {
+        ok: boolean;
+        problems: IAdminReadinessProblem[];
+    };
+    legacy: Array<{
+        module: string;
+        set: boolean;
+    }>;
+}
+interface IAdminLogEntry {
+    id: string;
+    at: string;
+    actor: string;
+    method: string;
+    path: string;
+    route: string;
+    module: string;
+    status: number;
+    durationMs: number;
+    requestId: string | null;
+    clientIp: string | null;
+}
+interface IAdminLogPage {
+    entries: IAdminLogEntry[];
+    next: string | null;
+}
 interface IConfigEntry {
     key: string;
     value: unknown;
@@ -759,6 +862,15 @@ declare class AuthClient {
      * error page, which the app cannot explain.
      */
     providers(): Promise<IApiResponse<IAuthProvidersResult>>;
+    /**
+     * Disconnect the OAuth provider linked to the signed-in account.
+     *
+     * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+     * removing the only credential is account deletion, not a settings toggle.
+     * Check `user.hasPassword` before offering the control so the user is asked
+     * to set a password first rather than shown an error they can't act on.
+     */
+    unlinkOauth(provider: string): Promise<IApiResponse<null>>;
     register(input: IRegisterInput): Promise<IApiResponse<IRegisterResult>>;
     login(input: ILoginInput): Promise<IApiResponse<ILoginResult | IMfaRequiredResult>>;
     appleNative(input: IAppleNativeInput): Promise<IApiResponse<ILoginResult>>;
@@ -1170,6 +1282,32 @@ declare class ConfigAdminClient {
     revealSecret(key: string, environment?: string): Promise<IApiResponse<IRevealSecretResult>>;
 }
 
+interface IAdminClientOptions {
+    baseUrl: string;
+    adminToken: string;
+    prefix?: string;
+    actor?: string;
+}
+interface IAdminLogQuery {
+    limit?: number;
+    before?: string;
+}
+declare class AdminClient {
+    private http;
+    private adminToken;
+    private prefix;
+    private actorHeaders;
+    constructor(opts: IAdminClientOptions);
+    private get;
+    attention(): Promise<IApiResponse<IAdminAttention>>;
+    manifest(): Promise<IApiResponse<IAdminManifest>>;
+    doctor(): Promise<IApiResponse<IAdminDoctorReport>>;
+    config(): Promise<IApiResponse<IAdminConfigReport>>;
+    routes(): Promise<IApiResponse<IAdminRoutesReport>>;
+    tokens(): Promise<IApiResponse<IAdminTokensReport>>;
+    adminLog(query?: IAdminLogQuery): Promise<IApiResponse<IAdminLogPage>>;
+}
+
 interface ISetTemplateInput {
     text: string;
     subject?: string;
@@ -1198,4 +1336,4 @@ declare class CourierAdminClient {
     rollback(type: string, input: IRollbackTemplateInput, locale?: string | null): Promise<IApiResponse<ITemplateEntry>>;
 }
 
-export { AuditClient, AuthClient, BillingClient, ConfigAdminClient, CourierAdminClient, type CustomerLabelType, type CustomerSex, type CustomerType, CustomersClient, FonderieApiError, FonderieClient, type IAcceptInvitationResult, type IAddAddressInput, type IAddEmailInput, type IAddPhoneInput, type IAddRelationshipInput, type IAddressDTO, type IApiError, type IApiResponse, type IAppleNativeInput, type IAuditEventDTO, type IAuditPageResult, type IBlacklistCustomerInput, type ICache, type ICancelSubscriptionInput, type IChangePasswordInput, type ICheckoutInput, type ICheckoutUrlResult, type IClientAuthConfig, type IConfigAdminClientOptions, type IConfigEntry, type IConfigRevision, type ICourierAdminClientOptions, type ICreateCustomerInput, type ICreatePlanInput, type ICreateRoleInput, type ICreateWebhookEndpointInput, type ICreateWorkspaceInput, type ICustomerAddressDTO, type ICustomerAddressListResult, type ICustomerAddressResult, type ICustomerDTO, type ICustomerDetailD2DTO, type ICustomerDetailDTO, type ICustomerEmailDTO, type ICustomerEmailListResult, type ICustomerEmailResult, type ICustomerLabelDTO, type ICustomerLabelListResult, type ICustomerListResult, type ICustomerNoteDTO, type ICustomerNoteListResult, type ICustomerNoteResult, type ICustomerPhoneDTO, type ICustomerPhoneListResult, type ICustomerPhoneResult, type ICustomerRelationshipDTO, type ICustomerRelationshipExpandedD2DTO, type ICustomerRelationshipExpandedDTO, type ICustomerRelationshipListResult, type ICustomerRelationshipResult, type ICustomerResult, type ICustomerShallowDTO, type ICustomerTagListResult, type IFonderieClientOptions, type IGetCustomerInput, type IGetLoginHistoryInput, type IInvitationDTO, type IInvitationListResult, type IInviteEntry, type IInviteResult, type IInvoiceDTO, type IInvoicesResult, type IListAuditEventsInput, type IListCustomersInput, type ILoginEventDTO, type ILoginHistoryPageResult, type ILoginInput, type ILoginResult, type IMeResult, type IMediaAssetDTO, type IMediaAssetResult, type IMemberDTO, type IMemberListResult, type IMemoryCacheOptions, type IMfaEnabledResult, type IMfaRequiredResult, type IMfaSetupResult, type IPaymentMethodDTO, type IPaymentMethodResult, type IPlanDTO, type IPlanFeature, type IPlanListResult, type IPlanResult, type IPortalUrlResult, type IReadOptions, type IRecordUsageInput, type IRefreshResult, type IRegisterInput, type IRegisterResult, type IRequestConfig, type IResendVerificationResult, type IResetPasswordInput, type IRevealSecretResult, type IRoleDTO, type IRoleListResult, type IRolePermission, type IRolePermissionInput, type IRolePermissionsResult, type IRoleResult, type IRollbackInput, type IRollbackTemplateInput, type ISecretEntry, type ISecretRevision, type ISessionDTO, type ISessionsResult, type ISetConfigInput, type ISetSecretInput, type ISetTemplateInput, type ISubscriptionChangeResult, type ISubscriptionDTO, type ISubscriptionResult, type ITemplateEntry, type ITemplateRevision, type ITestWebhookResult, type ITokens, type IUpdateCustomerInput, type IUpdatePlanInput, type IUpdatePreferencesInput, type IUpdateProfileInput, type IUpdateRoleInput, type IUpdateSettingsInput, type IUpdateWebhookEndpointInput, type IUpdateWorkspaceInput, type IUploadMediaInput, type IUsageResult, type IUserDTO, type IUserPreferences, type IVerifyEmailResult, type IWalletCheckoutInput, type IWalletDTO, type IWalletPreferencesInput, type IWalletPurchaseInput, type IWalletPurchaseResult, type IWalletResult, type IWalletTransactionDTO, type IWalletTransactionsResult, type IWebhookDeliveryDTO, type IWebhookDeliveryListResult, type IWebhookEndpointCreatedDTO, type IWebhookEndpointDTO, type IWebhookEndpointListResult, type IWorkspaceAddressDTO, type IWorkspaceDTO, type IWorkspaceListResult, type IWorkspaceResult, type IWorkspaceSettingsDTO, type IWorkspaceSettingsResult, MediaClient, type SubscriberType, WebhooksClient, WorkspacesClient, createMemoryCache, isMfaRequired };
+export { AdminClient, type AdminRouteGuard, AuditClient, AuthClient, BillingClient, ConfigAdminClient, CourierAdminClient, type CustomerLabelType, type CustomerSex, type CustomerType, CustomersClient, FonderieApiError, FonderieClient, type IAcceptInvitationResult, type IAddAddressInput, type IAddEmailInput, type IAddPhoneInput, type IAddRelationshipInput, type IAddressDTO, type IAdminAttention, type IAdminAttentionItem, type IAdminCheckResult, type IAdminClientOptions, type IAdminConfigReport, type IAdminDoctorReport, type IAdminLogEntry, type IAdminLogPage, type IAdminLogQuery, type IAdminManifest, type IAdminModuleEntry, type IAdminReadiness, type IAdminReadinessProblem, type IAdminRouteEntry, type IAdminRoutesReport, type IAdminTokensReport, type IApiError, type IApiResponse, type IAppleNativeInput, type IAuditEventDTO, type IAuditPageResult, type IBlacklistCustomerInput, type ICache, type ICancelSubscriptionInput, type IChangePasswordInput, type ICheckoutInput, type ICheckoutUrlResult, type IClientAuthConfig, type IConfigAdminClientOptions, type IConfigEntry, type IConfigRevision, type ICourierAdminClientOptions, type ICreateCustomerInput, type ICreatePlanInput, type ICreateRoleInput, type ICreateWebhookEndpointInput, type ICreateWorkspaceInput, type ICustomerAddressDTO, type ICustomerAddressListResult, type ICustomerAddressResult, type ICustomerDTO, type ICustomerDetailD2DTO, type ICustomerDetailDTO, type ICustomerEmailDTO, type ICustomerEmailListResult, type ICustomerEmailResult, type ICustomerLabelDTO, type ICustomerLabelListResult, type ICustomerListResult, type ICustomerNoteDTO, type ICustomerNoteListResult, type ICustomerNoteResult, type ICustomerPhoneDTO, type ICustomerPhoneListResult, type ICustomerPhoneResult, type ICustomerRelationshipDTO, type ICustomerRelationshipExpandedD2DTO, type ICustomerRelationshipExpandedDTO, type ICustomerRelationshipListResult, type ICustomerRelationshipResult, type ICustomerResult, type ICustomerShallowDTO, type ICustomerTagListResult, type IFonderieClientOptions, type IGetCustomerInput, type IGetLoginHistoryInput, type IInvitationDTO, type IInvitationListResult, type IInviteEntry, type IInviteResult, type IInvoiceDTO, type IInvoicesResult, type IListAuditEventsInput, type IListCustomersInput, type ILoginEventDTO, type ILoginHistoryPageResult, type ILoginInput, type ILoginResult, type IMeResult, type IMediaAssetDTO, type IMediaAssetResult, type IMemberDTO, type IMemberListResult, type IMemoryCacheOptions, type IMfaEnabledResult, type IMfaRequiredResult, type IMfaSetupResult, type IPaymentMethodDTO, type IPaymentMethodResult, type IPlanDTO, type IPlanFeature, type IPlanListResult, type IPlanResult, type IPortalUrlResult, type IReadOptions, type IRecordUsageInput, type IRefreshResult, type IRegisterInput, type IRegisterResult, type IRequestConfig, type IResendVerificationResult, type IResetPasswordInput, type IRevealSecretResult, type IRoleDTO, type IRoleListResult, type IRolePermission, type IRolePermissionInput, type IRolePermissionsResult, type IRoleResult, type IRollbackInput, type IRollbackTemplateInput, type ISecretEntry, type ISecretRevision, type ISessionDTO, type ISessionsResult, type ISetConfigInput, type ISetSecretInput, type ISetTemplateInput, type ISubscriptionChangeResult, type ISubscriptionDTO, type ISubscriptionResult, type ITemplateEntry, type ITemplateRevision, type ITestWebhookResult, type ITokens, type IUpdateCustomerInput, type IUpdatePlanInput, type IUpdatePreferencesInput, type IUpdateProfileInput, type IUpdateRoleInput, type IUpdateSettingsInput, type IUpdateWebhookEndpointInput, type IUpdateWorkspaceInput, type IUploadMediaInput, type IUsageResult, type IUserDTO, type IUserPreferences, type IVerifyEmailResult, type IWalletCheckoutInput, type IWalletDTO, type IWalletPreferencesInput, type IWalletPurchaseInput, type IWalletPurchaseResult, type IWalletResult, type IWalletTransactionDTO, type IWalletTransactionsResult, type IWebhookDeliveryDTO, type IWebhookDeliveryListResult, type IWebhookEndpointCreatedDTO, type IWebhookEndpointDTO, type IWebhookEndpointListResult, type IWorkspaceAddressDTO, type IWorkspaceDTO, type IWorkspaceListResult, type IWorkspaceResult, type IWorkspaceSettingsDTO, type IWorkspaceSettingsResult, MediaClient, type SubscriberType, WebhooksClient, WorkspacesClient, createMemoryCache, isMfaRequired };

package/dist/index.js

@@ -257,6 +257,20 @@ var AuthClient = class {
       path: "/auth/providers"
     });
   }
+  /**
+   * Disconnect the OAuth provider linked to the signed-in account.
+   *
+   * Refused with 409 PASSWORD_REQUIRED when the account has no password:
+   * removing the only credential is account deletion, not a settings toggle.
+   * Check `user.hasPassword` before offering the control so the user is asked
+   * to set a password first rather than shown an error they can't act on.
+   */
+  unlinkOauth(provider) {
+    return this.http.request({
+      method: "DELETE",
+      path: `/auth/oauth/${encodeURIComponent(provider)}`
+    });
+  }
   register(input) {
     return this.http.request({
       method: "POST",
@@ -1650,6 +1664,53 @@ var ConfigAdminClient = class {
   }
 };
 
+// src/modules/admin.ts
+var AdminClient = class {
+  http;
+  adminToken;
+  prefix;
+  actorHeaders;
+  constructor(opts) {
+    this.http = new HttpClient(opts.baseUrl);
+    this.adminToken = opts.adminToken;
+    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
+  }
+  get(suffix) {
+    return this.http.request({
+      method: "GET",
+      path: `${this.prefix}${suffix}`,
+      token: this.adminToken,
+      headers: this.actorHeaders
+    });
+  }
+  attention() {
+    return this.get("");
+  }
+  manifest() {
+    return this.get("/manifest");
+  }
+  doctor() {
+    return this.get("/doctor");
+  }
+  config() {
+    return this.get("/config");
+  }
+  routes() {
+    return this.get("/routes");
+  }
+  tokens() {
+    return this.get("/access/tokens");
+  }
+  adminLog(query = {}) {
+    const q = new URLSearchParams();
+    if (query.limit) q.set("limit", String(query.limit));
+    if (query.before) q.set("before", query.before);
+    const qs = q.toString();
+    return this.get(`/activity/admin-log${qs ? `?${qs}` : ""}`);
+  }
+};
+
 // src/modules/courier-admin.ts
 var CourierAdminClient = class {
   http;
@@ -1719,6 +1780,7 @@ function isMfaRequired(result) {
   return !("tokens" in result);
 }
 export {
+  AdminClient,
   AuditClient,
   AuthClient,
   BillingClient,