@fonderie/client 0.23.0 → 0.25.0

package/brain/signatures.md

@@ -226,6 +226,7 @@ new BillingClient(http: HttpClient, tokens: TokenStore): BillingClient
 interface IConfigAdminClientOptions {
     baseUrl: string;
     adminToken: string;
+    prefix?: string;
     actor?: string;
 }
 
@@ -262,9 +263,31 @@ new ConfigAdminClient(opts: IConfigAdminClientOptions): ConfigAdminClient
   .rollbackSecret(key: string, input: IRollbackInput, environment?: string | undefined): Promise<IApiResponse<ISecretEntry>>
   .revealSecret(key: string, environment?: string | undefined): Promise<IApiResponse<IRevealSecretResult>>
 
+interface IAdminClientOptions {
+    baseUrl: string;
+    adminToken: string;
+    prefix?: string;
+    actor?: string;
+}
+
+interface IAdminLogQuery {
+    limit?: number;
+    before?: string;
+}
+
+new AdminClient(opts: IAdminClientOptions): AdminClient
+  .attention(): Promise<IApiResponse<IAdminAttention>>
+  .manifest(): Promise<IApiResponse<IAdminManifest>>
+  .doctor(): Promise<IApiResponse<IAdminDoctorReport>>
+  .config(): Promise<IApiResponse<IAdminConfigReport>>
+  .routes(): Promise<IApiResponse<IAdminRoutesReport>>
+  .tokens(): Promise<IApiResponse<IAdminTokensReport>>
+  .adminLog(query?: IAdminLogQuery): Promise<IApiResponse<IAdminLogPage>>
+
 interface ICourierAdminClientOptions {
     baseUrl: string;
     adminToken: string;
+    prefix?: string;
     actor?: string;
 }
 
@@ -599,6 +622,122 @@ interface ICheckoutUrlResult {
     url: string;
 }
 
+type AdminRouteGuard = 'admin' | 'probe' | 'app';
+
+interface IAdminAttention {
+    generatedAt: string;
+    ok: boolean;
+    items: IAdminAttentionItem[];
+}
+
+interface IAdminAttentionItem {
+    source: string;
+    severity: 'error' | 'advice';
+    message: string;
+}
+
+interface IAdminCheckResult {
+    name: string;
+    module: string;
+    ok: boolean;
+    findings: string[];
+    skipped?: string;
+    durationMs: number;
+}
+
+interface IAdminConfigReport {
+    generatedAt: string;
+    readiness: IAdminReadiness;
+    modules: Array<{
+        name: string;
+        problems: IAdminReadinessProblem[];
+    }>;
+    env: Array<{
+        name: string;
+        set: boolean;
+    }>;
+}
+
+interface IAdminDoctorReport {
+    generatedAt: string;
+    ok: boolean;
+    checks: IAdminCheckResult[];
+}
+
+interface IAdminLogEntry {
+    id: string;
+    at: string;
+    actor: string;
+    method: string;
+    path: string;
+    route: string;
+    module: string;
+    status: number;
+    durationMs: number;
+    requestId: string | null;
+    clientIp: string | null;
+}
+
+interface IAdminLogPage {
+    entries: IAdminLogEntry[];
+    next: string | null;
+}
+
+interface IAdminManifest {
+    generatedAt: string;
+    env: string;
+    admin: {
+        version: string;
+        log: boolean;
+    };
+    modules: IAdminModuleEntry[];
+    readiness: IAdminReadiness;
+    routes: IAdminRouteEntry[];
+}
+
+interface IAdminModuleEntry {
+    name: string;
+    version: string | null;
+    readiness: IAdminReadiness;
+    describesAdmin: boolean;
+}
+
+interface IAdminReadiness {
+    ok: boolean;
+    problems: IAdminReadinessProblem[];
+}
+
+interface IAdminReadinessProblem {
+    module: string;
+    severity: 'error' | 'warning';
+    message: string;
+}
+
+interface IAdminRouteEntry {
+    method: string;
+    path: string;
+    module?: string;
+}
+
+interface IAdminRoutesReport {
+    generatedAt: string;
+    routes: Array<IAdminRouteEntry & {
+        guard: AdminRouteGuard;
+    }>;
+}
+
+interface IAdminTokensReport {
+    generatedAt: string;
+    admin: {
+        ok: boolean;
+        problems: IAdminReadinessProblem[];
+    };
+    legacy: Array<{
+        module: string;
+        set: boolean;
+    }>;
+}
+
 interface IConfigEntry {
     key: string;
     value: unknown;

package/dist/index.cjs

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  AdminClient: () => AdminClient,
   AuditClient: () => AuditClient,
   AuthClient: () => AuthClient,
   BillingClient: () => BillingClient,
@@ -1589,180 +1590,281 @@ function envQuery(environment) {
 var ConfigAdminClient = class {
   http;
   adminToken;
+  prefix;
   actorHeaders;
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
+    this.prefix = opts.prefix?.replace(/\/+$/, "");
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
+  // The path literals stay on the legacy '/admin/...' so the route table and
+  // the coverage gate read them; the prefix is applied here at request time.
+  rebase(opts) {
+    if (!this.prefix) return opts;
+    return { ...opts, path: opts.path.replace(/^\/admin(?=\/|\?|$)/, this.prefix) };
+  }
   // ── Config ───────────────────────────────────────────────────────────────
   listConfig(environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/config${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/config${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   getConfig(key, environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   setConfig(key, input, environment) {
-    return this.http.request({
-      method: "PUT",
-      path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "PUT",
+        path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   deleteConfig(key, environment) {
-    return this.http.request({
-      method: "DELETE",
-      path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "DELETE",
+        path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   listConfigRevisions(key, environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/config/${encodeURIComponent(key)}/revisions${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/config/${encodeURIComponent(key)}/revisions${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   rollbackConfig(key, input, environment) {
-    return this.http.request({
-      method: "POST",
-      path: `/admin/config/${encodeURIComponent(key)}/rollback${envQuery(environment)}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "POST",
+        path: `/admin/config/${encodeURIComponent(key)}/rollback${envQuery(environment)}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   // ── Secrets (masked) ─────────────────────────────────────────────────────
   listSecrets(environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/secrets${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/secrets${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   getSecret(key, environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   setSecret(key, input, environment) {
-    return this.http.request({
-      method: "PUT",
-      path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "PUT",
+        path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   deleteSecret(key, environment) {
-    return this.http.request({
-      method: "DELETE",
-      path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "DELETE",
+        path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   listSecretRevisions(key, environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/secrets/${encodeURIComponent(key)}/revisions${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/secrets/${encodeURIComponent(key)}/revisions${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   rollbackSecret(key, input, environment) {
-    return this.http.request({
-      method: "POST",
-      path: `/admin/secrets/${encodeURIComponent(key)}/rollback${envQuery(environment)}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "POST",
+        path: `/admin/secrets/${encodeURIComponent(key)}/rollback${envQuery(environment)}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   // POST (not GET) so the decrypted value never lands in a URL or access log.
   revealSecret(key, environment) {
+    return this.http.request(
+      this.rebase({
+        method: "POST",
+        path: `/admin/secrets/${encodeURIComponent(key)}/reveal${envQuery(environment)}`,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
+  }
+};
+
+// src/modules/admin.ts
+var AdminClient = class {
+  http;
+  adminToken;
+  prefix;
+  actorHeaders;
+  constructor(opts) {
+    this.http = new HttpClient(opts.baseUrl);
+    this.adminToken = opts.adminToken;
+    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
+  }
+  get(suffix) {
     return this.http.request({
-      method: "POST",
-      path: `/admin/secrets/${encodeURIComponent(key)}/reveal${envQuery(environment)}`,
+      method: "GET",
+      path: `${this.prefix}${suffix}`,
       token: this.adminToken,
       headers: this.actorHeaders
     });
   }
+  attention() {
+    return this.get("");
+  }
+  manifest() {
+    return this.get("/manifest");
+  }
+  doctor() {
+    return this.get("/doctor");
+  }
+  config() {
+    return this.get("/config");
+  }
+  routes() {
+    return this.get("/routes");
+  }
+  tokens() {
+    return this.get("/access/tokens");
+  }
+  adminLog(query = {}) {
+    const q = new URLSearchParams();
+    if (query.limit) q.set("limit", String(query.limit));
+    if (query.before) q.set("before", query.before);
+    const qs = q.toString();
+    return this.get(`/activity/admin-log${qs ? `?${qs}` : ""}`);
+  }
 };
 
 // src/modules/courier-admin.ts
 var CourierAdminClient = class {
   http;
   adminToken;
+  prefix;
   actorHeaders;
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
+    this.prefix = opts.prefix?.replace(/\/+$/, "");
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
+  // The path literals stay on the legacy '/admin/...' so the route table and
+  // the coverage gate read them; the prefix is applied here at request time.
+  rebase(opts) {
+    if (!this.prefix) return opts;
+    return { ...opts, path: opts.path.replace(/^\/admin(?=\/|\?|$)/, this.prefix) };
+  }
   listTemplates() {
-    return this.http.request({
-      method: "GET",
-      path: "/admin/templates",
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: "/admin/templates",
+        token: this.adminToken
+      })
+    );
   }
   getTemplate(type, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "GET",
-      path: `/admin/templates/${encodeURIComponent(type)}${q}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/templates/${encodeURIComponent(type)}${q}`,
+        token: this.adminToken
+      })
+    );
   }
   setTemplate(type, input, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "PUT",
-      path: `/admin/templates/${encodeURIComponent(type)}${q}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "PUT",
+        path: `/admin/templates/${encodeURIComponent(type)}${q}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   deleteTemplate(type, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "DELETE",
-      path: `/admin/templates/${encodeURIComponent(type)}${q}`,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "DELETE",
+        path: `/admin/templates/${encodeURIComponent(type)}${q}`,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   listRevisions(type, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "GET",
-      path: `/admin/templates/${encodeURIComponent(type)}/revisions${q}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/templates/${encodeURIComponent(type)}/revisions${q}`,
+        token: this.adminToken
+      })
+    );
   }
   rollback(type, input, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "POST",
-      path: `/admin/templates/${encodeURIComponent(type)}/rollback${q}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "POST",
+        path: `/admin/templates/${encodeURIComponent(type)}/rollback${q}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
 };
 
@@ -1772,6 +1874,7 @@ function isMfaRequired(result) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AdminClient,
   AuditClient,
   AuthClient,
   BillingClient,