@fonderie/client 0.24.0 → 0.26.0

package/brain/signatures.md

@@ -226,6 +226,7 @@ new BillingClient(http: HttpClient, tokens: TokenStore): BillingClient
 interface IConfigAdminClientOptions {
     baseUrl: string;
     adminToken: string;
+    prefix?: string;
     actor?: string;
 }
 
@@ -283,9 +284,31 @@ new AdminClient(opts: IAdminClientOptions): AdminClient
   .tokens(): Promise<IApiResponse<IAdminTokensReport>>
   .adminLog(query?: IAdminLogQuery): Promise<IApiResponse<IAdminLogPage>>
 
+interface IAuthAdminClientOptions {
+    baseUrl: string;
+    adminToken: string;
+    prefix?: string;
+    actor?: string;
+}
+
+interface IAdminLoginHistoryQuery {
+    limit?: number;
+    cursor?: string;
+}
+
+new AuthAdminClient(opts: IAuthAdminClientOptions): AuthAdminClient
+  .findUser(email: string): Promise<IApiResponse<IAdminUserDTO>>
+  .getUser(id: string): Promise<IApiResponse<IAdminUserDTO>>
+  .listUserSessions(id: string): Promise<IApiResponse<ISessionDTO[]>>
+  .revokeUserSessions(id: string): Promise<IApiResponse<undefined>>
+  .userLoginHistory(id: string, query?: IAdminLoginHistoryQuery): Promise<IApiResponse<ILoginHistoryPageResult>>
+  .suspendUser(id: string): Promise<IApiResponse<IAdminUserDTO>>
+  .unsuspendUser(id: string): Promise<IApiResponse<IAdminUserDTO>>
+
 interface ICourierAdminClientOptions {
     baseUrl: string;
     adminToken: string;
+    prefix?: string;
     actor?: string;
 }
 
@@ -736,6 +759,10 @@ interface IAdminTokensReport {
     }>;
 }
 
+interface IAdminUserDTO extends IUserDTO {
+    deletedAt: string | null;
+}
+
 interface IConfigEntry {
     key: string;
     value: unknown;

package/dist/index.cjs

@@ -22,6 +22,7 @@ var index_exports = {};
 __export(index_exports, {
   AdminClient: () => AdminClient,
   AuditClient: () => AuditClient,
+  AuthAdminClient: () => AuthAdminClient,
   AuthClient: () => AuthClient,
   BillingClient: () => BillingClient,
   ConfigAdminClient: () => ConfigAdminClient,
@@ -1590,116 +1591,150 @@ function envQuery(environment) {
 var ConfigAdminClient = class {
   http;
   adminToken;
+  prefix;
   actorHeaders;
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
+    this.prefix = opts.prefix?.replace(/\/+$/, "");
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
+  // The path literals stay on the legacy '/admin/...' so the route table and
+  // the coverage gate read them; the prefix is applied here at request time.
+  rebase(opts) {
+    if (!this.prefix) return opts;
+    return { ...opts, path: opts.path.replace(/^\/admin(?=\/|\?|$)/, this.prefix) };
+  }
   // ── Config ───────────────────────────────────────────────────────────────
   listConfig(environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/config${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/config${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   getConfig(key, environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   setConfig(key, input, environment) {
-    return this.http.request({
-      method: "PUT",
-      path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "PUT",
+        path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   deleteConfig(key, environment) {
-    return this.http.request({
-      method: "DELETE",
-      path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "DELETE",
+        path: `/admin/config/${encodeURIComponent(key)}${envQuery(environment)}`,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   listConfigRevisions(key, environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/config/${encodeURIComponent(key)}/revisions${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/config/${encodeURIComponent(key)}/revisions${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   rollbackConfig(key, input, environment) {
-    return this.http.request({
-      method: "POST",
-      path: `/admin/config/${encodeURIComponent(key)}/rollback${envQuery(environment)}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "POST",
+        path: `/admin/config/${encodeURIComponent(key)}/rollback${envQuery(environment)}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   // ── Secrets (masked) ─────────────────────────────────────────────────────
   listSecrets(environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/secrets${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/secrets${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   getSecret(key, environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   setSecret(key, input, environment) {
-    return this.http.request({
-      method: "PUT",
-      path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "PUT",
+        path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   deleteSecret(key, environment) {
-    return this.http.request({
-      method: "DELETE",
-      path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "DELETE",
+        path: `/admin/secrets/${encodeURIComponent(key)}${envQuery(environment)}`,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   listSecretRevisions(key, environment) {
-    return this.http.request({
-      method: "GET",
-      path: `/admin/secrets/${encodeURIComponent(key)}/revisions${envQuery(environment)}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/secrets/${encodeURIComponent(key)}/revisions${envQuery(environment)}`,
+        token: this.adminToken
+      })
+    );
   }
   rollbackSecret(key, input, environment) {
-    return this.http.request({
-      method: "POST",
-      path: `/admin/secrets/${encodeURIComponent(key)}/rollback${envQuery(environment)}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "POST",
+        path: `/admin/secrets/${encodeURIComponent(key)}/rollback${envQuery(environment)}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   // POST (not GET) so the decrypted value never lands in a URL or access log.
   revealSecret(key, environment) {
-    return this.http.request({
-      method: "POST",
-      path: `/admin/secrets/${encodeURIComponent(key)}/reveal${envQuery(environment)}`,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "POST",
+        path: `/admin/secrets/${encodeURIComponent(key)}/reveal${envQuery(environment)}`,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
 };
 
@@ -1750,67 +1785,138 @@ var AdminClient = class {
   }
 };
 
+// src/modules/auth-admin.ts
+var AuthAdminClient = class {
+  http;
+  adminToken;
+  prefix;
+  actorHeaders;
+  constructor(opts) {
+    this.http = new HttpClient(opts.baseUrl);
+    this.adminToken = opts.adminToken;
+    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
+  }
+  call(method, suffix) {
+    return this.http.request({
+      method,
+      path: `${this.prefix}/users${suffix}`,
+      token: this.adminToken,
+      headers: this.actorHeaders
+    });
+  }
+  findUser(email) {
+    return this.call("GET", `?email=${encodeURIComponent(email)}`);
+  }
+  getUser(id) {
+    return this.call("GET", `/${encodeURIComponent(id)}`);
+  }
+  listUserSessions(id) {
+    return this.call("GET", `/${encodeURIComponent(id)}/sessions`);
+  }
+  // Signs the user out everywhere.
+  revokeUserSessions(id) {
+    return this.call("DELETE", `/${encodeURIComponent(id)}/sessions`);
+  }
+  userLoginHistory(id, query = {}) {
+    const q = new URLSearchParams();
+    if (query.limit) q.set("limit", String(query.limit));
+    if (query.cursor) q.set("cursor", query.cursor);
+    const qs = q.toString();
+    return this.call(
+      "GET",
+      `/${encodeURIComponent(id)}/login-history${qs ? `?${qs}` : ""}`
+    );
+  }
+  suspendUser(id) {
+    return this.call("POST", `/${encodeURIComponent(id)}/suspend`);
+  }
+  unsuspendUser(id) {
+    return this.call("POST", `/${encodeURIComponent(id)}/unsuspend`);
+  }
+};
+
 // src/modules/courier-admin.ts
 var CourierAdminClient = class {
   http;
   adminToken;
+  prefix;
   actorHeaders;
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
+    this.prefix = opts.prefix?.replace(/\/+$/, "");
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
+  // The path literals stay on the legacy '/admin/...' so the route table and
+  // the coverage gate read them; the prefix is applied here at request time.
+  rebase(opts) {
+    if (!this.prefix) return opts;
+    return { ...opts, path: opts.path.replace(/^\/admin(?=\/|\?|$)/, this.prefix) };
+  }
   listTemplates() {
-    return this.http.request({
-      method: "GET",
-      path: "/admin/templates",
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: "/admin/templates",
+        token: this.adminToken
+      })
+    );
   }
   getTemplate(type, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "GET",
-      path: `/admin/templates/${encodeURIComponent(type)}${q}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/templates/${encodeURIComponent(type)}${q}`,
+        token: this.adminToken
+      })
+    );
   }
   setTemplate(type, input, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "PUT",
-      path: `/admin/templates/${encodeURIComponent(type)}${q}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "PUT",
+        path: `/admin/templates/${encodeURIComponent(type)}${q}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   deleteTemplate(type, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "DELETE",
-      path: `/admin/templates/${encodeURIComponent(type)}${q}`,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "DELETE",
+        path: `/admin/templates/${encodeURIComponent(type)}${q}`,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
   listRevisions(type, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "GET",
-      path: `/admin/templates/${encodeURIComponent(type)}/revisions${q}`,
-      token: this.adminToken
-    });
+    return this.http.request(
+      this.rebase({
+        method: "GET",
+        path: `/admin/templates/${encodeURIComponent(type)}/revisions${q}`,
+        token: this.adminToken
+      })
+    );
   }
   rollback(type, input, locale) {
     const q = locale ? `?locale=${encodeURIComponent(locale)}` : "";
-    return this.http.request({
-      method: "POST",
-      path: `/admin/templates/${encodeURIComponent(type)}/rollback${q}`,
-      body: input,
-      token: this.adminToken,
-      headers: this.actorHeaders
-    });
+    return this.http.request(
+      this.rebase({
+        method: "POST",
+        path: `/admin/templates/${encodeURIComponent(type)}/rollback${q}`,
+        body: input,
+        token: this.adminToken,
+        headers: this.actorHeaders
+      })
+    );
   }
 };
 
@@ -1822,6 +1928,7 @@ function isMfaRequired(result) {
 0 && (module.exports = {
   AdminClient,
   AuditClient,
+  AuthAdminClient,
   AuthClient,
   BillingClient,
   ConfigAdminClient,