@fonderie/client 0.27.0 → 0.29.0

package/brain/signatures.md

@@ -283,6 +283,8 @@ new AdminClient(opts: IAdminClientOptions): AdminClient
   .routes(): Promise<IApiResponse<IAdminRoutesReport>>
   .tokens(): Promise<IApiResponse<IAdminTokensReport>>
   .adminLog(query?: IAdminLogQuery): Promise<IApiResponse<IAdminLogPage>>
+  .issueToken(input: IAdminIssueTokenInput): Promise<IApiResponse<IAdminIssuedToken>>
+  .revokeToken(id: string): Promise<IApiResponse<undefined>>
 
 interface IAuthAdminClientOptions {
     baseUrl: string;
@@ -328,6 +330,26 @@ new BillingAdminClient(opts: IBillingAdminClientOptions): BillingAdminClient
   .walletLedger(type: SubscriberType, id: string, query?: IAdminLedgerQuery): Promise<IApiResponse<IAdminWalletLedgerPage>>
   .grant(input: IAdminGrantInput): Promise<IApiResponse<unknown>>
 
+interface IAuditAdminClientOptions {
+    baseUrl: string;
+    adminToken: string;
+    prefix?: string;
+    actor?: string;
+}
+
+interface IAdminAuditQuery {
+    workspaceId?: string;
+    type?: string;
+    actorId?: string;
+    from?: Date;
+    to?: Date;
+    limit?: number;
+    cursor?: string;
+}
+
+new AuditAdminClient(opts: IAuditAdminClientOptions): AuditAdminClient
+  .listAudit(query?: IAdminAuditQuery): Promise<IApiResponse<IAuditPageResult>>
+
 interface ICourierAdminClientOptions {
     baseUrl: string;
     adminToken: string;
@@ -780,6 +802,30 @@ interface IAdminTokensReport {
         module: string;
         set: boolean;
     }>;
+    issued: IAdminTokenRecord[] | null;
+}
+
+type AdminScope = 'read' | 'write' | 'secrets';
+
+interface IAdminTokenRecord {
+    id: string;
+    name: string;
+    scopes: AdminScope[];
+    createdBy: string;
+    createdAt: string;
+    expiresAt: string | null;
+    revokedAt: string | null;
+    lastUsedAt: string | null;
+}
+
+interface IAdminIssueTokenInput {
+    name: string;
+    scopes: AdminScope[];
+    expiresInDays?: number;
+}
+
+interface IAdminIssuedToken extends IAdminTokenRecord {
+    token: string;
 }
 
 interface IAdminUserDTO extends IUserDTO {

package/dist/index.cjs

@@ -21,6 +21,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   AdminClient: () => AdminClient,
+  AuditAdminClient: () => AuditAdminClient,
   AuditClient: () => AuditClient,
   AuthAdminClient: () => AuthAdminClient,
   AuthClient: () => AuthClient,
@@ -1752,11 +1753,15 @@ var AdminClient = class {
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
   get(suffix) {
+    return this.call("GET", suffix);
+  }
+  call(method, suffix, body) {
     return this.http.request({
-      method: "GET",
+      method,
       path: `${this.prefix}${suffix}`,
       token: this.adminToken,
-      headers: this.actorHeaders
+      headers: this.actorHeaders,
+      ...body !== void 0 ? { body } : {}
     });
   }
   attention() {
@@ -1784,6 +1789,14 @@ var AdminClient = class {
     const qs = q.toString();
     return this.get(`/activity/admin-log${qs ? `?${qs}` : ""}`);
   }
+  // Root token only. The plaintext comes back once.
+  issueToken(input) {
+    return this.call("POST", "/access/tokens", input);
+  }
+  // Root token only.
+  revokeToken(id) {
+    return this.call("DELETE", `/access/tokens/${encodeURIComponent(id)}`);
+  }
 };
 
 // src/modules/auth-admin.ts
@@ -1897,6 +1910,38 @@ var BillingAdminClient = class {
   }
 };
 
+// src/modules/audit-admin.ts
+var AuditAdminClient = class {
+  http;
+  adminToken;
+  prefix;
+  actorHeaders;
+  constructor(opts) {
+    this.http = new HttpClient(opts.baseUrl);
+    this.adminToken = opts.adminToken;
+    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
+  }
+  // Every workspace unless one is named. Newest first, keyset-paged.
+  listAudit(query = {}) {
+    const q = new URLSearchParams();
+    if (query.workspaceId) q.set("workspaceId", query.workspaceId);
+    if (query.type) q.set("type", query.type);
+    if (query.actorId) q.set("actorId", query.actorId);
+    if (query.from) q.set("from", query.from.toISOString());
+    if (query.to) q.set("to", query.to.toISOString());
+    if (query.limit) q.set("limit", String(query.limit));
+    if (query.cursor) q.set("cursor", query.cursor);
+    const qs = q.toString();
+    return this.http.request({
+      method: "GET",
+      path: `${this.prefix}/audit${qs ? `?${qs}` : ""}`,
+      token: this.adminToken,
+      headers: this.actorHeaders
+    });
+  }
+};
+
 // src/modules/courier-admin.ts
 var CourierAdminClient = class {
   http;
@@ -1988,6 +2033,7 @@ function isMfaRequired(result) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AdminClient,
+  AuditAdminClient,
   AuditClient,
   AuthAdminClient,
   AuthClient,