@fonderie/client 0.28.0 → 0.29.1

package/brain/signatures.md

@@ -283,6 +283,8 @@ new AdminClient(opts: IAdminClientOptions): AdminClient
   .routes(): Promise<IApiResponse<IAdminRoutesReport>>
   .tokens(): Promise<IApiResponse<IAdminTokensReport>>
   .adminLog(query?: IAdminLogQuery): Promise<IApiResponse<IAdminLogPage>>
+  .issueToken(input: IAdminIssueTokenInput): Promise<IApiResponse<IAdminIssuedToken>>
+  .revokeToken(id: string): Promise<IApiResponse<undefined>>
 
 interface IAuthAdminClientOptions {
     baseUrl: string;
@@ -800,6 +802,30 @@ interface IAdminTokensReport {
         module: string;
         set: boolean;
     }>;
+    issued: IAdminTokenRecord[] | null;
+}
+
+type AdminScope = 'read' | 'write' | 'secrets';
+
+interface IAdminTokenRecord {
+    id: string;
+    name: string;
+    scopes: AdminScope[];
+    createdBy: string;
+    createdAt: string;
+    expiresAt: string | null;
+    revokedAt: string | null;
+    lastUsedAt: string | null;
+}
+
+interface IAdminIssueTokenInput {
+    name: string;
+    scopes: AdminScope[];
+    expiresInDays?: number;
+}
+
+interface IAdminIssuedToken extends IAdminTokenRecord {
+    token: string;
 }
 
 interface IAdminUserDTO extends IUserDTO {

package/dist/index.cjs

@@ -170,7 +170,8 @@ var HttpClient = class {
       if (newToken) return this.exec({ ...opts, token: newToken }, true);
     }
     if (res.status === 204) {
-      if (!res.ok) throw new FonderieApiError("unknown", res.statusText, res.status, void 0, rid);
+      if (!res.ok)
+        throw new FonderieApiError("unknown", res.statusText, res.status, void 0, rid);
       return void 0;
     }
     const data = await res.json();
@@ -1573,19 +1574,49 @@ var FonderieClient = class {
     });
   }
   post(path, body, config) {
-    return this.request({ method: "POST", path, body, token: config?.token, workspaceId: config?.workspaceId, invalidate: config?.invalidate });
+    return this.request({
+      method: "POST",
+      path,
+      body,
+      token: config?.token,
+      workspaceId: config?.workspaceId,
+      invalidate: config?.invalidate
+    });
   }
   put(path, body, config) {
-    return this.request({ method: "PUT", path, body, token: config?.token, workspaceId: config?.workspaceId, invalidate: config?.invalidate });
+    return this.request({
+      method: "PUT",
+      path,
+      body,
+      token: config?.token,
+      workspaceId: config?.workspaceId,
+      invalidate: config?.invalidate
+    });
   }
   patch(path, body, config) {
-    return this.request({ method: "PATCH", path, body, token: config?.token, workspaceId: config?.workspaceId, invalidate: config?.invalidate });
+    return this.request({
+      method: "PATCH",
+      path,
+      body,
+      token: config?.token,
+      workspaceId: config?.workspaceId,
+      invalidate: config?.invalidate
+    });
   }
   delete(path, config) {
-    return this.request({ method: "DELETE", path, token: config?.token, workspaceId: config?.workspaceId, invalidate: config?.invalidate });
+    return this.request({
+      method: "DELETE",
+      path,
+      token: config?.token,
+      workspaceId: config?.workspaceId,
+      invalidate: config?.invalidate
+    });
   }
 };
 
+// src/path.ts
+var normalizeMountPath = (path) => path.replace(/\/+$/, "");
+
 // src/modules/config-admin.ts
 function envQuery(environment) {
   return environment ? `?environment=${encodeURIComponent(environment)}` : "";
@@ -1598,7 +1629,7 @@ var ConfigAdminClient = class {
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
-    this.prefix = opts.prefix?.replace(/\/+$/, "");
+    this.prefix = opts.prefix ? normalizeMountPath(opts.prefix) : void 0;
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
   // The path literals stay on the legacy '/admin/...' so the route table and
@@ -1749,15 +1780,19 @@ var AdminClient = class {
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
-    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.prefix = normalizeMountPath(opts.prefix ?? "/_admin");
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
   get(suffix) {
+    return this.call("GET", suffix);
+  }
+  call(method, suffix, body) {
     return this.http.request({
-      method: "GET",
+      method,
       path: `${this.prefix}${suffix}`,
       token: this.adminToken,
-      headers: this.actorHeaders
+      headers: this.actorHeaders,
+      ...body !== void 0 ? { body } : {}
     });
   }
   attention() {
@@ -1785,6 +1820,14 @@ var AdminClient = class {
     const qs = q.toString();
     return this.get(`/activity/admin-log${qs ? `?${qs}` : ""}`);
   }
+  // Root token only. The plaintext comes back once.
+  issueToken(input) {
+    return this.call("POST", "/access/tokens", input);
+  }
+  // Root token only.
+  revokeToken(id) {
+    return this.call("DELETE", `/access/tokens/${encodeURIComponent(id)}`);
+  }
 };
 
 // src/modules/auth-admin.ts
@@ -1796,7 +1839,7 @@ var AuthAdminClient = class {
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
-    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.prefix = normalizeMountPath(opts.prefix ?? "/_admin");
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
   call(method, suffix) {
@@ -1847,7 +1890,7 @@ var BillingAdminClient = class {
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
-    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.prefix = normalizeMountPath(opts.prefix ?? "/_admin");
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
   call(method, suffix, body) {
@@ -1907,7 +1950,7 @@ var AuditAdminClient = class {
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
-    this.prefix = (opts.prefix ?? "/_admin").replace(/\/+$/, "");
+    this.prefix = normalizeMountPath(opts.prefix ?? "/_admin");
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
   // Every workspace unless one is named. Newest first, keyset-paged.
@@ -1939,7 +1982,7 @@ var CourierAdminClient = class {
   constructor(opts) {
     this.http = new HttpClient(opts.baseUrl);
     this.adminToken = opts.adminToken;
-    this.prefix = opts.prefix?.replace(/\/+$/, "");
+    this.prefix = opts.prefix ? normalizeMountPath(opts.prefix) : void 0;
     this.actorHeaders = opts.actor ? { "X-Actor": opts.actor } : void 0;
   }
   // The path literals stay on the legacy '/admin/...' so the route table and