@fonderie/react-admin-screens 0.3.0 → 0.5.0

package/README.md

@@ -14,10 +14,10 @@ Status: **experimental** (0.x).
 | Money | Catalog · Subscriber | what am I selling (configured vs stored) · what is this subscriber on, their wallet, ledger, a manual grant (`billingClient`) |
 | Settings | Config & secrets | the `@fonderie/config` admin screens, as a sub-page |
 | Messaging | Templates | the `@fonderie/courier` admin screens, as a sub-page |
-| Activity | Admin log · Access | who did what · who can be here |
+| Activity | Audit · Admin log · Access | what happened, every workspace (`auditClient`) · who did what through here · who can be here, and issue or revoke scoped tokens |
 
 ```ts
-import { AdminClient, AuthAdminClient, BillingAdminClient, ConfigAdminClient, CourierAdminClient } from '@fonderie/client';
+import { AdminClient, AuditAdminClient, AuthAdminClient, BillingAdminClient, ConfigAdminClient, CourierAdminClient } from '@fonderie/client';
 import { AdminShell } from '@fonderie/react-admin-screens';
 
 const base = { baseUrl: 'https://api.example.com', adminToken, actor: 'louis' };
@@ -27,16 +27,24 @@ const configClient = new ConfigAdminClient({ ...base, prefix: '/_admin' });
 const courierClient = new CourierAdminClient({ ...base, prefix: '/_admin' });
 const authClient = new AuthAdminClient(base); // @fonderie/auth ≥ 7.8
 const billingClient = new BillingAdminClient(base); // @fonderie/billing ≥ 9.10
+const auditClient = new AuditAdminClient(base); // @fonderie/audit ≥ 5.2
 ```
 
 ```tsx
-<AdminShell client={client} configClient={configClient} courierClient={courierClient} authClient={authClient} billingClient={billingClient} />
+<AdminShell client={client} configClient={configClient} courierClient={courierClient} authClient={authClient} billingClient={billingClient} auditClient={auditClient} />
 ```
 
 Pass `page` and `onNavigate` to own the URL (one route per page); omit both
 and the shell keeps the page itself. Settings and Messaging appear only when
 their client is given.
 
+**Give the shell a `read` token, not the root one.** With `@fonderie/admin`
+≥ 0.6 the configured `adminToken` is the root — every scope, including the
+plaintext secret reveal, and the only credential that can mint or revoke.
+Issue a scoped one for the dashboard (`fonderie admin token issue dashboard
+--scopes read`, or the Access page itself) and hand the shell that. The
+Access page then shows issuing as unavailable, which is the point.
+
 Nothing here stores the token: the app constructs the clients and decides
 where the token lives. Every request through the shell lands in the admin
 log, including the ones the token refuses.

package/dist/index.cjs

@@ -23,6 +23,7 @@ __export(index_exports, {
   AdminLogScreen: () => AdminLogScreen,
   AdminShell: () => AdminShell,
   AttentionScreen: () => AttentionScreen,
+  AuditScreen: () => AuditScreen,
   CatalogScreen: () => CatalogScreen,
   ConfigScreen: () => ConfigScreen,
   DoctorScreen: () => DoctorScreen,
@@ -37,7 +38,7 @@ module.exports = __toCommonJS(index_exports);
 // src/screens/AdminShell.tsx
 var import_react_config_admin_screens = require("@fonderie/react-config-admin-screens");
 var import_react_courier_admin_screens = require("@fonderie/react-courier-admin-screens");
-var import_react3 = require("react");
+var import_react5 = require("react");
 
 // src/styles.ts
 var styles = {
@@ -345,34 +346,146 @@ function RoutesScreen({ client }) {
 
 // src/screens/TokensScreen.tsx
 var import_react_admin7 = require("@fonderie/react-admin");
+var import_react = require("react");
 var import_jsx_runtime7 = require("react/jsx-runtime");
+var ALL = ["read", "write", "secrets"];
 function TokensScreen({ client }) {
-  const { report, isLoading, error } = (0, import_react_admin7.useAdminTokens)(client);
+  const { report, isLoading, error, issue, revoke } = (0, import_react_admin7.useAdminTokens)(client);
+  const [name, setName] = (0, import_react.useState)("");
+  const [scopes, setScopes] = (0, import_react.useState)(["read"]);
+  const [days, setDays] = (0, import_react.useState)("");
+  const [minted, setMinted] = (0, import_react.useState)(null);
+  const toggle = (s) => setScopes((prev) => prev.includes(s) ? prev.filter((x) => x !== s) : [...prev, s]);
   return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("div", { style: styles.container, children: [
     /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("h1", { style: styles.title, children: "Access" }),
-    isLoading ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { style: styles.status, children: "Loading\u2026" }) : error ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { style: styles.error, role: "alert", children: error.explanation }) : report ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
-      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("h2", { style: styles.subtitle, children: "Admin token" }),
-      /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("p", { children: [
-        report.admin.ok ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.ok, children: "strong" }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.bad, children: "weak" }),
-        report.admin.problems.map((p) => /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: styles.bad, children: p.message }, p.message))
-      ] }),
-      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("h2", { style: styles.subtitle, children: "Legacy per-brick tokens" }),
-      report.legacy.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { style: styles.muted, children: "None \u2014 every brick's admin surface goes through this token." }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("ul", { style: styles.list, children: report.legacy.map((l) => /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("li", { style: styles.row, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.mono, children: l.module }),
+    error ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { style: styles.error, role: "alert", children: error.status === 401 ? "Issuing and revoking need the root token (the one in your deployment config)." : error.explanation }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("h2", { style: styles.subtitle, children: "Root token" }),
+    report ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("p", { children: [
+      report.admin.ok ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.ok, children: "strong" }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.bad, children: "weak" }),
+      report.admin.problems.map((p) => /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("div", { style: styles.bad, children: p.message }, p.message))
+    ] }) : null,
+    /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("h2", { style: styles.subtitle, children: "Issued tokens" }),
+    report?.issued === null ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { style: styles.muted, children: "Issuing is off \u2014 give AdminModule a store and run its migrations." }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+      minted ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("p", { style: styles.ok, children: [
+        "Copy this now \u2014 it is never shown again.",
         " ",
-        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.muted, children: "still registers its standalone routes with its own token (deprecated)" })
-      ] }, l.module)) })
-    ] }) : null
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.mono, children: minted.token }),
+        " (",
+        minted.name,
+        ")"
+      ] }) : null,
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(
+        "form",
+        {
+          style: styles.toolbar,
+          onSubmit: (e) => {
+            e.preventDefault();
+            const d = Number(days);
+            void issue({
+              name: name.trim(),
+              scopes,
+              ...days && Number.isInteger(d) && d > 0 ? { expiresInDays: d } : {}
+            }).then((t) => {
+              setMinted({ name: t.name, token: t.token });
+              setName("");
+              setDays("");
+            }).catch(() => {
+            });
+          },
+          children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+              "input",
+              {
+                value: name,
+                onChange: (e) => setName(e.target.value),
+                placeholder: "name",
+                style: { ...styles.button, cursor: "text" },
+                "aria-label": "Name"
+              }
+            ),
+            ALL.map((s) => /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("label", { style: { ...styles.badge, cursor: "pointer" }, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("input", { type: "checkbox", checked: scopes.includes(s), onChange: () => toggle(s) }),
+              " ",
+              s
+            ] }, s)),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+              "input",
+              {
+                value: days,
+                onChange: (e) => setDays(e.target.value),
+                placeholder: "days (optional)",
+                style: { ...styles.button, cursor: "text", width: 140 },
+                "aria-label": "Days"
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+              "button",
+              {
+                type: "submit",
+                style: styles.button,
+                disabled: !name.trim() || scopes.length === 0 || isLoading,
+                children: "Issue"
+              }
+            )
+          ]
+        }
+      ),
+      report?.issued && report.issued.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("table", { style: styles.table, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("thead", { children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("tr", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("th", { style: styles.th, children: "Name" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("th", { style: styles.th, children: "Scopes" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("th", { style: styles.th, children: "Created" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("th", { style: styles.th, children: "Expires" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("th", { style: styles.th, children: "Last used" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("th", { style: styles.th })
+        ] }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("tbody", { children: report.issued.map((t) => /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("tr", { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("td", { style: styles.td, children: [
+            t.name,
+            t.revokedAt ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.badge, children: " revoked" }) : null
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("td", { style: { ...styles.td, ...styles.mono }, children: t.scopes.join(", ") }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("td", { style: { ...styles.td, ...styles.muted }, children: [
+            new Date(t.createdAt).toLocaleDateString(),
+            " \xB7 ",
+            t.createdBy
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("td", { style: { ...styles.td, ...styles.muted }, children: t.expiresAt ? new Date(t.expiresAt).toLocaleDateString() : "never" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("td", { style: { ...styles.td, ...styles.muted }, children: t.lastUsedAt ? new Date(t.lastUsedAt).toLocaleString() : "never" }),
+          /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("td", { style: styles.td, children: t.revokedAt ? null : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
+            "button",
+            {
+              type: "button",
+              style: styles.button,
+              onClick: () => {
+                if (window.confirm(
+                  `Revoke "${t.name}"? Anything using it stops working immediately.`
+                ))
+                  void revoke(t.id).catch(() => {
+                  });
+              },
+              children: "Revoke"
+            }
+          ) })
+        ] }, t.id)) })
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { style: styles.muted, children: "None issued." })
+    ] }),
+    /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("h2", { style: styles.subtitle, children: "Legacy per-brick tokens" }),
+    report && report.legacy.length === 0 ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("p", { style: styles.muted, children: "None \u2014 every brick's admin surface goes through this token." }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("ul", { style: styles.list, children: report?.legacy.map((l) => /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)("li", { style: styles.row, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.mono, children: l.module }),
+      " ",
+      /* @__PURE__ */ (0, import_jsx_runtime7.jsx)("span", { style: styles.muted, children: "still registers its standalone routes with its own token (deprecated)" })
+    ] }, l.module)) })
   ] });
 }
 
 // src/screens/UsersScreen.tsx
 var import_react_admin8 = require("@fonderie/react-admin");
-var import_react = require("react");
+var import_react2 = require("react");
 var import_jsx_runtime8 = require("react/jsx-runtime");
 function UsersScreen({ client }) {
-  const [input, setInput] = (0, import_react.useState)("");
-  const [email, setEmail] = (0, import_react.useState)(void 0);
+  const [input, setInput] = (0, import_react2.useState)("");
+  const [email, setEmail] = (0, import_react2.useState)(void 0);
   const { user, isLoading, error, suspend, unsuspend, revokeSessions } = (0, import_react_admin8.useAdminUser)(
     client,
     email ? { email } : {}
@@ -582,16 +695,16 @@ function CatalogScreen({ client }) {
 
 // src/screens/SubscriberScreen.tsx
 var import_react_admin10 = require("@fonderie/react-admin");
-var import_react2 = require("react");
+var import_react3 = require("react");
 var import_jsx_runtime10 = require("react/jsx-runtime");
 function SubscriberScreen({ client }) {
-  const [type, setType] = (0, import_react2.useState)("user");
-  const [idInput, setIdInput] = (0, import_react2.useState)("");
-  const [subscriber, setSubscriber] = (0, import_react2.useState)(null);
+  const [type, setType] = (0, import_react3.useState)("user");
+  const [idInput, setIdInput] = (0, import_react3.useState)("");
+  const [subscriber, setSubscriber] = (0, import_react3.useState)(null);
   const { subscription, wallet, ledger, hasMoreLedger, isLoading, error, loadMoreLedger, grant } = (0, import_react_admin10.useAdminSubscriber)(client, subscriber, { limit: 20 });
-  const [amount, setAmount] = (0, import_react2.useState)("");
-  const [note, setNote] = (0, import_react2.useState)("");
-  const [granted, setGranted] = (0, import_react2.useState)(null);
+  const [amount, setAmount] = (0, import_react3.useState)("");
+  const [note, setNote] = (0, import_react3.useState)("");
+  const [granted, setGranted] = (0, import_react3.useState)(null);
   return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)("div", { style: styles.container, children: [
     /* @__PURE__ */ (0, import_jsx_runtime10.jsx)("h1", { style: styles.title, children: "Subscriber" }),
     /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(
@@ -754,8 +867,93 @@ function SubscriberScreen({ client }) {
   ] });
 }
 
-// src/screens/AdminShell.tsx
+// src/screens/AuditScreen.tsx
+var import_react_admin11 = require("@fonderie/react-admin");
+var import_react4 = require("react");
 var import_jsx_runtime11 = require("react/jsx-runtime");
+function AuditScreen({ client, pageSize = 50 }) {
+  const [draft, setDraft] = (0, import_react4.useState)({ workspaceId: "", type: "", actorId: "" });
+  const [filter, setFilter] = (0, import_react4.useState)(
+    {}
+  );
+  const { events, hasMore, isLoading, error, refresh, loadMore } = (0, import_react_admin11.useAdminAudit)(client, {
+    ...filter,
+    limit: pageSize
+  });
+  const field = (key, placeholder) => /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+    "input",
+    {
+      value: draft[key],
+      onChange: (e) => setDraft({ ...draft, [key]: e.target.value }),
+      placeholder,
+      style: { ...styles.button, cursor: "text" },
+      "aria-label": placeholder
+    }
+  );
+  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { style: styles.container, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("h1", { style: styles.title, children: "Audit" }),
+    /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
+      "form",
+      {
+        style: styles.toolbar,
+        onSubmit: (e) => {
+          e.preventDefault();
+          setFilter({
+            ...draft.workspaceId.trim() ? { workspaceId: draft.workspaceId.trim() } : {},
+            ...draft.type.trim() ? { type: draft.type.trim() } : {},
+            ...draft.actorId.trim() ? { actorId: draft.actorId.trim() } : {}
+          });
+        },
+        children: [
+          field("workspaceId", "workspace id (all if empty)"),
+          field("type", "event type"),
+          field("actorId", "actor id"),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("button", { type: "submit", style: styles.button, disabled: isLoading, children: "Filter" }),
+          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+            "button",
+            {
+              type: "button",
+              style: styles.button,
+              onClick: () => void refresh(),
+              disabled: isLoading,
+              children: "Refresh"
+            }
+          )
+        ]
+      }
+    ),
+    error ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { style: styles.error, role: "alert", children: error.explanation }) : null,
+    events.length === 0 && !isLoading ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { style: styles.muted, children: "Nothing recorded for this filter." }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("table", { style: styles.table, children: [
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("thead", { children: /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("tr", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("th", { style: styles.th, children: "When" }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("th", { style: styles.th, children: "Type" }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("th", { style: styles.th, children: "Workspace" }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("th", { style: styles.th, children: "Actor" }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("th", { style: styles.th, children: "Request" })
+      ] }) }),
+      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("tbody", { children: events.map((e) => /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("tr", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("td", { style: { ...styles.td, ...styles.muted }, children: new Date(e.createdAt).toLocaleString() }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("td", { style: { ...styles.td, ...styles.mono }, children: e.type }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("td", { style: { ...styles.td, ...styles.mono }, children: String(e.payload["workspaceId"] ?? "\u2014") }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("td", { style: { ...styles.td, ...styles.mono }, children: e.actorId ?? "\u2014" }),
+        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("td", { style: { ...styles.td, ...styles.muted }, children: e.requestId ?? "" })
+      ] }, e.id)) })
+    ] }),
+    isLoading ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { style: styles.status, children: "Loading\u2026" }) : null,
+    hasMore && !isLoading ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      "button",
+      {
+        type: "button",
+        style: { ...styles.button, marginTop: 8 },
+        onClick: () => void loadMore(),
+        children: "Load more"
+      }
+    ) : null
+  ] });
+}
+
+// src/screens/AdminShell.tsx
+var import_jsx_runtime12 = require("react/jsx-runtime");
 var NAV = [
   { group: "Today", items: [{ page: "attention", label: "Attention" }] },
   {
@@ -780,6 +978,7 @@ var NAV = [
   {
     group: "Activity",
     items: [
+      { page: "audit", label: "Audit", needs: "audit" },
       { page: "log", label: "Admin log" },
       { page: "tokens", label: "Access" }
     ]
@@ -791,59 +990,64 @@ function AdminShell({
   courierClient,
   authClient,
   billingClient,
+  auditClient,
   environment,
   page,
   onNavigate
 }) {
-  const [own, setOwn] = (0, import_react3.useState)("attention");
+  const [own, setOwn] = (0, import_react5.useState)("attention");
   const current = page ?? own;
   const go = (p) => {
     if (onNavigate) onNavigate(p);
     if (page === void 0) setOwn(p);
   };
-  const [editing, setEditing] = (0, import_react3.useState)(null);
+  const [editing, setEditing] = (0, import_react5.useState)(null);
   const has = {
     config: Boolean(configClient),
     courier: Boolean(courierClient),
     auth: Boolean(authClient),
-    billing: Boolean(billingClient)
+    billing: Boolean(billingClient),
+    audit: Boolean(auditClient)
   };
   let body;
   switch (current) {
     case "attention":
-      body = /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(AttentionScreen, { client });
+      body = /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(AttentionScreen, { client });
       break;
     case "modules":
-      body = /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(ModulesScreen, { client });
+      body = /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(ModulesScreen, { client });
       break;
     case "doctor":
-      body = /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(DoctorScreen, { client });
+      body = /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(DoctorScreen, { client });
       break;
     case "config":
-      body = /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(ConfigScreen, { client });
+      body = /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(ConfigScreen, { client });
       break;
     case "routes":
-      body = /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(RoutesScreen, { client });
+      body = /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(RoutesScreen, { client });
       break;
     case "tokens":
-      body = /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(TokensScreen, { client });
+      body = /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(TokensScreen, { client });
       break;
     case "log":
-      body = /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(AdminLogScreen, { client });
+      body = /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(AdminLogScreen, { client });
       break;
     case "catalog":
-      body = billingClient ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(CatalogScreen, { client: billingClient }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { style: styles.status, children: "Pass a BillingAdminClient to see the catalog here." });
+      body = billingClient ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(CatalogScreen, { client: billingClient }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { style: styles.status, children: "Pass a BillingAdminClient to see the catalog here." });
       break;
     case "subscriber":
-      body = billingClient ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(SubscriberScreen, { client: billingClient }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { style: styles.status, children: "Pass a BillingAdminClient to look up subscribers here." });
+      body = billingClient ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(SubscriberScreen, { client: billingClient }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { style: styles.status, children: "Pass a BillingAdminClient to look up subscribers here." });
+      break;
+    case "audit":
+      body = auditClient ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(AuditScreen, { client: auditClient }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { style: styles.status, children: "Pass an AuditAdminClient to see the audit trail here." });
       break;
     case "users":
-      body = authClient ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(UsersScreen, { client: authClient }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { style: styles.status, children: "Pass an AuthAdminClient to look up users here." });
+      body = authClient ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(UsersScreen, { client: authClient }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { style: styles.status, children: "Pass an AuthAdminClient to look up users here." });
       break;
     case "settings":
-      body = !configClient ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { style: styles.status, children: "Pass a ConfigAdminClient to manage config and secrets here." }) : editing && editing.kind !== "template" ? /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_jsx_runtime11.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("button", { type: "button", style: styles.button, onClick: () => setEditing(null), children: "\u2190 Back" }),
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      body = !configClient ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { style: styles.status, children: "Pass a ConfigAdminClient to manage config and secrets here." }) : editing && editing.kind !== "template" ? /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_jsx_runtime12.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("button", { type: "button", style: styles.button, onClick: () => setEditing(null), children: "\u2190 Back" }),
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
           import_react_config_admin_screens.ConfigEditorScreen,
           {
             client: configClient,
@@ -853,7 +1057,7 @@ function AdminShell({
             onSaved: () => setEditing(null)
           }
         )
-      ] }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
         import_react_config_admin_screens.ConfigListScreen,
         {
           client: configClient,
@@ -864,9 +1068,9 @@ function AdminShell({
       );
       break;
     case "templates":
-      body = !courierClient ? /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("p", { style: styles.status, children: "Pass a CourierAdminClient to manage templates here." }) : editing?.kind === "template" ? /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_jsx_runtime11.Fragment, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("button", { type: "button", style: styles.button, onClick: () => setEditing(null), children: "\u2190 Back" }),
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      body = !courierClient ? /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("p", { style: styles.status, children: "Pass a CourierAdminClient to manage templates here." }) : editing?.kind === "template" ? /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(import_jsx_runtime12.Fragment, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("button", { type: "button", style: styles.button, onClick: () => setEditing(null), children: "\u2190 Back" }),
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
           import_react_courier_admin_screens.TemplateEditorScreen,
           {
             client: courierClient,
@@ -874,7 +1078,7 @@ function AdminShell({
             onSaved: () => setEditing(null)
           }
         )
-      ] }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
         import_react_courier_admin_screens.TemplateListScreen,
         {
           client: courierClient,
@@ -883,13 +1087,13 @@ function AdminShell({
       );
       break;
   }
-  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { style: styles.shell, children: [
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("nav", { style: styles.nav, "aria-label": "Admin", children: NAV.map((g) => {
+  return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { style: styles.shell, children: [
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("nav", { style: styles.nav, "aria-label": "Admin", children: NAV.map((g) => {
       const items = g.items.filter((i) => !i.needs || has[i.needs]);
       if (items.length === 0) return null;
-      return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)("div", { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("div", { style: styles.navGroup, children: g.group }),
-        items.map((i) => /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
+      return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)("div", { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("div", { style: styles.navGroup, children: g.group }),
+        items.map((i) => /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(
           "button",
           {
             type: "button",
@@ -905,7 +1109,7 @@ function AdminShell({
         ))
       ] }, g.group);
     }) }),
-    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)("main", { style: styles.main, children: body })
+    /* @__PURE__ */ (0, import_jsx_runtime12.jsx)("main", { style: styles.main, children: body })
   ] });
 }
 // Annotate the CommonJS export names for ESM import in node:
@@ -913,6 +1117,7 @@ function AdminShell({
   AdminLogScreen,
   AdminShell,
   AttentionScreen,
+  AuditScreen,
   CatalogScreen,
   ConfigScreen,
   DoctorScreen,