@basis-theory-labs/cli 4.2.0 → 4.4.0

package/oclif.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.2.0",
+  "version": "4.4.0",
   "commands": {
     "applications:create": {
       "id": "applications:create",
@@ -470,7 +470,7 @@
     },
     "proxies:logs": {
       "id": "proxies:logs",
-      "description": "Display live Proxy Transform logs output. Requires `proxy:update` Management Application permissions",
+      "description": "Legacy tunnel-based Proxy Transform logs. Opens a local tunnel and updates logging configuration. For v2/runtime debugging, use `bt proxies logs tail <id>` or `bt proxies logs read <id>`. Requires `proxy:update` Management Application permissions",
       "strict": true,
       "pluginName": "@basis-theory-labs/cli",
       "pluginAlias": "@basis-theory-labs/cli",
@@ -937,7 +937,7 @@
     },
     "reactors:logs": {
       "id": "reactors:logs",
-      "description": "Display live Reactor logs output. Requires `reactor:update` Management Application permissions",
+      "description": "Legacy tunnel-based Reactor logs. Opens a local tunnel and updates logging configuration. For v2/runtime debugging, use `bt reactors logs tail <id>` or `bt reactors logs read <id>`. Requires `reactor:update` Management Application permissions",
       "strict": true,
       "pluginName": "@basis-theory-labs/cli",
       "pluginAlias": "@basis-theory-labs/cli",
@@ -1132,6 +1132,291 @@
           "required": true
         }
       }
+    },
+    "proxies:logs:read": {
+      "id": "proxies:logs:read",
+      "description": "Read a fixed window of Proxy runtime logs through Events and exit. Requires `event:read` and runtime logging already enabled.\n\nOptional --trace-id matches the effective stored BT trace ID exactly and case-sensitively. A submitted header may be sanitized by Vault; the CLI does not normalize or trim it. A reused trace ID can match multiple invocations. --transform-type filters request or response transforms, alone or combined with trace ID using AND; omitting it includes both directions.\n\nDefaults to the five minutes preceding --until, or command start when --until is omitted, regardless of filters. Supply --since, for example --since 30d, to request a larger window. Explicit relative values use command-start time. Windows include their start and exclude their end, filtering event batch timestamps rather than individual record occurrence times. Each matching batch is expanded in record sequence; flattened output has no global chronological ordering. History is limited by server retention and tenant entitlements; the API clamps unavailable history. Indexing is asynchronous and pagination is not a snapshot, so empty or exhausted results do not prove complete coverage. Large windows may hit bounded work limits and fail with partial output. Application logs come from the injected `logger`, not arbitrary stdout or `console.log`; collection requires resource opt-in and the platform runtime-log gate. Does not enable logging or open a tunnel.",
+      "strict": true,
+      "pluginName": "@basis-theory-labs/cli",
+      "pluginAlias": "@basis-theory-labs/cli",
+      "pluginType": "core",
+      "aliases": [],
+      "examples": [
+        "<%= config.bin %> proxies logs read 03858bf5-32d3-4a2e-b74b-daeea0883bca --trace-id customer_Order-42 --since 30d",
+        "<%= config.bin %> proxies logs read 03858bf5-32d3-4a2e-b74b-daeea0883bca --transform-type request_transform",
+        "<%= config.bin %> proxies logs read 03858bf5-32d3-4a2e-b74b-daeea0883bca --trace-id customer_Order-42 --transform-type response_transform --since 30m",
+        "<%= config.bin %> proxies logs read 03858bf5-32d3-4a2e-b74b-daeea0883bca --since 1h --until 30m",
+        "<%= config.bin %> proxies logs read 03858bf5-32d3-4a2e-b74b-daeea0883bca --since 2026-10-01T10:00:00Z --until 2026-10-01T10:15:00Z --format json"
+      ],
+      "flags": {
+        "management-key": {
+          "name": "management-key",
+          "type": "option",
+          "char": "x",
+          "description": "management key used for connecting with the reactor / proxy",
+          "required": true,
+          "multiple": false
+        },
+        "api-base-url": {
+          "name": "api-base-url",
+          "type": "option",
+          "description": "base API URL to use in Basis Theory SDK",
+          "hidden": true,
+          "multiple": false
+        },
+        "trace-id": {
+          "name": "trace-id",
+          "type": "option",
+          "description": "exact, case-sensitive stored BT trace ID; combines with transform direction using AND",
+          "multiple": false
+        },
+        "transform-type": {
+          "name": "transform-type",
+          "type": "option",
+          "description": "exact transform direction; includes both directions when omitted",
+          "multiple": false,
+          "options": [
+            "request_transform",
+            "response_transform"
+          ]
+        },
+        "since": {
+          "name": "since",
+          "type": "option",
+          "description": "window start: positive duration (30s, 5m, 2h, 1d, 1w) or ISO timestamp with timezone; defaults to five minutes before the end",
+          "multiple": false
+        },
+        "until": {
+          "name": "until",
+          "type": "option",
+          "description": "window end (exclusive): positive duration or ISO timestamp with timezone; defaults to command start",
+          "multiple": false
+        },
+        "format": {
+          "name": "format",
+          "type": "option",
+          "description": "pretty: readable logs; json: compact objects; json-pretty: indented objects. Entries are separated by blank lines; colors are enabled in terminals",
+          "multiple": false,
+          "options": [
+            "pretty",
+            "json",
+            "json-pretty"
+          ],
+          "default": "pretty"
+        }
+      },
+      "args": {
+        "id": {
+          "name": "id",
+          "description": "Proxy id",
+          "required": true
+        }
+      }
+    },
+    "proxies:logs:tail": {
+      "id": "proxies:logs:tail",
+      "description": "Tail Proxy runtime logs through Events. Requires `event:read` and runtime logging already enabled.\n\nOptional --trace-id matches the effective stored BT trace ID exactly and case-sensitively. A submitted header may be sanitized by Vault; the CLI does not normalize or trim it. A reused trace ID can match multiple invocations. --transform-type filters request or response transforms, alone or combined with trace ID using AND; omitting it includes both directions. Filters apply to initial history and every live poll.\n\nStarts watching from command time, regardless of filters. Supply --since to retrieve initial history before following new logs. Polls every five seconds with a rolling five-minute overlap that never reaches before the requested start. Time windows filter event batches, not individual record occurrence times; a newly arriving batch can contain records that occurred before command start. History is limited by server retention and tenant entitlements; the API clamps unavailable history. Large initial windows may hit bounded work limits and fail with partial output. Visibility is delayed and best-effort; output has no durable resume or global chronological ordering. Application logs come from the injected `logger`, not arbitrary stdout or `console.log`; collection requires resource opt-in and the platform runtime-log gate. Silence does not distinguish an idle resource, a wrong ID or filter, disabled collection, or delayed indexing. Runs until interrupted, output closes, or an error occurs.",
+      "strict": true,
+      "pluginName": "@basis-theory-labs/cli",
+      "pluginAlias": "@basis-theory-labs/cli",
+      "pluginType": "core",
+      "aliases": [],
+      "examples": [
+        "<%= config.bin %> proxies logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca",
+        "<%= config.bin %> proxies logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca --trace-id customer_Order-42",
+        "<%= config.bin %> proxies logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca --transform-type request_transform",
+        "<%= config.bin %> proxies logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca --trace-id customer_Order-42 --transform-type response_transform --since 30m --format json",
+        "<%= config.bin %> proxies logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca --since 30m --format json"
+      ],
+      "flags": {
+        "management-key": {
+          "name": "management-key",
+          "type": "option",
+          "char": "x",
+          "description": "management key used for connecting with the reactor / proxy",
+          "required": true,
+          "multiple": false
+        },
+        "api-base-url": {
+          "name": "api-base-url",
+          "type": "option",
+          "description": "base API URL to use in Basis Theory SDK",
+          "hidden": true,
+          "multiple": false
+        },
+        "trace-id": {
+          "name": "trace-id",
+          "type": "option",
+          "description": "exact, case-sensitive stored BT trace ID; combines with transform direction using AND",
+          "multiple": false
+        },
+        "transform-type": {
+          "name": "transform-type",
+          "type": "option",
+          "description": "exact transform direction; includes both directions when omitted",
+          "multiple": false,
+          "options": [
+            "request_transform",
+            "response_transform"
+          ]
+        },
+        "since": {
+          "name": "since",
+          "type": "option",
+          "description": "include initial history from a positive duration (30s, 5m, 2h, 1d, 1w) or ISO timestamp with timezone; omitted means watch from command start",
+          "multiple": false
+        },
+        "format": {
+          "name": "format",
+          "type": "option",
+          "description": "pretty: readable logs; json: compact objects; json-pretty: indented objects. Entries are separated by blank lines; colors are enabled in terminals",
+          "multiple": false,
+          "options": [
+            "pretty",
+            "json",
+            "json-pretty"
+          ],
+          "default": "pretty"
+        }
+      },
+      "args": {
+        "id": {
+          "name": "id",
+          "description": "Proxy id",
+          "required": true
+        }
+      }
+    },
+    "reactors:logs:read": {
+      "id": "reactors:logs:read",
+      "description": "Read a fixed window of Reactor runtime logs through Events and exit. Requires `event:read` and runtime logging already enabled.\n\nOptional --trace-id matches the effective stored BT trace ID exactly and case-sensitively. A submitted header may be sanitized by Vault; the CLI does not normalize or trim it. A reused trace ID can match multiple invocations.\n\nDefaults to the five minutes preceding --until, or command start when --until is omitted, regardless of filters. Supply --since, for example --since 30d, to request a larger window. Explicit relative values use command-start time. Windows include their start and exclude their end, filtering event batch timestamps rather than individual record occurrence times. Each matching batch is expanded in record sequence; flattened output has no global chronological ordering. History is limited by server retention and tenant entitlements; the API clamps unavailable history. Indexing is asynchronous and pagination is not a snapshot, so empty or exhausted results do not prove complete coverage. Large windows may hit bounded work limits and fail with partial output. Application logs come from the injected `logger`, not arbitrary stdout or `console.log`; collection requires resource opt-in and the platform runtime-log gate. Does not enable logging or open a tunnel.",
+      "strict": true,
+      "pluginName": "@basis-theory-labs/cli",
+      "pluginAlias": "@basis-theory-labs/cli",
+      "pluginType": "core",
+      "aliases": [],
+      "examples": [
+        "<%= config.bin %> reactors logs read 03858bf5-32d3-4a2e-b74b-daeea0883bca --trace-id customer_Order-42 --since 30d",
+        "<%= config.bin %> reactors logs read 03858bf5-32d3-4a2e-b74b-daeea0883bca --since 1h --until 30m",
+        "<%= config.bin %> reactors logs read 03858bf5-32d3-4a2e-b74b-daeea0883bca --since 2026-10-01T10:00:00Z --until 2026-10-01T10:15:00Z --format json"
+      ],
+      "flags": {
+        "management-key": {
+          "name": "management-key",
+          "type": "option",
+          "char": "x",
+          "description": "management key used for connecting with the reactor / proxy",
+          "required": true,
+          "multiple": false
+        },
+        "api-base-url": {
+          "name": "api-base-url",
+          "type": "option",
+          "description": "base API URL to use in Basis Theory SDK",
+          "hidden": true,
+          "multiple": false
+        },
+        "trace-id": {
+          "name": "trace-id",
+          "type": "option",
+          "description": "exact, case-sensitive stored BT trace ID",
+          "multiple": false
+        },
+        "since": {
+          "name": "since",
+          "type": "option",
+          "description": "window start: positive duration (30s, 5m, 2h, 1d, 1w) or ISO timestamp with timezone; defaults to five minutes before the end",
+          "multiple": false
+        },
+        "until": {
+          "name": "until",
+          "type": "option",
+          "description": "window end (exclusive): positive duration or ISO timestamp with timezone; defaults to command start",
+          "multiple": false
+        },
+        "format": {
+          "name": "format",
+          "type": "option",
+          "description": "pretty: readable logs; json: compact objects; json-pretty: indented objects. Entries are separated by blank lines; colors are enabled in terminals",
+          "multiple": false,
+          "options": [
+            "pretty",
+            "json",
+            "json-pretty"
+          ],
+          "default": "pretty"
+        }
+      },
+      "args": {
+        "id": {
+          "name": "id",
+          "description": "Reactor id",
+          "required": true
+        }
+      }
+    },
+    "reactors:logs:tail": {
+      "id": "reactors:logs:tail",
+      "description": "Tail Reactor runtime logs through Events. Requires `event:read` and runtime logging already enabled.\n\nOptional --trace-id matches the effective stored BT trace ID exactly and case-sensitively. A submitted header may be sanitized by Vault; the CLI does not normalize or trim it. A reused trace ID can match multiple invocations.\n\nStarts watching from command time, regardless of filters. Supply --since to retrieve initial history before following new logs. Polls every five seconds with a rolling five-minute overlap that never reaches before the requested start. Time windows filter event batches, not individual record occurrence times; a newly arriving batch can contain records that occurred before command start. History is limited by server retention and tenant entitlements; the API clamps unavailable history. Large initial windows may hit bounded work limits and fail with partial output. Visibility is delayed and best-effort; output has no durable resume or global chronological ordering. Application logs come from the injected `logger`, not arbitrary stdout or `console.log`; collection requires resource opt-in and the platform runtime-log gate. Silence does not distinguish an idle resource, a wrong ID or filter, disabled collection, or delayed indexing. Runs until interrupted, output closes, or an error occurs.",
+      "strict": true,
+      "pluginName": "@basis-theory-labs/cli",
+      "pluginAlias": "@basis-theory-labs/cli",
+      "pluginType": "core",
+      "aliases": [],
+      "examples": [
+        "<%= config.bin %> reactors logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca",
+        "<%= config.bin %> reactors logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca --trace-id customer_Order-42",
+        "<%= config.bin %> reactors logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca --trace-id customer_Order-42 --since 30m --format json",
+        "<%= config.bin %> reactors logs tail 03858bf5-32d3-4a2e-b74b-daeea0883bca --since 30m --format json"
+      ],
+      "flags": {
+        "management-key": {
+          "name": "management-key",
+          "type": "option",
+          "char": "x",
+          "description": "management key used for connecting with the reactor / proxy",
+          "required": true,
+          "multiple": false
+        },
+        "api-base-url": {
+          "name": "api-base-url",
+          "type": "option",
+          "description": "base API URL to use in Basis Theory SDK",
+          "hidden": true,
+          "multiple": false
+        },
+        "trace-id": {
+          "name": "trace-id",
+          "type": "option",
+          "description": "exact, case-sensitive stored BT trace ID",
+          "multiple": false
+        },
+        "since": {
+          "name": "since",
+          "type": "option",
+          "description": "include initial history from a positive duration (30s, 5m, 2h, 1d, 1w) or ISO timestamp with timezone; omitted means watch from command start",
+          "multiple": false
+        },
+        "format": {
+          "name": "format",
+          "type": "option",
+          "description": "pretty: readable logs; json: compact objects; json-pretty: indented objects. Entries are separated by blank lines; colors are enabled in terminals",
+          "multiple": false,
+          "options": [
+            "pretty",
+            "json",
+            "json-pretty"
+          ],
+          "default": "pretty"
+        }
+      },
+      "args": {
+        "id": {
+          "name": "id",
+          "description": "Reactor id",
+          "required": true
+        }
+      }
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@basis-theory-labs/cli",
-  "version": "4.2.0",
+  "version": "4.4.0",
   "description": "Basis Theory CLI tool",
   "author": "Davi Aquino @djejaquino",
   "bin": {
@@ -17,7 +17,7 @@
     "/oclif.manifest.json"
   ],
   "dependencies": {
-    "@basis-theory/node-sdk": "^6.1.1",
+    "@basis-theory/node-sdk": "^6.3.0",
     "@inquirer/checkbox": "^1.5.0",
     "@inquirer/confirm": "^2.0.15",
     "@inquirer/input": "^1.2.14",