@batadata/cli 0.1.0

package/dist/api.d.ts

@@ -0,0 +1,28 @@
+export interface ApiResponse<T = unknown> {
+    ok: boolean;
+    status: number;
+    data: T;
+}
+export declare function request<T = unknown>(method: string, path: string, options?: {
+    token?: string;
+    body?: Record<string, unknown>;
+    query?: Record<string, string>;
+}): Promise<ApiResponse<T>>;
+/**
+ * Extract a human-readable error message from a failed API response.
+ * Surfaces the real server error (e.g. "Invalid API key") instead of a
+ * generic placeholder so agents see what actually went wrong.
+ */
+export declare function apiError(res: ApiResponse, fallback?: string): string;
+export declare function resolveTeamId(token: string): Promise<string | undefined>;
+/**
+ * List endpoints return `{ data: [...], pagination }` (not a bare array).
+ * Older/other endpoints may return a bare array or `{ projects: [...] }`.
+ * Normalize all of them to a plain array.
+ */
+export declare function asList<T = unknown>(data: unknown): T[];
+export declare const api: {
+    get: <T = unknown>(path: string, token?: string, query?: Record<string, string>) => Promise<ApiResponse<T>>;
+    post: <T = unknown>(path: string, body: Record<string, unknown>, token?: string) => Promise<ApiResponse<T>>;
+    del: <T = unknown>(path: string, token?: string, query?: Record<string, string>) => Promise<ApiResponse<T>>;
+};

package/dist/api.js

@@ -0,0 +1,115 @@
+import * as https from "node:https";
+import * as http from "node:http";
+import { URL } from "node:url";
+import { getApiUrl, loadConfig } from "./config.js";
+export async function request(method, path, options = {}) {
+    const baseUrl = getApiUrl();
+    const url = new URL(path, baseUrl);
+    if (options.query) {
+        for (const [key, value] of Object.entries(options.query)) {
+            if (value !== undefined) {
+                url.searchParams.set(key, value);
+            }
+        }
+    }
+    const headers = {
+        "Content-Type": "application/json",
+        "User-Agent": "@batadata/cli 0.1.0",
+    };
+    if (options.token) {
+        headers["Authorization"] = `Bearer ${options.token}`;
+    }
+    const bodyStr = options.body ? JSON.stringify(options.body) : undefined;
+    return new Promise((resolve, reject) => {
+        const transport = url.protocol === "https:" ? https : http;
+        const req = transport.request(url, {
+            method,
+            headers,
+        }, (res) => {
+            let data = "";
+            res.on("data", (chunk) => (data += chunk));
+            res.on("end", () => {
+                try {
+                    const parsed = data ? JSON.parse(data) : {};
+                    resolve({
+                        ok: (res.statusCode || 0) >= 200 && (res.statusCode || 0) < 300,
+                        status: res.statusCode || 0,
+                        data: parsed,
+                    });
+                }
+                catch {
+                    resolve({
+                        ok: false,
+                        status: res.statusCode || 0,
+                        data: { error: data },
+                    });
+                }
+            });
+        });
+        req.on("error", reject);
+        req.setTimeout(30000, () => {
+            req.destroy();
+            reject(new Error("Request timed out"));
+        });
+        if (bodyStr) {
+            req.write(bodyStr);
+        }
+        req.end();
+    });
+}
+/**
+ * Extract a human-readable error message from a failed API response.
+ * Surfaces the real server error (e.g. "Invalid API key") instead of a
+ * generic placeholder so agents see what actually went wrong.
+ */
+export function apiError(res, fallback = "Request failed") {
+    const data = res.data;
+    const msg = data && typeof data.error === "string" ? data.error : undefined;
+    const code = data && typeof data.code === "string" ? ` (${data.code})` : "";
+    if (msg)
+        return `${msg}${code}`;
+    return `${fallback} (HTTP ${res.status || "?"})`;
+}
+/**
+ * Resolve the team id to operate on. Headless agents (just BATA_API_KEY, no
+ * prior `bata login`) have no saved defaultTeam, and the API requires a team
+ * for project list/create. So fall back to the user's first team. Cached for
+ * the process lifetime. Returns undefined only if the user has no teams.
+ */
+let _cachedTeamId;
+export async function resolveTeamId(token) {
+    const saved = loadConfig().defaultTeam;
+    if (saved)
+        return saved;
+    if (_cachedTeamId)
+        return _cachedTeamId;
+    const res = await request("GET", "/v1/teams", { token });
+    if (!res.ok)
+        return undefined;
+    const data = res.data;
+    const teams = Array.isArray(data) ? data : data?.teams ?? [];
+    _cachedTeamId = teams[0]?.id;
+    return _cachedTeamId;
+}
+/**
+ * List endpoints return `{ data: [...], pagination }` (not a bare array).
+ * Older/other endpoints may return a bare array or `{ projects: [...] }`.
+ * Normalize all of them to a plain array.
+ */
+export function asList(data) {
+    if (Array.isArray(data))
+        return data;
+    const d = data;
+    if (d && Array.isArray(d.data))
+        return d.data;
+    if (d && Array.isArray(d.projects))
+        return d.projects;
+    return [];
+}
+// Convenience methods
+export const api = {
+    get: (path, token, query) => request("GET", path, { token, query }),
+    post: (path, body, token) => request("POST", path, { token, body }),
+    del: (path, token, query) => request("DELETE", path, { token, query }),
+};
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQpD,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,IAAY,EACZ,UAII,EAAE;IAEN,MAAM,OAAO,GAAG,SAAS,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAEnC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,YAAY,EAAE,qBAAqB;KACpC,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAExE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAC3B,GAAG,EACH;YACE,MAAM;YACN,OAAO;SACR,EACD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5C,OAAO,CAAC;wBACN,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,GAAG;wBAC/D,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;wBAC3B,IAAI,EAAE,MAAW;qBAClB,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC;wBACN,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;wBAC3B,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO;qBAC3B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,EAAE;YACzB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAgB,EAAE,QAAQ,GAAG,gBAAgB;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,IAA2C,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,IAAI,GAAG;QAAE,OAAO,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;IAChC,OAAO,GAAG,QAAQ,UAAU,GAAG,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,IAAI,aAAiC,CAAC;AACtC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa;IAC/C,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC,WAAW,CAAC;IACvC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAU,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAiE,CAAC;IACnF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IAC7D,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAc,IAAa;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAW,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAqD,CAAC;IAChE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC,IAAW,CAAC;IACrD,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC,QAAe,CAAC;IAC7D,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,sBAAsB;AACtB,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,GAAG,EAAE,CAAc,IAAY,EAAE,KAAc,EAAE,KAA8B,EAAE,EAAE,CACjF,OAAO,CAAI,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAE3C,IAAI,EAAE,CAAc,IAAY,EAAE,IAA6B,EAAE,KAAc,EAAE,EAAE,CACjF,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAE3C,GAAG,EAAE,CAAc,IAAY,EAAE,KAAc,EAAE,KAA8B,EAAE,EAAE,CACjF,OAAO,CAAI,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;CAC/C,CAAC"}

package/dist/args.d.ts

@@ -0,0 +1,20 @@
+export interface GlobalFlags {
+    json: boolean;
+    apiKey?: string;
+    apiUrl?: string;
+    yes: boolean;
+}
+/**
+ * Extract global flags from anywhere in argv, install them into the runtime
+ * context, and return the remaining (non-global) args plus the parsed flags.
+ *
+ * Recognized global flags (work in any position):
+ *   --json                 emit machine-readable JSON for read commands
+ *   --api-key <key>        credential (overrides BATA_API_KEY / saved token)
+ *   --api-url <url>        API base URL (overrides BATA_API_URL / saved / default)
+ *   --yes, -y              skip interactive confirmations
+ */
+export declare function parseGlobalFlags(argv: string[]): {
+    rest: string[];
+    flags: GlobalFlags;
+};

package/dist/args.js

@@ -0,0 +1,42 @@
+import { setRuntime } from "./config.js";
+/**
+ * Extract global flags from anywhere in argv, install them into the runtime
+ * context, and return the remaining (non-global) args plus the parsed flags.
+ *
+ * Recognized global flags (work in any position):
+ *   --json                 emit machine-readable JSON for read commands
+ *   --api-key <key>        credential (overrides BATA_API_KEY / saved token)
+ *   --api-url <url>        API base URL (overrides BATA_API_URL / saved / default)
+ *   --yes, -y              skip interactive confirmations
+ */
+export function parseGlobalFlags(argv) {
+    const flags = { json: false, yes: false };
+    const rest = [];
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === "--json") {
+            flags.json = true;
+        }
+        else if (arg === "--yes" || arg === "-y") {
+            flags.yes = true;
+        }
+        else if (arg === "--api-key") {
+            flags.apiKey = argv[++i];
+        }
+        else if (arg.startsWith("--api-key=")) {
+            flags.apiKey = arg.slice("--api-key=".length);
+        }
+        else if (arg === "--api-url") {
+            flags.apiUrl = argv[++i];
+        }
+        else if (arg.startsWith("--api-url=")) {
+            flags.apiUrl = arg.slice("--api-url=".length);
+        }
+        else {
+            rest.push(arg);
+        }
+    }
+    setRuntime({ json: flags.json, apiKey: flags.apiKey, apiUrl: flags.apiUrl });
+    return { rest, flags };
+}
+//# sourceMappingURL=args.js.map

package/dist/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../src/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACvD,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC3C,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC"}

package/dist/commands/api-keys.d.ts

@@ -0,0 +1,11 @@
+/**
+ * bata api-keys — Manage API keys for headless / agent access.
+ *
+ * Subcommands:
+ *   create [--name <n>]   Generate a new key (shown ONCE).
+ *   list                  List active (non-revoked) keys.
+ *   revoke <id> [--yes]   Revoke a key.
+ *
+ * Honors --json, --api-key / BATA_API_KEY, --api-url / BATA_API_URL.
+ */
+export declare function handleApiKeys(args: string[]): Promise<void>;

package/dist/commands/api-keys.js

@@ -0,0 +1,223 @@
+/**
+ * bata api-keys — Manage API keys for headless / agent access.
+ *
+ * Subcommands:
+ *   create [--name <n>]   Generate a new key (shown ONCE).
+ *   list                  List active (non-revoked) keys.
+ *   revoke <id> [--yes]   Revoke a key.
+ *
+ * Honors --json, --api-key / BATA_API_KEY, --api-url / BATA_API_URL.
+ */
+import { api, apiError } from "../api.js";
+import { requireToken, isJsonMode } from "../config.js";
+import { colors, log, json, success, error, warn, spinner, table, kvList, heading } from "../utils/logger.js";
+import { prompt, confirm } from "../utils/prompts.js";
+function parseFlag(args, name) {
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === name && args[i + 1])
+            return args[i + 1];
+        if (args[i].startsWith(`${name}=`))
+            return args[i].slice(name.length + 1);
+    }
+    return undefined;
+}
+function positional(args) {
+    const out = [];
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (a === "--name") {
+            i++; // skip value
+            continue;
+        }
+        if (a.startsWith("--"))
+            continue;
+        out.push(a);
+    }
+    return out;
+}
+function formatDate(iso) {
+    if (!iso)
+        return "-";
+    const d = new Date(iso);
+    if (isNaN(d.getTime()))
+        return "-";
+    return d.toLocaleDateString("en-US", { month: "short", day: "numeric", year: "numeric" });
+}
+async function create(args) {
+    const token = requireToken();
+    const jsonMode = isJsonMode();
+    let name = parseFlag(args, "--name");
+    if (!name) {
+        if (jsonMode || !process.stdin.isTTY) {
+            // Headless: default a sensible name rather than block on a prompt.
+            name = `cli-${new Date().toISOString().slice(0, 10)}`;
+        }
+        else {
+            name = await prompt("Key name", `cli-${new Date().toISOString().slice(0, 10)}`);
+        }
+    }
+    const s = jsonMode ? null : spinner("Creating API key");
+    const res = await api.post("/v1/api-keys", { name }, token);
+    s?.stop();
+    if (!res.ok) {
+        if (jsonMode) {
+            json({ error: apiError(res, "Failed to create API key") });
+        }
+        else {
+            error(apiError(res, "Failed to create API key"));
+        }
+        process.exit(1);
+    }
+    const k = res.data;
+    if (jsonMode) {
+        json({
+            id: k.id,
+            name: k.name,
+            key: k.key,
+            prefix: k.prefix,
+            scopes: k.scopes,
+            max_lifetime_days: k.max_lifetime_days,
+            expires_at: k.expires_at,
+            created_at: k.created_at,
+        });
+        return;
+    }
+    heading("API key created");
+    kvList([
+        ["ID", colors.dim(k.id)],
+        ["Name", k.name],
+        ["Expires", formatDate(k.expires_at)],
+    ]);
+    log();
+    warn(colors.bold("Save this key now — it will NOT be shown again:"));
+    log();
+    log(`    ${colors.green(k.key)}`);
+    log();
+    log(`  ${colors.dim("Use it headless with:")} ${colors.cyan(`BATA_API_KEY=${k.prefix}... bata status`)}`);
+    log();
+}
+async function list(args) {
+    void args;
+    const token = requireToken();
+    const jsonMode = isJsonMode();
+    const s = jsonMode ? null : spinner("Fetching API keys");
+    const res = await api.get("/v1/api-keys", token);
+    s?.stop();
+    if (!res.ok) {
+        if (jsonMode) {
+            json({ error: apiError(res, "Failed to list API keys") });
+        }
+        else {
+            error(apiError(res, "Failed to list API keys"));
+        }
+        process.exit(1);
+    }
+    const keys = Array.isArray(res.data) ? res.data : [];
+    if (jsonMode) {
+        json(keys.map((k) => ({
+            id: k.id,
+            name: k.name,
+            prefix: k.keyPrefix,
+            scopes: k.scopes,
+            expires_at: k.expiresAt,
+            last_used_at: k.lastUsedAt,
+            created_at: k.createdAt,
+        })));
+        return;
+    }
+    heading("API Keys");
+    if (keys.length === 0) {
+        log(`  ${colors.dim("No active API keys.")} Run ${colors.cyan("bata api-keys create")} to make one.`);
+        log();
+        return;
+    }
+    table(["ID", "NAME", "PREFIX", "LAST USED", "EXPIRES"], keys.map((k) => [
+        k.id,
+        k.name,
+        k.keyPrefix,
+        formatDate(k.lastUsedAt),
+        formatDate(k.expiresAt),
+    ]));
+    log();
+    log(`  ${colors.dim(`${keys.length} active key(s)`)}`);
+    log();
+}
+async function revoke(args) {
+    const token = requireToken();
+    const jsonMode = isJsonMode();
+    const skipConfirm = args.includes("--yes") || args.includes("-y");
+    const id = positional(args)[0];
+    if (!id) {
+        const msg = "API key ID is required. Usage: bata api-keys revoke <id> [--yes]";
+        if (jsonMode)
+            json({ error: msg });
+        else
+            error(msg);
+        process.exit(1);
+    }
+    if (!skipConfirm && !jsonMode && process.stdin.isTTY) {
+        const ok = await confirm(`Revoke API key ${colors.cyan(id)}? This cannot be undone.`, false);
+        if (!ok) {
+            log("  Aborted.");
+            return;
+        }
+    }
+    const s = jsonMode ? null : spinner("Revoking API key");
+    const res = await api.del(`/v1/api-keys/${id}`, token);
+    s?.stop();
+    if (!res.ok) {
+        if (jsonMode)
+            json({ error: apiError(res, "Failed to revoke API key") });
+        else
+            error(apiError(res, "Failed to revoke API key"));
+        process.exit(1);
+    }
+    if (jsonMode) {
+        json({ id, revoked: true });
+        return;
+    }
+    log();
+    success(`API key ${colors.cyan(id)} revoked.`);
+    log();
+}
+function printHelp() {
+    log();
+    log(`  ${colors.bold("bata api-keys")} ${colors.dim("— manage API keys for headless / agent access")}`);
+    log();
+    log(`  ${colors.bold("Subcommands")}`);
+    log(`    ${colors.cyan("create")} ${colors.dim("[--name <n>] [--json]")}   Generate a new key (shown once)`);
+    log(`    ${colors.cyan("list")} ${colors.dim("[--json]")}                  List active keys`);
+    log(`    ${colors.cyan("revoke <id>")} ${colors.dim("[--yes]")}           Revoke a key`);
+    log();
+    log(`  ${colors.bold("Auth")} ${colors.dim("(any subcommand)")}`);
+    log(`    ${colors.dim("--api-key <key>")}   Credential (else BATA_API_KEY, else saved login)`);
+    log(`    ${colors.dim("--api-url <url>")}   API base URL (else BATA_API_URL, else config/default)`);
+    log();
+    log(`  ${colors.bold("Examples")}`);
+    log(`    ${colors.cyan("bata api-keys create --name ci --json")}`);
+    log(`    ${colors.cyan("BATA_API_KEY=bata_xxx bata api-keys list --json")}`);
+    log(`    ${colors.cyan("bata api-keys revoke akey_123 --yes")}`);
+    log();
+}
+export async function handleApiKeys(args) {
+    const sub = args[0];
+    const rest = args.slice(1);
+    if (sub === "--help" || sub === "-h" || sub === "help") {
+        printHelp();
+        return;
+    }
+    switch (sub) {
+        case "create":
+            return create(rest);
+        case "list":
+        case undefined:
+            return list(rest);
+        case "revoke":
+            return revoke(rest);
+        default:
+            error(`Unknown subcommand: api-keys ${sub}`);
+            log(`  ${colors.dim("Available:")} create, list, revoke`);
+            process.exit(1);
+    }
+}
+//# sourceMappingURL=api-keys.js.map

package/dist/commands/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../src/commands/api-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAyBtD,SAAS,SAAS,CAAC,IAAc,EAAE,IAAY;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnB,CAAC,EAAE,CAAC,CAAC,aAAa;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAkB;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,OAAO,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAc;IAClC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAE9B,IAAI,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACrC,mEAAmE;YACnE,IAAI,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAgB,cAAc,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC,EAAE,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IAEnB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,UAAU,EAAE,CAAC,CAAC,UAAU;SACzB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3B,MAAM,CAAC;QACL,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;QAChB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;KACtC,CAAC,CAAC;IACH,GAAG,EAAE,CAAC;IACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC,CAAC;IACrE,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClC,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC1G,GAAG,EAAE,CAAC;AACR,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAc;IAChC,KAAK,IAAI,CAAC;IACV,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAE9B,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAiB,cAAc,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC,EAAE,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAErD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CACF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACf,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,SAAS;YACnB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,CAAC,CAAC,SAAS;YACvB,YAAY,EAAE,CAAC,CAAC,UAAU;YAC1B,UAAU,EAAE,CAAC,CAAC,SAAS;SACxB,CAAC,CAAC,CACJ,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,UAAU,CAAC,CAAC;IACpB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,QAAQ,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC;QACtG,GAAG,EAAE,CAAC;QACN,OAAO;IACT,CAAC;IAED,KAAK,CACH,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,EAChD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACd,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,SAAS;QACX,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QACxB,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;KACxB,CAAC,CACH,CAAC;IACF,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACvD,GAAG,EAAE,CAAC;AACR,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAc;IAClC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,kEAAkE,CAAC;QAC/E,IAAI,QAAQ;YAAE,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;;YAC9B,KAAK,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrD,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,kBAAkB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAC7F,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,YAAY,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC,EAAE,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,QAAQ;YAAE,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,CAAC,CAAC;;YACpE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,GAAG,EAAE,CAAC;IACN,OAAO,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;IAC/C,GAAG,EAAE,CAAC;AACR,CAAC;AAED,SAAS,SAAS;IAChB,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC;IACxG,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACvC,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,oCAAoC,CAAC,CAAC;IAC7G,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC9F,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACzF,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,qDAAqD,CAAC,CAAC;IAC/F,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,0DAA0D,CAAC,CAAC;IACpG,GAAG,EAAE,CAAC;IACN,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,EAAE,CAAC,CAAC;IACnE,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,EAAE,CAAC,CAAC;IAC7E,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;IACjE,GAAG,EAAE,CAAC;AACR,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAc;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3B,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACvD,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB;YACE,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,3 @@
+export declare function login(): Promise<void>;
+export declare function logout(): Promise<void>;
+export declare function whoami(): Promise<void>;

package/dist/commands/auth.js

@@ -0,0 +1,133 @@
+import { api, apiError } from "../api.js";
+import { saveConfig, clearConfig, requireToken, loadConfig, isJsonMode } from "../config.js";
+import { colors, log, json, success, error, spinner, kvList, heading } from "../utils/logger.js";
+import { prompt, promptSecret } from "../utils/prompts.js";
+export async function login() {
+    heading("Log in to BataDB");
+    const email = await prompt("Email");
+    if (!email) {
+        error("Email is required.");
+        process.exit(1);
+    }
+    const password = await promptSecret("Password");
+    if (!password) {
+        error("Password is required.");
+        process.exit(1);
+    }
+    const s = spinner("Authenticating");
+    const res = await api.post("/auth/login", { email, password });
+    if (!res.ok) {
+        s.stop();
+        error(apiError(res, "Login failed"));
+        process.exit(1);
+    }
+    const { token, user, teams } = res.data;
+    // Save token and default team
+    const config = { token };
+    if (teams && teams.length > 0) {
+        config.defaultTeam = teams[0].id;
+    }
+    saveConfig(config);
+    s.stop();
+    log();
+    success("Logged in successfully");
+    log();
+    kvList([
+        ["User", colors.white(user.name || user.email)],
+        ["Email", user.email],
+        ...(teams && teams.length > 0
+            ? [["Team", colors.cyan(teams[0].name)]]
+            : []),
+    ]);
+    log();
+}
+export async function logout() {
+    clearConfig();
+    log();
+    success("Logged out. Token cleared from ~/.batarc");
+    log();
+}
+export async function whoami() {
+    const token = requireToken();
+    const jsonMode = isJsonMode();
+    const s = jsonMode ? null : spinner("Fetching user info");
+    // /auth/me only accepts a JWT session token. When authenticating with an
+    // API key (the agent/headless path), fall back to /v1/teams which the auth
+    // middleware accepts with `Bearer bata_...`.
+    const meRes = await api.get("/auth/me", token);
+    if (meRes.ok) {
+        s?.stop();
+        const { user, teams } = meRes.data;
+        if (jsonMode) {
+            json({
+                auth: "session",
+                user: { id: user.id, email: user.email, name: user.name },
+                teams: teams ?? [],
+                default_project: loadConfig().defaultProject ?? null,
+            });
+            return;
+        }
+        heading("Current User");
+        kvList([
+            ["Name", colors.white(user.name || "-")],
+            ["Email", user.email],
+            ["User ID", colors.dim(user.id)],
+        ]);
+        if (teams && teams.length > 0) {
+            log();
+            log(`  ${colors.dim("Teams")}`);
+            for (const team of teams) {
+                log(`    ${colors.cyan(">")} ${team.name} ${colors.dim(`(${team.slug})`)}`);
+            }
+        }
+        const config = loadConfig();
+        if (config.defaultProject) {
+            log();
+            log(`  ${colors.dim("Default project:")} ${config.defaultProject}`);
+        }
+        log();
+        return;
+    }
+    // Fall back to API-key identity via /v1/teams.
+    const teamsRes = await api.get("/v1/teams", token);
+    s?.stop();
+    if (!teamsRes.ok) {
+        if (jsonMode) {
+            json({ error: apiError(teamsRes, "Could not fetch identity") });
+        }
+        else {
+            error(apiError(teamsRes, "Could not fetch identity"));
+        }
+        process.exit(1);
+    }
+    const teams = Array.isArray(teamsRes.data) ? teamsRes.data : [];
+    if (jsonMode) {
+        json({
+            auth: "api_key",
+            user: null,
+            teams,
+            default_project: loadConfig().defaultProject ?? null,
+        });
+        return;
+    }
+    heading("Current Identity");
+    log(`  ${colors.dim("Authenticated via API key.")}`);
+    log();
+    if (teams.length > 0) {
+        log(`  ${colors.dim("Teams")}`);
+        for (const team of teams) {
+            const role = team.role ? colors.dim(` [${team.role}]`) : "";
+            log(`    ${colors.cyan(">")} ${team.name} ${colors.dim(`(${team.slug})`)}${role}`);
+        }
+    }
+    else {
+        log(`  ${colors.dim("No teams found for this key.")}`);
+    }
+    const config = loadConfig();
+    if (config.defaultProject) {
+        log();
+        log(`  ${colors.dim("Default project:")} ${config.defaultProject}`);
+    }
+    log();
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAoB3D,MAAM,CAAC,KAAK,UAAU,KAAK;IACzB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAE5B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAgB,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE9E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,CAAC,CAAC,IAAI,EAAE,CAAC;QACT,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAExC,8BAA8B;IAC9B,MAAM,MAAM,GAA2B,EAAE,KAAK,EAAE,CAAC;IACjD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,CAAC;IACD,UAAU,CAAC,MAAM,CAAC,CAAC;IAEnB,CAAC,CAAC,IAAI,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAClC,GAAG,EAAE,CAAC;IACN,MAAM,CAAC;QACL,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;QACrB,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAqB,CAAC;YAC5D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,GAAG,EAAE,CAAC;AACR,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,WAAW,EAAE,CAAC;IACd,GAAG,EAAE,CAAC;IACN,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACpD,GAAG,EAAE,CAAC;AACR,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAE1D,yEAAyE;IACzE,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAa,UAAU,EAAE,KAAK,CAAC,CAAC;IAE3D,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QACb,CAAC,EAAE,IAAI,EAAE,CAAC;QACV,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QAEnC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBACzD,KAAK,EAAE,KAAK,IAAI,EAAE;gBAClB,eAAe,EAAE,UAAU,EAAE,CAAC,cAAc,IAAI,IAAI;aACrD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,OAAO,CAAC,cAAc,CAAC,CAAC;QACxB,MAAM,CAAC;YACL,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YACxC,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC;YACrB,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SACjC,CAAC,CAAC;QAEH,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,GAAG,EAAE,CAAC;YACN,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,GAAG,EAAE,CAAC;YACN,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,GAAG,EAAE,CAAC;QACN,OAAO;IACT,CAAC;IAED,+CAA+C;IAC/C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAAS,WAAW,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC,EAAE,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhE,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,IAAI;YACV,KAAK;YACL,eAAe,EAAE,UAAU,EAAE,CAAC,cAAc,IAAI,IAAI;SACrD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC5B,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;IACrD,GAAG,EAAE,CAAC;IACN,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,GAAG,EAAE,CAAC;QACN,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,GAAG,EAAE,CAAC;AACR,CAAC"}

package/dist/commands/connect.d.ts

@@ -0,0 +1,7 @@
+/**
+ * bata connect <project-name> — Quick psql connection.
+ *
+ * Fetches the connection string from the API, auto-wakes suspended computes,
+ * and execs psql with the connection string.
+ */
+export declare function connect(args: string[]): Promise<void>;