@deepraxis/cli 0.1.0-dev.244cd7e → 0.1.0-dev.e4c5523

package/dist/praxis.js

@@ -1074,6 +1074,45 @@ null to clear. Maximum 50.`
     ],
     query: []
   },
+  {
+    resource: "agent.embedTokens",
+    method: "list",
+    summary: "List Embed Tokens",
+    description: `List embed token issuance records in your organization.
+
+Includes expired and revoked grants; returns neither token nor token_id. Sorts by created_at, then grant id, both descending. agent_id accepts agent_ or agt_; external_user_id matches exactly. limit is 1–100 (default 20). Reuse next_page as page with the same filters and organization; a mismatch returns 400. End-user credentials return 404.`,
+    http: "GET",
+    path: "/agent/v1/embed_tokens",
+    streaming: "no",
+    pagination: false,
+    pathParams: [],
+    query: [
+      {
+        name: "agent_id",
+        type: "string",
+        required: false,
+        description: "Filter by service agent identifier (agent_ or agt_ prefix)."
+      },
+      {
+        name: "external_user_id",
+        type: "string",
+        required: false,
+        description: "Exact host user identifier supplied at issuance."
+      },
+      {
+        name: "limit",
+        type: "integer",
+        required: false,
+        description: "Maximum records per page; defaults to 20."
+      },
+      {
+        name: "page",
+        type: "string",
+        required: false,
+        description: "next_page from a previous response with the same filters."
+      }
+    ]
+  },
   {
     resource: "agent.embedTokens",
     method: "create",
@@ -1149,6 +1188,25 @@ Requires an active service agent in your organization with an embed policy. Pins
       ]
     }
   },
+  {
+    resource: "agent.embedTokens.revoke",
+    method: "create",
+    summary: "Revoke Embed Token",
+    description: `Revoke an embed token and close its open event streams.
+
+Use an id from issuance or listing. Revokes the credential before setting revoked_at; upstream failure leaves it unset. Streams receive session.error (EMBED_TOKEN_REVOKED), then close immediately; other credentials are unaffected. Idempotent; repeats return the original revoked record without another revocation or audit. Missing or foreign grants and end-user credentials return 404.`,
+    http: "POST",
+    path: "/agent/v1/embed_tokens/{id}/revoke",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "id",
+        sdkName: "id"
+      }
+    ],
+    query: []
+  },
   {
     resource: "agent.environments",
     method: "list",
@@ -14839,6 +14897,19 @@ var createClient = (config = {}) => {
 var client = createClient(createConfig({ baseUrl: "https://api.deepraxis.com" }));
 
 // ../../packages/sdk/typescript/src/generated/sdk.gen.ts
+var listEmbedTokens = (options) => (options?.client ?? client).get({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/embed_tokens",
+  ...options
+});
 var createEmbedToken = (options) => (options.client ?? client).post({
   security: [{
     key: "BearerAuth",
@@ -14856,6 +14927,19 @@ var createEmbedToken = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
+var revokeEmbedToken = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/embed_tokens/{id}/revoke",
+  ...options
+});
 var computersList = (options) => (options?.client ?? client).get({
   security: [{
     key: "BearerAuth",
@@ -19673,7 +19757,11 @@ function createAgent(transport) {
       update: bind(transport, deploymentsUpdate)
     },
     embedTokens: {
-      create: bind(transport, createEmbedToken)
+      create: bind(transport, createEmbedToken),
+      list: bind(transport, listEmbedTokens),
+      revoke: {
+        create: bind(transport, revokeEmbedToken)
+      }
     },
     environments: {
       archive: bind(transport, environmentsArchive),
@@ -21273,6 +21361,9 @@ var unavailableSecretStore = {
     return false;
   }
 };
+function selectSecretStore(env, injected) {
+  return injected ?? (env.PRAXIS_CREDENTIAL_STORE === "file" ? unavailableSecretStore : undefined);
+}
 function systemSecretStore(options = {}) {
   const platform = options.platform ?? process.platform;
   const run = options.run ?? runSecretCommand;
@@ -22371,7 +22462,7 @@ function startProgress(ctx, write = (text) => writeOutput({ stderr: text })) {
 }
 
 // src/main.ts
-var version = "0.1.0-dev.244cd7e";
+var version = "0.1.0-dev.e4c5523";
 var commands = commandTree(operations);
 var manual = [["login"], ["logout"], ["whoami"], ["org", "list"], ["org", "switch"], ["api"], ["skill"]];
 function route(argv) {
@@ -22515,7 +22606,7 @@ Examples:
       return 0;
     }
     const path = ports.tokenPath ?? tokenPath(config.env);
-    const store = createTokenStore(config.env, path, ports.secretStore);
+    const store = createTokenStore(config.env, path, selectSecretStore(ports.env, ports.secretStore));
     const wireFetch = async (input, init) => {
       const request = new Request(input, init);
       request.headers.set("User-Agent", `praxis-cli/${version}${ctx.mode === "agent" ? ` agent/${ctx.agentName ?? "unknown"}` : ""}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepraxis/cli",
-  "version": "0.1.0-dev.244cd7e",
+  "version": "0.1.0-dev.e4c5523",
   "type": "module",
   "bin": {
     "praxis": "dist/praxis.js"