@openbat/cli 0.1.1 → 0.2.1

package/README.md

@@ -280,6 +280,24 @@ Per-tool buckets keyed by credential. The strict ones to know about:
 
 ---
 
+## Pre-loaded context for AI assistants
+
+If you're an AI agent (or driving one) and you'd like the procedural
+knowledge for using this CLI delivered straight into your context,
+install the OpenBat agent skill bundle:
+
+```bash
+npx skills add openbat-dev/agent-skills
+```
+
+Drops 8 `SKILL.md` files into your project's `.claude/skills/` (or the
+equivalent for Cursor / Copilot / Gemini CLI / Codex / OpenCode / Amp).
+The bundle covers chatbot onboarding, key management, webhooks,
+workflows, AI reports, SDK install, and safety patterns — written
+specifically for the four-kind auth ladder this CLI exposes.
+
+Source + docs: https://github.com/openbat-dev/agent-skills.
+
 ## See also
 
 - [`@openbat/mcp`](../mcp/README.md) — the same surface to Claude /
@@ -288,5 +306,7 @@ Per-tool buckets keyed by credential. The strict ones to know about:
   app (uses the ingest key only).
 - [`lib/openbat-tools/`](../../lib/openbat-tools/README.md) — the
   registry that powers every CLI command + MCP tool + v1 route.
+- [Agent skill bundle](https://github.com/openbat-dev/agent-skills) —
+  procedural knowledge for AI agents (`npx skills add openbat-dev/agent-skills`).
 - [A-Z test guide](../../docs/agent-surface-testing.md) — clone the
   repo and exercise every key kind, CLI, MCP, SDK in ~30 minutes.

package/dist/api-client.d.mts

@@ -14,6 +14,15 @@
 type ApiClientOptions = {
     baseUrl: string;
     apiKey: string;
+    /**
+     * Identifies the caller for analytics. Defaults to `"cli"`. The MCP server
+     * passes `"mcp"`. Reaches the server as `x-openbat-client` and surfaces in
+     * PostHog as the `client` event property — used to distinguish CLI usage
+     * from MCP-via-Cursor usage in cohorts and funnels.
+     */
+    clientLabel?: "cli" | "mcp";
+    /** SDK / CLI / MCP package version, sent as `x-openbat-client-version`. */
+    clientVersion?: string;
 };
 declare class ApiClient {
     #private;

package/dist/api-client.d.ts

@@ -14,6 +14,15 @@
 type ApiClientOptions = {
     baseUrl: string;
     apiKey: string;
+    /**
+     * Identifies the caller for analytics. Defaults to `"cli"`. The MCP server
+     * passes `"mcp"`. Reaches the server as `x-openbat-client` and surfaces in
+     * PostHog as the `client` event property — used to distinguish CLI usage
+     * from MCP-via-Cursor usage in cohorts and funnels.
+     */
+    clientLabel?: "cli" | "mcp";
+    /** SDK / CLI / MCP package version, sent as `x-openbat-client-version`. */
+    clientVersion?: string;
 };
 declare class ApiClient {
     #private;

package/dist/api-client.js

@@ -32,6 +32,7 @@ __export(api_client_exports, {
 });
 module.exports = __toCommonJS(api_client_exports);
 var import_node_url = require("url");
+var CLI_VERSION = "0.1.1";
 var KEY_REGEX = /ob_(?:live|read|admin|pat)_[0-9a-f]{32}/g;
 function redact(s) {
   return s.replace(KEY_REGEX, (k) => `${k.slice(0, 16)}\u2026<hidden>`);
@@ -51,14 +52,18 @@ function assertHttpsOrLocalhost(baseUrl) {
     "Refusing to use a non-HTTPS base URL. localhost / 127.0.0.1 are allowed for dev."
   );
 }
-var _apiKey, _ApiClient_instances, mutate_fn;
+var _apiKey, _clientLabel, _clientVersion, _ApiClient_instances, commonHeaders_fn, mutate_fn;
 var ApiClient = class {
   constructor(opts) {
     __privateAdd(this, _ApiClient_instances);
     __privateAdd(this, _apiKey);
+    __privateAdd(this, _clientLabel);
+    __privateAdd(this, _clientVersion);
     assertHttpsOrLocalhost(opts.baseUrl);
     this.baseUrl = opts.baseUrl.replace(/\/$/, "");
     __privateSet(this, _apiKey, opts.apiKey);
+    __privateSet(this, _clientLabel, opts.clientLabel ?? "cli");
+    __privateSet(this, _clientVersion, opts.clientVersion ?? CLI_VERSION);
   }
   /**
    * Issue a GET against `path` (must begin with `/`). Returns the parsed
@@ -71,10 +76,7 @@ var ApiClient = class {
     try {
       res = await fetch(url, {
         method: "GET",
-        headers: {
-          "x-openbat-key": __privateGet(this, _apiKey),
-          accept: "application/json"
-        }
+        headers: __privateMethod(this, _ApiClient_instances, commonHeaders_fn).call(this, { accept: "application/json" })
       });
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
@@ -99,9 +101,7 @@ var ApiClient = class {
     const url = `${this.baseUrl}${path}`;
     const res = await fetch(url, {
       method: "GET",
-      headers: {
-        "x-openbat-key": __privateGet(this, _apiKey)
-      }
+      headers: __privateMethod(this, _ApiClient_instances, commonHeaders_fn).call(this)
     });
     if (!res.ok || !res.body) {
       const errText = await res.text().catch(() => "");
@@ -116,18 +116,28 @@ var ApiClient = class {
   }
 };
 _apiKey = new WeakMap();
+_clientLabel = new WeakMap();
+_clientVersion = new WeakMap();
 _ApiClient_instances = new WeakSet();
+commonHeaders_fn = function(extra) {
+  const h = {
+    "x-openbat-key": __privateGet(this, _apiKey),
+    "x-openbat-client": __privateGet(this, _clientLabel),
+    ...extra ?? {}
+  };
+  if (__privateGet(this, _clientVersion)) h["x-openbat-client-version"] = __privateGet(this, _clientVersion);
+  return h;
+};
 mutate_fn = async function(method, path, body) {
   const url = `${this.baseUrl}${path}`;
   let res;
   try {
     res = await fetch(url, {
       method,
-      headers: {
-        "x-openbat-key": __privateGet(this, _apiKey),
+      headers: __privateMethod(this, _ApiClient_instances, commonHeaders_fn).call(this, {
         "content-type": "application/json",
         accept: "application/json"
-      },
+      }),
       body: body === void 0 ? void 0 : JSON.stringify(body)
     });
   } catch (err) {

package/dist/api-client.mjs

@@ -1,6 +1,6 @@
 import {
   ApiClient
-} from "./chunk-CRJZM45P.mjs";
+} from "./chunk-NYKJTHHK.mjs";
 export {
   ApiClient
 };

package/dist/{chunk-CRJZM45P.mjs → chunk-NYKJTHHK.mjs}

@@ -9,6 +9,7 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
 
 // src/api-client.ts
 import { URL } from "url";
+var CLI_VERSION = "0.1.1";
 var KEY_REGEX = /ob_(?:live|read|admin|pat)_[0-9a-f]{32}/g;
 function redact(s) {
   return s.replace(KEY_REGEX, (k) => `${k.slice(0, 16)}\u2026<hidden>`);
@@ -28,14 +29,18 @@ function assertHttpsOrLocalhost(baseUrl) {
     "Refusing to use a non-HTTPS base URL. localhost / 127.0.0.1 are allowed for dev."
   );
 }
-var _apiKey, _ApiClient_instances, mutate_fn;
+var _apiKey, _clientLabel, _clientVersion, _ApiClient_instances, commonHeaders_fn, mutate_fn;
 var ApiClient = class {
   constructor(opts) {
     __privateAdd(this, _ApiClient_instances);
     __privateAdd(this, _apiKey);
+    __privateAdd(this, _clientLabel);
+    __privateAdd(this, _clientVersion);
     assertHttpsOrLocalhost(opts.baseUrl);
     this.baseUrl = opts.baseUrl.replace(/\/$/, "");
     __privateSet(this, _apiKey, opts.apiKey);
+    __privateSet(this, _clientLabel, opts.clientLabel ?? "cli");
+    __privateSet(this, _clientVersion, opts.clientVersion ?? CLI_VERSION);
   }
   /**
    * Issue a GET against `path` (must begin with `/`). Returns the parsed
@@ -48,10 +53,7 @@ var ApiClient = class {
     try {
       res = await fetch(url, {
         method: "GET",
-        headers: {
-          "x-openbat-key": __privateGet(this, _apiKey),
-          accept: "application/json"
-        }
+        headers: __privateMethod(this, _ApiClient_instances, commonHeaders_fn).call(this, { accept: "application/json" })
       });
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
@@ -76,9 +78,7 @@ var ApiClient = class {
     const url = `${this.baseUrl}${path}`;
     const res = await fetch(url, {
       method: "GET",
-      headers: {
-        "x-openbat-key": __privateGet(this, _apiKey)
-      }
+      headers: __privateMethod(this, _ApiClient_instances, commonHeaders_fn).call(this)
     });
     if (!res.ok || !res.body) {
       const errText = await res.text().catch(() => "");
@@ -93,18 +93,28 @@ var ApiClient = class {
   }
 };
 _apiKey = new WeakMap();
+_clientLabel = new WeakMap();
+_clientVersion = new WeakMap();
 _ApiClient_instances = new WeakSet();
+commonHeaders_fn = function(extra) {
+  const h = {
+    "x-openbat-key": __privateGet(this, _apiKey),
+    "x-openbat-client": __privateGet(this, _clientLabel),
+    ...extra ?? {}
+  };
+  if (__privateGet(this, _clientVersion)) h["x-openbat-client-version"] = __privateGet(this, _clientVersion);
+  return h;
+};
 mutate_fn = async function(method, path, body) {
   const url = `${this.baseUrl}${path}`;
   let res;
   try {
     res = await fetch(url, {
       method,
-      headers: {
-        "x-openbat-key": __privateGet(this, _apiKey),
+      headers: __privateMethod(this, _ApiClient_instances, commonHeaders_fn).call(this, {
         "content-type": "application/json",
         accept: "application/json"
-      },
+      }),
       body: body === void 0 ? void 0 : JSON.stringify(body)
     });
   } catch (err) {