@openbat/cli 0.2.1 → 0.2.2

package/dist/api-client.js

@@ -32,7 +32,7 @@ __export(api_client_exports, {
 });
 module.exports = __toCommonJS(api_client_exports);
 var import_node_url = require("url");
-var CLI_VERSION = "0.1.1";
+var CLI_VERSION = "0.2.2";
 var KEY_REGEX = /ob_(?:live|read|admin|pat)_[0-9a-f]{32}/g;
 function redact(s) {
   return s.replace(KEY_REGEX, (k) => `${k.slice(0, 16)}\u2026<hidden>`);
@@ -82,7 +82,7 @@ var ApiClient = class {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`Request to ${redact(url)} failed: ${redact(msg)}`);
     }
-    return parseResponse(res, url);
+    return parseResponse(res, url, "GET");
   }
   /** Issue a POST with a JSON body. */
   async post(path, body) {
@@ -144,12 +144,12 @@ mutate_fn = async function(method, path, body) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`Request to ${redact(url)} failed: ${redact(msg)}`);
   }
-  return parseResponse(res, url);
+  return parseResponse(res, url, method);
 };
-async function parseResponse(res, url) {
+async function parseResponse(res, url, method) {
   if (res.status === 401) {
     throw new Error(
-      "Unauthorized. The API key was rejected (invalid, wrong kind for this endpoint, expired, or revoked)."
+      "Unauthorized. The API key was rejected (invalid, wrong kind for this endpoint, expired, or revoked). Run `openbat login` to refresh credentials."
     );
   }
   if (res.status === 403) {
@@ -170,7 +170,7 @@ async function parseResponse(res, url) {
     } catch {
     }
     throw new Error(
-      `GET ${redact(url)} \u2192 ${res.status} ${res.statusText}${errBody?.error ? `: ${redact(errBody.error)}` : ""}`
+      `${method} ${redact(url)} \u2192 ${res.status} ${res.statusText}${errBody?.error ? `: ${redact(errBody.error)}` : ""}`
     );
   }
   try {

package/dist/api-client.mjs

@@ -1,6 +1,6 @@
 import {
   ApiClient
-} from "./chunk-NYKJTHHK.mjs";
+} from "./chunk-MCDJLQI2.mjs";
 export {
   ApiClient
 };

package/dist/{chunk-NYKJTHHK.mjs → chunk-MCDJLQI2.mjs}

@@ -9,7 +9,7 @@ var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "acce
 
 // src/api-client.ts
 import { URL } from "url";
-var CLI_VERSION = "0.1.1";
+var CLI_VERSION = "0.2.2";
 var KEY_REGEX = /ob_(?:live|read|admin|pat)_[0-9a-f]{32}/g;
 function redact(s) {
   return s.replace(KEY_REGEX, (k) => `${k.slice(0, 16)}\u2026<hidden>`);
@@ -59,7 +59,7 @@ var ApiClient = class {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`Request to ${redact(url)} failed: ${redact(msg)}`);
     }
-    return parseResponse(res, url);
+    return parseResponse(res, url, "GET");
   }
   /** Issue a POST with a JSON body. */
   async post(path, body) {
@@ -121,12 +121,12 @@ mutate_fn = async function(method, path, body) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`Request to ${redact(url)} failed: ${redact(msg)}`);
   }
-  return parseResponse(res, url);
+  return parseResponse(res, url, method);
 };
-async function parseResponse(res, url) {
+async function parseResponse(res, url, method) {
   if (res.status === 401) {
     throw new Error(
-      "Unauthorized. The API key was rejected (invalid, wrong kind for this endpoint, expired, or revoked)."
+      "Unauthorized. The API key was rejected (invalid, wrong kind for this endpoint, expired, or revoked). Run `openbat login` to refresh credentials."
     );
   }
   if (res.status === 403) {
@@ -147,7 +147,7 @@ async function parseResponse(res, url) {
     } catch {
     }
     throw new Error(
-      `GET ${redact(url)} \u2192 ${res.status} ${res.statusText}${errBody?.error ? `: ${redact(errBody.error)}` : ""}`
+      `${method} ${redact(url)} \u2192 ${res.status} ${res.statusText}${errBody?.error ? `: ${redact(errBody.error)}` : ""}`
     );
   }
   try {

package/dist/index.js

@@ -163,7 +163,7 @@ function configPath() {
 
 // src/api-client.ts
 var import_node_url = require("url");
-var CLI_VERSION = "0.1.1";
+var CLI_VERSION = "0.2.2";
 var KEY_REGEX = /ob_(?:live|read|admin|pat)_[0-9a-f]{32}/g;
 function redact(s) {
   return s.replace(KEY_REGEX, (k) => `${k.slice(0, 16)}\u2026<hidden>`);
@@ -213,7 +213,7 @@ var ApiClient = class {
       const msg = err instanceof Error ? err.message : String(err);
       throw new Error(`Request to ${redact(url)} failed: ${redact(msg)}`);
     }
-    return parseResponse(res, url);
+    return parseResponse(res, url, "GET");
   }
   /** Issue a POST with a JSON body. */
   async post(path, body) {
@@ -275,12 +275,12 @@ mutate_fn = async function(method, path, body) {
     const msg = err instanceof Error ? err.message : String(err);
     throw new Error(`Request to ${redact(url)} failed: ${redact(msg)}`);
   }
-  return parseResponse(res, url);
+  return parseResponse(res, url, method);
 };
-async function parseResponse(res, url) {
+async function parseResponse(res, url, method) {
   if (res.status === 401) {
     throw new Error(
-      "Unauthorized. The API key was rejected (invalid, wrong kind for this endpoint, expired, or revoked)."
+      "Unauthorized. The API key was rejected (invalid, wrong kind for this endpoint, expired, or revoked). Run `openbat login` to refresh credentials."
     );
   }
   if (res.status === 403) {
@@ -301,7 +301,7 @@ async function parseResponse(res, url) {
     } catch {
     }
     throw new Error(
-      `GET ${redact(url)} \u2192 ${res.status} ${res.statusText}${errBody?.error ? `: ${redact(errBody.error)}` : ""}`
+      `${method} ${redact(url)} \u2192 ${res.status} ${res.statusText}${errBody?.error ? `: ${redact(errBody.error)}` : ""}`
     );
   }
   try {
@@ -388,7 +388,9 @@ function configCommand() {
   const cmd = new import_commander.Command("config").description(
     "Manage the CLI's ~/.openbatrc settings"
   );
-  cmd.command("set-key").description("Store your Read API key in ~/.openbatrc").option("--from-stdin", "Read the key from stdin (default and recommended)", true).option(
+  cmd.command("set-key").description(
+    "Store your API key in ~/.openbatrc. Reads from stdin by default; use --value to pass inline (discouraged \u2014 leaks into shell history)."
+  ).option(
     "--value <key>",
     "Pass the key inline. Discouraged \u2014 leaks into shell history."
   ).action(async (opts) => {
@@ -404,13 +406,13 @@ function configCommand() {
         key = Buffer.concat(chunks).toString("utf8").trim();
         if (!key) {
           fatal(
-            "No key on stdin. Try: echo 'ob_read_...' | openbat config set-key --from-stdin"
+            "No key on stdin. Try: echo 'ob_read_...' | openbat config set-key"
           );
         }
       }
       await setApiKey(key);
       process.stdout.write(
-        `Saved Read key to ${configPath()} (mode 0600).
+        `Saved key to ${configPath()} (mode 0600).
 `
       );
     } catch (err) {
@@ -529,7 +531,9 @@ async function resolveChatbotId(api, chatbotFlag) {
   );
   const chatbots = list.chatbots ?? [];
   if (chatbots.length === 0) {
-    fatal("This API key authorizes no chatbots.");
+    fatal(
+      "No chatbots yet. Run `openbat chatbots create --name <name>`, or ask an org owner to invite you."
+    );
   }
   if (chatbotFlag) {
     if (UUID_RE2.test(chatbotFlag)) {
@@ -714,18 +718,6 @@ function exportCommand() {
 
 // src/commands/auth.ts
 var import_commander3 = require("commander");
-async function client2(globals) {
-  const cfg = await resolveConfig({
-    apiKeyFlag: globals.apiKey ?? null,
-    baseUrlFlag: globals.baseUrl ?? null
-  });
-  if (!cfg.apiKey) {
-    fatal(
-      "No API key configured. Run `openbat config set-key`, pass --api-key, or set OPENBAT_API_KEY."
-    );
-  }
-  return new ApiClient({ apiKey: cfg.apiKey, baseUrl: cfg.baseUrl });
-}
 function detectKind(apiKey) {
   if (apiKey.startsWith("ob_read_")) return "read";
   if (apiKey.startsWith("ob_admin_")) return "admin";
@@ -777,17 +769,6 @@ function authCommand() {
       fatal(err instanceof Error ? err.message : String(err));
     }
   });
-  cmd.command("audit-log").description("Show recent audit-log entries for the current user").option("--days <n>", "Look-back window in days", "7").action(async function() {
-    try {
-      process.stderr.write(
-        "audit-log: endpoint not yet exposed via HTTP \u2014 query `select * from api_audit_log` in Supabase Studio for now.\n"
-      );
-      const _c = await client2(this.optsWithGlobals());
-      void _c;
-    } catch (err) {
-      fatal(err instanceof Error ? err.message : String(err));
-    }
-  });
   return cmd;
 }
 
@@ -1074,7 +1055,15 @@ async function pickDefaultChatbot(token, baseUrl) {
     return;
   }
   if (chatbots.length === 0) {
-    process.stdout.write("\nNo chatbots reachable yet. Create one from the dashboard.\n");
+    process.stdout.write(
+      [
+        "",
+        "No chatbots yet. To get one:",
+        "  \u2022 Create one:  openbat chatbots create --name <name>",
+        "  \u2022 Or ask an org owner to invite you, then run `openbat login` again",
+        ""
+      ].join("\n")
+    );
     return;
   }
   if (chatbots.length === 1) {
@@ -1142,7 +1131,7 @@ function logoutCommand() {
         }
       } else {
         process.stderr.write(
-          "Note: read/admin keys can't self-revoke. Visit the dashboard to revoke; this command will just clear the local config.\n"
+          "Note: read/admin keys can't self-revoke server-side. Revoke them in the dashboard if needed; clearing local config only.\n"
         );
       }
       await clearApiKey();
@@ -1155,7 +1144,7 @@ function logoutCommand() {
 
 // src/commands/org.ts
 var import_commander6 = require("commander");
-async function client3(globals) {
+async function client2(globals) {
   const cfg = await resolveConfig({
     apiKeyFlag: globals.apiKey ?? null,
     baseUrlFlag: globals.baseUrl ?? null
@@ -1175,7 +1164,7 @@ function orgCommand() {
   cmd.command("list").description("List orgs the current PAT's user belongs to").action(async function() {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.get("/api/v1/orgs");
       emit(result.orgs, { json: !!globals.json });
     } catch (err) {
@@ -1185,7 +1174,7 @@ function orgCommand() {
   cmd.command("show").description("Show the active org (id, name, members)").action(async function() {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.get(
         "/api/v1/orgs/active"
       );
@@ -1200,7 +1189,7 @@ function orgCommand() {
   cmd.command("rename").description("Rename an org (owner only)").requiredOption("--id <orgId>", "Org id").requiredOption("--name <name>", "New name").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       await c.patch(`/api/v1/orgs/${opts.id}`, { name: opts.name });
       emit({ ok: true, renamed: opts.id }, { json: !!globals.json });
     } catch (err) {
@@ -1211,7 +1200,7 @@ function orgCommand() {
   members.command("list").requiredOption("--id <orgId>", "Org id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.get(
         `/api/v1/orgs/${opts.id}/members`
       );
@@ -1223,7 +1212,7 @@ function orgCommand() {
   members.command("invite").requiredOption("--id <orgId>", "Org id").requiredOption("--email <email>", "Invitee email").option("--role <role>", "member | admin", "member").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.post(
         `/api/v1/orgs/${opts.id}/members`,
         { email: opts.email, role: opts.role }
@@ -1241,7 +1230,7 @@ function orgCommand() {
   members.command("set-role").requiredOption("--id <orgId>", "Org id").requiredOption("--member <memberId>", "Member id").requiredOption("--role <role>", "admin | member").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       await c.patch(`/api/v1/orgs/${opts.id}/members/${opts.member}`, {
         role: opts.role
       });
@@ -1253,7 +1242,7 @@ function orgCommand() {
   members.command("remove").requiredOption("--id <orgId>", "Org id").requiredOption("--member <memberId>", "Member id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       await c.delete(`/api/v1/orgs/${opts.id}/members/${opts.member}`);
       emit({ ok: true }, { json: !!globals.json });
     } catch (err) {
@@ -1264,7 +1253,7 @@ function orgCommand() {
   invitations.command("list").requiredOption("--id <orgId>", "Org id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.get(
         `/api/v1/orgs/${opts.id}/invitations`
       );
@@ -1278,7 +1267,7 @@ function orgCommand() {
 
 // src/commands/write.ts
 var import_commander7 = require("commander");
-async function client4(globals) {
+async function client3(globals) {
   const cfg = await resolveConfig({
     apiKeyFlag: globals.apiKey ?? null,
     baseUrlFlag: globals.baseUrl ?? null
@@ -1307,7 +1296,7 @@ function chatbotsCommand() {
   cmd.command("list").description("List every chatbot the credential can reach").action(async function() {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         "/api/v1/chatbots"
       );
@@ -1319,7 +1308,7 @@ function chatbotsCommand() {
   cmd.command("create").description("Create a new chatbot (PAT scope required)").requiredOption("--name <name>", "Chatbot name").option("--website <url>").option("--docs-url <url>").option("--mcp-url <url>").option("--language <code>", "Primary language code (default: en)", "en").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post("/api/v1/chatbots", {
         name: opts.name,
         websiteUrl: opts.website,
@@ -1339,7 +1328,7 @@ function chatbotsCommand() {
   cmd.command("delete <chatbotId>").description("Delete a chatbot (irreversible \u2014 cascade-deletes everything)").action(async function(chatbotId) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       await c.delete(`/api/v1/chatbots/${chatbotId}`);
       emit({ ok: true, deleted: chatbotId }, { json: !!globals.json });
     } catch (err) {
@@ -1353,7 +1342,7 @@ function webhooksCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         `/api/v1/chatbots/${opts.chatbot}/webhooks`
       );
@@ -1365,7 +1354,7 @@ function webhooksCommand() {
   cmd.command("create").requiredOption("--chatbot <id>", "Chatbot id").requiredOption("--name <name>").requiredOption("--url <url>").option("--type <type>", "discord | slack | custom", "custom").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(`/api/v1/chatbots/${opts.chatbot}/webhooks`, {
         name: opts.name,
         url: opts.url,
@@ -1380,7 +1369,7 @@ function webhooksCommand() {
   cmd.command("delete").requiredOption("--chatbot <id>", "Chatbot id").requiredOption("--webhook <id>", "Webhook id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       await c.delete(`/api/v1/chatbots/${opts.chatbot}/webhooks/${opts.webhook}`);
       emit({ ok: true, deleted: opts.webhook }, { json: !!globals.json });
     } catch (err) {
@@ -1397,7 +1386,7 @@ function settingsCommand() {
   keys.command("rotate-ingest").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(
         `/api/v1/chatbots/${opts.chatbot}/keys/ingest/rotate`,
         {}
@@ -1411,7 +1400,7 @@ function settingsCommand() {
   keys.command("generate-read").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(
         `/api/v1/chatbots/${opts.chatbot}/keys/read`,
         {}
@@ -1425,7 +1414,7 @@ function settingsCommand() {
   keys.command("generate-admin").requiredOption("--chatbot <id>", "Chatbot id").requiredOption("--name <name>", "Human-friendly name (e.g. 'CI key')").option("--expires-in-days <n>", "Auto-expire after N days").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(`/api/v1/chatbots/${opts.chatbot}/admin-keys`, {
         name: opts.name,
         expiresInDays: opts.expiresInDays ? Number(opts.expiresInDays) : void 0
@@ -1439,7 +1428,7 @@ function settingsCommand() {
   keys.command("list-admin").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         `/api/v1/chatbots/${opts.chatbot}/admin-keys`
       );
@@ -1451,7 +1440,7 @@ function settingsCommand() {
   keys.command("revoke-admin").requiredOption("--chatbot <id>", "Chatbot id").requiredOption("--key <keyId>", "Admin key id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       await c.delete(`/api/v1/chatbots/${opts.chatbot}/admin-keys/${opts.key}`);
       emit({ ok: true, revoked: opts.key }, { json: !!globals.json });
     } catch (err) {
@@ -1468,7 +1457,7 @@ function settingsCommand() {
         fatal("Provide at least one setting to update.");
       }
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       await c.patch(`/api/v1/chatbots/${opts.chatbot}/settings`, { settings });
       emit({ ok: true }, { json: !!globals.json });
     } catch (err) {
@@ -1482,7 +1471,7 @@ function workflowsCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         `/api/v1/chatbots/${opts.chatbot}/workflows`
       );
@@ -1500,7 +1489,7 @@ function workflowsCommand() {
   ).requiredOption("--webhook <id>", "Webhook id to fire").option("--message <tpl>", "Message template (supports {{user.id}}, etc.)").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(`/api/v1/chatbots/${opts.chatbot}/workflows`, {
         name: opts.name,
         template: opts.template,
@@ -1520,7 +1509,7 @@ function reportsCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         `/api/v1/chatbots/${opts.chatbot}/reports`
       );
@@ -1532,7 +1521,7 @@ function reportsCommand() {
   cmd.command("create").description("Create a new AI report; returns the org-private dashboard URL").requiredOption("--chatbot <id>", "Chatbot id").option("--name <name>", "Report name", "Untitled Report").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(`/api/v1/chatbots/${opts.chatbot}/reports`, { name: opts.name });
       process.stderr.write(
         `
@@ -1556,7 +1545,7 @@ function analysisCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").option("--type <t>", "intent | flag | assistant_outcome | assistant_issue").option("--pending", "Include pending suggestions").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const qs = new URLSearchParams();
       if (opts.type) qs.set("type", opts.type);
       if (opts.pending) qs.set("pending", "true");
@@ -1574,7 +1563,7 @@ function analysisCommand() {
   ).requiredOption("--name <slug>", "snake_case slug").requiredOption("--display-name <text>").requiredOption("--description <text>").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(
         `/api/v1/chatbots/${opts.chatbot}/analysis-definitions`,
         {
@@ -1598,7 +1587,7 @@ function usersCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").option("--from <iso>").option("--to <iso>").option("--days <n>", "Convenience: last N days").option("--search <q>").option("--limit <n>", "Page size", "20").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const qs = new URLSearchParams();
       let from = opts.from;
       if (!from && opts.days) {
@@ -1629,7 +1618,7 @@ function sdkCommand() {
   );
   cmd.command("install-instructions").description("Print markdown the calling agent can follow").option(
     "--framework <name>",
-    "next | node | vercel-ai-sdk (default: next)",
+    "next | vercel-ai-sdk (default: next)",
     "next"
   ).option("--chatbot <id>", "Chatbot id (for the example snippet)").action(async function(opts) {
     const chatbotId = opts.chatbot ?? "<chatbotId>";
@@ -1689,24 +1678,36 @@ function sdkCommand() {
   cmd.command("verify").description("Check whether any event has arrived for the chatbot yet").requiredOption("--chatbot <id>", "Chatbot id").option("--timeout <n>", "Seconds to wait (default: 60)", "60").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
-      const deadline = Date.now() + Number(opts.timeout) * 1e3;
+      const c = await client3(globals);
+      const timeoutSec = Number(opts.timeout);
+      const deadline = Date.now() + timeoutSec * 1e3;
+      const params = new URLSearchParams({
+        chatbotId: opts.chatbot,
+        limit: "1"
+      });
+      process.stderr.write(
+        `Waiting for first event on chatbot ${opts.chatbot} (timeout ${timeoutSec}s)\u2026
+`
+      );
+      let lastTick = Date.now();
       while (Date.now() < deadline) {
-        try {
-          const result = await c.get(`/api/v1/conversations?limit=1`);
-          if (result.total > 0) {
-            process.stderr.write(
-              `\u2713 First event detected. ${result.total} conversation(s) ingested.
+        const result = await c.get(`/api/v1/conversations?${params}`);
+        if (result.total > 0) {
+          process.stderr.write(
+            `First event detected. ${result.total} conversation(s) ingested.
 `
-            );
-            return;
-          }
-        } catch {
+          );
+          return;
+        }
+        if (Date.now() - lastTick >= 5e3) {
+          process.stderr.write(".");
+          lastTick = Date.now();
         }
         await new Promise((r) => setTimeout(r, 2e3));
       }
       process.stderr.write(
-        `Timed out after ${opts.timeout}s \u2014 no events yet. Confirm OPENBAT_API_KEY and that recordMessages is being called.
+        `
+Timed out after ${timeoutSec}s \u2014 no events yet. Confirm OPENBAT_API_KEY and that recordMessages is being called.
 `
       );
       process.exit(2);
@@ -1721,7 +1722,7 @@ function sdkCommand() {
 var program = new import_commander8.Command();
 program.name("openbat").description(
   "Query OpenBat chatbot data \u2014 conversations, sentiment, analytics, exports."
-).version("0.2.1").option("--api-key <key>", "Override the stored Read API key (footgun \u2014 leaks into shell history)").option(
+).version("0.2.2").option("--api-key <key>", "Override the stored Read API key (footgun \u2014 leaks into shell history)").option(
   "--base-url <url>",
   "Override the OpenBat API base URL (defaults to ~/.openbatrc or https://openbat.dev)"
 ).option(

package/dist/index.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   ApiClient
-} from "./chunk-NYKJTHHK.mjs";
+} from "./chunk-MCDJLQI2.mjs";
 
 // src/index.ts
 import { Command as Command8 } from "commander";
@@ -210,7 +210,9 @@ function configCommand() {
   const cmd = new Command("config").description(
     "Manage the CLI's ~/.openbatrc settings"
   );
-  cmd.command("set-key").description("Store your Read API key in ~/.openbatrc").option("--from-stdin", "Read the key from stdin (default and recommended)", true).option(
+  cmd.command("set-key").description(
+    "Store your API key in ~/.openbatrc. Reads from stdin by default; use --value to pass inline (discouraged \u2014 leaks into shell history)."
+  ).option(
     "--value <key>",
     "Pass the key inline. Discouraged \u2014 leaks into shell history."
   ).action(async (opts) => {
@@ -226,13 +228,13 @@ function configCommand() {
         key = Buffer.concat(chunks).toString("utf8").trim();
         if (!key) {
           fatal(
-            "No key on stdin. Try: echo 'ob_read_...' | openbat config set-key --from-stdin"
+            "No key on stdin. Try: echo 'ob_read_...' | openbat config set-key"
           );
         }
       }
       await setApiKey(key);
       process.stdout.write(
-        `Saved Read key to ${configPath()} (mode 0600).
+        `Saved key to ${configPath()} (mode 0600).
 `
       );
     } catch (err) {
@@ -351,7 +353,9 @@ async function resolveChatbotId(api, chatbotFlag) {
   );
   const chatbots = list.chatbots ?? [];
   if (chatbots.length === 0) {
-    fatal("This API key authorizes no chatbots.");
+    fatal(
+      "No chatbots yet. Run `openbat chatbots create --name <name>`, or ask an org owner to invite you."
+    );
   }
   if (chatbotFlag) {
     if (UUID_RE2.test(chatbotFlag)) {
@@ -536,18 +540,6 @@ function exportCommand() {
 
 // src/commands/auth.ts
 import { Command as Command3 } from "commander";
-async function client2(globals) {
-  const cfg = await resolveConfig({
-    apiKeyFlag: globals.apiKey ?? null,
-    baseUrlFlag: globals.baseUrl ?? null
-  });
-  if (!cfg.apiKey) {
-    fatal(
-      "No API key configured. Run `openbat config set-key`, pass --api-key, or set OPENBAT_API_KEY."
-    );
-  }
-  return new ApiClient({ apiKey: cfg.apiKey, baseUrl: cfg.baseUrl });
-}
 function detectKind(apiKey) {
   if (apiKey.startsWith("ob_read_")) return "read";
   if (apiKey.startsWith("ob_admin_")) return "admin";
@@ -599,17 +591,6 @@ function authCommand() {
       fatal(err instanceof Error ? err.message : String(err));
     }
   });
-  cmd.command("audit-log").description("Show recent audit-log entries for the current user").option("--days <n>", "Look-back window in days", "7").action(async function() {
-    try {
-      process.stderr.write(
-        "audit-log: endpoint not yet exposed via HTTP \u2014 query `select * from api_audit_log` in Supabase Studio for now.\n"
-      );
-      const _c = await client2(this.optsWithGlobals());
-      void _c;
-    } catch (err) {
-      fatal(err instanceof Error ? err.message : String(err));
-    }
-  });
   return cmd;
 }
 
@@ -896,7 +877,15 @@ async function pickDefaultChatbot(token, baseUrl) {
     return;
   }
   if (chatbots.length === 0) {
-    process.stdout.write("\nNo chatbots reachable yet. Create one from the dashboard.\n");
+    process.stdout.write(
+      [
+        "",
+        "No chatbots yet. To get one:",
+        "  \u2022 Create one:  openbat chatbots create --name <name>",
+        "  \u2022 Or ask an org owner to invite you, then run `openbat login` again",
+        ""
+      ].join("\n")
+    );
     return;
   }
   if (chatbots.length === 1) {
@@ -964,7 +953,7 @@ function logoutCommand() {
         }
       } else {
         process.stderr.write(
-          "Note: read/admin keys can't self-revoke. Visit the dashboard to revoke; this command will just clear the local config.\n"
+          "Note: read/admin keys can't self-revoke server-side. Revoke them in the dashboard if needed; clearing local config only.\n"
         );
       }
       await clearApiKey();
@@ -977,7 +966,7 @@ function logoutCommand() {
 
 // src/commands/org.ts
 import { Command as Command6 } from "commander";
-async function client3(globals) {
+async function client2(globals) {
   const cfg = await resolveConfig({
     apiKeyFlag: globals.apiKey ?? null,
     baseUrlFlag: globals.baseUrl ?? null
@@ -997,7 +986,7 @@ function orgCommand() {
   cmd.command("list").description("List orgs the current PAT's user belongs to").action(async function() {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.get("/api/v1/orgs");
       emit(result.orgs, { json: !!globals.json });
     } catch (err) {
@@ -1007,7 +996,7 @@ function orgCommand() {
   cmd.command("show").description("Show the active org (id, name, members)").action(async function() {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.get(
         "/api/v1/orgs/active"
       );
@@ -1022,7 +1011,7 @@ function orgCommand() {
   cmd.command("rename").description("Rename an org (owner only)").requiredOption("--id <orgId>", "Org id").requiredOption("--name <name>", "New name").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       await c.patch(`/api/v1/orgs/${opts.id}`, { name: opts.name });
       emit({ ok: true, renamed: opts.id }, { json: !!globals.json });
     } catch (err) {
@@ -1033,7 +1022,7 @@ function orgCommand() {
   members.command("list").requiredOption("--id <orgId>", "Org id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.get(
         `/api/v1/orgs/${opts.id}/members`
       );
@@ -1045,7 +1034,7 @@ function orgCommand() {
   members.command("invite").requiredOption("--id <orgId>", "Org id").requiredOption("--email <email>", "Invitee email").option("--role <role>", "member | admin", "member").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.post(
         `/api/v1/orgs/${opts.id}/members`,
         { email: opts.email, role: opts.role }
@@ -1063,7 +1052,7 @@ function orgCommand() {
   members.command("set-role").requiredOption("--id <orgId>", "Org id").requiredOption("--member <memberId>", "Member id").requiredOption("--role <role>", "admin | member").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       await c.patch(`/api/v1/orgs/${opts.id}/members/${opts.member}`, {
         role: opts.role
       });
@@ -1075,7 +1064,7 @@ function orgCommand() {
   members.command("remove").requiredOption("--id <orgId>", "Org id").requiredOption("--member <memberId>", "Member id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       await c.delete(`/api/v1/orgs/${opts.id}/members/${opts.member}`);
       emit({ ok: true }, { json: !!globals.json });
     } catch (err) {
@@ -1086,7 +1075,7 @@ function orgCommand() {
   invitations.command("list").requiredOption("--id <orgId>", "Org id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client3(globals);
+      const c = await client2(globals);
       const result = await c.get(
         `/api/v1/orgs/${opts.id}/invitations`
       );
@@ -1100,7 +1089,7 @@ function orgCommand() {
 
 // src/commands/write.ts
 import { Command as Command7 } from "commander";
-async function client4(globals) {
+async function client3(globals) {
   const cfg = await resolveConfig({
     apiKeyFlag: globals.apiKey ?? null,
     baseUrlFlag: globals.baseUrl ?? null
@@ -1129,7 +1118,7 @@ function chatbotsCommand() {
   cmd.command("list").description("List every chatbot the credential can reach").action(async function() {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         "/api/v1/chatbots"
       );
@@ -1141,7 +1130,7 @@ function chatbotsCommand() {
   cmd.command("create").description("Create a new chatbot (PAT scope required)").requiredOption("--name <name>", "Chatbot name").option("--website <url>").option("--docs-url <url>").option("--mcp-url <url>").option("--language <code>", "Primary language code (default: en)", "en").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post("/api/v1/chatbots", {
         name: opts.name,
         websiteUrl: opts.website,
@@ -1161,7 +1150,7 @@ function chatbotsCommand() {
   cmd.command("delete <chatbotId>").description("Delete a chatbot (irreversible \u2014 cascade-deletes everything)").action(async function(chatbotId) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       await c.delete(`/api/v1/chatbots/${chatbotId}`);
       emit({ ok: true, deleted: chatbotId }, { json: !!globals.json });
     } catch (err) {
@@ -1175,7 +1164,7 @@ function webhooksCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         `/api/v1/chatbots/${opts.chatbot}/webhooks`
       );
@@ -1187,7 +1176,7 @@ function webhooksCommand() {
   cmd.command("create").requiredOption("--chatbot <id>", "Chatbot id").requiredOption("--name <name>").requiredOption("--url <url>").option("--type <type>", "discord | slack | custom", "custom").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(`/api/v1/chatbots/${opts.chatbot}/webhooks`, {
         name: opts.name,
         url: opts.url,
@@ -1202,7 +1191,7 @@ function webhooksCommand() {
   cmd.command("delete").requiredOption("--chatbot <id>", "Chatbot id").requiredOption("--webhook <id>", "Webhook id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       await c.delete(`/api/v1/chatbots/${opts.chatbot}/webhooks/${opts.webhook}`);
       emit({ ok: true, deleted: opts.webhook }, { json: !!globals.json });
     } catch (err) {
@@ -1219,7 +1208,7 @@ function settingsCommand() {
   keys.command("rotate-ingest").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(
         `/api/v1/chatbots/${opts.chatbot}/keys/ingest/rotate`,
         {}
@@ -1233,7 +1222,7 @@ function settingsCommand() {
   keys.command("generate-read").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(
         `/api/v1/chatbots/${opts.chatbot}/keys/read`,
         {}
@@ -1247,7 +1236,7 @@ function settingsCommand() {
   keys.command("generate-admin").requiredOption("--chatbot <id>", "Chatbot id").requiredOption("--name <name>", "Human-friendly name (e.g. 'CI key')").option("--expires-in-days <n>", "Auto-expire after N days").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(`/api/v1/chatbots/${opts.chatbot}/admin-keys`, {
         name: opts.name,
         expiresInDays: opts.expiresInDays ? Number(opts.expiresInDays) : void 0
@@ -1261,7 +1250,7 @@ function settingsCommand() {
   keys.command("list-admin").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         `/api/v1/chatbots/${opts.chatbot}/admin-keys`
       );
@@ -1273,7 +1262,7 @@ function settingsCommand() {
   keys.command("revoke-admin").requiredOption("--chatbot <id>", "Chatbot id").requiredOption("--key <keyId>", "Admin key id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       await c.delete(`/api/v1/chatbots/${opts.chatbot}/admin-keys/${opts.key}`);
       emit({ ok: true, revoked: opts.key }, { json: !!globals.json });
     } catch (err) {
@@ -1290,7 +1279,7 @@ function settingsCommand() {
         fatal("Provide at least one setting to update.");
       }
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       await c.patch(`/api/v1/chatbots/${opts.chatbot}/settings`, { settings });
       emit({ ok: true }, { json: !!globals.json });
     } catch (err) {
@@ -1304,7 +1293,7 @@ function workflowsCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         `/api/v1/chatbots/${opts.chatbot}/workflows`
       );
@@ -1322,7 +1311,7 @@ function workflowsCommand() {
   ).requiredOption("--webhook <id>", "Webhook id to fire").option("--message <tpl>", "Message template (supports {{user.id}}, etc.)").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(`/api/v1/chatbots/${opts.chatbot}/workflows`, {
         name: opts.name,
         template: opts.template,
@@ -1342,7 +1331,7 @@ function reportsCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.get(
         `/api/v1/chatbots/${opts.chatbot}/reports`
       );
@@ -1354,7 +1343,7 @@ function reportsCommand() {
   cmd.command("create").description("Create a new AI report; returns the org-private dashboard URL").requiredOption("--chatbot <id>", "Chatbot id").option("--name <name>", "Report name", "Untitled Report").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(`/api/v1/chatbots/${opts.chatbot}/reports`, { name: opts.name });
       process.stderr.write(
         `
@@ -1378,7 +1367,7 @@ function analysisCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").option("--type <t>", "intent | flag | assistant_outcome | assistant_issue").option("--pending", "Include pending suggestions").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const qs = new URLSearchParams();
       if (opts.type) qs.set("type", opts.type);
       if (opts.pending) qs.set("pending", "true");
@@ -1396,7 +1385,7 @@ function analysisCommand() {
   ).requiredOption("--name <slug>", "snake_case slug").requiredOption("--display-name <text>").requiredOption("--description <text>").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const result = await c.post(
         `/api/v1/chatbots/${opts.chatbot}/analysis-definitions`,
         {
@@ -1420,7 +1409,7 @@ function usersCommand() {
   cmd.command("list").requiredOption("--chatbot <id>", "Chatbot id").option("--from <iso>").option("--to <iso>").option("--days <n>", "Convenience: last N days").option("--search <q>").option("--limit <n>", "Page size", "20").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
+      const c = await client3(globals);
       const qs = new URLSearchParams();
       let from = opts.from;
       if (!from && opts.days) {
@@ -1451,7 +1440,7 @@ function sdkCommand() {
   );
   cmd.command("install-instructions").description("Print markdown the calling agent can follow").option(
     "--framework <name>",
-    "next | node | vercel-ai-sdk (default: next)",
+    "next | vercel-ai-sdk (default: next)",
     "next"
   ).option("--chatbot <id>", "Chatbot id (for the example snippet)").action(async function(opts) {
     const chatbotId = opts.chatbot ?? "<chatbotId>";
@@ -1511,24 +1500,36 @@ function sdkCommand() {
   cmd.command("verify").description("Check whether any event has arrived for the chatbot yet").requiredOption("--chatbot <id>", "Chatbot id").option("--timeout <n>", "Seconds to wait (default: 60)", "60").action(async function(opts) {
     try {
       const globals = this.optsWithGlobals();
-      const c = await client4(globals);
-      const deadline = Date.now() + Number(opts.timeout) * 1e3;
+      const c = await client3(globals);
+      const timeoutSec = Number(opts.timeout);
+      const deadline = Date.now() + timeoutSec * 1e3;
+      const params = new URLSearchParams({
+        chatbotId: opts.chatbot,
+        limit: "1"
+      });
+      process.stderr.write(
+        `Waiting for first event on chatbot ${opts.chatbot} (timeout ${timeoutSec}s)\u2026
+`
+      );
+      let lastTick = Date.now();
       while (Date.now() < deadline) {
-        try {
-          const result = await c.get(`/api/v1/conversations?limit=1`);
-          if (result.total > 0) {
-            process.stderr.write(
-              `\u2713 First event detected. ${result.total} conversation(s) ingested.
+        const result = await c.get(`/api/v1/conversations?${params}`);
+        if (result.total > 0) {
+          process.stderr.write(
+            `First event detected. ${result.total} conversation(s) ingested.
 `
-            );
-            return;
-          }
-        } catch {
+          );
+          return;
+        }
+        if (Date.now() - lastTick >= 5e3) {
+          process.stderr.write(".");
+          lastTick = Date.now();
         }
         await new Promise((r) => setTimeout(r, 2e3));
       }
       process.stderr.write(
-        `Timed out after ${opts.timeout}s \u2014 no events yet. Confirm OPENBAT_API_KEY and that recordMessages is being called.
+        `
+Timed out after ${timeoutSec}s \u2014 no events yet. Confirm OPENBAT_API_KEY and that recordMessages is being called.
 `
       );
       process.exit(2);
@@ -1543,7 +1544,7 @@ function sdkCommand() {
 var program = new Command8();
 program.name("openbat").description(
   "Query OpenBat chatbot data \u2014 conversations, sentiment, analytics, exports."
-).version("0.2.1").option("--api-key <key>", "Override the stored Read API key (footgun \u2014 leaks into shell history)").option(
+).version("0.2.2").option("--api-key <key>", "Override the stored Read API key (footgun \u2014 leaks into shell history)").option(
   "--base-url <url>",
   "Override the OpenBat API base URL (defaults to ~/.openbatrc or https://openbat.dev)"
 ).option(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openbat/cli",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Command-line tool for querying OpenBat chatbot data — conversations, sentiment, analytics, exports",
   "bin": {
     "openbat": "bin/openbat"