@openbkn/bkn-sdk 0.1.1-alpha.10 → 0.1.1-alpha.12

package/dist/cli.js

@@ -37,15 +37,15 @@ import {
   use,
   whoami,
   writePlatformConfig
-} from "./chunk-GNL6Z5VF.js";
+} from "./chunk-3FVB6VFQ.js";
 
 // src/cli.ts
-import { Command as Command16 } from "commander";
+import { Command as Command17 } from "commander";
 
 // package.json
 var package_default = {
   name: "@openbkn/bkn-sdk",
-  version: "0.1.1-alpha.10",
+  version: "0.1.1-alpha.12",
   description: "Unified TypeScript SDK + CLI for the BKN (Business Knowledge Network) platform.",
   type: "module",
   license: "Apache-2.0",
@@ -215,7 +215,8 @@ var ROW_ENVELOPES = [
   "users",
   "roles",
   "departments",
-  "members"
+  "members",
+  "keys"
 ];
 function toRows(value) {
   const isRowArray = (v) => Array.isArray(v) && v.length > 0 && v.every((x) => x !== null && typeof x === "object" && !Array.isArray(x));
@@ -1074,8 +1075,75 @@ function agentCommand() {
   return group(cmd, "DECISION AGENT");
 }
 
-// src/commands/bkn.ts
+// src/commands/appkey.ts
 import { Command as Command4 } from "commander";
+var int3 = (v) => Number.parseInt(v, 10);
+var DAY_MS = 864e5;
+function printNewKey(created, out) {
+  if (out.json || out.compact) {
+    printJson(created, out);
+    return;
+  }
+  process.stderr.write(
+    "\u26A0\uFE0F  Copy this key now \u2014 the plaintext is shown only once and cannot be retrieved again.\n\n"
+  );
+  const fields = [
+    ["key", created.key],
+    ["name", created.name],
+    ["id", `${created.id}  (use this to revoke/regenerate)`],
+    ["key_id", created.key_id],
+    ["expires_at", created.expires_at ?? "never"]
+  ];
+  const w = Math.max(...fields.map(([k]) => k.length));
+  for (const [k, v] of fields) process.stdout.write(`  ${k.padEnd(w)}  ${v}
+`);
+}
+function appkeyCommand() {
+  const appkey = new Command4("appkey").description(
+    "AppKeys \u2014 user-issued long-lived credentials (bak_) for the Context Loader"
+  );
+  appkey.command("list").description("List your own AppKeys (no secrets)").action(async (_opts, cmd) => {
+    printJson(await clientFrom(cmd).appKeys.list(), outputOptions(cmd));
+  });
+  appkey.command("create").description("Issue an AppKey \u2014 the plaintext key is shown ONCE, on create").requiredOption("--name <s>", "display name (to tell keys apart)").option("--expires-at <rfc3339>", "expiry as RFC3339 (e.g. 2027-01-01T00:00:00Z)").option("--expire-days <n>", "expiry in N days from now (alternative to --expires-at)", int3).option("--never-expire", "never expire (wins over --expires-at/--expire-days)").action(async (opts, cmd) => {
+    let expiresAt = opts.expiresAt;
+    if (opts.expireDays !== void 0) {
+      if (!Number.isFinite(opts.expireDays) || opts.expireDays <= 0) {
+        throw new InputError("--expire-days must be a positive integer.");
+      }
+      if (expiresAt) {
+        throw new InputError("Use either --expires-at or --expire-days, not both.");
+      }
+      expiresAt = new Date(Date.now() + opts.expireDays * DAY_MS).toISOString();
+    }
+    const created = await clientFrom(cmd).appKeys.create({
+      name: opts.name,
+      expiresAt,
+      neverExpire: Boolean(opts.neverExpire)
+    });
+    printNewKey(created, outputOptions(cmd));
+  });
+  appkey.command("regenerate <id>").alias("rotate").description("Rotate a key in place \u2014 mints a new plaintext; the old bak_ dies immediately").action(async (id, _opts, cmd) => {
+    const created = await clientFrom(cmd).appKeys.regenerate(id);
+    printNewKey(created, outputOptions(cmd));
+  });
+  appkey.command("revoke <id>").alias("delete").alias("rm").description("Revoke one of your AppKeys (immediate; use the `id`, not `key_id`)").action(async (id, _opts, cmd) => {
+    await clientFrom(cmd).appKeys.revoke(id);
+    printJson({ revoked: id }, outputOptions(cmd));
+  });
+  const admin = appkey.command("admin").description("Admin governance over all AppKeys");
+  admin.command("list").description("List all AppKeys, or one owner's (adds owner_user_id)").option("--owner-id <id>", "filter to a single owner").action(async (opts, cmd) => {
+    printJson(await clientFrom(cmd).appKeys.adminList(opts.ownerId), outputOptions(cmd));
+  });
+  admin.command("revoke <id>").alias("delete").alias("rm").description("Revoke any AppKey by id").action(async (id, _opts, cmd) => {
+    await clientFrom(cmd).appKeys.adminRevoke(id);
+    printJson({ revoked: id }, outputOptions(cmd));
+  });
+  return group(appkey, "AUTHENTICATION & CONFIG");
+}
+
+// src/commands/bkn.ts
+import { Command as Command5 } from "commander";
 
 // src/utils/bkn-validate.ts
 import { existsSync, readFileSync as readFileSync2, readdirSync, statSync } from "fs";
@@ -1193,10 +1261,10 @@ function validateBknDirectory(dirPath) {
 }
 
 // src/commands/bkn.ts
-var int3 = (v) => Number.parseInt(v, 10);
+var int4 = (v) => Number.parseInt(v, 10);
 function bknCommand() {
-  const bkn = new Command4("bkn").description("Knowledge networks \u2014 list, query, schema, instances");
-  bkn.command("list").description("List knowledge networks").option("--limit <n>", "page size", int3, DEFAULT_LIST_LIMIT).option("--offset <n>", "page offset", int3, 0).option("--name-pattern <s>", "filter by name pattern").option("--tag <s>", "filter by tag").option("--sort <field>", "sort field", "update_time").option("--direction <dir>", "asc | desc", "desc").action(async (_opts, cmd) => {
+  const bkn = new Command5("bkn").description("Knowledge networks \u2014 list, query, schema, instances");
+  bkn.command("list").description("List knowledge networks").option("--limit <n>", "page size", int4, DEFAULT_LIST_LIMIT).option("--offset <n>", "page offset", int4, 0).option("--name-pattern <s>", "filter by name pattern").option("--tag <s>", "filter by tag").option("--sort <field>", "sort field", "update_time").option("--direction <dir>", "asc | desc", "desc").action(async (_opts, cmd) => {
     const o = cmd.optsWithGlobals();
     const data = await clientFrom(cmd).kn.list({
       limit: o.limit,
@@ -1215,7 +1283,7 @@ function bknCommand() {
     });
     printJson(data, outputOptions(cmd));
   });
-  bkn.command("search <kn-id> <query>").description("Semantic search within a knowledge network").option("--max-concepts <n>", "max concepts to return", int3, 10).option("--mode <mode>", "retrieval mode", "keyword_vector_retrieval").action(async (knId, query, opts, cmd) => {
+  bkn.command("search <kn-id> <query>").description("Semantic search within a knowledge network").option("--max-concepts <n>", "max concepts to return", int4, 10).option("--mode <mode>", "retrieval mode", "keyword_vector_retrieval").action(async (knId, query, opts, cmd) => {
     const data = await clientFrom(cmd).kn.search(knId, query, {
       maxConcepts: opts.maxConcepts,
       mode: opts.mode
@@ -1304,7 +1372,7 @@ function bknCommand() {
     printJson(await clientFrom(cmd).kn.subgraph(knId, readBody(opts)), outputOptions(cmd));
   });
   const actionLog = bkn.command("action-log").description("Action logs \u2014 list/get/cancel");
-  actionLog.command("list <kn-id>").description("List action logs").option("--status <s>", "filter by status").option("--action-type-id <id>", "filter by action type").option("--limit <n>", "page size", int3, DEFAULT_LIST_LIMIT).action(async (knId, opts, cmd) => {
+  actionLog.command("list <kn-id>").description("List action logs").option("--status <s>", "filter by status").option("--action-type-id <id>", "filter by action type").option("--limit <n>", "page size", int4, DEFAULT_LIST_LIMIT).action(async (knId, opts, cmd) => {
     printJson(
       await clientFrom(cmd).kn.actionLogs(knId, {
         status: opts.status,
@@ -1484,7 +1552,7 @@ function bknCommand() {
     printJson(result, outputOptions(cmd));
     if (!result.valid) process.exitCode = 1;
   });
-  bkn.command("create-from-csv <catalog-id>").description("Import CSV files into a Vega catalog, then build a KN from them").requiredOption("--files <glob>", "CSV paths (comma-separated or glob)").requiredOption("--name <name>", "knowledge network name").option("--table-prefix <s>", "prefix for derived table names", "").option("--batch-size <n>", "rows per insert batch", int3, 500).option("--tables <list>", "subset of imported tables to include in the KN").option("--pk-map <map>", "explicit primary keys: '<table>:<col>[,...]'").option("--build", "submit a Vega build task per resource after creation").option(
+  bkn.command("create-from-csv <catalog-id>").description("Import CSV files into a Vega catalog, then build a KN from them").requiredOption("--files <glob>", "CSV paths (comma-separated or glob)").requiredOption("--name <name>", "knowledge network name").option("--table-prefix <s>", "prefix for derived table names", "").option("--batch-size <n>", "rows per insert batch", int4, 500).option("--tables <list>", "subset of imported tables to include in the KN").option("--pk-map <map>", "explicit primary keys: '<table>:<col>[,...]'").option("--build", "submit a Vega build task per resource after creation").option(
     "--embedding-fields <map>",
     "columns to vectorize per table (with --build): '<table>:<col>[+<col>...][,...]'"
   ).option("--embedding-model <id>", "embedding model id for the vector index (with --build)").option("--no-rollback", "keep a partially-created KN on failure").action(async (catalogId, opts, cmd) => {
@@ -1510,13 +1578,13 @@ function bknCommand() {
 }
 
 // src/commands/call.ts
-import { Command as Command5 } from "commander";
+import { Command as Command6 } from "commander";
 function collect(value, prev) {
   prev.push(value);
   return prev;
 }
 function callCommand() {
-  const cmd = new Command5("call").alias("curl").description("Call an API with curl-style flags and auto-injected auth headers").argument("<url>", "API path (e.g. /api/...) or absolute URL").option("-X, --request <method>", "HTTP method").option("-H, --header <header>", 'extra header "Name: value" (repeatable)', collect, []).option("-d, --data <body>", "request body (sets JSON content-type if unset)").option("--data-raw <body>", "alias for --data").option(
+  const cmd = new Command6("call").alias("curl").description("Call an API with curl-style flags and auto-injected auth headers").argument("<url>", "API path (e.g. /api/...) or absolute URL").option("-X, --request <method>", "HTTP method").option("-H, --header <header>", 'extra header "Name: value" (repeatable)', collect, []).option("-d, --data <body>", "request body (sets JSON content-type if unset)").option("--data-raw <body>", "alias for --data").option(
     "-F, --form <field>",
     "multipart field key=value or key=@file (repeatable)",
     collect,
@@ -1551,14 +1619,14 @@ function callCommand() {
 }
 
 // src/commands/config.ts
-import { Command as Command6 } from "commander";
+import { Command as Command7 } from "commander";
 function requireActive() {
   const baseUrl = activePlatform();
   if (!baseUrl) throw new InputError("No active platform. Run `openbkn auth login <url>` first.");
   return baseUrl;
 }
 function configCommand() {
-  const config = new Command6("config").description("Per-platform CLI configuration");
+  const config = new Command7("config").description("Per-platform CLI configuration");
   config.command("show").description("Show the active platform and business domain").action((_opts, cmd) => {
     const baseUrl = activePlatform();
     printJson(
@@ -1591,8 +1659,8 @@ function configCommand() {
 }
 
 // src/commands/context.ts
-import { Command as Command7 } from "commander";
-var int4 = (v) => Number.parseInt(v, 10);
+import { Command as Command8 } from "commander";
+var int5 = (v) => Number.parseInt(v, 10);
 var collectArg = (v, prev) => {
   prev.push(v);
   return prev;
@@ -1637,10 +1705,10 @@ function printToolList(res, out) {
   printJson(rows, out);
 }
 function contextCommand() {
-  const cmd = new Command7("context").description(
+  const cmd = new Command8("context").description(
     "Context loader (MCP) \u2014 schema discovery, instance query, skill recall"
   );
-  cmd.command("search-schema <kn-id> <query>").description("Search object/relation/action/metric schemas").option("--scope <list>", "comma-separated scopes (object,relation,action,metric)").option("--max <n>", "max concepts", int4).action(async (knId, query, opts, cmd2) => {
+  cmd.command("search-schema <kn-id> <query>").description("Search object/relation/action/metric schemas").option("--scope <list>", "comma-separated scopes (object,relation,action,metric)").option("--max <n>", "max concepts", int5).action(async (knId, query, opts, cmd2) => {
     const data = await clientFrom(cmd2).context.searchSchema(knId, query, {
       searchScope: opts.scope ? String(opts.scope).split(",") : void 0,
       maxConcepts: opts.max
@@ -1656,7 +1724,7 @@ function contextCommand() {
     }
     printJson(await clientFrom(cmd2).context.queryObjectInstance(knId, args), outputOptions(cmd2));
   });
-  cmd.command("find-skills <kn-id> <object-type-id>").description("Recall skills for an object type").option("--top-k <n>", "max skills (1-20)", int4).action(async (knId, otId, opts, cmd2) => {
+  cmd.command("find-skills <kn-id> <object-type-id>").description("Recall skills for an object type").option("--top-k <n>", "max skills (1-20)", int5).action(async (knId, otId, opts, cmd2) => {
     printJson(
       await clientFrom(cmd2).context.findSkills(knId, otId, opts.topK),
       outputOptions(cmd2)
@@ -1744,10 +1812,10 @@ function contextCommand() {
 }
 
 // src/commands/dataflow.ts
-import { Command as Command8 } from "commander";
-var int5 = (v) => Number.parseInt(v, 10);
+import { Command as Command9 } from "commander";
+var int6 = (v) => Number.parseInt(v, 10);
 function dataflowCommand() {
-  const cmd = new Command8("dataflow").description("Dataflow document workflows \u2014 list, runs, logs");
+  const cmd = new Command9("dataflow").description("Dataflow document workflows \u2014 list, runs, logs");
   cmd.command("list").description("List all dataflows").action(async (_opts, cmd2) => {
     printJson(await clientFrom(cmd2).dataflows.list(), outputOptions(cmd2));
   });
@@ -1757,7 +1825,7 @@ function dataflowCommand() {
       outputOptions(cmd2)
     );
   });
-  cmd.command("logs <dagId> <instanceId>").description("Show logs for one run").option("--page <n>", "page", int5, 0).option("--limit <n>", "page size", int5, DEFAULT_LIST_LIMIT).action(async (dagId, instanceId, opts, cmd2) => {
+  cmd.command("logs <dagId> <instanceId>").description("Show logs for one run").option("--page <n>", "page", int6, 0).option("--limit <n>", "page size", int6, DEFAULT_LIST_LIMIT).action(async (dagId, instanceId, opts, cmd2) => {
     printJson(
       await clientFrom(cmd2).dataflows.logs(dagId, instanceId, {
         page: opts.page,
@@ -1819,8 +1887,8 @@ function dataflowCommand() {
 
 // src/commands/explore.ts
 import { createServer } from "http";
-import { Command as Command9 } from "commander";
-var int6 = (v) => Number.parseInt(v, 10);
+import { Command as Command10 } from "commander";
+var int7 = (v) => Number.parseInt(v, 10);
 var ROUTES = {
   "GET /api/bkn/meta": (c, q) => c.kn.get(req(q, "knId")),
   "POST /api/bkn/search": (c, _q, b) => c.kn.search(str(b.knId), str(b.query), {
@@ -1865,10 +1933,10 @@ var INDEX = `<!doctype html><meta charset="utf-8"><title>openbkn explore</title>
 <p>Read-only JSON endpoints for bkn + vega:</p>
 <ul>${Object.keys(ROUTES).map((r) => `<li><code>${r}</code></li>`).join("")}</ul>`;
 function exploreCommand() {
-  const cmd = new Command9("explore").description(
+  const cmd = new Command10("explore").description(
     "Start a local web server with read-only bkn + vega JSON endpoints"
   );
-  cmd.option("--port <n>", "port to listen on", int6, 7777).option("--host <h>", "host to bind", "127.0.0.1").action(async (opts, command) => {
+  cmd.option("--port <n>", "port to listen on", int7, 7777).option("--host <h>", "host to bind", "127.0.0.1").action(async (opts, command) => {
     const client = clientFrom(command);
     const server = createServer((reqMsg, res) => {
       void handle(client, reqMsg, res);
@@ -1906,8 +1974,8 @@ async function handle(client, reqMsg, res) {
 }
 
 // src/commands/model.ts
-import { Command as Command10 } from "commander";
-var int7 = (v) => Number.parseInt(v, 10);
+import { Command as Command11 } from "commander";
+var int8 = (v) => Number.parseInt(v, 10);
 function addManagementCommands(parent, kind) {
   parent.command("add").description("Register a model (definition JSON via --body / --body-file)").option("--body <json>", "model definition JSON").option("--body-file <path>", "read model definition JSON from a file").action(async (opts, cmd) => {
     printJson(await clientFrom(cmd).models[kind].add(readBody(opts)), outputOptions(cmd));
@@ -1923,9 +1991,9 @@ function addManagementCommands(parent, kind) {
   });
 }
 function modelCommand() {
-  const model = new Command10("model").description("Model factory \u2014 LLM / small-model CRUD + chat");
+  const model = new Command11("model").description("Model factory \u2014 LLM / small-model CRUD + chat");
   const llm = model.command("llm").description("Large language models");
-  llm.command("list").description("List LLM models").option("--name <s>", "filter by name").option("--type <t>", "model type filter").option("--limit <n>", "page size", int7, DEFAULT_LIST_LIMIT).option("--page <n>", "page", int7, 1).action(async (opts, cmd) => {
+  llm.command("list").description("List LLM models").option("--name <s>", "filter by name").option("--type <t>", "model type filter").option("--limit <n>", "page size", int8, DEFAULT_LIST_LIMIT).option("--page <n>", "page", int8, 1).action(async (opts, cmd) => {
     printJson(
       await clientFrom(cmd).models.llm.list({
         name: opts.name,
@@ -1950,7 +2018,7 @@ function modelCommand() {
   });
   addManagementCommands(llm, "llm");
   const small = model.command("small").description("Small models (embedding / reranker)");
-  small.command("list").description("List small models").option("--name <s>", "filter by name").option("--type <t>", "model type filter").option("--limit <n>", "page size", int7, DEFAULT_LIST_LIMIT).option("--page <n>", "page", int7, 1).action(async (opts, cmd) => {
+  small.command("list").description("List small models").option("--name <s>", "filter by name").option("--type <t>", "model type filter").option("--limit <n>", "page size", int8, DEFAULT_LIST_LIMIT).option("--page <n>", "page", int8, 1).action(async (opts, cmd) => {
     printJson(
       await clientFrom(cmd).models.small.list({
         name: opts.name,
@@ -1981,11 +2049,11 @@ function modelCommand() {
 }
 
 // src/commands/resource.ts
-import { Command as Command11 } from "commander";
-var int8 = (v) => Number.parseInt(v, 10);
+import { Command as Command12 } from "commander";
+var int9 = (v) => Number.parseInt(v, 10);
 function resourceCommand() {
-  const cmd = new Command11("resource").alias("res").description("Resources \u2014 list, find, get, query, delete");
-  cmd.command("list").description("List resources under a catalog").option("--catalog-id <id>", "filter by catalog id").option("--datasource-id <id>", "alias of --catalog-id").option("--category <c>", "resource category (table | logicview | dataset)").option("--type <c>", "alias of --category").option("--limit <n>", "page size", int8, DEFAULT_LIST_LIMIT).action(async (opts, cmd2) => {
+  const cmd = new Command12("resource").alias("res").description("Resources \u2014 list, find, get, query, delete");
+  cmd.command("list").description("List resources under a catalog").option("--catalog-id <id>", "filter by catalog id").option("--datasource-id <id>", "alias of --catalog-id").option("--category <c>", "resource category (table | logicview | dataset)").option("--type <c>", "alias of --category").option("--limit <n>", "page size", int9, DEFAULT_LIST_LIMIT).action(async (opts, cmd2) => {
     const data = await clientFrom(cmd2).resource.list({
       datasourceId: opts.catalogId ?? opts.datasourceId,
       category: opts.category ?? opts.type,
@@ -2003,7 +2071,7 @@ function resourceCommand() {
   cmd.command("get <id>").description("Get resource details").action(async (id, _opts, cmd2) => {
     printJson(await clientFrom(cmd2).resource.get(id), outputOptions(cmd2));
   });
-  cmd.command("query <id>").description("Fetch data rows from a resource").option("--limit <n>", "row limit", int8, DEFAULT_QUERY_LIMIT).option("--offset <n>", "row offset", int8, 0).option("--need-total", "include total count").action(async (id, opts, cmd2) => {
+  cmd.command("query <id>").description("Fetch data rows from a resource").option("--limit <n>", "row limit", int9, DEFAULT_QUERY_LIMIT).option("--offset <n>", "row offset", int9, 0).option("--need-total", "include total count").action(async (id, opts, cmd2) => {
     const data = await clientFrom(cmd2).resource.query(id, {
       limit: opts.limit,
       offset: opts.offset,
@@ -2018,11 +2086,11 @@ function resourceCommand() {
 }
 
 // src/commands/skill.ts
-import { Command as Command12 } from "commander";
-var int9 = (v) => Number.parseInt(v, 10);
+import { Command as Command13 } from "commander";
+var int10 = (v) => Number.parseInt(v, 10);
 function skillCommand() {
-  const cmd = new Command12("skill").description("Skill registry and market");
-  const listOpts = (c) => c.option("--name <s>", "filter by name").option("--source <s>", "filter by source").option("--status <s>", "filter by status").option("--limit <n>", "page size", int9, DEFAULT_LIST_LIMIT).option("--page <n>", "page", int9, 1);
+  const cmd = new Command13("skill").description("Skill registry and market");
+  const listOpts = (c) => c.option("--name <s>", "filter by name").option("--source <s>", "filter by source").option("--status <s>", "filter by status").option("--limit <n>", "page size", int10, DEFAULT_LIST_LIMIT).option("--page <n>", "page", int10, 1);
   listOpts(cmd.command("list").description("List skills")).option("--create-user <s>", "filter by creator").action(async (opts, cmd2) => {
     printJson(
       await clientFrom(cmd2).skills.list({
@@ -2108,11 +2176,11 @@ function skillCommand() {
 }
 
 // src/commands/toolbox.ts
-import { Command as Command13 } from "commander";
-var int10 = (v) => Number.parseInt(v, 10);
+import { Command as Command14 } from "commander";
+var int11 = (v) => Number.parseInt(v, 10);
 function toolboxCommand() {
-  const cmd = new Command13("toolbox").description("Agent toolbox lifecycle");
-  cmd.command("list").description("List toolboxes").option("--keyword <s>", "filter by keyword").option("--limit <n>", "page size", int10, DEFAULT_LIST_LIMIT).option("--offset <n>", "page offset", int10, 0).action(async (opts, cmd2) => {
+  const cmd = new Command14("toolbox").description("Agent toolbox lifecycle");
+  cmd.command("list").description("List toolboxes").option("--keyword <s>", "filter by keyword").option("--limit <n>", "page size", int11, DEFAULT_LIST_LIMIT).option("--offset <n>", "page offset", int11, 0).action(async (opts, cmd2) => {
     printJson(
       await clientFrom(cmd2).toolboxes.list({
         keyword: opts.keyword,
@@ -2153,7 +2221,7 @@ function toolboxCommand() {
   return group(cmd, "DECISION AGENT");
 }
 function toolCommand() {
-  const cmd = new Command13("tool").description("Tools inside a toolbox");
+  const cmd = new Command14("tool").description("Tools inside a toolbox");
   cmd.command("list").description("List tools in a toolbox").requiredOption("--toolbox <box-id>", "toolbox id").action(async (opts, cmd2) => {
     printJson(await clientFrom(cmd2).toolboxes.tools(opts.toolbox), outputOptions(cmd2));
   });
@@ -2169,7 +2237,7 @@ function toolCommand() {
       outputOptions(cmd2)
     );
   });
-  const invokeOpts = (c) => c.requiredOption("--toolbox <box-id>", "toolbox id").option("--body <json>", "request body JSON").option("--header <json>", "headers map JSON").option("--query <json>", "query params JSON").option("--path <json>", "path params JSON").option("--timeout <s>", "per-call timeout seconds", int10);
+  const invokeOpts = (c) => c.requiredOption("--toolbox <box-id>", "toolbox id").option("--body <json>", "request body JSON").option("--header <json>", "headers map JSON").option("--query <json>", "query params JSON").option("--path <json>", "path params JSON").option("--timeout <s>", "per-call timeout seconds", int11);
   const parseJson = (s, label) => {
     if (!s) return void 0;
     try {
@@ -2212,7 +2280,7 @@ function toolCommand() {
 
 // src/commands/trace.ts
 import { readFileSync as readFileSync4, writeFileSync } from "fs";
-import { Command as Command14 } from "commander";
+import { Command as Command15 } from "commander";
 
 // src/trace-ai/schema-validate.ts
 import { readFileSync as readFileSync3 } from "fs";
@@ -2290,7 +2358,7 @@ function validateSchemaFile(file, kind) {
 
 // src/commands/trace.ts
 function traceCommand() {
-  const cmd = new Command14("trace").description(
+  const cmd = new Command15("trace").description(
     "Trace AI \u2014 fetch spans, diagnose (symbolic + LLM rubric), scan, eval-set, schema validate"
   );
   cmd.command("get <conversation-id>").description("Fetch all trace spans for a conversation").option("--max-spans <n>", "max spans", (v) => Number.parseInt(v, 10)).action(async (conversationId, opts, cmd2) => {
@@ -2348,9 +2416,10 @@ function traceCommand() {
 }
 
 // src/commands/vega.ts
-import { Command as Command15 } from "commander";
+import { Command as Command16 } from "commander";
+var int12 = (v) => Number.parseInt(v, 10);
 function vegaCommand() {
-  const vega = new Command15("vega").description(
+  const vega = new Command16("vega").description(
     "Vega observability \u2014 catalog, resources, index build tasks"
   );
   const catalog = vega.command("catalog").description("Catalog entries");
@@ -2403,6 +2472,38 @@ function vegaCommand() {
   connector.command("get <type>").description("Get a connector type").action(async (type, _opts, cmd) => {
     printJson(await clientFrom(cmd).vega.connectorType(type), outputOptions(cmd));
   });
+  vega.command("sql").description("Run SQL / OpenSearch DSL directly against a vega-backend data source").option(
+    "--resource-type <type>",
+    "source type (mysql | postgresql | opensearch | \u2026); optional \u2014 inferred from the {{<id>}} placeholder"
+  ).option(
+    "--query <sql>",
+    "SQL string; reference a resource with a {{<resource-id>}} placeholder"
+  ).option("--stream-size <n>", "streaming batch size (100\u201310000)", int12).option("--query-timeout <s>", "query timeout in seconds (1\u20133600)", int12).option(
+    "-d, --data <json>",
+    "full request body as JSON (advanced; wins over --query/--resource-type)"
+  ).action(async (opts, cmd) => {
+    let body;
+    if (opts.data) {
+      try {
+        body = JSON.parse(opts.data);
+      } catch {
+        throw new InputError("--data must be valid JSON");
+      }
+    } else {
+      if (!opts.query) {
+        throw new InputError("Provide --query (and optionally --resource-type), or --data.");
+      }
+      body = {
+        query: opts.query,
+        // Optional — the backend infers the type from the {{<id>}} placeholder's
+        // catalog connector when omitted.
+        ...opts.resourceType ? { resource_type: opts.resourceType } : {},
+        ...opts.streamSize !== void 0 ? { stream_size: opts.streamSize } : {},
+        ...opts.queryTimeout !== void 0 ? { query_timeout: opts.queryTimeout } : {}
+      };
+    }
+    printJson(await clientFrom(cmd).vega.sql(body), outputOptions(cmd));
+  });
   const resource = vega.command("resource").description("Vega-backend resources");
   resource.command("list").description("List resources").option("--datasource-id <id>", "filter by catalog/datasource id").option("--catalog-id <id>", "alias of --datasource-id").option("--type <category>", "resource category").option("--category <category>", "alias of --type").option("--limit <n>", "page size", (v) => Number.parseInt(v, 10), DEFAULT_LIST_LIMIT).action(async (opts, cmd) => {
     printJson(
@@ -2450,11 +2551,12 @@ function vegaCommand() {
 }
 
 // src/cli.ts
-var program = new Command16();
+var program = new Command17();
 program.name("openbkn").description("Operate the BKN platform from the CLI").version(package_default.version, "-V, --version", "output the version number").option("--base-url <url>", "platform base URL (env: BKN_BASE_URL)").option("--token <value>", "access token (env: BKN_TOKEN)").option("--user <id|name>", "use specific user credentials (env: BKN_USER)").option("--json", "machine-readable JSON output").option("--compact", "single-line JSON output").option("--full", "human view: show all columns (default trims to the key ones)").option("--biz-domain <s>", "business domain (alias: -bd)").option("-k, --insecure", "skip TLS verification (dev / self-signed only)").showHelpAfterError();
 program.addCommand(authCommand());
 program.addCommand(callCommand());
 program.addCommand(configCommand());
+program.addCommand(appkeyCommand());
 program.addCommand(vegaCommand());
 program.addCommand(bknCommand());
 program.addCommand(resourceCommand());