@openbkn/bkn-sdk 0.1.1-alpha.16 → 0.1.1-alpha.19

package/dist/index.d.ts

@@ -59,12 +59,64 @@ interface RawCallResult {
 }
 
 /**
- * Admin (operator) client — user-management + authorization.
- * Reads and writes (org/user create/update/delete +
- * reset-password) implemented; org/user detail and writes go through ISFWeb
- * thrift where the REST routes are RegisterPrivate. Passed through as JSON.
+ * bkn-safe admin API (`/api/safe/v1/admin/*`, token-gated; the gateway-exposed
+ * replacement for the retired ISF UserManagement / Authorization / EACP). The
+ * logged-in user must be an admin: 401 = no/invalid token, 403 = not an admin.
+ * Only `audit list` has no endpoint (login-log retired by design). Response
+ * shapes: `{users|roles|departments, total}`; department `parent_id` (not the
+ * ISF `parent_deps[]`). See docs/exec-plans/admin-bkn-safe-migration.md.
+ * Also carries the cluster license hub (`/admin/license/*`, issue #224).
  */
 
+/** licverify judgement states. `invalid` also covers "no license installed". */
+type LicenseState = "valid" | "grace" | "fallback_community" | "invalid";
+/** GET /admin/license response (admin detail view). */
+interface LicenseDetail {
+    state: LicenseState;
+    /** Whether the installed license is fingerprint-bound to this instance. */
+    activated: boolean;
+    /** This cluster's machine code (present even with no license installed). */
+    instance_fp: string;
+    error?: string;
+    /** Background auto-renew failure — license itself may still be valid. */
+    renew_error?: string;
+    edition?: string;
+    lic_id?: string;
+    customer?: {
+        name?: string;
+        [k: string]: unknown;
+    };
+    /** Unix seconds; expires_at 0 = never expires (community). */
+    issued_at?: number;
+    expires_at?: number;
+    contract_expires_at?: number;
+    /** Only present in `grace` state. */
+    grace_remaining_days?: number;
+    features?: string[];
+    limits?: Record<string, number>;
+}
+/**
+ * Import outcome. Plain success = the stored license's detail. `stored: true`
+ * = the .lic was verified and stored, but issuer activation failed (HTTP
+ * 409/502) — both facts matter, the import is not lost.
+ */
+type LicenseImportResult = LicenseDetail | {
+    stored: true;
+    error: string;
+    license: LicenseDetail;
+};
+
+/**
+ * Admin (operator) input shapes — the CLI-facing contract for the `admin`
+ * command group. `src/resources/admin.ts` maps each of these onto the bkn-safe
+ * client in `./safe.ts`, which is where the requests live.
+ *
+ * The ISF clients that used to back these types (`/api/user-management/v1`,
+ * `/api/authorization/v1`, `/isfweb/api/ShareMgnt`, `/api/eacp/v1`) were removed
+ * once ISF was retired — see docs/exec-plans/admin-bkn-safe-migration.md. Some
+ * fields here are wider than bkn-safe accepts and are dropped in the mapping;
+ * that lossiness is documented in the migration plan.
+ */
 interface AdminListOptions {
     role?: string;
     offset?: number;
@@ -184,6 +236,17 @@ declare function admin(ctx: RequestContext): {
         ok: true;
     }>;
     auditList: (_opts?: AuditListOptions) => never;
+    licenseGet: () => Promise<LicenseDetail>;
+    licenseImport: (licenseText: string, opts?: {
+        receipt?: boolean;
+    }) => Promise<LicenseImportResult>;
+    licenseActivate: () => Promise<LicenseDetail>;
+    licenseRemove: () => Promise<{
+        ok: true;
+    }>;
+    licenseFingerprint: () => Promise<{
+        instance_fp: string;
+    }>;
 };
 
 interface ChatResult {
@@ -436,7 +499,7 @@ interface CreateFromCatalogOptions {
     tables?: string[];
     pkMap?: Record<string, string>;
     build?: boolean;
-    /** Per-table resource columns to vectorize (sets the build task's embedding_fields). */
+    /** Per-table resource columns to vectorize (sets resource schema index features). */
     embeddingFields?: Record<string, string[]>;
     embeddingModel?: string;
     noRollback?: boolean;
@@ -587,13 +650,74 @@ declare function models(ctx: RequestContext): {
  * Responses passed through as parsed JSON.
  */
 
+interface PropertyFeature {
+    name?: string;
+    display_name?: string;
+    feature_type: "keyword" | "fulltext" | "vector" | string;
+    description?: string;
+    ref_property?: string;
+    is_default?: boolean;
+    is_native?: boolean;
+    config?: Record<string, unknown>;
+}
+interface ResourceProperty {
+    name: string;
+    display_name?: string;
+    type?: string;
+    description?: string;
+    original_name?: string;
+    original_type?: string;
+    original_description?: string;
+    features?: PropertyFeature[];
+    attributes?: Record<string, unknown>;
+    extensions?: Record<string, string>;
+}
+interface ResourceIndexConfig {
+    build_key_fields?: string[];
+    default_fulltext_analyzer?: string;
+    default_embedding_model?: string;
+}
 interface ListResourcesOptions {
     datasourceId?: string;
     name?: string;
     /** Resource category, e.g. table | logicview. */
     category?: string;
+    status?: string;
+    database?: string;
     limit?: number;
+    offset?: number;
+    sort?: "name" | "create_time" | "update_time" | string;
+    direction?: "asc" | "desc";
+    includeExtensions?: boolean;
+    includeExtensionKeys?: string;
+    extensionPairs?: Array<{
+        key: string;
+        value: string;
+    }>;
+}
+interface UpdateResourceOptions {
+    name?: string;
+    catalogId?: string;
+    tags?: string[];
+    description?: string;
+    category?: string;
+    status?: string;
+    database?: string;
+    sourceIdentifier?: string;
+    sourceMetadata?: Record<string, unknown>;
+    schemaDefinition?: ResourceProperty[];
+    indexConfig?: ResourceIndexConfig | null;
+    logicDefinition?: unknown;
+    extensions?: Record<string, string>;
 }
+interface ConfigureResourceIndexOptions {
+    buildKeyFields?: string[];
+    embeddingFields?: string[];
+    embeddingModel?: string;
+    fulltextFields?: string[];
+    fulltextAnalyzer?: string;
+}
+declare function configureResourceIndex(ctx: RequestContext, id: string, opts: ConfigureResourceIndexOptions): Promise<unknown>;
 interface FindResourceOptions {
     datasourceId?: string;
     /** Exact name match instead of fuzzy. */
@@ -611,6 +735,8 @@ declare function resources(ctx: RequestContext): {
     list: (opts?: ListResourcesOptions) => Promise<unknown>;
     get: (id: string) => Promise<unknown>;
     delete: (id: string) => Promise<unknown>;
+    update: (id: string, patch: UpdateResourceOptions) => Promise<unknown>;
+    configureIndex: (id: string, opts: Parameters<typeof configureResourceIndex>[2]) => Promise<unknown>;
     find: (name: string, opts?: FindResourceOptions) => Promise<unknown>;
     query: (id: string, opts?: QueryResourceOptions) => Promise<unknown>;
 };
@@ -833,7 +959,8 @@ declare function trace(ctx: RequestContext): {
 
 /**
  * Vega backend client — catalog/resource reads + BuildTask (index build).
- * Build config lives on the task (CreateBuildTaskRequest), per the platform model.
+ * Build config is snapshotted from the Resource's schema_definition/features and
+ * index_config when the BuildTask is created.
  */
 
 declare const BuildMode: z.ZodEnum<["batch", "streaming"]>;
@@ -842,24 +969,15 @@ type BuildMode = z.infer<typeof BuildMode>;
 declare const CreateBuildTaskRequest: z.ZodObject<{
     resource_id: z.ZodString;
     mode: z.ZodEnum<["batch", "streaming"]>;
-    embedding_fields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    build_key_fields: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    embedding_model: z.ZodOptional<z.ZodString>;
-    model_dimensions: z.ZodOptional<z.ZodNumber>;
+    execute_type: z.ZodOptional<z.ZodEnum<["incremental", "full"]>>;
 }, "strip", z.ZodTypeAny, {
     mode: "batch" | "streaming";
     resource_id: string;
-    embedding_fields?: string[] | undefined;
-    build_key_fields?: string[] | undefined;
-    embedding_model?: string | undefined;
-    model_dimensions?: number | undefined;
+    execute_type?: "full" | "incremental" | undefined;
 }, {
     mode: "batch" | "streaming";
     resource_id: string;
-    embedding_fields?: string[] | undefined;
-    build_key_fields?: string[] | undefined;
-    embedding_model?: string | undefined;
-    model_dimensions?: number | undefined;
+    execute_type?: "full" | "incremental" | undefined;
 }>;
 type CreateBuildTaskRequest = z.infer<typeof CreateBuildTaskRequest>;
 declare const BuildTask: z.ZodObject<{
@@ -871,10 +989,21 @@ declare const BuildTask: z.ZodObject<{
     total_count: z.ZodOptional<z.ZodNumber>;
     synced_count: z.ZodOptional<z.ZodNumber>;
     vectorized_count: z.ZodOptional<z.ZodNumber>;
-    embedding_fields: z.ZodOptional<z.ZodString>;
-    build_key_fields: z.ZodOptional<z.ZodString>;
-    embedding_model: z.ZodOptional<z.ZodString>;
-    model_dimensions: z.ZodOptional<z.ZodNumber>;
+    index_config: z.ZodOptional<z.ZodUnknown>;
+    catalog_id: z.ZodOptional<z.ZodString>;
+    index_health: z.ZodOptional<z.ZodObject<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     id: z.ZodString;
     resource_id: z.ZodOptional<z.ZodString>;
@@ -884,10 +1013,21 @@ declare const BuildTask: z.ZodObject<{
     total_count: z.ZodOptional<z.ZodNumber>;
     synced_count: z.ZodOptional<z.ZodNumber>;
     vectorized_count: z.ZodOptional<z.ZodNumber>;
-    embedding_fields: z.ZodOptional<z.ZodString>;
-    build_key_fields: z.ZodOptional<z.ZodString>;
-    embedding_model: z.ZodOptional<z.ZodString>;
-    model_dimensions: z.ZodOptional<z.ZodNumber>;
+    index_config: z.ZodOptional<z.ZodUnknown>;
+    catalog_id: z.ZodOptional<z.ZodString>;
+    index_health: z.ZodOptional<z.ZodObject<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     id: z.ZodString;
     resource_id: z.ZodOptional<z.ZodString>;
@@ -897,21 +1037,48 @@ declare const BuildTask: z.ZodObject<{
     total_count: z.ZodOptional<z.ZodNumber>;
     synced_count: z.ZodOptional<z.ZodNumber>;
     vectorized_count: z.ZodOptional<z.ZodNumber>;
-    embedding_fields: z.ZodOptional<z.ZodString>;
-    build_key_fields: z.ZodOptional<z.ZodString>;
-    embedding_model: z.ZodOptional<z.ZodString>;
-    model_dimensions: z.ZodOptional<z.ZodNumber>;
+    index_config: z.ZodOptional<z.ZodUnknown>;
+    catalog_id: z.ZodOptional<z.ZodString>;
+    index_health: z.ZodOptional<z.ZodObject<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        embedding: z.ZodString;
+        fulltext: z.ZodString;
+        usable: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">>>;
 }, z.ZodTypeAny, "passthrough">>;
 type BuildTask = z.infer<typeof BuildTask>;
+interface ListBuildTasksOptions {
+    limit?: number;
+    offset?: number;
+    resourceId?: string;
+    catalogId?: string;
+    status?: string | string[];
+    active?: boolean;
+    mode?: BuildMode;
+    orderBy?: "default" | "created_at" | "updated_at" | "status" | "mode";
+    order?: "asc" | "desc";
+}
+interface DeleteBuildTasksOptions {
+    ignoreMissing?: boolean;
+    deleteActiveIndex?: boolean;
+}
 interface SqlQueryRequest {
     /** SQL string (MySQL/MariaDB/PostgreSQL) or an OpenSearch DSL object. */
     query: string | Record<string, unknown>;
+    /** Query mode. `stream` uses cursor-style paging through `query_id`. */
+    query_type?: "standard" | "stream";
     /**
-     * Source type (mysql | mariadb | postgresql | opensearch …). Optional — when
-     * the query carries a `{{<resource-id>}}` placeholder the backend infers the
-     * type from that resource's Catalog connector. Pass it only to override.
+     * Source type (mysql | mariadb | postgresql | opensearch …). Required by the
+     * current vega-backend raw query handler.
      */
-    resource_type?: string;
+    resource_type: string;
     /** Streaming batch size (100–10000, default server-side). */
     stream_size?: number;
     /** Query timeout in seconds (1–3600). */
@@ -922,6 +1089,19 @@ interface SqlQueryRequest {
 interface ListCatalogsOptions {
     limit?: number;
     offset?: number;
+    name?: string;
+    tag?: string;
+    type?: "physical" | "logical" | string;
+    enabled?: boolean;
+    healthCheckStatus?: string;
+    includeExtensions?: boolean;
+    includeExtensionKeys?: string;
+    extensionPairs?: Array<{
+        key: string;
+        value: string;
+    }>;
+    sort?: "name" | "create_time" | "update_time" | string;
+    direction?: "asc" | "desc";
 }
 /** POST /catalogs body. `connector_config` shape varies by connector (raw passthrough). */
 interface CreateCatalogRequest {
@@ -931,13 +1111,20 @@ interface CreateCatalogRequest {
     tags?: string[];
     description?: string;
     enabled?: boolean;
+    id?: string;
+    internal?: boolean;
+    extensions?: Record<string, string>;
 }
 
 declare function vega(ctx: RequestContext): {
     catalogs: (opts?: ListCatalogsOptions) => Promise<unknown>;
     getCatalog: (id: string) => Promise<unknown>;
     createCatalog: (req: CreateCatalogRequest) => Promise<unknown>;
+    updateCatalog: (id: string, req: Partial<CreateCatalogRequest>) => Promise<unknown>;
     enableCatalog: (id: string) => Promise<unknown>;
+    disableCatalog: (id: string) => Promise<unknown>;
+    deleteCatalog: (id: string) => Promise<unknown>;
+    testCatalogConnection: (id: string) => Promise<unknown>;
     discoverCatalog: (id: string, wait?: boolean) => Promise<unknown>;
     catalogResources: (id: string, category?: string) => Promise<unknown>;
     catalogHealth: (ids: string[]) => Promise<unknown>;
@@ -960,11 +1147,28 @@ declare function vega(ctx: RequestContext): {
         total_count: zod.ZodOptional<zod.ZodNumber>;
         synced_count: zod.ZodOptional<zod.ZodNumber>;
         vectorized_count: zod.ZodOptional<zod.ZodNumber>;
-        embedding_fields: zod.ZodOptional<zod.ZodString>;
-        build_key_fields: zod.ZodOptional<zod.ZodString>;
-        embedding_model: zod.ZodOptional<zod.ZodString>;
-        model_dimensions: zod.ZodOptional<zod.ZodNumber>;
+        index_config: zod.ZodOptional<zod.ZodUnknown>;
+        catalog_id: zod.ZodOptional<zod.ZodString>;
+        index_health: zod.ZodOptional<zod.ZodObject<{
+            embedding: zod.ZodString;
+            fulltext: zod.ZodString;
+            usable: zod.ZodBoolean;
+        }, "passthrough", zod.ZodTypeAny, zod.objectOutputType<{
+            embedding: zod.ZodString;
+            fulltext: zod.ZodString;
+            usable: zod.ZodBoolean;
+        }, zod.ZodTypeAny, "passthrough">, zod.objectInputType<{
+            embedding: zod.ZodString;
+            fulltext: zod.ZodString;
+            usable: zod.ZodBoolean;
+        }, zod.ZodTypeAny, "passthrough">>>;
     }, zod.ZodTypeAny, "passthrough">>;
+    buildTasks: (opts?: ListBuildTasksOptions) => Promise<unknown>;
+    deleteBuildTasks: (ids: string[], opts?: DeleteBuildTasksOptions) => Promise<unknown>;
+    startBuildTask: (taskId: string, opts?: {
+        reset?: boolean;
+    }) => Promise<unknown>;
+    stopBuildTask: (taskId: string) => Promise<unknown>;
 };
 
 interface BknClient {
@@ -1025,16 +1229,20 @@ interface TokenConfig {
     refreshToken?: string;
     idToken?: string;
     expiresAt?: string;
-    /** Skip TLS verification for this platform (saved by `auth login -k`). */
-    tlsInsecure?: boolean;
-    /** Platform has no auth stack (no bkn-safe) — requests carry no token. */
-    noAuth?: boolean;
     /** Login name persisted at login time (fallback when JWT lacks claims). */
     username?: string;
     /** Human-readable name from userinfo. */
     displayName?: string;
 }
-/** userId from the token's JWT `sub` (id_token first), else "default". */
+/**
+ * userId from the token's JWT `sub` (id_token first), else "default".
+ *
+ * The `sub` is attacker-supplied — the JWT is never signature-checked — and it
+ * becomes a path segment under `userDir`. An unconstrained one escapes the
+ * store: `sub: "../../<other-platform>/users/default"` overwrites another
+ * platform's saved token, so the victim's later commands there authenticate as
+ * whoever issued this token. Constrain it the way BKN_PROFILE is constrained.
+ */
 declare function userIdFromToken(token: TokenConfig): string;
 interface PlatformUser {
     userId: string;
@@ -1053,20 +1261,12 @@ declare function hostOf(baseUrl: string): string;
 declare function attachToken(baseUrl: string, accessToken: string, opts?: {
     refreshToken?: string;
     idToken?: string;
-    insecure?: boolean;
     username?: string;
 }): {
     baseUrl: string;
     userId: string;
     username?: string;
 };
-/** Register a no-auth platform session (no token; the platform has no bkn-safe). */
-declare function attachNoAuth(baseUrl: string, opts?: {
-    insecure?: boolean;
-}): {
-    baseUrl: string;
-    noAuth: true;
-};
 interface AuthStatus {
     baseUrl?: string;
     userId?: string;
@@ -1074,15 +1274,22 @@ interface AuthStatus {
     username?: string;
     expired?: boolean;
 }
-declare function status(): AuthStatus;
-declare function currentToken(): string;
+declare function status(opts?: {
+    user?: string;
+}): AuthStatus;
+declare function currentToken(opts?: {
+    user?: string;
+}): string;
 /**
  * Like {@link currentToken} but proactively refreshes an expired access token
  * when a refresh token is stored, persisting the result. API requests already
  * refresh on a 401 (see api/http.ts); this covers the `auth token` getter,
  * whose output is copied out and used elsewhere where no 401 retry can help.
  */
-declare function currentTokenFresh(): Promise<string>;
+declare function currentTokenFresh(opts?: {
+    insecure?: boolean;
+    user?: string;
+}): Promise<string>;
 interface WhoamiResult extends JwtClaims {
     /** Platform the active session belongs to. */
     baseUrl?: string;
@@ -1091,7 +1298,9 @@ interface WhoamiResult extends JwtClaims {
     /** Resolved account/login name — what `auth login` looked up and stored. */
     username?: string;
 }
-declare function whoami(): WhoamiResult;
+declare function whoami(opts?: {
+    user?: string;
+}): WhoamiResult;
 interface PlatformListItem {
     baseUrl: string;
     userId: string;
@@ -1126,7 +1335,6 @@ declare function exportCreds(): {
 type auth_AuthStatus = AuthStatus;
 type auth_PlatformListItem = PlatformListItem;
 type auth_WhoamiResult = WhoamiResult;
-declare const auth_attachNoAuth: typeof attachNoAuth;
 declare const auth_attachToken: typeof attachToken;
 declare const auth_currentToken: typeof currentToken;
 declare const auth_currentTokenFresh: typeof currentTokenFresh;
@@ -1142,7 +1350,7 @@ declare const auth_userIdFromToken: typeof userIdFromToken;
 declare const auth_usersOf: typeof usersOf;
 declare const auth_whoami: typeof whoami;
 declare namespace auth {
-  export { type auth_AuthStatus as AuthStatus, type auth_PlatformListItem as PlatformListItem, type auth_WhoamiResult as WhoamiResult, auth_attachNoAuth as attachNoAuth, auth_attachToken as attachToken, auth_currentToken as currentToken, auth_currentTokenFresh as currentTokenFresh, auth_deletePlatform as deletePlatform, auth_exportCreds as exportCreds, auth_hostOf as hostOf, auth_listPlatforms as listPlatforms, auth_logout as logout, auth_status as status, auth_switchUser as switchUser, auth_use as use, auth_userIdFromToken as userIdFromToken, auth_usersOf as usersOf, auth_whoami as whoami };
+  export { type auth_AuthStatus as AuthStatus, type auth_PlatformListItem as PlatformListItem, type auth_WhoamiResult as WhoamiResult, auth_attachToken as attachToken, auth_currentToken as currentToken, auth_currentTokenFresh as currentTokenFresh, auth_deletePlatform as deletePlatform, auth_exportCreds as exportCreds, auth_hostOf as hostOf, auth_listPlatforms as listPlatforms, auth_logout as logout, auth_status as status, auth_switchUser as switchUser, auth_use as use, auth_userIdFromToken as userIdFromToken, auth_usersOf as usersOf, auth_whoami as whoami };
 }
 
 interface RequestInitEx {
@@ -1150,7 +1358,7 @@ interface RequestInitEx {
     /** JSON body — serialized and Content-Type set automatically. */
     body?: unknown;
     /** Query params appended to the path. */
-    query?: Record<string, string | number | boolean | undefined>;
+    query?: Record<string, string | number | boolean | Array<string | number | boolean> | undefined>;
     headers?: Record<string, string>;
     /** Per-request timeout; defaults to 30s. */
     timeoutMs?: number;

package/dist/index.js

@@ -19,7 +19,7 @@ import {
   toolboxes,
   trace,
   vega
-} from "./chunk-SH2KLES5.js";
+} from "./chunk-ISJHU26W.js";
 export {
   DEFAULT_BUSINESS_DOMAIN,
   DEFAULT_LIST_LIMIT,

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@openbkn/bkn-sdk",
-  "version": "0.1.1-alpha.16",
+  "version": "0.1.1-alpha.19",
   "description": "Unified TypeScript SDK + CLI for the BKN (Business Knowledge Network) platform.",
   "type": "module",
-  "license": "SEE LICENSE IN LICENSE",
+  "license": "Apache-2.0",
   "engines": {
     "node": ">=18"
   },
@@ -18,7 +18,7 @@
       "import": "./dist/index.js"
     }
   },
-  "files": ["dist", "README.md", "README.zh.md", "LICENSE", "NOTICE"],
+  "files": ["dist", "!dist/**/*.map", "README.md", "README.zh.md", "LICENSE", "NOTICE"],
   "publishConfig": {
     "access": "public"
   },
@@ -31,7 +31,8 @@
     "build": "tsup",
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
-    "lint": "biome check . && tsc --noEmit",
+    "check:deps": "node scripts/check-no-self-dep.mjs",
+    "lint": "npm run check:deps && biome check . && tsc --noEmit",
     "format": "biome format --write .",
     "test": "vitest run",
     "test:cover": "vitest run --coverage",
@@ -40,12 +41,12 @@
   },
   "dependencies": {
     "@clack/prompts": "^0.9.1",
-    "@openbkn/bkn-sdk": "^0.1.1-alpha.3",
     "chalk": "^5.4.1",
     "commander": "^13.1.0",
     "csv-parse": "^6.2.1",
     "js-yaml": "^4.2.0",
     "jszip": "^3.10.1",
+    "undici": "^8.7.0",
     "zod": "^3.24.1"
   },
   "devDependencies": {