@openbkn/bkn-sdk 0.1.1-alpha.3 → 0.1.1-alpha.5

package/dist/cli.js

@@ -18,6 +18,7 @@ import {
   fetchAuthStatus,
   formatError,
   getUserSafe,
+  isHeadless,
   listPlatforms,
   logout,
   openBrowser,
@@ -35,7 +36,7 @@ import {
   use,
   whoami,
   writePlatformConfig
-} from "./chunk-APJNRHLS.js";
+} from "./chunk-67GKXAWG.js";
 
 // src/cli.ts
 import { Command as Command16 } from "commander";
@@ -43,7 +44,7 @@ import { Command as Command16 } from "commander";
 // package.json
 var package_default = {
   name: "@openbkn/bkn-sdk",
-  version: "0.1.1-alpha.3",
+  version: "0.1.1-alpha.5",
   description: "Unified TypeScript SDK + CLI for the BKN (Business Knowledge Network) platform.",
   type: "module",
   license: "Apache-2.0",
@@ -83,6 +84,7 @@ var package_default = {
   },
   dependencies: {
     "@clack/prompts": "^0.9.1",
+    "@openbkn/bkn-sdk": "^0.1.1-alpha.3",
     chalk: "^5.4.1",
     commander: "^13.1.0",
     "csv-parse": "^6.2.1",
@@ -448,7 +450,8 @@ function registerAuthLeaves(cmd) {
           timeoutMs: opts.timeout * 1e3
         });
       } else {
-        const openInBrowser = !opts.device && opts.browser !== false;
+        const headless = isHeadless();
+        const openInBrowser = !opts.device && opts.browser !== false && !headless;
         tokens = await deviceLogin(url, {
           clientId: opts.clientId,
           audience: opts.audience,
@@ -463,6 +466,8 @@ User code: ${userCode}
 `
             );
             if (openInBrowser) openBrowser(target);
+            else if (headless && !opts.device && opts.browser !== false)
+              process.stderr.write("(headless \u2014 approve on any machine with a browser)\n");
             process.stderr.write("Waiting for authorization\u2026\n");
           }
         });
@@ -575,6 +580,7 @@ function authCommand() {
 
 // src/commands/admin.ts
 var int = (v) => Number.parseInt(v, 10);
+var DEFAULT_RESET_PASSWORD = "openbkn";
 function adminCommand() {
   const admin = new Command2("admin").description(
     "Operator CLI (kweaver-admin): org, user, role, models, audit"
@@ -707,12 +713,21 @@ function adminCommand() {
   user.command("delete <id>").description("Delete a user").action(async (id, _opts, cmd) => {
     printJson(await clientFrom(cmd).admin.userDelete(id), outputOptions(cmd));
   });
-  user.command("reset-password [id]").description("Reset a user's password (RSA-encrypted in transit)").option("--id <userId>", "explicit user UUID (alt to the positional id)").option("--user <account>", "resolve the user by account / login name").option("--password <s>", "the new password").option("--new-password <s>", "the new password (alias of --password)").option("--prompt-password", "prompt for the new password interactively").option("-y, --yes", "skip confirmation").action(async (id, opts, cmd) => {
+  user.command("reset-password [id]").description("Reset a user's password (defaults to the platform initial password)").option("--id <userId>", "explicit user UUID (alt to the positional id)").option("--user <account>", "resolve the user by account / login name").option("--password <s>", "the new password (default: platform initial 'openbkn')").option("--new-password <s>", "the new password (alias of --password)").option("-y, --yes", "skip confirmation").action(async (id, opts, cmd) => {
     const userId = id ?? opts.id ?? opts.user;
-    const pwd = opts.password ?? opts.newPassword;
     if (!userId) throw new Error("Provide a user id (positional or --id).");
-    if (!pwd) throw new Error("Provide --password / --new-password.");
-    printJson(await clientFrom(cmd).admin.userResetPassword(userId, pwd), outputOptions(cmd));
+    const pwd = opts.password ?? opts.newPassword ?? DEFAULT_RESET_PASSWORD;
+    const r = await clientFrom(cmd).admin.userResetPassword(userId, pwd);
+    const out = outputOptions(cmd);
+    if (out.json || out.compact) printJson(r, out);
+    else if (opts.password || opts.newPassword)
+      process.stdout.write(`Password reset for ${userId}.
+`);
+    else
+      process.stdout.write(
+        `Password reset for ${userId} to the initial password '${DEFAULT_RESET_PASSWORD}' (must change on next login).
+`
+      );
   });
   const role = admin.command("role").description("Role management");
   role.command("list").description("List roles").option("--keyword <s>", "filter by keyword").option("--limit <n>", "page size", int, 100).option("--offset <n>", "page offset", int, 0).option("--source <s>", "role source filter (business | user)").action(async (opts, cmd) => {