@tutorflow/cli 0.1.2 → 0.3.0

package/README.md

@@ -1,17 +1,18 @@
 # @tutorflow/cli
 
-TutorFlow CLI for creating AI-powered educational content (slides, videos, courses) and evaluating student responses from the terminal. Wraps the TutorFlow Platform API (`/v1/platform/*`).
+TutorFlow CLI for creating AI-powered educational content (slides, videos, courses) and evaluating student responses from the terminal or from AI agents. Wraps the TutorFlow Platform API (`/v1/platform/*`).
 
 - **Binary:** `tutorflow`
-- **Version:** `0.1.0`
-- **Node:** `>= 18`
-- **Package:** `@tutorflow/cli`
+- **Package:** [`@tutorflow/cli`](https://www.npmjs.com/package/@tutorflow/cli) (current version in [`package.json`](package.json))
+- **Source:** [tutorflow-io/cli](https://github.com/tutorflow-io/cli) (private)
+- **Node:** `>= 18` for runtime, `>= 20` for development (Vitest 4 requirement)
+- **Agent-friendly:** every command supports `--json` output, env-var auth (`TUTORFLOW_API_KEY`), and proper exit codes — see [Non-interactive / agent usage](#non-interactive--agent-usage)
 
 ## Installation
 
-### A. End users (other machines)
+### A. End users (recommended)
 
-Once published to npm, install globally with any package manager:
+Install globally with any package manager:
 
 ```bash
 npm  install -g @tutorflow/cli
@@ -24,122 +25,225 @@ Then anywhere on the system:
 ```bash
 tutorflow --version
 tutorflow auth login
+tutorflow agent register --name "My Agent Workspace" --slug my-agent-workspace --email me@example.com
+tutorflow --json platform manifest
 tutorflow slide create "My first deck"
 ```
 
-> **One-shot use without installing** (npm 5.2+):
->
-> ```bash
-> npx @tutorflow/cli slide create "My first deck"
-> ```
-
-If you publish to a private registry (e.g. GitHub Packages or a self-hosted Verdaccio), users first authenticate to that registry and scope the `@tutorflow` namespace to it:
+**One-shot use without installing**:
 
 ```bash
-npm config set @tutorflow:registry https://npm.pkg.github.com
-npm login --scope=@tutorflow --registry=https://npm.pkg.github.com
-npm install -g @tutorflow/cli
+npx @tutorflow/cli slide create "My first deck"
 ```
 
-### B. Local development (this monorepo)
+This is the recommended path for AI agents and CI environments — no install step, always pulls the latest published version.
 
-From the monorepo root:
+### B. Local development (this repo)
 
 ```bash
+git clone https://github.com/tutorflow-io/cli.git
+cd cli
 pnpm install
-pnpm --filter @tutorflow/cli build      # tsc → ./dist
-pnpm --filter @tutorflow/cli link       # npm link → exposes `tutorflow` globally
+pnpm build
+pnpm link              # exposes the `tutorflow` binary globally
 ```
 
 Verify:
 
 ```bash
-tutorflow --version       # 0.1.0
+tutorflow --version       # matches package.json
 tutorflow --help
 ```
 
 To unlink later: `npm unlink -g @tutorflow/cli`.
 
-## Publishing
+Run from source without building:
+
+```bash
+pnpm dev -- <command> [options]
+# e.g. pnpm dev -- slide list --limit 5
+```
 
-The package is **scoped** (`@tutorflow/...`), so the first publish needs `--access public` (or a paid org plan for private packages).
+## Releasing
 
-### One-time setup
+Releases are automated by GitHub Actions on pushes to `master` / `main`.
+Auth uses **npm OIDC Trusted Publishing** — no `NPM_TOKEN` secret in CI.
 
-1. Make sure you're a member of the `@tutorflow` npm org with publish rights.
-2. Login from the CLI:
+```bash
+git checkout master
+git pull
 
-   ```bash
-   npm login                         # public registry
-   # or:
-   npm login --scope=@tutorflow --registry=<your-private-registry>
-   ```
+npm version patch --no-git-tag-version  # 0.3.0 → 0.3.1 (or minor / major)
+git push origin master  # Release workflow publishes if that version is not on npm yet
+```
 
-3. Confirm `apps/cli/package.json` has the right metadata. Recommended fields to add before the first release:
+The [`Release` workflow](.github/workflows/release.yml):
 
-   ```json
-   {
-     "files": ["dist", "README.md"],
-     "publishConfig": { "access": "public" },
-     "repository": "https://github.com/<org>/tutorflow-monorepo",
-     "license": "UNLICENSED"
-   }
-   ```
+1. Reads `package.json` name and version
+2. Skips npm publish if that exact version already exists
+3. Runs `pnpm typecheck` + `pnpm build` + `pnpm test`
+4. Publishes new versions with `npm publish --access public` (auth via OIDC)
+5. Creates a GitHub Release only for `v*.*.*` tag pushes
 
-   The `files` allowlist keeps `src/`, `node_modules/`, and `tsconfig.json` out of the tarball.
+For full setup (npm org, Trusted Publisher config) see [RELEASING.md](RELEASING.md).
 
-### Release flow
+### Pre-release / beta
 
 ```bash
-cd apps/cli
+npm version prerelease --preid=beta --no-git-tag-version  # 0.3.1 → 0.3.2-beta.0
+git push origin master
+```
 
-# 1. bump version (creates a git tag)
-npm version patch          # 0.1.0 → 0.1.1
-# or: npm version minor / major / prerelease --preid=beta
+Pre-release versions publish to a dist-tag derived from the prerelease id
+(`0.3.1-beta.0` publishes with `--tag beta`).
 
-# 2. clean build
-rm -rf dist
-pnpm build
+## ⚠️ Caveats & gotchas
+
+These tripped us up during initial setup. Read before changing release infrastructure.
+
+### Versioning
+
+- **Don't hardcode the version in `src/index.ts`.** It reads `version` from [`package.json`](package.json) via `resolveJsonModule`. Hardcoding will silently lie to users via `--version` after every `npm version` bump.
+- The `prepublishOnly` script in `package.json` rebuilds `dist/` before publish. Don't skip it.
+
+### npm Trusted Publishing (OIDC)
+
+- **npm CLI must be 11.5.1+** for OIDC auth. npm also requires a modern Node 22 runtime for trusted publishing, so the workflow uses Node 22.x and invokes `pnpm dlx npm@latest ...` for registry checks and publish. Do not replace that with the runner's bundled npm unless you verify its version supports OIDC trusted publishing.
+- The Trusted Publisher binding at [npmjs.com/package/@tutorflow/cli/access](https://www.npmjs.com/package/@tutorflow/cli/access) hardcodes:
+  - GitHub org: `tutorflow-io`
+  - Repo: `cli`
+  - Workflow filename: `release.yml`
+  - Environment: (none)
+
+  Renaming the repo, moving the workflow file, or adding an `environment:` to the publish job will break OIDC auth until the binding is updated.
+- Local manual publishes still need a token (set `NPM_TOKEN` in `.env` or run `npm login`). Use a Granular Access Token with **"Bypass two-factor authentication (2FA)"** checked, otherwise CI/scripts get `EOTP` errors.
+
+### Provenance
+
+- `--provenance` is **disabled** in [release.yml](.github/workflows/release.yml). npm only accepts provenance attestations from **public** GitHub repos. Add `--provenance` back to the `npm publish` command when this repo goes public.
+
+### Node + tooling
+
+- **Vitest 4.x requires Node 20+** (uses `node:util.styleText`). CI tests Node 20 and Node 22, while release publishing runs on Node 22 for npm OIDC. The runtime CLI itself still supports Node 18 (declared in `package.json#engines`).
+
+### Tarball hygiene
+
+- `tsconfig.json` excludes `**/*.test.ts` so test files don't end up in `dist/` (and therefore not in the published tarball).
+- `package.json#files` is an allowlist (`dist`, `README.md`, `LICENSE`). Anything not listed is excluded.
+- Run `npm pack --dry-run` to inspect the tarball before publish.
+
+### Source maps and a private repo
+
+The published tarball currently includes `.js.map` and `.d.ts.map` files which embed paths from the build environment. While the source itself isn't shipped, this leaks file structure. If that matters, set `sourceMap: false` and `declarationMap: false` in [tsconfig.json](tsconfig.json) before going public.
+
+## Development
+
+Run with `tsx` (no build step):
+
+```bash
+pnpm dev -- <command> [options]
+# e.g. pnpm dev -- slide list --limit 5
+```
+
+Build artifacts land in `dist/` (entry: `dist/index.js`, declared in `package.json#bin`).
+
+## Non-interactive / agent usage
 
-# 3. (optional) inspect what will be published
-npm pack --dry-run
+Every command supports the contract below so AI agents and CI scripts can use the CLI without a TTY.
 
-# 4. publish
-npm publish --access public
+### Auth without prompts
+
+```bash
+# Option 1: env var (preferred for one-shot calls)
+TUTORFLOW_API_KEY=tf_xxx tutorflow --json slide list
+
+# Option 2: persist to ~/.tutorflow/config.json once
+tutorflow auth login --api-key tf_xxx
+tutorflow --json slide create "Photosynthesis for 5th graders" -n 12
 ```
 
-For pre-release channels (so end users don't auto-pull untested versions):
+`TUTORFLOW_API_KEY` always wins over the config file. `tutorflow auth whoami --json` reports `source: "env" | "config"` so an agent can verify which credential is active.
+
+### Machine-readable output
+
+`--json` (or `TUTORFLOW_JSON=1`) makes every command emit a single JSON line on stdout. Errors emit JSON to stderr.
 
 ```bash
-npm version prerelease --preid=beta    # 0.1.1 → 0.1.2-beta.0
-npm publish --tag beta --access public
-# users install with: npm install -g @tutorflow/cli@beta
+$ tutorflow --json auth whoami
+{"authenticated":true,"apiKeyPreview":"tf_xxxxxxx...","baseUrl":"https://api.tutorflow.io","source":"env"}
+
+$ tutorflow --json auth whoami    # without auth
+# stdout: (empty)
+# stderr: {"error":{"message":"Not authenticated","code":"EAUTH"}}
+# exit:   1
 ```
 
-### CI publishing (sketch)
+List commands return raw arrays:
+
+```bash
+$ tutorflow --json slide list --limit 3
+[{"id":"...","title":"...","status":"ready","createdAt":"..."},...]
+```
 
-In GitHub Actions, after `pnpm build`:
+Pipe into `jq` for downstream automation:
 
-```yaml
-- run: echo "//registry.npmjs.org/:_authToken=${NPM_TOKEN}" > ~/.npmrc
-- run: npm publish --access public
-  working-directory: apps/cli
-  env:
-    NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+```bash
+tutorflow --json slide list --status ready | jq -r '.[].id' | xargs -I{} tutorflow --json slide get {}
 ```
 
-Trigger on tags matching `cli-v*` or use `changesets` for monorepo-aware versioning.
+### Exit codes
 
-## Development
+| Code  | Meaning                                                           |
+| ----- | ----------------------------------------------------------------- |
+| `0`   | Success                                                           |
+| `1`   | Generic failure (auth, network, API error, etc.)                  |
+| `2`   | Bad input (invalid flag value, missing required input in non-TTY) |
+| `130` | User cancelled an interactive prompt (Ctrl+C)                     |
 
-Run with `tsx` (no build step):
+The error JSON includes a stable `code`: `EAUTH`, `EINVAL`, `ENOINTERACTIVE`, `ENETWORK`, `EHTTP_<status>`, `ENOPREVIEW`, `ENOTFOUND`, `ECANCELLED`.
+
+### Required-input flags (no prompts)
+
+Commands that have required input expose every prompt as a flag:
 
 ```bash
-pnpm --filter @tutorflow/cli dev -- <command> [options]
-# e.g. pnpm --filter @tutorflow/cli dev -- slide list --limit 5
+# self-register a platform workspace and save the returned API key
+tutorflow --json agent register \
+  --name "Agent Workspace" \
+  --slug agent-workspace \
+  --email agent@example.com \
+  --agent-identity "codex"
+
+# slide / video / course create — accept positional [prompt]
+tutorflow --json slide create "Photosynthesis" -n 12 -l en
+tutorflow --json video create "Newton's laws" -s 6 -r 16:9 -d 90
+tutorflow --json course create "Beginner Python" -l 10 -lang en
+
+# evaluate — every input is a flag
+tutorflow --json evaluate \
+  --type rubric \
+  --question "What is 2+2?" \
+  --student-answer "4" \
+  --expected-answer "4"
+
+# logout (skip confirmation)
+tutorflow auth logout --force
 ```
 
-Build artifacts land in `apps/cli/dist/` (entry: `dist/index.js`, declared in `package.json#bin`).
+If a required input is missing **and** stdin is not a TTY, the command exits 2 with `ENOINTERACTIVE` and an error message naming the flag(s) to use. It never hangs waiting for input.
+
+### Globals
+
+| Flag                              | Env var                          | Effect                                          |
+| --------------------------------- | -------------------------------- | ----------------------------------------------- |
+| `--json`                          | `TUTORFLOW_JSON=1`               | JSON output to stdout, JSON errors to stderr    |
+| `--debug`                         | `DEBUG=1` or `TUTORFLOW_DEBUG=1` | Print stack traces on errors                    |
+| `--api-key <k>` (auth login only) | `TUTORFLOW_API_KEY`              | API key                                         |
+| (n/a)                             | `TUTORFLOW_BASE_URL`             | Override API base URL (staging, self-hosted)    |
+
+### MCP server
+
+A native MCP server (so agents can call tools directly without shelling out) is on the roadmap. For now, the `--json` shell contract is the recommended integration path.
 
 ## Authentication
 
@@ -194,6 +298,104 @@ tutorflow config set <key> <value>        # update one key
 All resource commands require authentication. Without an API key they print:
 `✗ Not authenticated. Run "tutorflow auth login" first.`
 
+### `tutorflow agent`
+
+Manage the agent-facing TutorFlow Platform account flow.
+
+#### `agent register`
+
+Public self-service registration. Creates a platform workspace through
+`POST /v1/platform/agent/register`, returns the one-time API key, and saves it
+to `~/.tutorflow/config.json` by default so the next CLI command can run
+without a separate `auth login`.
+
+| Option                         | Type     | Default | Description                                  |
+| ------------------------------ | -------- | ------- | -------------------------------------------- |
+| `--name <name>`                | `string` | —       | Workspace display name                       |
+| `--slug <slug>`                | `string` | —       | Unique lowercase slug                        |
+| `--email <email>`              | `string` | none    | Contact email for verification and billing   |
+| `--agent-identity <identity>`  | `string` | none    | Optional agent identity string               |
+| `--no-save`                    | boolean  | false   | Print the API key but do not persist it      |
+
+```bash
+tutorflow --json agent register \
+  --name "Agent Workspace" \
+  --slug agent-workspace \
+  --email agent@example.com \
+  --agent-identity "codex"
+```
+
+#### `agent account`
+
+GET `/v1/platform/agent/account`. Shows workspace status, credit balance,
+email verification state, rate limits, and `restrictedActions`.
+
+```bash
+tutorflow --json agent account
+```
+
+#### `agent billing status`
+
+GET `/v1/platform/agent/billing/status`. Shows payment-method state, credit
+balance, billing mode, email verification state, and `restrictedActions`.
+
+```bash
+tutorflow --json agent billing status
+```
+
+#### `agent billing session`
+
+POST `/v1/platform/agent/billing/session`. Returns a TutorFlow-hosted checkout
+URL that an agent should forward to a human operator.
+
+```bash
+tutorflow --json agent billing session
+```
+
+#### `agent verify-email resend`
+
+POST `/v1/platform/agent/verify-email/resend`. Resends the workspace email
+verification message using the active API key.
+
+```bash
+tutorflow --json agent verify-email resend
+```
+
+#### `agent checkout info`
+
+GET `/v1/platform/agent/checkout?token=<token>`. Reads workspace info for a
+TutorFlow checkout token returned through the hosted billing-session flow.
+
+```bash
+tutorflow --json agent checkout info --token checkout_123
+```
+
+#### `agent checkout create`
+
+POST `/v1/platform/agent/checkout`. Creates a Stripe Checkout URL from a
+TutorFlow checkout token and amount. This is normally called by the hosted
+checkout page; CLI support exists for complete automation and testing.
+
+```bash
+tutorflow --json agent checkout create --token checkout_123 --amount-usd 25
+```
+
+### `tutorflow platform`
+
+Inspect public discovery metadata and validate the active Platform API key.
+
+| Subcommand | Endpoint | Auth |
+| ---------- | -------- | ---- |
+| `manifest` | `GET /v1/platform/.well-known/agent.json` | none |
+| `pricing` | `GET /v1/platform/pricing-catalog` | none |
+| `health` | `GET /v1/platform/health` | Platform API key |
+
+```bash
+tutorflow --json platform manifest
+tutorflow --json platform pricing
+tutorflow --json platform health
+```
+
 ### `tutorflow slide`
 
 Create and manage slide decks.
@@ -335,6 +537,98 @@ Opens the course preview URL in the browser.
 
 ---
 
+### `tutorflow module`
+
+Create and manage standalone lesson modules.
+
+#### `module create [prompt]`
+
+POST `/v1/platform/modules`. Generates one classroom-compatible standalone
+lesson. `--idempotency-key` is sent as the `Idempotency-Key` header so agents
+can safely retry a create call.
+
+| Argument / Option              | Type                  | Default  | Description                      |
+| ------------------------------ | --------------------- | -------- | -------------------------------- |
+| `[prompt]`                     | `string` (positional) | —        | Lesson/module prompt             |
+| `--title <title>`              | `string`              | none     | Override generated title         |
+| `--description <description>`  | `string`              | none     | Override generated description   |
+| `--target <target>`            | `string`              | none     | Target learner audience          |
+| `--type <type>`                | `string`              | `lesson` | Module type                      |
+| `--locale <locale>`            | `string`              | `en`     | Locale code                      |
+| `--language <language>`        | `string`              | `en`     | Language code                    |
+| `--slug <slug>`                | `string`              | none     | Optional slug                    |
+| `--private`                    | boolean               | false    | Set `isPublic: false`            |
+| `--no-quiz`                    | boolean               | false    | Set `hasQuiz: false`             |
+| `--idempotency-key <key>`      | `string`              | none     | Safe retry key                   |
+
+```bash
+tutorflow --json module create "Fractions for 5th grade" \
+  --title "Fractions" \
+  --target "5th grade" \
+  --no-quiz \
+  --idempotency-key lesson-001
+```
+
+#### `module list`
+
+GET `/v1/platform/modules?limit=<n>&offset=<n>[&search=<q>]`.
+
+```bash
+tutorflow --json module list --limit 20 --offset 0 --search fractions
+```
+
+#### `module get <id>` / `module open <id>`
+
+Fetch a module by ID or open its `publicUrl`.
+
+---
+
+### `tutorflow test`
+
+Create and manage generated assessments.
+
+#### `test create [prompt]`
+
+POST `/v1/platform/tests`. Generates a test/assessment. `--idempotency-key` is
+sent as the `Idempotency-Key` header.
+
+| Argument / Option         | Type                  | Default    | Description                    |
+| ------------------------- | --------------------- | ---------- | ------------------------------ |
+| `[prompt]`                | `string` (positional) | —          | Test generation prompt         |
+| `--title <title>`         | `string`              | none       | Override generated title       |
+| `--description <text>`    | `string`              | none       | Override generated description |
+| `-l, --language <lang>`   | `string`              | `en`       | Language code                  |
+| `--level <level>`         | `string`              | none       | Difficulty level               |
+| `--subject <subject>`     | `string`              | none       | Subject area                   |
+| `-n, --items <number>`    | `string -> int`       | none       | Target item count              |
+| `--time-limit <minutes>`  | `string -> int`       | none       | Time limit in minutes          |
+| `--classroom-id <id>`     | `string`              | none       | Classroom ID                   |
+| `--tier <tier>`           | `string`              | `standard` | Pricing tier                   |
+| `--mode <mode>`           | `string`              | `sync`     | `sync` or `async`              |
+| `--idempotency-key <key>` | `string`              | none       | Safe retry key                 |
+
+```bash
+tutorflow --json test create "Algebra quiz" \
+  --title "Algebra Basics" \
+  --items 8 \
+  --time-limit 30 \
+  --idempotency-key test-001
+```
+
+#### `test list`
+
+GET `/v1/platform/tests?limit=<n>&offset=<n>[&status=<s>]`.
+
+```bash
+tutorflow --json test list --limit 20 --status READY
+```
+
+#### `test get <id>` / `test open <id>` / `test edit-token <id>`
+
+Fetch a test, open its preview URL, or generate a fresh edit token.
+
+---
+
 ### `tutorflow evaluate`
 
 Evaluates a single student response. Fully interactive; only the type can be passed as a flag.
@@ -403,33 +697,49 @@ class ApiClient {
 ## Project layout
 
 ```
-apps/cli/
-├── package.json          # bin: { tutorflow: ./dist/index.js }
+.
+├── package.json              # bin: { tutorflow: ./dist/index.js }
 ├── tsconfig.json
+├── vitest.config.ts
+├── .github/workflows/
+│   ├── ci.yml                # typecheck + build + test on PRs and master
+│   └── release.yml           # OIDC publish on master/main pushes when version is new
+├── RELEASING.md              # full release procedure + Trusted Publisher setup
 └── src/
-    ├── index.ts          # commander entrypoint, registers all commands
-    ├── client.ts         # undici-based ApiClient
-    ├── config.ts         # ~/.tutorflow/config.json read/write/update/delete
+    ├── index.ts              # commander entrypoint, registers all commands
+    ├── client.ts             # undici-based ApiClient
+    ├── client.test.ts
+    ├── config.ts             # ~/.tutorflow/config.json read/write/update/delete
+    ├── config.test.ts
+    ├── types.ts              # API response interfaces (SlideResource, etc.)
     ├── commands/
-    │   ├── auth.ts       # login / logout / whoami
-    │   ├── config.ts     # get / set
-    │   ├── course.ts     # create / list / open
-    │   ├── evaluate.ts   # interactive evaluation
-    │   ├── slide.ts      # create / list / open
-    │   └── video.ts      # create / list / open
+    │   ├── agent.ts          # register / account / billing / email verification
+    │   ├── auth.ts           # login / logout / whoami
+    │   ├── config.ts         # get / set
+    │   ├── course.ts         # create / list / open
+    │   ├── evaluate.ts       # interactive evaluation
+    │   ├── module.ts         # standalone lesson modules
+    │   ├── platform.ts       # discovery / pricing / health
+    │   ├── slide.ts          # create / list / open
+    │   ├── test.ts           # generated assessments
+    │   └── video.ts          # create / list / open
     └── utils/
-        ├── output.ts     # formatTable, formatJson
+        ├── output.ts         # formatTable, formatJson
         └── spinner.ts
 ```
 
 ## npm scripts
 
-| Script  | Command             | Purpose                      |
-| ------- | ------------------- | ---------------------------- |
-| `dev`   | `tsx src/index.ts`  | Run from source              |
-| `build` | `tsc --outDir dist` | Emit JS + `.d.ts` to `dist/` |
-| `link`  | `npm link`          | Symlink `tutorflow` globally |
-| `test`  | `jest`              | (No tests committed yet)     |
+| Script           | Command                 | Purpose                                 |
+| ---------------- | ----------------------- | --------------------------------------- |
+| `dev`            | `tsx src/index.ts`      | Run from source                         |
+| `build`          | `tsc --outDir dist`     | Emit JS + `.d.ts` to `dist/`            |
+| `link`           | `npm link`              | Symlink `tutorflow` globally            |
+| `typecheck`      | `tsc --noEmit`          | Type-check without emitting             |
+| `test`           | `vitest run`            | Run all tests once                      |
+| `test:watch`     | `vitest`                | Watch-mode tests                        |
+| `test:coverage`  | `vitest run --coverage` | Generate coverage report                |
+| `prepublishOnly` | `rm -rf dist && build`  | Auto-runs before `npm publish`          |
 
 ## Stack
 
@@ -438,4 +748,5 @@ apps/cli/
 - **HTTP:** [undici](https://github.com/nodejs/undici) `^5.27.0`
 - **Color:** [chalk](https://github.com/chalk/chalk) `^5.3.0`
 - **Browser open:** [open](https://github.com/sindresorhus/open) `^9.0.0`
+- **Tests:** [Vitest](https://vitest.dev) `^4.1.5`
 - **Dev:** TypeScript `^5.0.0`, tsx `^3.0.0`, `@types/node` `^20.0.0`

package/dist/client.d.ts

@@ -6,7 +6,13 @@ export declare class ApiClient {
     private config;
     constructor(config?: IClientConfig);
     static create(): Promise<ApiClient>;
-    request<T>(method: string, endpoint: string, body?: Record<string, unknown>): Promise<T>;
+    /**
+     * Like `create` but throws CliError if no API key is resolvable. Use this
+     * in any command that talks to the API so we get a single, consistent
+     * "not authenticated" path.
+     */
+    static createAuthenticated(): Promise<ApiClient>;
+    request<T>(method: string, endpoint: string, body?: Record<string, unknown>, headers?: Record<string, string>): Promise<T>;
     setApiKey(apiKey: string): void;
     setBaseUrl(baseUrl: string): void;
 }

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAgB;gBAElB,MAAM,CAAC,EAAE,aAAa;WAOrB,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC;IAQnC,OAAO,CAAC,CAAC,EACb,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC;IA0Bb,SAAS,CAAC,MAAM,EAAE,MAAM;IAIxB,UAAU,CAAC,OAAO,EAAE,MAAM;CAG3B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAqBD,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAgB;gBAElB,MAAM,CAAC,EAAE,aAAa;WAIrB,MAAM,IAAI,OAAO,CAAC,SAAS,CAAC;IAIzC;;;;OAIG;WACU,mBAAmB,IAAI,OAAO,CAAC,SAAS,CAAC;IAWhD,OAAO,CAAC,CAAC,EACb,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,OAAO,CAAC,CAAC,CAAC;IAwCb,SAAS,CAAC,MAAM,EAAE,MAAM;IAIxB,UAAU,CAAC,OAAO,EAAE,MAAM;CAG3B"}