@vtriv/cli 0.1.1 → 0.1.3

package/README.md

@@ -1,6 +1,6 @@
 # vtriv CLI
 
-Command-line interface for vtriv backend services.
+Command-line interface for vtriv backend services. Uses account-based authentication to manage projects.
 
 ## Installation
 
@@ -16,53 +16,263 @@ bun link
 vtriv --help
 ```
 
+## Authentication Model
+
+The CLI uses a two-tier authentication system:
+
+1. **Account Key** (`vtriv_ak_...`) - Used to create and manage projects
+2. **API Keys** (`vtriv_sk_...`) - Per-project, used to mint JWTs for service calls
+
+Configuration is stored in `~/.config/vtriv/config.json` with `0600` permissions.
+
+### How It Works
+
+1. Run `vtriv config` to set up your account key
+2. Run `vtriv init <name>` to create a project and API key
+3. CLI uses the API key to mint short-lived JWTs
+4. JWTs are cached for 55 minutes (tokens valid for 60)
+
+Project names are automatically prefixed with your account slug (e.g., `a1b2c3d4-my-app`), but you work with short names in the CLI.
+
 ## Setup
 
+### Configure Account
+
 ```bash
-# Initialize configuration
-vtriv init
+vtriv config
 ```
 
-This creates `~/.vtrivrc` with your API gateway URL and bootstrap key.
+You'll be prompted for:
+- Base URL (default: `http://localhost:3000`)
+- Account key (`vtriv_ak_...`)
+
+The CLI verifies the account key and fetches your account slug.
 
-## Quick Start
+### Create a Project
 
 ```bash
-# List projects
-vtriv auth project:list
+vtriv init my-app
+```
 
-# Create a project
-vtriv auth project:create my-app
+This:
+1. Creates project `{slug}-my-app` on the server
+2. Creates an API key for the project
+3. Saves the profile locally
 
-# Create a user
-vtriv auth user:create my-app admin@example.com secretpass
+### Multiple Projects
 
-# List documents
-vtriv db ls my-app posts
+```bash
+# Create another project
+vtriv init staging --default
 
-# Create a document
-echo '{"title":"Hello"}' | vtriv db put my-app posts
+# Use a specific profile
+vtriv --profile my-app db ls posts
+```
+
+### View Status
 
-# Search
-vtriv search query my-app posts "hello world"
+```bash
+vtriv status
+```
+
+Shows your account, configured profiles, and which is default.
+
+### Manage Projects
+
+```bash
+# List all projects
+vtriv project ls
+
+# Delete a project
+vtriv project rm my-app
 ```
 
 ## Commands
 
-- `vtriv init` - Setup configuration
-- `vtriv auth` - Auth service (projects, users, tokens, API keys)
-- `vtriv db` - Database service (ls, get, put, rm, schema)
-- `vtriv blob` - Blob storage (put, get, rm)
-- `vtriv cron` - Cron jobs (ls, runs, trigger, script:cat)
-- `vtriv ai` - AI service (stats, chat)
-- `vtriv search` - Search service (config, query)
+### Global Options
+
+| Option | Description |
+|--------|-------------|
+| `--json` | Output raw JSON (for scripts/agents) |
+| `--profile <name>` | Use a specific profile |
+| `--debug` | Show HTTP curl equivalents |
+
+### Token Commands
+
+```bash
+# Mint and display a JWT
+vtriv token
+
+# Mint with specific template
+vtriv token --template ai-enabled
+```
+
+### Template Commands
+
+Manage token templates for your project.
+
+```bash
+# List all templates
+vtriv template ls
+
+# Get a specific template
+vtriv template get default
+
+# Create/update a template (reads JSON from stdin)
+vtriv template set ai-enabled <<< '{"x-db": true, "x-blob": true, "x-ai": true}'
+
+# Delete a template (cannot delete 'default')
+vtriv template rm ai-enabled
+
+# Reset templates to server defaults (useful after server updates)
+vtriv template reset
+```
+
+### Database Commands
+
+```bash
+# List documents
+vtriv db ls posts
+vtriv db ls posts --filter '{"status":"published"}' --limit 10 --sort -_created_at
+
+# Get a document
+vtriv db get posts abc-123
+
+# Create a document (reads JSON from stdin)
+echo '{"title":"Hello","body":"World"}' | vtriv db put posts
+
+# Update a document
+echo '{"title":"Updated"}' | vtriv db put posts abc-123
+
+# Delete a document
+vtriv db rm posts abc-123
+
+# Get/set collection schema
+vtriv db schema posts
+echo '{"indexes":["status"],"unique":["slug"]}' | vtriv db schema posts --set
+```
+
+### Blob Commands
+
+```bash
+# Upload a file
+vtriv blob put images/photo.jpg ./local-photo.jpg
+
+# Download a file (outputs to stdout)
+vtriv blob get images/photo.jpg > downloaded.jpg
+
+# Delete a file
+vtriv blob rm images/photo.jpg
+```
+
+### Cron Commands
+
+```bash
+# List jobs
+vtriv cron ls
+
+# View run history
+vtriv cron runs
+vtriv cron runs --limit 50 --job daily-backup
+
+# Manually trigger a job
+vtriv cron trigger daily-backup
+
+# View a script
+vtriv cron script:cat backup.ts
+```
+
+### AI Commands
+
+```bash
+# Simple chat
+vtriv ai chat "What is the capital of France?"
+
+# With specific model
+vtriv ai chat "Explain quantum computing" --model anthropic/claude-3.5-sonnet
+
+# View usage statistics
+vtriv ai stats
+vtriv ai stats --period 7
+
+# Get/set AI config
+vtriv ai config
+vtriv ai config --model openai/gpt-4o --rate-limit 10.0
+```
+
+### Search Commands
+
+```bash
+# Get index configuration
+vtriv search config posts
+
+# Set index configuration (reads JSON from stdin)
+echo '{"model":"openai/text-embedding-3-small","dimensions":1536,"input_fields":["title","body"],"store_fields":["id","title","slug"]}' | vtriv search config posts --set
+
+# Search an index
+vtriv search query posts "semantic search" --limit 20
+```
+
+## Output Formats
+
+By default, the CLI formats output as tables:
+
+```
+$ vtriv db ls posts
+id          title            status
+-----------------------------------------
+abc-123     Hello World      published
+def-456     Draft Post       draft
+```
+
+Use `--json` for machine-readable output:
+
+```bash
+$ vtriv db ls posts --json
+[
+  {"id": "abc-123", "title": "Hello World", "status": "published"},
+  {"id": "def-456", "title": "Draft Post", "status": "draft"}
+]
+```
+
+## Debugging
+
+Use `--debug` to see the curl equivalent of each request:
+
+```bash
+$ vtriv --debug db ls posts
+curl -X GET "http://localhost:3000/db/a1b2c3d4-my-app/posts" -H "Authorization: Bearer <token>"
+```
+
+## Configuration File
+
+The config file at `~/.config/vtriv/config.json`:
+
+```json
+{
+  "baseUrl": "http://localhost:3000",
+  "accountKey": "vtriv_ak_...",
+  "accountSlug": "a1b2c3d4",
+  "default": "my-app",
+  "profiles": {
+    "my-app": {
+      "apiKey": "vtriv_sk_..."
+    },
+    "staging": {
+      "apiKey": "vtriv_sk_..."
+    }
+  }
+}
+```
+
+## Migration from Old Config
 
-## Options
+If you have an old `~/.vtrivrc` file, you'll need to:
+1. Run `vtriv config` with your account key
+2. Run `vtriv init <name>` for each project
 
-- `--json` - Output raw JSON for scripts/agents
-- `--profile <name>` - Use a specific profile
-- `--debug` - Show HTTP curl equivalents
+The old config format is not compatible with the new account-based system.
 
-## Documentation
+## License
 
-See [~/grit/skills/vtriv/cli.md](../../grit/skills/vtriv/cli.md) for full documentation.
+Private - Part of vtriv meta-project

package/index.ts

@@ -2,14 +2,17 @@
 /**
  * vtriv-cli - Command-line interface for vtriv services
  *
- * Each profile represents a project + API key pair.
- * API keys are issued by the platform operator and configured manually.
- * The CLI uses the API key to mint short-lived JWTs for service calls.
+ * Configuration hierarchy:
+ * 1. Account key (vtriv_ak_*) - set via `vtriv config`
+ * 2. Project profiles - created via `vtriv init <name>`
+ *
+ * The CLI auto-creates projects prefixed with account slug,
+ * and translates short names to full names transparently.
  */
 
-import { existsSync, readFileSync, writeFileSync, chmodSync } from "node:fs";
+import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";
 import { homedir } from "node:os";
-import { join } from "node:path";
+import { join, dirname } from "node:path";
 import { Command } from "commander";
 import chalk from "chalk";
 
@@ -18,13 +21,14 @@ import chalk from "chalk";
 // =============================================================================
 
 interface Profile {
-	baseUrl: string;
-	project: string;
 	apiKey: string; // vtriv_sk_*
 }
 
 interface Config {
-	default: string;
+	baseUrl: string;
+	accountKey?: string; // vtriv_ak_*
+	accountSlug?: string;
+	default?: string;
 	profiles: Record<string, Profile>;
 }
 
@@ -38,36 +42,55 @@ interface GlobalOptions {
 // Configuration
 // =============================================================================
 
-const CONFIG_PATH = join(homedir(), ".vtrivrc");
+function getConfigPath(): string {
+	const xdgConfig = process.env.XDG_CONFIG_HOME || join(homedir(), ".config");
+	return join(xdgConfig, "vtriv", "config.json");
+}
 
 function loadConfig(): Config | null {
-	if (!existsSync(CONFIG_PATH)) return null;
+	const configPath = getConfigPath();
+	if (!existsSync(configPath)) return null;
 	try {
-		return JSON.parse(readFileSync(CONFIG_PATH, "utf-8"));
+		return JSON.parse(readFileSync(configPath, "utf-8"));
 	} catch {
 		return null;
 	}
 }
 
 function saveConfig(config: Config): void {
-	writeFileSync(CONFIG_PATH, JSON.stringify(config, null, 2), { mode: 0o600 });
-	// Ensure permissions are correct even if file existed
-	chmodSync(CONFIG_PATH, 0o600);
+	const configPath = getConfigPath();
+	const configDir = dirname(configPath);
+	if (!existsSync(configDir)) {
+		mkdirSync(configDir, { recursive: true, mode: 0o700 });
+	}
+	writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 0o600 });
+	chmodSync(configPath, 0o600);
 }
 
-function getProfile(profileName?: string): Profile {
+function getConfig(): Config {
 	const config = loadConfig();
 	if (!config) {
-		console.error(chalk.red("No config found. Run 'vtriv init' first."));
+		console.error(chalk.red("No config found. Run 'vtriv config' first."));
+		process.exit(1);
+	}
+	return config;
+}
+
+function getProfile(profileName?: string): { config: Config; profile: Profile; fullProjectName: string; shortName: string } {
+	const config = getConfig();
+	const shortName = profileName || config.default;
+	if (!shortName) {
+		console.error(chalk.red("No default profile. Run 'vtriv init <name>' to create one."));
 		process.exit(1);
 	}
-	const name = profileName || config.default;
-	const profile = config.profiles[name];
+	const profile = config.profiles[shortName];
 	if (!profile) {
-		console.error(chalk.red(`Profile '${name}' not found. Run 'vtriv init' to add it.`));
+		console.error(chalk.red(`Profile '${shortName}' not found. Run 'vtriv init ${shortName}' to create it.`));
 		process.exit(1);
 	}
-	return profile;
+	// Expand short name to full project name
+	const fullProjectName = config.accountSlug ? `${config.accountSlug}-${shortName}` : shortName;
+	return { config, profile, fullProjectName, shortName };
 }
 
 // =============================================================================
@@ -127,10 +150,10 @@ function error(msg: string, opts: GlobalOptions): never {
 const tokenCache = new Map<string, { token: string; expires: number }>();
 
 async function getToken(opts: GlobalOptions, template?: string): Promise<string> {
-	const profile = getProfile(opts.profile);
+	const { config, profile, fullProjectName } = getProfile(opts.profile);
 	
 	// Cache key includes template
-	const cacheKey = template ? `${profile.project}:${template}` : profile.project;
+	const cacheKey = template ? `${fullProjectName}:${template}` : fullProjectName;
 	const cached = tokenCache.get(cacheKey);
 	if (cached && cached.expires > Date.now()) {
 		return cached.token;
@@ -142,7 +165,7 @@ async function getToken(opts: GlobalOptions, template?: string): Promise<string>
 		body.template = template;
 	}
 
-	const mintRes = await fetch(`${profile.baseUrl}/auth/${profile.project}/token`, {
+	const mintRes = await fetch(`${config.baseUrl}/auth/${fullProjectName}/token`, {
 		method: "POST",
 		headers: {
 			Authorization: `Bearer ${profile.apiKey}`,
@@ -185,8 +208,8 @@ async function request(
 	},
 	opts: GlobalOptions
 ): Promise<unknown> {
-	const profile = getProfile(opts.profile);
-	const url = `${profile.baseUrl}/${service}/${profile.project}${path}`;
+	const { config, fullProjectName } = getProfile(opts.profile);
+	const url = `${config.baseUrl}/${service}/${fullProjectName}${path}`;
 	const method = options.method || "GET";
 
 	const headers: Record<string, string> = {
@@ -242,18 +265,16 @@ program
 	.option("--debug", "Show HTTP requests");
 
 // =============================================================================
-// Init Command
+// Config Command
 // =============================================================================
 
 program
-	.command("init")
-	.description("Add or update a profile")
-	.option("--name <name>", "Profile name (defaults to project name)")
-	.option("--default", "Set as default profile")
-	.action(async (cmdOpts: { name?: string; default?: boolean }) => {
+	.command("config")
+	.description("Configure account key and base URL")
+	.action(async () => {
 		const existing = loadConfig();
 
-		console.log(chalk.bold("vtriv CLI Setup\n"));
+		console.log(chalk.bold("vtriv Account Configuration\n"));
 
 		const readline = await import("node:readline");
 		const rl = readline.createInterface({
@@ -265,49 +286,143 @@ program
 			new Promise((resolve) => rl.question(q, resolve));
 
 		const baseUrl =
-			(await question(
-				`Base URL [${existing?.profiles?.[existing.default]?.baseUrl || "https://api.vtriv.com"}]: `
-			)) ||
-			existing?.profiles?.[existing.default]?.baseUrl ||
-			"https://api.vtriv.com";
-
-		const project = await question("Project name: ");
-		if (!project) {
-			console.error(chalk.red("Project name is required."));
+			(await question(`Base URL [${existing?.baseUrl || "http://localhost:3000"}]: `)) ||
+			existing?.baseUrl ||
+			"http://localhost:3000";
+
+		const accountKey = await question("Account Key (vtriv_ak_...): ");
+		if (!accountKey) {
+			console.error(chalk.red("Account key is required."));
 			rl.close();
 			process.exit(1);
 		}
 
-		const apiKey = await question("API Key (vtriv_sk_...): ");
-		if (!apiKey) {
-			console.error(chalk.red("API key is required."));
+		if (!accountKey.startsWith("vtriv_ak_")) {
+			console.error(chalk.red("Account key must start with 'vtriv_ak_'."));
 			rl.close();
 			process.exit(1);
 		}
 
-		if (!apiKey.startsWith("vtriv_sk_")) {
-			console.error(chalk.red("API key must start with 'vtriv_sk_'."));
-			rl.close();
+		rl.close();
+
+		// Fetch account info to get slug
+		console.log(chalk.dim("\nVerifying account key..."));
+		const res = await fetch(`${baseUrl}/auth/accounts/me`, {
+			headers: { Authorization: `Bearer ${accountKey}` },
+		});
+
+		if (!res.ok) {
+			const err = await res.text();
+			let msg: string;
+			try {
+				msg = JSON.parse(err).error || err;
+			} catch {
+				msg = err;
+			}
+			console.error(chalk.red(`Failed to verify account: ${msg}`));
+			process.exit(1);
+		}
+
+		const accountInfo = (await res.json()) as { id: string; slug: string; name: string | null };
+
+		const config: Config = {
+			baseUrl,
+			accountKey,
+			accountSlug: accountInfo.slug,
+			default: existing?.default,
+			profiles: existing?.profiles || {},
+		};
+
+		saveConfig(config);
+		console.log(chalk.green(`\nAccount configured!`));
+		console.log(chalk.dim(`  Slug: ${accountInfo.slug}`));
+		console.log(chalk.dim(`  Name: ${accountInfo.name || "(none)"}`));
+		console.log(chalk.dim(`  Config: ${getConfigPath()}`));
+	});
+
+// =============================================================================
+// Init Command
+// =============================================================================
+
+program
+	.command("init")
+	.description("Create a project and configure profile")
+	.argument("<name>", "Project name (short name, will be prefixed with account slug)")
+	.option("--default", "Set as default profile")
+	.action(async (name: string, cmdOpts: { default?: boolean }) => {
+		const config = loadConfig();
+		
+		if (!config?.accountKey || !config?.accountSlug) {
+			console.error(chalk.red("No account configured. Run 'vtriv config' first."));
 			process.exit(1);
 		}
 
-		const profileName = cmdOpts.name || project;
+		// Validate project name
+		if (!/^[a-zA-Z0-9_-]+$/.test(name)) {
+			console.error(chalk.red("Invalid project name. Use alphanumeric, dash, or underscore only."));
+			process.exit(1);
+		}
+
+		const fullProjectName = `${config.accountSlug}-${name}`;
 
-		const config: Config = existing || { default: profileName, profiles: {} };
-		config.profiles[profileName] = { baseUrl, project, apiKey };
+		// Try to create project
+		console.log(chalk.dim(`Creating project ${fullProjectName}...`));
+		const createRes = await fetch(`${config.baseUrl}/auth/projects`, {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${config.accountKey}`,
+				"Content-Type": "application/json",
+			},
+			body: JSON.stringify({ name }),
+		});
 
-		if (cmdOpts.default || !existing) {
-			config.default = profileName;
+		let projectExists = false;
+		if (!createRes.ok) {
+			const err = (await createRes.json()) as { error?: string };
+			if (err.error === "Project already exists") {
+				projectExists = true;
+				console.log(chalk.yellow(`Project ${fullProjectName} already exists.`));
+			} else {
+				console.error(chalk.red(`Failed to create project: ${err.error}`));
+				process.exit(1);
+			}
+		} else {
+			console.log(chalk.green(`Created project ${fullProjectName}`));
 		}
 
-		saveConfig(config);
-		console.log(chalk.green(`\nProfile '${profileName}' saved to ${CONFIG_PATH}`));
+		// Create or fetch API key
+		console.log(chalk.dim("Creating API key..."));
+		const keyRes = await fetch(`${config.baseUrl}/auth/${fullProjectName}/api-keys`, {
+			method: "POST",
+			headers: {
+				Authorization: `Bearer ${config.accountKey}`,
+				"Content-Type": "application/json",
+			},
+			body: JSON.stringify({ name: "CLI" }),
+		});
 
-		if (config.default === profileName) {
-			console.log(chalk.dim(`Set as default profile.`));
+		if (!keyRes.ok) {
+			const err = (await keyRes.json()) as { error?: string };
+			console.error(chalk.red(`Failed to create API key: ${err.error}`));
+			process.exit(1);
 		}
 
-		rl.close();
+		const keyData = (await keyRes.json()) as { api_key: string };
+
+		// Save profile
+		config.profiles[name] = { apiKey: keyData.api_key };
+		if (cmdOpts.default || !config.default) {
+			config.default = name;
+		}
+
+		saveConfig(config);
+		console.log(chalk.green(`\nProfile '${name}' saved.`));
+		if (config.default === name) {
+			console.log(chalk.dim("Set as default profile."));
+		}
+		if (projectExists) {
+			console.log(chalk.dim("Note: A new API key was created for the existing project."));
+		}
 	});
 
 // =============================================================================
@@ -316,23 +431,125 @@ program
 
 program
 	.command("status")
-	.description("Show configured profiles")
+	.description("Show configuration and profiles")
 	.action(() => {
 		const opts = program.opts<GlobalOptions>();
 		const config = loadConfig();
-		if (!config || Object.keys(config.profiles).length === 0) {
-			console.log(chalk.dim("No profiles configured. Run 'vtriv init' to add one."));
+		if (!config) {
+			console.log(chalk.dim("No config found. Run 'vtriv config' first."));
+			return;
+		}
+
+		if (opts.json) {
+			// Don't expose the actual keys
+			const safeConfig = {
+				baseUrl: config.baseUrl,
+				accountSlug: config.accountSlug,
+				hasAccountKey: !!config.accountKey,
+				default: config.default,
+				profiles: Object.keys(config.profiles),
+			};
+			console.log(JSON.stringify(safeConfig, null, 2));
+			return;
+		}
+
+		console.log(chalk.bold("Configuration"));
+		console.log(`  Base URL: ${config.baseUrl}`);
+		console.log(`  Account: ${config.accountSlug || chalk.dim("(not configured)")}`);
+		console.log(`  Default: ${config.default || chalk.dim("(none)")}`);
+		console.log();
+
+		if (Object.keys(config.profiles).length === 0) {
+			console.log(chalk.dim("No profiles. Run 'vtriv init <name>' to create one."));
 			return;
 		}
 
-		const profiles = Object.entries(config.profiles).map(([name, p]) => ({
-			name,
-			project: p.project,
-			baseUrl: p.baseUrl,
-			default: name === config.default ? "yes" : "",
-		}));
+		console.log(chalk.bold("Profiles"));
+		for (const [name] of Object.entries(config.profiles)) {
+			const fullName = config.accountSlug ? `${config.accountSlug}-${name}` : name;
+			const isDefault = name === config.default ? chalk.green(" (default)") : "";
+			console.log(`  ${name}${isDefault}`);
+			console.log(chalk.dim(`    → ${fullName}`));
+		}
+	});
+
+// =============================================================================
+// Project Commands
+// =============================================================================
+
+const project = program.command("project").description("Project management");
+
+project
+	.command("ls")
+	.description("List projects")
+	.action(async () => {
+		const opts = program.opts<GlobalOptions>();
+		const config = getConfig();
+
+		if (!config.accountKey) {
+			console.error(chalk.red("No account configured. Run 'vtriv config' first."));
+			process.exit(1);
+		}
+
+		const res = await fetch(`${config.baseUrl}/auth/projects`, {
+			headers: { Authorization: `Bearer ${config.accountKey}` },
+		});
+
+		if (!res.ok) {
+			const err = (await res.json()) as { error?: string };
+			error(err.error || "Failed to list projects", opts);
+		}
+
+		const data = (await res.json()) as { projects: Array<{ name: string; short_name: string; created_at: string }> };
+
+		if (opts.json) {
+			console.log(JSON.stringify(data.projects, null, 2));
+		} else {
+			const rows = data.projects.map((p) => ({
+				name: p.short_name,
+				full_name: p.name,
+				created: p.created_at.split("T")[0],
+				profile: config.profiles[p.short_name] ? "✓" : "",
+			}));
+			printTable(rows);
+		}
+	});
+
+project
+	.command("rm")
+	.description("Delete a project")
+	.argument("<name>", "Project name (short name)")
+	.action(async (name: string) => {
+		const opts = program.opts<GlobalOptions>();
+		const config = getConfig();
+
+		if (!config.accountKey || !config.accountSlug) {
+			console.error(chalk.red("No account configured. Run 'vtriv config' first."));
+			process.exit(1);
+		}
+
+		const fullName = `${config.accountSlug}-${name}`;
+
+		const res = await fetch(`${config.baseUrl}/auth/projects/${fullName}`, {
+			method: "DELETE",
+			headers: { Authorization: `Bearer ${config.accountKey}` },
+		});
+
+		if (!res.ok) {
+			const err = (await res.json()) as { error?: string };
+			error(err.error || "Failed to delete project", opts);
+		}
+
+		// Remove from local profiles
+		if (config.profiles[name]) {
+			delete config.profiles[name];
+			if (config.default === name) {
+				config.default = Object.keys(config.profiles)[0];
+			}
+			saveConfig(config);
+		}
 
-		output(profiles, opts);
+		console.log(chalk.green(`Deleted project ${fullName}`));
 	});
 
 // =============================================================================
@@ -364,9 +581,9 @@ template
 	.description("List all templates")
 	.action(async () => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config, profile, fullProjectName } = getProfile(opts.profile);
 
-		const res = await fetch(`${profile.baseUrl}/auth/${profile.project}/templates`, {
+		const res = await fetch(`${config.baseUrl}/auth/${fullProjectName}/templates`, {
 			headers: { Authorization: `Bearer ${profile.apiKey}` },
 		});
 
@@ -394,9 +611,9 @@ template
 	.argument("<name>", "Template name")
 	.action(async (name: string) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config, profile, fullProjectName } = getProfile(opts.profile);
 
-		const res = await fetch(`${profile.baseUrl}/auth/${profile.project}/templates/${name}`, {
+		const res = await fetch(`${config.baseUrl}/auth/${fullProjectName}/templates/${name}`, {
 			headers: { Authorization: `Bearer ${profile.apiKey}` },
 		});
 
@@ -415,7 +632,7 @@ template
 	.argument("<name>", "Template name")
 	.action(async (name: string) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config, profile, fullProjectName } = getProfile(opts.profile);
 
 		// Read claims JSON from stdin
 		const chunks: Buffer[] = [];
@@ -435,7 +652,7 @@ template
 			error("Invalid JSON on stdin", opts);
 		}
 
-		const res = await fetch(`${profile.baseUrl}/auth/${profile.project}/templates/${name}`, {
+		const res = await fetch(`${config.baseUrl}/auth/${fullProjectName}/templates/${name}`, {
 			method: "PUT",
 			headers: {
 				Authorization: `Bearer ${profile.apiKey}`,
@@ -458,13 +675,13 @@ template
 	.argument("<name>", "Template name")
 	.action(async (name: string) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config, profile, fullProjectName } = getProfile(opts.profile);
 
 		if (name === "default") {
 			error("Cannot delete the default template", opts);
 		}
 
-		const res = await fetch(`${profile.baseUrl}/auth/${profile.project}/templates/${name}`, {
+		const res = await fetch(`${config.baseUrl}/auth/${fullProjectName}/templates/${name}`, {
 			method: "DELETE",
 			headers: { Authorization: `Bearer ${profile.apiKey}` },
 		});
@@ -477,6 +694,37 @@ template
 		console.log(chalk.green(`Template '${name}' deleted.`));
 	});
 
+template
+	.command("reset")
+	.description("Reset templates to server defaults")
+	.action(async () => {
+		const opts = program.opts<GlobalOptions>();
+		const { config, profile, fullProjectName } = getProfile(opts.profile);
+
+		const res = await fetch(`${config.baseUrl}/auth/${fullProjectName}/templates/_reset`, {
+			method: "POST",
+			headers: { Authorization: `Bearer ${profile.apiKey}` },
+		});
+
+		if (!res.ok) {
+			const data = await res.json();
+			error((data as { error?: string }).error || "Failed to reset templates", opts);
+		}
+
+		const data = (await res.json()) as { templates: Record<string, { claims: Record<string, unknown> }> };
+
+		if (opts.json) {
+			console.log(JSON.stringify(data.templates, null, 2));
+		} else {
+			console.log(chalk.green("Templates reset to defaults:"));
+			const rows = Object.entries(data.templates).map(([name, tmpl]) => ({
+				name,
+				claims: JSON.stringify(tmpl.claims),
+			}));
+			printTable(rows);
+		}
+	});
+
 // =============================================================================
 // DB Commands
 // =============================================================================
@@ -594,7 +842,7 @@ blob
 	.argument("<file>", "Local file path")
 	.action(async (remotePath: string, localFile: string) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config, fullProjectName } = getProfile(opts.profile);
 		const token = await getToken(opts);
 
 		const file = Bun.file(localFile);
@@ -602,7 +850,7 @@ blob
 			error(`File not found: ${localFile}`, opts);
 		}
 
-		const url = `${profile.baseUrl}/blob/${profile.project}/${remotePath}`;
+		const url = `${config.baseUrl}/blob/${fullProjectName}/${remotePath}`;
 
 		if (opts.debug) {
 			console.error(chalk.dim(`curl -X PUT "${url}" -T "${localFile}"`));
@@ -630,10 +878,10 @@ blob
 	.argument("<path>", "Remote path")
 	.action(async (remotePath: string) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config, fullProjectName } = getProfile(opts.profile);
 		const token = await getToken(opts);
 
-		const url = `${profile.baseUrl}/blob/${profile.project}/${remotePath}`;
+		const url = `${config.baseUrl}/blob/${fullProjectName}/${remotePath}`;
 
 		if (opts.debug) {
 			console.error(chalk.dim(`curl "${url}"`));
@@ -667,10 +915,10 @@ blob
 	.argument("<path>", "Remote path")
 	.action(async (remotePath: string) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config, fullProjectName } = getProfile(opts.profile);
 		const token = await getToken(opts);
 
-		const url = `${profile.baseUrl}/blob/${profile.project}/${remotePath}`;
+		const url = `${config.baseUrl}/blob/${fullProjectName}/${remotePath}`;
 
 		const res = await fetch(url, {
 			method: "DELETE",
@@ -728,10 +976,10 @@ cron
 	.argument("<script>", "Script name")
 	.action(async (script: string) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config, fullProjectName } = getProfile(opts.profile);
 		const token = await getToken(opts);
 
-		const url = `${profile.baseUrl}/cron/${profile.project}/scripts/${script}`;
+		const url = `${config.baseUrl}/cron/${fullProjectName}/scripts/${script}`;
 		const res = await fetch(url, {
 			headers: { Authorization: `Bearer ${token}` },
 		});
@@ -755,10 +1003,10 @@ ai.command("stats")
 	.option("-p, --period <days>", "Period in days", "30")
 	.action(async (cmdOpts: { period: string }) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config } = getProfile(opts.profile);
 		const token = await getToken(opts);
 
-		const url = `${profile.baseUrl}/ai/usage/stats?period=${cmdOpts.period}d`;
+		const url = `${config.baseUrl}/ai/usage/stats?period=${cmdOpts.period}d`;
 		const res = await fetch(url, {
 			headers: { Authorization: `Bearer ${token}` },
 		});
@@ -777,24 +1025,24 @@ ai.command("chat")
 	.option("-m, --model <model>", "Model to use (defaults to project config)")
 	.action(async (prompt: string, cmdOpts: { model?: string }) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config } = getProfile(opts.profile);
 		const token = await getToken(opts);
 
 		// Get default model from project config if not specified
 		let model = cmdOpts.model;
 		if (!model) {
-			const configRes = await fetch(`${profile.baseUrl}/ai/config`, {
+			const configRes = await fetch(`${config.baseUrl}/ai/config`, {
 				headers: { Authorization: `Bearer ${token}` },
 			});
 			if (configRes.ok) {
-				const config = (await configRes.json()) as { default_model?: string };
-				model = config.default_model || "openai/gpt-4o-mini";
+				const aiConfig = (await configRes.json()) as { default_model?: string };
+				model = aiConfig.default_model || "openai/gpt-4o-mini";
 			} else {
 				model = "openai/gpt-4o-mini";
 			}
 		}
 
-		const url = `${profile.baseUrl}/ai/v1/chat/completions`;
+		const url = `${config.baseUrl}/ai/v1/chat/completions`;
 
 		if (opts.debug) {
 			console.error(chalk.dim(`curl -X POST "${url}" ...`));
@@ -833,7 +1081,7 @@ ai.command("config")
 	.option("--key <key>", "Set custom OpenRouter API key")
 	.action(async (cmdOpts: { model?: string; rateLimit?: string; key?: string }) => {
 		const opts = program.opts<GlobalOptions>();
-		const profile = getProfile(opts.profile);
+		const { config } = getProfile(opts.profile);
 		const token = await getToken(opts);
 
 		// If any options provided, update config
@@ -843,7 +1091,7 @@ ai.command("config")
 			if (cmdOpts.rateLimit) body.rate_limit_usd = Number.parseFloat(cmdOpts.rateLimit);
 			if (cmdOpts.key) body.key = cmdOpts.key;
 
-			const updateRes = await fetch(`${profile.baseUrl}/ai/config`, {
+			const updateRes = await fetch(`${config.baseUrl}/ai/config`, {
 				method: "PUT",
 				headers: {
 					Authorization: `Bearer ${token}`,
@@ -861,7 +1109,7 @@ ai.command("config")
 		}
 
 		// Always show current config
-		const res = await fetch(`${profile.baseUrl}/ai/config`, {
+		const res = await fetch(`${config.baseUrl}/ai/config`, {
 			headers: { Authorization: `Bearer ${token}` },
 		});
 		output(await res.json(), opts);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vtriv/cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "module": "index.ts",
   "type": "module",
   "description": "CLI for vtriv backend services - auth, db, blob, search, ai, cron",