sfora-cli 0.2.0 → 0.3.0

package/README.md

@@ -30,10 +30,14 @@ shell interpreter backs the interactive mode).
 ```bash
 npm i -g sfora-cli      # installs the `sfora` command; or: npx sfora-cli …
 
-sfora login             # authorize via the browser (saves a key)
-sfora --org <slug>      # interactive shell (omit --org once saved)
+sfora login             # authorize as you (browser; saves your key)
+sfora login --bot ci    # …or as a named bot (its own key)
+sfora                   # interactive shell — explore /projects, cat, grep
 ```
 
+One CLI for everyone: the default identity is **you**; add `--bot <name>` to any
+command to run as that bot.
+
 `sfora init` writes `~/.sfora/config.json` (chmod 600). Resolution precedence is
 **flags > env (`SFORA_API_KEY` / `SFORA_URL` / `SFORA_ORG`) > config > default**,
 so a saved config means no env vars on every run.

package/dist/cli.js

@@ -47,10 +47,12 @@ function parseArgs(argv) {
             args.key = argv[++i];
         else if (a.startsWith("--key="))
             args.key = a.slice("--key=".length);
-        else if (a === "--agent")
-            args.agent = argv[++i];
+        else if (a === "--bot" || a === "--agent")
+            args.bot = argv[++i];
+        else if (a.startsWith("--bot="))
+            args.bot = a.slice("--bot=".length);
         else if (a.startsWith("--agent="))
-            args.agent = a.slice("--agent=".length);
+            args.bot = a.slice("--agent=".length);
         else if (a === "--web")
             args.web = argv[++i];
         else if (a.startsWith("--web="))
@@ -77,7 +79,10 @@ function parseArgs(argv) {
 const HELP = `sfora — the CLI for your sfora workspace
 
 Get started:
-  sfora login [--agent <name>]        Authorize via the browser (saves a key)
+  sfora login                         Authorize as you (saves your key)
+  sfora login --bot <name>            Authorize as a named bot (its own key)
+
+Run as a bot: add --bot <name> to any command (default identity is you).
 
 Push markdown straight to sfora:
   sfora post <file.md> [--project <slug>] [--draft]   Publish (or draft) a post
@@ -149,7 +154,7 @@ async function runLogin(args, baseUrl) {
         const res = await fetch(`${base}/v1/cli/start`, {
             method: "POST",
             headers: { "content-type": "application/json" },
-            body: JSON.stringify({ agent: args.agent }),
+            body: JSON.stringify({ agent: args.bot }),
         });
         if (!res.ok)
             throw new Error(`start failed (${res.status})`);
@@ -165,7 +170,7 @@ async function runLogin(args, baseUrl) {
         ? `${webOverride.replace(/\/+$/, "")}/cli?code=${encodeURIComponent(start.userCode)}`
         : start.verifyUrl;
     console.log(`\n${colors.bold}Authorize the sfora CLI${colors.reset}` +
-        (args.agent ? ` ${colors.dim}(agent: ${args.agent})${colors.reset}` : "") +
+        (args.bot ? ` ${colors.dim}(bot: ${args.bot})${colors.reset}` : "") +
         `\n  ${colors.cyan}${verifyUrl}${colors.reset}\n  ${colors.dim}code: ${start.userCode}${colors.reset}\n`);
     openBrowser(verifyUrl);
     process.stdout.write(`${colors.dim}Waiting for approval…${colors.reset}`);
@@ -186,12 +191,21 @@ async function runLogin(args, baseUrl) {
             continue;
         }
         if (data.status === "approved" && data.apiKey) {
-            const path = await writeConfig({
-                url: base,
-                apiKey: data.apiKey,
-                org: data.orgSlug ?? undefined,
-            });
-            console.log(`\n${colors.green}✓${colors.reset} Logged in as ${data.name ?? "you"}${data.orgSlug ? ` ${colors.dim}(${data.orgSlug})${colors.reset}` : ""} — saved ${path}`);
+            const cfg = await readConfig();
+            const next = { ...cfg, url: base };
+            if (args.bot) {
+                // Save under the bot's slot; keep the user's personal key intact.
+                next.bots = {
+                    ...cfg.bots,
+                    [args.bot]: { apiKey: data.apiKey, org: data.orgSlug ?? undefined },
+                };
+            }
+            else {
+                next.apiKey = data.apiKey;
+                next.org = data.orgSlug ?? cfg.org;
+            }
+            const path = await writeConfig(next);
+            console.log(`\n${colors.green}✓${colors.reset} Logged in as ${data.name ?? "you"}${data.orgSlug ? ` ${colors.dim}(${data.orgSlug})${colors.reset}` : ""}${args.bot ? ` ${colors.dim}[bot: ${args.bot}]${colors.reset}` : ""} — saved ${path}`);
             return;
         }
         if (data.status === "expired" || data.status === "unknown") {
@@ -315,7 +329,7 @@ async function main() {
         return;
     }
     const cfg = await readConfig();
-    const settings = resolveSettings({ url: args.url, apiKey: args.key, org: args.org }, cfg);
+    const settings = resolveSettings({ url: args.url, apiKey: args.key, org: args.org, bot: args.bot }, cfg);
     const { url: baseUrl, apiKey } = settings;
     if (args.command === "mcp-config") {
         printMcpConfig(settings);
@@ -326,8 +340,10 @@ async function main() {
         return;
     }
     if (!apiKey) {
-        process.stderr.write(`${colors.red}error:${colors.reset} no API key found.\n` +
-            `Run \`sfora login\` to authorize, or \`sfora init\` to set one.\n`);
+        process.stderr.write(args.bot
+            ? `${colors.red}error:${colors.reset} no key for bot '${args.bot}'. Run \`sfora login --bot ${args.bot}\`.\n`
+            : `${colors.red}error:${colors.reset} no API key found.\n` +
+                `Run \`sfora login\` to authorize, or \`sfora init\` to set one.\n`);
         process.exitCode = 1;
         return;
     }

package/dist/config.d.ts

@@ -2,6 +2,10 @@ export interface SforaConfig {
     url?: string;
     apiKey?: string;
     org?: string;
+    bots?: Record<string, {
+        apiKey?: string;
+        org?: string;
+    }>;
 }
 export declare const CONFIG_PATH: string;
 export declare const DEFAULT_URL = "http://localhost:2222";
@@ -16,4 +20,5 @@ export declare function resolveSettings(flags: {
     url?: string;
     apiKey?: string;
     org?: string;
+    bot?: string;
 }, cfg: SforaConfig): ResolvedSettings;

package/dist/config.js

@@ -31,8 +31,19 @@ function pick(...vals) {
     return vals.find((v) => v != null && v !== "");
 }
 export function resolveSettings(flags, cfg) {
+    const url = pick(flags.url, process.env.SFORA_URL, cfg.url) ?? DEFAULT_URL;
+    // `--bot <name>`: act as that saved bot. Don't fall back to the user's key /
+    // SFORA_API_KEY env, so the identity is never silently the wrong one.
+    if (flags.bot) {
+        const bot = cfg.bots?.[flags.bot];
+        return {
+            url,
+            apiKey: pick(flags.apiKey, bot?.apiKey),
+            org: pick(flags.org, bot?.org, cfg.org),
+        };
+    }
     return {
-        url: pick(flags.url, process.env.SFORA_URL, cfg.url) ?? DEFAULT_URL,
+        url,
         apiKey: pick(flags.apiKey, process.env.SFORA_API_KEY, cfg.apiKey),
         org: pick(flags.org, process.env.SFORA_ORG, cfg.org),
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sfora-cli",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "type": "module",
   "description": "Your sfora workspace as a markdown filesystem — a CLI + MCP server. Post/task/doc, ls/cat/grep, and a shell so agents operate sfora natively.",
   "keywords": [