forgexa-cli 1.23.2__tar.gz → 1.24.2__tar.gz

{forgexa_cli-1.23.2 → forgexa_cli-1.24.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: forgexa-cli
-Version: 1.23.2
+Version: 1.24.2
 Summary: Forgexa CLI — command-line client and AI agent runtime for the Forgexa platform
 Author-email: Jason Sun <dev.winds@gmail.com>
 License-Expression: MIT
@@ -69,7 +69,7 @@ pip install -e .
 # Configure server (default: http://localhost:8000)
 export FORGEXA_SERVER_URL=https://your-server.example.com
 
-# Login (saves token to ~/.forgexa/token)
+# Login (saves session to ~/.forgexa/credentials.json)
 forgexa login
 
 # List workspaces
@@ -106,8 +106,11 @@ forgexa board --project <project-id>
 | `forgexa budget --workspace <id>` | Budget overview |
 | `forgexa daemon start` | Start local daemon (discover agents, run tasks) |
 | `forgexa daemon start -d` | Start daemon in background |
-| `forgexa daemon status` | Show your daemon statuses |
+| `forgexa daemon status` | Show your daemon statuses (credential type, prefix, expiry) |
 | `forgexa daemon stop` | Stop local daemon |
+| `forgexa daemon enroll` | Issue a dedicated runtime credential for this machine (recommended for long-running daemons) |
+| `forgexa daemon rotate-token` | Rotate this runtime's credential (old one is revoked immediately) |
+| `forgexa daemon revoke-credential` | Revoke this runtime's credential (keeps your login session) |
 | `forgexa check` | Verify locally-installed agent CLIs are genuinely usable (runs a real task per agent) |
 | `forgexa check --quick` | Same, but discovery only — no live task, no API calls |
 | `forgexa check --agent <name>` | Check a single agent (e.g. `claude`, `codex`, `kimi`) |
@@ -239,6 +242,26 @@ forgexa runtimes list
 forgexa runtimes list --all
 ```
 
+### Runtime Credentials
+
+A freshly logged-in daemon authenticates with your interactive login session. For a
+long-running daemon (e.g. a machine that stays on 24/7), issue it a dedicated,
+revocable credential instead so it never depends on your session expiring:
+
+```bash
+# Issue a runtime credential for this machine (default 90-day expiry, max 365)
+forgexa daemon enroll
+
+# Rotate it (the old credential is revoked immediately — no overlap window)
+forgexa daemon rotate-token
+
+# Revoke it (keeps your login session; run 'forgexa daemon enroll' again to reissue)
+forgexa daemon revoke-credential
+```
+
+`forgexa daemon status` shows which credential type is active, its prefix, and its
+expiry — the raw credential value is only ever printed once, at enroll/rotate time.
+
 ### Agent Health Check
 
 Before starting the daemon (or when tasks keep failing on this machine), verify that every
@@ -294,7 +317,7 @@ The daemon automatically discovers these agents if installed on your system:
 | Variable | Default | Description |
 |----------|---------|-------------|
 | `DAEMON_SERVER_URL` | `http://localhost:8000` | Server to connect to |
-| `DAEMON_API_TOKEN` | — | Auth token (auto-read from `~/.forgexa/token`) |
+| `DAEMON_API_TOKEN` | — | Explicit override token (not persisted, never auto-refreshed); omit this to let the daemon use your login session or an enrolled runtime credential |
 | `DAEMON_MAX_CONCURRENT` | `5` | Max parallel tasks |
 | `DAEMON_POLL_INTERVAL` | `3` | Poll interval (seconds) |
 

{forgexa_cli-1.23.2 → forgexa_cli-1.24.2}/README.md

@@ -37,7 +37,7 @@ pip install -e .
 # Configure server (default: http://localhost:8000)
 export FORGEXA_SERVER_URL=https://your-server.example.com
 
-# Login (saves token to ~/.forgexa/token)
+# Login (saves session to ~/.forgexa/credentials.json)
 forgexa login
 
 # List workspaces
@@ -74,8 +74,11 @@ forgexa board --project <project-id>
 | `forgexa budget --workspace <id>` | Budget overview |
 | `forgexa daemon start` | Start local daemon (discover agents, run tasks) |
 | `forgexa daemon start -d` | Start daemon in background |
-| `forgexa daemon status` | Show your daemon statuses |
+| `forgexa daemon status` | Show your daemon statuses (credential type, prefix, expiry) |
 | `forgexa daemon stop` | Stop local daemon |
+| `forgexa daemon enroll` | Issue a dedicated runtime credential for this machine (recommended for long-running daemons) |
+| `forgexa daemon rotate-token` | Rotate this runtime's credential (old one is revoked immediately) |
+| `forgexa daemon revoke-credential` | Revoke this runtime's credential (keeps your login session) |
 | `forgexa check` | Verify locally-installed agent CLIs are genuinely usable (runs a real task per agent) |
 | `forgexa check --quick` | Same, but discovery only — no live task, no API calls |
 | `forgexa check --agent <name>` | Check a single agent (e.g. `claude`, `codex`, `kimi`) |
@@ -207,6 +210,26 @@ forgexa runtimes list
 forgexa runtimes list --all
 ```
 
+### Runtime Credentials
+
+A freshly logged-in daemon authenticates with your interactive login session. For a
+long-running daemon (e.g. a machine that stays on 24/7), issue it a dedicated,
+revocable credential instead so it never depends on your session expiring:
+
+```bash
+# Issue a runtime credential for this machine (default 90-day expiry, max 365)
+forgexa daemon enroll
+
+# Rotate it (the old credential is revoked immediately — no overlap window)
+forgexa daemon rotate-token
+
+# Revoke it (keeps your login session; run 'forgexa daemon enroll' again to reissue)
+forgexa daemon revoke-credential
+```
+
+`forgexa daemon status` shows which credential type is active, its prefix, and its
+expiry — the raw credential value is only ever printed once, at enroll/rotate time.
+
 ### Agent Health Check
 
 Before starting the daemon (or when tasks keep failing on this machine), verify that every
@@ -262,7 +285,7 @@ The daemon automatically discovers these agents if installed on your system:
 | Variable | Default | Description |
 |----------|---------|-------------|
 | `DAEMON_SERVER_URL` | `http://localhost:8000` | Server to connect to |
-| `DAEMON_API_TOKEN` | — | Auth token (auto-read from `~/.forgexa/token`) |
+| `DAEMON_API_TOKEN` | — | Explicit override token (not persisted, never auto-refreshed); omit this to let the daemon use your login session or an enrolled runtime credential |
 | `DAEMON_MAX_CONCURRENT` | `5` | Max parallel tasks |
 | `DAEMON_POLL_INTERVAL` | `3` | Poll interval (seconds) |
 

{forgexa_cli-1.23.2 → forgexa_cli-1.24.2}/forgexa_cli/__init__.py

@@ -1,2 +1,2 @@
 """forgexa-cli — Forgexa command-line client."""
-__version__ = "1.23.2"
+__version__ = "1.24.2"