Enforce OAuth read-only for cloud commands#99

Merged

sdairs merged 19 commits intomainfrom

issue-98-oauth-read-only

Apr 9, 2026

Commits on Apr 9, 2026

Enforce OAuth read-only: block write commands, enhance 403 errors, update docs

sdairs
and
claude
committed
Fix incorrect `cloud auth keys` reference in no-credentials error

sdairs
and
claude
committed
Exhaustive is_write_command tests covering every command variant

sdairs
and
claude
committed
Link to API key creation docs in all auth error messages

sdairs
and
claude
committed
Hide --url flag unconditionally

sdairs
and
claude
committed
Add --oauth and --api-keys flags to logout for selective credential clearing

sdairs
and
claude
committed
Add help text to logout explaining default clears all credentials

sdairs
and
claude
committed
Simplify logout help: use after_help only, drop long_about

sdairs
and
claude
committed
Remove duplicate agent context from logout help

sdairs
and
claude
committed
Use CONTEXT FOR AGENTS only for logout after_help

sdairs
and
claude
committed
Add API key creation docs link to cloud auth and login help

sdairs
and
claude
committed
Remove redundant agent guidance from login help

sdairs
and
claude
committed
Change auth precedence: API keys before OAuth

sdairs
and
claude
committed
add signup command

kcmannem
authored and
sdairs
committed
Merge pull request #78 from ClickHouse/cloud-auth-signup
sdairs
authored
Add UTM tracking and agent context to signup command

sdairs
and
claude
committed
Use table output for auth status and bump version to 0.1.17

sdairs
and
claude
committed
Update Cargo.lock for 0.1.17

sdairs
and
claude
committed
Revert --url flag to debug-only visibility

sdairs
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Enforce OAuth read-only for cloud commands#99

Enforce OAuth read-only for cloud commands#99
sdairs merged 19 commits intomainfrom
issue-98-oauth-read-only

Commits on Apr 9, 2026

Enforce OAuth read-only: block write commands, enhance 403 errors, update docs

Fix incorrect `cloud auth keys` reference in no-credentials error

Exhaustive is_write_command tests covering every command variant

Link to API key creation docs in all auth error messages

Hide --url flag unconditionally

Add --oauth and --api-keys flags to logout for selective credential clearing

Add help text to logout explaining default clears all credentials

Simplify logout help: use after_help only, drop long_about

Remove duplicate agent context from logout help

Use CONTEXT FOR AGENTS only for logout after_help

Add API key creation docs link to cloud auth and login help

Remove redundant agent guidance from login help

Change auth precedence: API keys before OAuth

add signup command

Merge pull request #78 from ClickHouse/cloud-auth-signup

Add UTM tracking and agent context to signup command

Use table output for auth status and bump version to 0.1.17

Update Cargo.lock for 0.1.17

Revert --url flag to debug-only visibility