[CLI] Add --as-token option for CLI

[nezaj]

What it says on the tin!

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 716184c8-dcdb-4d6f-a085-40fca7729b4a

📥 Commits

Reviewing files that changed from the base of the PR and between e83b148 and 07b6088.

📒 Files selected for processing (4)

• client/packages/cli/__tests__/e2e/cli.e2e.test.ts
• client/packages/cli/src/index.js
• client/packages/version/src/version.ts
• client/www/pages/docs/cli.md

---

📝 Walkthrough

Walkthrough

This PR adds support for a new --as-token CLI option to the query command, enabling users to run queries as a user identified by their refresh token. The implementation includes CLI flag handling, request header construction, end-to-end test coverage, documentation updates, and a version bump.

Changes

Cohort / File(s)	Summary
CLI Implementation client/packages/cli/src/index.js	Added --as-token <refresh-token> flag to query command with mutually-exclusive context validation and as-token request header construction for /admin/query endpoint.
E2E Tests client/packages/cli/__tests__/e2e/cli.e2e.test.ts	Added new test case for --as-token flag that verifies restricted view permissions are enforced when querying as a user identified by their refresh token.
Documentation client/www/pages/docs/cli.md	Documented the new --as-token <refresh-token> flag in the CLI query command reference.
Version Bump client/packages/version/src/version.ts	Updated version constant from v0.22.168 to v0.22.169.

Sequence Diagram

sequenceDiagram
    participant User as User/CLI
    participant CLI as handleQuery()
    participant Headers as Request Headers
    participant Server as /admin/query Server

    User->>CLI: query --as-token <refreshToken>
    CLI->>CLI: Validate context (--as-token, --admin, --as-email, --as-guest mutually exclusive)
    CLI->>Headers: Set headers['as-token'] = refreshToken
    Headers->>Server: POST /admin/query with as-token header
    Server->>Server: Authenticate user from refresh token
    Server->>Server: Apply user-specific view permissions
    Server->>User: Return filtered query results

Loading

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

• [CLI] Add query command to instant-cli #2354: Extends the query CLI command infrastructure with a new --as-token context option and request header construction.
• [CLI] Add e2e tests #2349: Builds on the e2e test framework and helpers used in the new --as-token test case.
• bump version to v0.22.137 (#2280) [bump to v0.22.137] #2280: Also modifies the shared version constant in the same file.

Suggested reviewers

• stopachka
• dwwoelfel

🚥 Pre-merge checks | ✅ 1 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.
Description check	❓ Inconclusive	The description 'What it says on the tin!' is vague and uses non-descriptive language that doesn't convey meaningful information about the changeset.	Provide a more descriptive summary of what the --as-token option does and why it was added, even if brief.

✅ Passed checks (1 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: adding a --as-token option to the CLI, which is the primary focus of the changeset.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch cli-as-token

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[stopachka]

Niice!

[github-actions]

View Vercel preview at instant-www-js-cli-as-token-jsv.vercel.app.