grafos auth

Lower-level credential surface (grafos auth ...). Most users go through grafos login / grafos status instead.

grafos auth

Local credential management: status, logout, revoke.

Kept as the advanced/scripting alias. Most users should use the top-level `grafos status|refresh|logout|revoke` verbs — those manage Tenura-hosted account credentials and stay context-aware about local/direct-fabric usage.

Usage: grafos auth [OPTIONS] <COMMAND>

Commands:
  status   Show the locally-stored hosted credentials and verify with the API
  refresh  Rotate the current hosted token. Requires a currently-valid token (not expired, not revoked). The new token replaces the old one atomically on the server; the old token is revoked
  logout   Delete local hosted credentials without touching the server. The token remains valid server-side until it expires or is explicitly revoked — use `auth revoke` for that
  revoke   Revoke the hosted token server-side AND delete local creds
  help     Print this message or the help of the given subcommand(s)

Options:
      --fabric <FABRIC>
          Fabric address (host:port). Overrides GRAFOS_FABRIC env var

          [env: GRAFOS_FABRIC=]

      --json
          Output in JSON format for scripting

      --wide
          Show additional columns in table output

      --no-color
          Disable color output

      --pool <POOL>
          Pool name (default: "default")

          [default: default]

  -h, --help
          Print help (see a summary with '-h')

  -V, --version
          Print version

grafos auth status

Show the locally-stored hosted credentials and verify with the API.

Exits with a credentials-specific code on failure: 64 missing, 65 expired, 66 revoked, 67 wrong-tenant, 68 remote-error.

Usage: grafos auth status [OPTIONS]

Options:
      --fabric <FABRIC>
          Fabric address (host:port). Overrides GRAFOS_FABRIC env var

          [env: GRAFOS_FABRIC=]

      --local-only
          Skip the remote round-trip and only print the on-disk record

      --json
          Emit a stable JSON shape (`schema_version: 1`) instead of the human-readable summary. Used by the dashboard, agent skill, and CI to consume the same data the human view shows

      --wide
          Show additional columns in table output

      --no-color
          Disable color output

      --pool <POOL>
          Pool name (default: "default")

          [default: default]

  -h, --help
          Print help (see a summary with '-h')

  -V, --version
          Print version

grafos auth refresh

Rotate the current hosted token. Requires a currently-valid token (not expired, not revoked). The new token replaces the old one atomically on the server; the old token is revoked

Usage: grafos auth refresh [OPTIONS]

Options:
      --fabric <FABRIC>  Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --json             Output in JSON format for scripting
      --wide             Show additional columns in table output
      --no-color         Disable color output
      --pool <POOL>      Pool name (default: "default") [default: default]
  -h, --help             Print help
  -V, --version          Print version

grafos auth logout

Delete local hosted credentials without touching the server. The token remains valid server-side until it expires or is explicitly revoked — use `auth revoke` for that

Usage: grafos auth logout [OPTIONS]

Options:
      --fabric <FABRIC>  Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --json             Output in JSON format for scripting
      --wide             Show additional columns in table output
      --no-color         Disable color output
      --pool <POOL>      Pool name (default: "default") [default: default]
  -h, --help             Print help
  -V, --version          Print version

grafos auth revoke

Revoke the hosted token server-side AND delete local creds

Usage: grafos auth revoke [OPTIONS]

Options:
      --fabric <FABRIC>  Fabric address (host:port). Overrides GRAFOS_FABRIC env var [env: GRAFOS_FABRIC=]
      --json             Output in JSON format for scripting
      --wide             Show additional columns in table output
      --no-color         Disable color output
      --pool <POOL>      Pool name (default: "default") [default: default]
  -h, --help             Print help
  -V, --version          Print version