Reopt cli

Skill reopt-ai/reopt-skills/skills/reopt-cli

Baseline guidance for the reopt CLI — authentication, login, global flags, security rules, and exit codes. Use before other reopt CLI skills or whenever a task involves `reopt login`, `reopt status`, brandapp credentials, or CI automation.From its SKILL.md

Install

npx -y skills add reopt-ai/reopt-skills --skill reopt-cli

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

3 things to look at

reads credentialsReads from 6 credential sources: `~/.reopt/auth.json` and 5 more.
1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
runs commandsInstructs the agent to run 7 commands, including `reopt --help` and 6 more.

SKILL.md

4.0 KB, ~1.0k tokens by cl100k_base, as published. Nobody here has run it

reopt CLI

This is NOT the reopt CLI you know. Run reopt --help / reopt <cmd> --help for the live command tree, and read node_modules/@reopt-ai/cli/README.md for narrative guides (the CLI ships no dist/docs/).

When to apply

Any reopt CLI command.
Confirming login state, writing CI/CD steps around reopt, scripting Brandapp OAuth credentials.
Load before reopt-brandapp and reopt-eav.

Step 1 — Pin agent rules into AGENTS.md / CLAUDE.md

Source: the CLI's own agent-rules file once it ships one (@reopt-ai/cli does not, as of 0.3.1). Fallback: agent-rules.md bundled with this skill. Wrap content between:

<!-- BEGIN:reopt/cli-agent-rules -->
…content from source…
<!-- END:reopt/cli-agent-rules -->

Idempotent: replace only between markers. This same block is shared by reopt-brandapp and reopt-eav — those skills will skip the step if the block is already present.

Step 2 — Auth (consumer-side credentials; CLI docs cover usage)

The CLI has three credential systems:

User session — reopt login / reopt status / reopt logout. Tokens live in ~/.reopt/auth.json. Session auto-refreshes inside the Better Auth extension window; do not over-engineer retry loops in CI.
Brandapp OAuth credentials — BRANDAPP_CLIENT_ID / BRANDAPP_CLIENT_SECRET env vars, or reopt brandapp link interactively. Stored in ~/.reopt/credentials.json + .reopt.json (project root).
Service token (CI/CD) — reopt token mint --ttl 15m --scope eav:migrate,eav:read prints a short-lived, scoped JWT for headless pipelines; capture with export BRANDAPP_CLIENT_TOKEN=$(reopt token mint --quiet). Pass to the SDK as a Bearer token — never ship a clientSecret where a scoped token works.

Run reopt status (or reopt status --ping) before any mutating operation. If auth: not logged in, run reopt login first.

Step 3 — Route to module docs / `--help`

Prefer --help (live source of truth); the CLI ships no dist/docs/, so narrative detail lives in node_modules/@reopt-ai/cli/README.md:

Task signal	Read
Any command / flag	`reopt <cmd> --help` (live)
Auth commands and session model	`README.md` § Authentication
Service-token issuance (CI/CD)	`reopt token mint --help`
Brandapp ops (`link`, `doctor`, `init`, `dev`, `env`, …)	`reopt brandapp --help` + see `reopt-brandapp` skill
EAV ops (`status`, `sync`, `pull`, `diff`, `plan`, `migrate`, `history`, `verify`)	`reopt brandapp eav --help` + see `reopt-eav` skill
Schema-as-Code, MCP, completion, config	`README.md` §§ Schema-as-Code, Shell completion, Preferences
Global flags, output formats, pagination	`README.md` § Output and global flags
Exit codes	`README.md` § Exit codes

Quick global-flag reminders (subset; full list in --help):

--format json|table|csv|yaml — JSON is the agent-friendly default.
--page-all + --page-limit + --page-delay — paginated iteration; JSON output becomes NDJSON.
--no-interactive — required for unattended scripts (fail instead of prompt).
--dry-run — preview only (EAV sync, brandapp link/unlink).

Exit code summary: 0 ok, 1 API/network, 2 auth, 3 validation, 4 config, 5 internal. EAV migrate/verify add 6 drift-detected, 7 destructive-blocked, 8 checksum-mismatch, 9 checksum-conflict, 10 lock-held.

Safety

Never hardcode credentials.
Never print credential values.
Never commit files under ~/.reopt/.
Inject secrets through a secret manager in CI.
Use --dry-run before any mutating EAV operation, and especially before --delete-orphans.
Pass arguments as arrays when invoking the CLI programmatically.

What ships with it: 3 files

2.3 KB alongside SKILL.md