@zenyangzzz/vesper
v0.1.0
Published
Agent-first CLI for authenticated remote log queries
Readme
Vesper CLI
An Agent-first CLI for querying authorized remote service logs through one Vesper Gateway. Installing the CLI does not grant access to any team or logs. The package contains no credentials, Feishu application secret, deployment configuration, or business logs.
Requires Node.js 24 or newer. This package exposes the vesper executable, not a
JavaScript SDK. The Gateway operator supplies the approved HTTPS origin.
vesper config set-server https://vesper.example.com
vesper auth login --no-waitOpen the returned verification link and authorize in Feishu. Keep deviceCode
private. Complete the same login before it expires:
vesper auth login --device-code '<deviceCode>' --no-wait
vesper auth status
vesper projects list
vesper services list --project '<project>'
vesper query --project '<project>' --service '<service>' --since 1hA pending login is not a failure; wait at least its returned interval before
polling again. The server requires an allowed Feishu tenant and project/service
scope. Users who cannot authorize the Feishu application cannot complete this
login. Public package availability does not bypass these checks.
Queries return all matches in the registered file by default. Optional --contains
matches a case-sensitive message substring; --level sets the minimum level;
--limit returns an explicitly requested count. There is no implicit scan-byte,
lookback, or entry-count cap. File archives are not searched automatically.
Query errors mean the query did not complete, not that no matching logs exist.
Success is one JSON object on stdout. Errors are JSON on stderr. Exit codes:
0 success, 2 invalid input/config, 3 authentication/access, 4 missing source,
5 server/network error, 1 other failure. Use vesper --help for commands.
Stored credentials live under ${XDG_CONFIG_HOME:-~/.config}/vesper/ and are
origin-bound. Never share that directory or tokens. Service accounts can use
VESPER_TOKEN only with matching VESPER_TOKEN_SERVER, as authorized by their
Gateway operator. A token is a credential regardless of how the CLI was installed.
