feat(cli): implement official urBackend CLI (@urbackend/cli) (#340)

* feat(cli): scaffold official CLI package

* feat(cli): initialize CLI with Commander

* feat(cli): scaffold official urBackend CLI authentication

* feat(cli): implement authentication commands

* pre-ui PAT commit

* final commit- official urBackend CLI

* ci: add REDIS_URL env for dashboard-api test job

* test: mock authenticateCLI and authFlexible in routes.user.test

* test: mock cli.controller to prevent ESM marked import in Jest

* proposed fix by coderabbit

* fixed ci.yml

* coderabbit agentic fix

* revert: restore NODE_ENV guard in authMiddleware console.error

* removed extra landing space in ci.yml

Author: Nitin-kumar-yadav1307

.github/workflows/ci.yml

@@ -27,6 +27,16 @@ jobs:
 
   dashboard-api-tests:
     runs-on: ubuntu-latest
+    services:
+      redis:
+        image: redis:7-alpine
+        ports:
+          - 6379:6379
+        options: >-
+          --health-cmd "redis-cli ping"
+          --health-interval 10s
+          --health-timeout 5s
+          --health-retries 5
     permissions:
       contents: read
     steps:
@@ -44,6 +54,8 @@ jobs:
 
       - name: Run Dashboard API Tests
         run: npm run test --workspace=dashboard-api
+        env:
+          REDIS_URL: redis://localhost:6379
 
   public-api-tests:
     runs-on: ubuntu-latest

apps/dashboard-api/src/__tests__/routes.user.test.js

@@ -48,6 +48,25 @@ jest.mock('../controllers/pat.controller', () => ({
     revokePAT: jest.fn((_req, res) => res.json({ success: true }))
 }));
 
+jest.mock('../middlewares/authenticateCLI', () =>
+    jest.fn((req, _res, next) => {
+        req.user = { _id: 'mock_user_id', id: 'mock_user_id' };
+        req.cliScopes = ['read', 'write'];
+        next();
+    })
+);
+
+jest.mock('../middlewares/authFlexible', () =>
+    jest.fn((req, _res, next) => {
+        req.user = { _id: 'mock_user_id', id: 'mock_user_id' };
+        next();
+    })
+);
+
+jest.mock('../controllers/cli.controller', () => ({
+    getCLIProfile: jest.fn((_req, res) => res.json({ success: true, data: {} }))
+}));
+
 const express = require('express');
 const request = require('supertest');
 const userRouter = require('../routes/user');

apps/dashboard-api/src/app.js

@@ -75,15 +75,18 @@ const csrfProtection = csurf({
     } 
 });
 
+// AFTER
 app.use((req, res, next) => {
     // Exclude Razorpay webhook from CSRF protection since it's an external POST request
-    if (req.path === '/api/billing/webhook') {
+    // Exclude CLI routes — CLI authenticates via Bearer PAT, not cookies
+     const isCliRoute =
+        req.path === '/api/user/cli' || req.path.startsWith('/api/user/cli/');
+    if (req.path === '/api/billing/webhook' || isCliRoute) {
         return next();
     }
     csrfProtection(req, res, next);
 });
 
-
 if (process.env.NODE_ENV !== 'test') {
     garbageCollect();
     storageGarbageCollect();

apps/dashboard-api/src/controllers/cli.controller.js

@@ -0,0 +1,28 @@
+const { Developer, ApiResponse, AppError } = require("@urbackend/common");
+
+module.exports.getCLIProfile = async (req, res, next) => {
+  try {
+     const developer = await Developer.findById(req.user._id)
+      .select("email plan githubUsername avatarUrl");
+
+    if (!developer) {
+      return next(new AppError(404, "Developer not found"));
+    }
+
+    return new ApiResponse({
+      developer: {
+        id: developer._id,
+        email: developer.email,
+        plan: developer.plan,
+        githubUsername: developer.githubUsername,
+        avatarUrl: developer.avatarUrl,
+      },
+      auth: {
+        scopes: req.cliScopes,
+        tokenType: req.cliTokenType,
+      },
+    }).send(res);
+  } catch (err) {
+    next(err);
+  }
+};

apps/dashboard-api/src/controllers/pat.controller.js

@@ -104,3 +104,4 @@ exports.revokePAT = async (req, res, next) => {
         return next(new AppError(500, "An error occurred while revoking the token"));
     }
 };
+

apps/dashboard-api/src/middlewares/authFlexible.js

@@ -0,0 +1,19 @@
+const authMiddleware = require('./authMiddleware');
+const authenticateCLI = require('./authenticateCLI');
+
+/**
+ * Flexible auth middleware — accepts either:
+ * - Session cookie (browser dashboard)
+ * - Bearer PAT token (CLI)
+ */
+const authFlexible = (req, res, next) => {
+    const authHeader = req.headers.authorization;
+
+    if (authHeader && authHeader.startsWith('Bearer ubpat_')) {
+        return authenticateCLI(req, res, next);
+    }
+
+    return authMiddleware(req, res, next);
+};
+
+module.exports = authFlexible;

apps/dashboard-api/src/middlewares/authMiddleware.js

@@ -31,11 +31,10 @@ module.exports = function (req, res, next) {
 
         // Proceed to the next middleware or route handler
         next();
-    } catch (err) {
-        if (process.env.NODE_ENV !== 'test') {
-            console.error(err);
-        }
-
-        return next(new AppError(401, 'Invalid Token'));
+   } catch (err) {
+    if (process.env.NODE_ENV !== 'test') {
+        console.error(err);
     }
+    return next(new AppError(401, "Invalid Token"));
+}
 };

apps/dashboard-api/src/middlewares/authenticateCLI.js

@@ -110,7 +110,7 @@ const authenticateCLI = async (req, res, next) => {
         ).catch(err => console.error("Failed to update PAT metadata:", err));
 
         // Attach developer and PAT scopes for downstream controllers
-        req.user = { id: developer._id.toString() }; // Maintain compatibility with dashboard controllers
+        req.user = { _id: developer._id.toString(), id: developer._id.toString() }; // Maintain compatibility with dashboard controllers
         req.developer = developer;
         req.cliScopes = matchedPat.scopes;
         req.cliTokenType = matchedPat.type;

apps/dashboard-api/src/routes/analytics.js

@@ -2,9 +2,10 @@ const express = require("express");
 const router = express.Router();
 const analyticsController = require("../controllers/analytics.controller");
 const authMiddleware = require("../middlewares/authMiddleware");
+const authFlexible = require("../middlewares/authFlexible");
 
-router.get("/stats", authMiddleware, analyticsController.getGlobalStats);
-router.get("/activity", authMiddleware, analyticsController.getRecentActivity);
+router.get("/stats", authFlexible, analyticsController.getGlobalStats);
+router.get("/activity", authFlexible, analyticsController.getRecentActivity);
 
 // --- Metrics Stack ---
 router.get("/funnel", authMiddleware, analyticsController.getActivationFunnel);