Add cloud service query for HTTP SQL execution (stacked on #120)

README.md

@@ -289,6 +289,14 @@ CLICKHOUSE_PASSWORD=secret clickhousectl cloud service client --name my-service
 # Use a local client version instead of auto-downloading the matching one
 clickhousectl cloud service client --name my-service --allow-mismatched-client-version
 
+# Run SQL over HTTP — no local clickhouse-client needed, uses active cloud credentials
+clickhousectl cloud service query --name my-service --query "SELECT 1"
+clickhousectl cloud service query --id <service-id> --queries-file script.sql --database analytics
+echo "SELECT count() FROM system.tables" | clickhousectl cloud service query --name my-service
+
+# Override output format (default: PrettyCompact on tty, TabSeparated when piped)
+clickhousectl cloud service query --name my-service -q "SELECT 1" --format JSONEachRow
+
 # Update service metadata and patches
 clickhousectl cloud service update <service-id> \
   --name my-renamed-service \

crates/clickhouse-cloud-api/src/client.rs

@@ -122,6 +122,23 @@ impl Client {
         }
     }
 
+    /// Build an authenticated request to an absolute URL using this client's credentials.
+    ///
+    /// The API base URL is ignored — pass the full target URL. Useful for adjacent
+    /// ClickHouse Cloud services that share the same auth scheme (e.g. the query-run
+    /// endpoint at `queries.clickhouse.cloud`).
+    pub fn authenticated_request(
+        &self,
+        method: reqwest::Method,
+        url: &str,
+    ) -> reqwest::RequestBuilder {
+        let builder = self.http.request(method, url);
+        match &self.auth {
+            Auth::Basic { key_id, key_secret } => builder.basic_auth(key_id, Some(key_secret)),
+            Auth::Bearer { token } => builder.bearer_auth(token),
+        }
+    }
+
     /// Get list of available organizations
     pub async fn organization_get_list(
         &self,

crates/clickhousectl/Cargo.toml

@@ -23,7 +23,7 @@ open = "5.3.3"
 url = "2.5.8"
 tabled = "0.20.0"
 clickhouse-cloud-api = { version = "0.1.0", path = "../clickhouse-cloud-api" }
-uuid = "1.23.0"
+uuid = { version = "1.23.0", features = ["v4"] }
 
 [dev-dependencies]
 tempfile = "3.27.0"