@aiaiai-pt/frankctl 0.8.0 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -3,6 +3,17 @@
3
3
  All notable changes to `@aiaiai-pt/frankctl` are documented here. This project
4
4
  adheres to [Semantic Versioning](https://semver.org/).
5
5
 
6
+ ## 0.9.0
7
+
8
+ - Add Pipeline schedule readback and mutation commands, together with pause,
9
+ resume, and correlated trigger controls backed by reconciled Dagster state.
10
+
11
+ ## 0.8.1
12
+
13
+ - Document the explicit Source credential runtime boundary in the bundled
14
+ agent skill: the current base Compose deployment uses `legacy_inline`, while
15
+ credential lifecycle commands and opaque references require `vault` mode.
16
+
6
17
  ## 0.8.0
7
18
 
8
19
  - Add declarative `IdentityPolicy` reconciliation, exact symbolic reference
package/README.md CHANGED
@@ -42,7 +42,7 @@ frankctl --help
42
42
  - `frankctl templates list|show|render`
43
43
  - `frankctl pipelines list|get|validate|apply|export`
44
44
  - `frankctl sources list|get|create|update|delete|discover|sync|logs|history`
45
- - `frankctl sources credentials set|rotate`
45
+ - `frankctl sources credentials set|rotate` (Vault mode only)
46
46
  - `frankctl backing-datasets list|get|create|update|delete|sync|entities` (alias: `frankctl bd`; `sync --force` replays unchanged data/spec)
47
47
  - `frankctl sources streams list|set|refresh-schema`
48
48
  - `frankctl transforms list|get|runs|logs|trigger`
@@ -65,17 +65,24 @@ when force replay is unsupported or unadvertised.
65
65
 
66
66
  `frankctl pipelines apply -f vertical.yaml` can provision a complete Source +
67
67
  Pipeline + BackingDataset triple from a single multi-doc YAML file when the
68
- Source contains no credential value.
68
+ tracked Source contains no credential value.
69
69
  Docs use the kubectl-style envelope (`apiVersion: frank.platform/v1`,
70
70
  `kind:`, `metadata.name:`, `spec:`). The CLI sorts by kind (Source →
71
71
  Pipeline → BackingDataset), resolves cross-doc name references to UUIDs,
72
72
  and POSTs each doc with `?if-not-exists=true`. `frankctl pipelines export
73
73
  <id> -o yaml` round-trips an existing pipeline back to a multi-doc YAML
74
- file for review. Declared credential values are written separately with
75
- `frankctl sources credentials set|rotate --values-file -` and stored in Vault;
76
- they are never accepted in ordinary `source_config` or returned by export.
77
- Git-owned Sources contain only ordinary configuration and the tenant-owned
78
- opaque `credential_ref`. See `../docs/guides/cli.md` for the full reference.
74
+ file for review.
75
+
76
+ Credential handling follows the server's explicit `SOURCE_CREDENTIAL_MODE`.
77
+ Current mutable/base Compose uses `legacy_inline`: Source create/update accepts
78
+ write-only `credential_values` and persists them in `Source.source_config`;
79
+ read/export stay redacted, and credential references plus the `sources
80
+ credentials` commands are unavailable.
81
+ The immutable release uses `vault`: values are written separately with
82
+ `sources credentials set|rotate --values-file -`, and Git-owned Sources may
83
+ carry the tenant-owned opaque `credential_ref`. Export never returns values; it
84
+ strips inline credential fields and preserves only a Vault-mode reference when
85
+ one exists. See `../docs/guides/cli.md` for the full reference.
79
86
 
80
87
  Relationship-bearing BackingDatasets declare their prerequisites in
81
88
  `metadata.dependsOn` and explicitly use `spec.sync_mode: manual`. The graph is