@datarails-ai/dr-cli 1.6.148 → 1.6.150

package/dist/cli.js

@@ -8,7 +8,7 @@ import { fileURLToPath as fileURLToPath3 } from "url";
 // package.json
 var package_default = {
   name: "@datarails-ai/dr-cli",
-  version: "1.6.148",
+  version: "1.6.150",
   description: "Datarails CLI",
   type: "module",
   engines: {
@@ -40,7 +40,7 @@ var package_default = {
     postinstall: "node scripts/postinstall.mjs"
   },
   dependencies: {
-    "@datarails-ai/dr-appspace-cli": "0.12.20",
+    "@datarails-ai/dr-appspace-cli": "0.12.21",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@napi-rs/keyring": "^1.3.0",
     commander: "^12.1.0",
@@ -69,7 +69,7 @@ var package_default = {
 };
 
 // src/buildInfo.ts
-var BUILD_TIME = "2026-10-20T10:51:37.333Z";
+var BUILD_TIME = "2026-10-20T20:43:46.967Z";
 function formatBuildTime(iso) {
   if (iso === "") return "";
   const d = new Date(iso);
@@ -23109,6 +23109,50 @@ function toWireFormula(input) {
   return wire;
 }
 
+// src/commands/_metricsFormat.ts
+var CURRENCY_PREFIXES = ['"$"', "\u20AC", "\xA3", "\u20AA"];
+var DIGITS = ["#,###", "####"];
+var DECIMALS = ["", ".#", ".##", ".###", ".####"];
+var SCALES = ["", "[kilo]k", "[mega]M"];
+var METRIC_FORMATS = (() => {
+  const signs = [
+    { prefix: "", suffix: "" },
+    ...CURRENCY_PREFIXES.map((prefix) => ({ prefix, suffix: "" })),
+    { prefix: "", suffix: "%" }
+  ];
+  const all = /* @__PURE__ */ new Set();
+  for (const { prefix, suffix } of signs) {
+    for (const digits of DIGITS) {
+      for (const decimals of DECIMALS) {
+        for (const scale of SCALES) {
+          all.add(`${prefix}${digits}${decimals}${scale}${suffix}`);
+        }
+      }
+    }
+  }
+  return all;
+})();
+var METRIC_FORMAT_HELP = `Display number format (quote it). Only formats the metric editor can produce are accepted, built in this order: optional currency prefix $ \u20AC \xA3 \u20AA; digits #,### (thousands separator) or ####; optional decimals .# to .####; optional scale [kilo]k or [mega]M; optional % suffix (not with a currency). Examples: '#,###', '$#,###.##', '#,###[mega]M', '####.#%'. $ is stored quoted ("$"#,###.##), as the editor stores it; either spelling is accepted.`;
+function validateMetricFormat(raw2) {
+  const trimmed = raw2.trim();
+  const canonical = trimmed.startsWith("$") ? `"$"${trimmed.slice(1)}` : trimmed;
+  if (METRIC_FORMATS.has(canonical)) return canonical;
+  const hashed = canonical.replace(/0/g, "#");
+  const didYouMean = hashed !== canonical && METRIC_FORMATS.has(hashed) ? ` Did you mean '${hashed}'?` : "";
+  throw new Error(
+    [
+      `invalid --format ${JSON.stringify(raw2)}: not a format the metric editor can produce.${didYouMean}`,
+      "Build it from these parts, in order (each optional part may be left out):",
+      "  currency prefix: $ \u20AC \xA3 \u20AA            (not together with %)",
+      "  digits:          #,### or ####      (with / without thousands separator)",
+      "  decimals:        .# .## .### .####  (1-4 places)",
+      "  scale:           [kilo]k or [mega]M (thousands / millions)",
+      "  percent suffix:  %",
+      "Examples: '#,###'  '$#,###.##'  '#,###[mega]M'  '####.#%'"
+    ].join("\n")
+  );
+}
+
 // src/commands/_reAggregateWait.ts
 var REAGG_POLL_INTERVAL_MS = 2e3;
 var REAGG_POLL_MAX_INTERVAL_MS = 15e3;
@@ -25952,6 +25996,7 @@ async function validateDimensionsExist(client, ids, template, signal) {
 }
 async function runMetricsCreateBase(cfg) {
   validateMetricName(cfg.name);
+  const format = cfg.format === void 0 ? void 0 : validateMetricFormat(cfg.format);
   const { aggregator, isCumulative } = resolveMetricAggregator(cfg.aggOriginal);
   const filterList = parseMetricFilters(cfg.filters, cfg.excludeFilters);
   const dims = parseDimensionsList(cfg.dimensions);
@@ -25973,17 +26018,19 @@ async function runMetricsCreateBase(cfg) {
   if (dims.length > 0) body.dimensions = dims;
   if (cfg.description !== void 0) body.description = cfg.description;
   if (cfg.category !== void 0) body.category = cfg.category;
+  if (format !== void 0) body.configuration = { presented_formula: "", format };
   const created = await create9(cfg.client, body, {
     signal: cfg.signal
   });
   if (cfg.asJson) {
-    writeJSONIndented(cfg.out, created);
+    writeJSONIndented(cfg.out, decodeHtmlEntitiesDeep(created));
     return;
   }
   renderCreateTable(cfg.out, created);
 }
 async function runMetricsCreateCalc(cfg) {
   validateMetricName(cfg.name);
+  const format = cfg.format === void 0 ? void 0 : validateMetricFormat(cfg.format);
   if (cfg.formula.trim() === "") {
     throw new Error("--formula is required and must be non-empty");
   }
@@ -25993,7 +26040,7 @@ async function runMetricsCreateCalc(cfg) {
   const body = {
     name: cfg.name,
     kind: "CALC",
-    configuration: { presented_formula },
+    configuration: format === void 0 ? { presented_formula } : { presented_formula, format },
     is_approved_by_user: true
   };
   if (dims.length > 0) body.dimensions = dims;
@@ -26003,7 +26050,7 @@ async function runMetricsCreateCalc(cfg) {
     signal: cfg.signal
   });
   if (cfg.asJson) {
-    writeJSONIndented(cfg.out, created);
+    writeJSONIndented(cfg.out, decodeHtmlEntitiesDeep(created));
     return;
   }
   renderCreateTable(cfg.out, created);
@@ -26030,6 +26077,7 @@ async function runMetricsCreateDriver(cfg) {
   renderCreateTable(cfg.out, created);
 }
 async function runMetricsUpdate(cfg) {
+  const format = cfg.format === void 0 ? void 0 : validateMetricFormat(cfg.format);
   const body = {};
   if (cfg.name !== void 0) {
     validateMetricName(cfg.name);
@@ -26061,16 +26109,27 @@ async function runMetricsUpdate(cfg) {
   if (wantsFilterChange) {
     body.filters = parseMetricFilters(cfg.filters, cfg.excludeFilters);
   }
-  if (Object.keys(body).length === 0) {
+  if (Object.keys(body).length === 0 && format === void 0) {
     throw new Error(
-      "no fields to update; provide at least one of --name, --description, --category, --dimensions, --hide/--unhide, --time-aggregation, --aggregator, --template, --value-field, --date-field, --filter/--exclude-filter, or --clear-filters"
+      "no fields to update; provide at least one of --name, --description, --category, --dimensions, --hide/--unhide, --time-aggregation, --aggregator, --template, --value-field, --date-field, --filter/--exclude-filter, --clear-filters, or --format"
     );
   }
+  if (format !== void 0) {
+    const env = await get12(cfg.client, cfg.id, { signal: cfg.signal });
+    envelopeErr(env.success, env.error);
+    const current = decodeShape(env.data.configuration ?? {});
+    const formula = current["presented_formula"];
+    body.configuration = {
+      ...current,
+      presented_formula: typeof formula === "string" ? formula : "",
+      format
+    };
+  }
   const updated = await update6(cfg.client, cfg.id, body, {
     signal: cfg.signal
   });
   if (cfg.asJson) {
-    writeJSONIndented(cfg.out, updated);
+    writeJSONIndented(cfg.out, decodeHtmlEntitiesDeep(updated));
     return;
   }
   renderCreateTable(cfg.out, updated);
@@ -26729,7 +26788,8 @@ function renderDimensionPreview(out, resp, limit) {
 `);
   }
 }
-function renderCreateTable(out, m) {
+function renderCreateTable(out, raw2) {
+  const m = decodeHtmlEntitiesDeep(raw2);
   const dash10 = (v) => v === null || v === void 0 || v === "" ? "-" : String(v);
   const rows = [
     [
@@ -26741,7 +26801,8 @@ function renderCreateTable(out, m) {
       "DATE_FIELD",
       "VALUE_FIELD",
       "DIMS",
-      "HIDDEN"
+      "HIDDEN",
+      "FORMAT"
     ],
     [
       String(m.id),
@@ -26752,7 +26813,8 @@ function renderCreateTable(out, m) {
       dash10(m.date_field),
       dash10(m.value_field),
       String(m.dimensions?.length ?? 0),
-      String(m.is_hidden)
+      String(m.is_hidden),
+      dash10(m.configuration?.format)
     ]
   ];
   const widths = rows[0].map((_, i) => Math.max(...rows.map((r) => (r[i] ?? "").length)));
@@ -26812,12 +26874,13 @@ function wireMetricsCreate(metrics) {
   ).option("--description <s>", "Description").option("--category <id>", "Category ID").option(
     "--dimensions <ids>",
     "Comma-separated Dimension PKs (NOT template field IDs \u2014 list via 'dr metrics dimensions list')"
-  ).option("--json", "Output raw JSON instead of a table", false).action(
+  ).option("--format <f>", METRIC_FORMAT_HELP).option("--json", "Output raw JSON instead of a table", false).action(
     async (opts) => {
       const template = validateFieldId(opts.template ?? "", "--template");
       const valueField = validateFieldId(opts.valueField ?? "", "--value-field");
       const dateField = validateFieldId(opts.dateField ?? "", "--date-field");
       const category = opts.category === void 0 ? void 0 : validateFieldId(opts.category, "--category");
+      if (opts.format !== void 0) validateMetricFormat(opts.format);
       const setup = await setupCall(opts.server, opts.account);
       try {
         await runMetricsCreateBase({
@@ -26833,6 +26896,7 @@ function wireMetricsCreate(metrics) {
           dimensions: opts.dimensions,
           description: opts.description,
           category,
+          format: opts.format,
           asJson: opts.json === true,
           signal: setup.signal,
           out: process.stdout
@@ -26850,9 +26914,10 @@ function wireMetricsCreate(metrics) {
   ).option("--description <s>", "Description").option("--category <id>", "Category ID").option(
     "--dimensions <ids>",
     "Comma-separated Dimension PKs (NOT template field IDs \u2014 list via 'dr metrics dimensions list')"
-  ).option("--json", "Output raw JSON instead of a table", false).action(
+  ).option("--format <f>", METRIC_FORMAT_HELP).option("--json", "Output raw JSON instead of a table", false).action(
     async (opts) => {
       const category = opts.category === void 0 ? void 0 : validateFieldId(opts.category, "--category");
+      if (opts.format !== void 0) validateMetricFormat(opts.format);
       const setup = await setupCall(opts.server, opts.account);
       try {
         await runMetricsCreateCalc({
@@ -26862,6 +26927,7 @@ function wireMetricsCreate(metrics) {
           dimensions: opts.dimensions,
           description: opts.description,
           category,
+          format: opts.format,
           asJson: opts.json === true,
           signal: setup.signal,
           out: process.stdout
@@ -27208,7 +27274,10 @@ function wireMetricsCreate(metrics) {
     'Exclude filter "<field_id>=<v1>[,v2,...]" \u2014 replaces the existing filter list (repeatable; pair with --filter)',
     collectArray4,
     []
-  ).option("--clear-filters", "Clear all filters on the metric (sends `filters: []`)", false).option("--hide", "Set is_hidden=true").option("--unhide", "Set is_hidden=false").option("--json", "Output the raw updated metric as JSON", false).addHelpText(
+  ).option("--clear-filters", "Clear all filters on the metric (sends `filters: []`)", false).option("--hide", "Set is_hidden=true").option("--unhide", "Set is_hidden=false").option(
+    "--format <f>",
+    `${METRIC_FORMAT_HELP} To reset to the editor default, pass '#,###'; there is no empty format.`
+  ).option("--json", "Output the raw updated metric as JSON", false).addHelpText(
     "after",
     [
       "",
@@ -27230,6 +27299,7 @@ function wireMetricsCreate(metrics) {
   ).action(
     async (idStr, opts) => {
       const id = parseMetricIdArg(idStr);
+      if (opts.format !== void 0) validateMetricFormat(opts.format);
       if (opts.hide === true && opts.unhide === true) {
         throw new Error("--hide and --unhide are mutually exclusive");
       }
@@ -27273,6 +27343,7 @@ function wireMetricsCreate(metrics) {
           filters: opts.filter ?? [],
           excludeFilters: opts.excludeFilter ?? [],
           clearFilters: opts.clearFilters === true,
+          format: opts.format,
           asJson: opts.json === true,
           signal: setup.signal,
           out: process.stdout
@@ -33302,13 +33373,20 @@ import { promises as fs16 } from "fs";
 import * as os3 from "os";
 import * as path7 from "path";
 var RESPONSE_BODY_MAX_BYTES = 8 * 1024;
+var MAX_NAME_SUFFIX = 99;
 async function writeErrorLog(opts) {
-  const filename = `dr-cli-error-${timestampStamp()}.md`;
+  const stamp2 = timestampStamp();
   const dir = await chooseDir(opts.dirOverride);
-  const filePath = path7.join(dir, filename);
   const md = formatLog(opts);
-  await fs16.writeFile(filePath, md, { encoding: "utf8" });
-  return filePath;
+  for (let n = 0; ; n++) {
+    const filePath = path7.join(dir, `dr-cli-error-${stamp2}${n === 0 ? "" : `-${n}`}.md`);
+    try {
+      await fs16.writeFile(filePath, md, { encoding: "utf8", mode: 384, flag: "wx" });
+      return filePath;
+    } catch (err) {
+      if (err.code !== "EEXIST" || n >= MAX_NAME_SUFFIX) throw err;
+    }
+  }
 }
 function timestampStamp() {
   return (/* @__PURE__ */ new Date()).toISOString().replace(/[-:]/g, "").replace(/\.\d{3}/, "");
@@ -63813,7 +63891,7 @@ async function runEntitiesMarkCompleted(cfg) {
     signal: cfg.signal
   });
   cfg.out.write(
-    `Marked entity ${cfg.documentId} as manually completed (server-side path uses 'complited' \u2014 typo preserved verbatim).
+    `Cleared the export-error badge on document ${cfg.documentId} (server-side path uses 'complited' \u2014 typo preserved verbatim).
 `
   );
 }
@@ -64055,7 +64133,7 @@ function registerEntitiesCommand(root) {
   addServerFlag(deleteCmd);
   addAccountFlag(deleteCmd);
   const markCompletedCmd = ent.command("mark-completed").description(
-    "Mark an entity as manually completed \u2014 IT support override for stuck-state recovery (PUT /api/documents/<doc>/mark_as_manually_complited; server-side path keeps the 'complited' typo)"
+    "Clear a document's stale export-error badge \u2014 marks nothing completed and does not touch sync state (PUT /api/documents/<doc>/mark_as_manually_complited; server-side path keeps the 'complited' typo)"
   ).argument("<doc_id>", "document id (positive integer)").action(async (idStr, opts) => {
     const docId = parsePositiveIntArg(idStr, "<doc_id>");
     const setup = await setupCall(opts.server, opts.account);

package/dist/scopes-map.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "cliVersion": "1.6.148",
+  "cliVersion": "1.6.150",
   "_contract": "Resolve a command path through `aliases` (canonical prefix + alias segment -> canonical path) before any lookup. A path listed in `pendingCommands`, or whose first segment is a key of `pending`, is UNDECIDED, not unrestricted: fail closed or skip it, and never read a path's absence from `commands` as 'no requirement'. An entry carrying `denied` is UNAVAILABLE to any AGENT-SCOPED credential — one whose `scopes` claim carries at least one `resource:action` entry; a claim that is absent, empty, capability-only or wholly unparseable is UNRESTRICTED, and this mark does not apply to it — whatever else that entry says: it is not a ceiling and it is not always-available, its `denied.reason` says why and `denied.until` names the ticket that lifts it, and the absence of `requires` on it must NEVER be read as 'no requirement'. Only an entry in `commands` with an empty `requires` means always-available.",
   "commands": {
     "login": {
@@ -1724,6 +1724,10 @@
         {
           "resource": "fileboxes",
           "action": "write"
+        },
+        {
+          "resource": "tables",
+          "action": "read"
         }
       ]
     },
@@ -1732,6 +1736,10 @@
         {
           "resource": "fileboxes",
           "action": "write"
+        },
+        {
+          "resource": "tables",
+          "action": "read"
         }
       ]
     },
@@ -1740,6 +1748,10 @@
         {
           "resource": "fileboxes",
           "action": "write"
+        },
+        {
+          "resource": "tables",
+          "action": "read"
         }
       ]
     },
@@ -1982,187 +1994,187 @@
     "connectors publish": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors query repoint": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors query create": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors query list": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors query delete": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors connector create": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors artifact deregister": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors promote": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors binding get": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors sync cancel": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors active get": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors dev-fetch": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll enable": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll set": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll disable": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll get": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll run": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll resume": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll items": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll retry": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll skip": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors poll seed": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks create": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks list": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks get": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks update": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks delete": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks run": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks pause": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks resume": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "connectors tasks runs": {
       "denied": {
         "reason": "The connectors control plane runs no dr-auth-sdk guard and checks no scope, so the `integrations` ceiling this command declares would be enforced by nobody. Closed to scoped credentials until that control plane adopts the SDK.",
-        "until": "DR-53511"
+        "until": "DR-56164"
       }
     },
     "filebox list": {
@@ -3853,10 +3865,6 @@
     },
     "entities mark-completed": {
       "requires": [
-        {
-          "resource": "integrations",
-          "action": "write"
-        },
         {
           "resource": "fileboxes",
           "action": "write"

package/dist/skills/dr-cli/SKILL.md

@@ -601,6 +601,11 @@ network traffic or hand-edits JSON. Full recipes in the relevant reference file.
   `[M].SHIFT(...)` / `[M].AS_OF(...)` — SHIFT unit `consumption_period`
   follows the query grain; `PERIODS_IN_YEAR` metrics reject day-grain
   queries. See reference/metrics.md.
+- **Metric `--format`** (`metrics create base|calc`, `metrics update`) accepts
+  only what the web app's Format editor produces: `[$ € £ ₪]` + `#,###`|`####`
+  + `[.# … .####]` + `[[kilo]k|[mega]M]` + `[%]` (no currency with `%`).
+  Single-quote it (`'$#,###.##'`); there is no empty format — reset with
+  `'#,###'`. See reference/metrics.md.
 - **`metrics data --agg`** is `DEFAULT|MTD|QTD|YTD|MTG|QTG|YTG`. The `*TG` "to
   go" values accumulate **forward** from the current bucket (inclusive) to the
   period end — the mirror of `*TD`. See reference/metrics.md.

package/dist/skills/dr-cli/reference/integrations.md

@@ -169,7 +169,7 @@ i.e. integration data sources at the company level.
 - `entities rename <doc_ids> --alias <s>` (CSV doc ids),
   `entities rename-group <doc_ids> --group <s>` (move into a group).
 - `entities delete <doc_ids>` — two-step confirm.
-- `entities mark-completed <doc_id>` — IT-support override for a stuck state.
+- `entities mark-completed <doc_id>` — clears the document's stale export-error badge; it marks nothing completed and does not touch sync state.
 
 ## Customer-facing docs (KB)
 

package/dist/skills/dr-cli/reference/metrics.md

@@ -92,13 +92,41 @@ Required: `--name`, `--template <id>`, `--value-field <id>`, `--date-field <id>`
 - No `--time-aggregation` — a CALC rollup inherits time-aggregation from each
   referenced BASE, so a single CALC-level value would be meaningless.
 
+## Display format (`--format`)
+
+`metrics create base`, `metrics create calc` and `metrics update <id>` take
+`--format '<f>'`, stored at `configuration.format` (the FORMAT column of
+`metrics list`). Only the strings the web app's metric Format editor can
+produce are accepted; anything else is rejected before any request. Build it
+from these parts, in this order:
+
+| Part | Values |
+|------|--------|
+| currency prefix (optional) | `$` `€` `£` `₪` |
+| digits | `#,###` (thousands separator) or `####` |
+| decimals (optional) | `.#` `.##` `.###` `.####` |
+| scale (optional) | `[kilo]k` (thousands) or `[mega]M` (millions) |
+| percent suffix (optional) | `%` — never together with a currency |
+
+- Examples: `'#,###'`, `'$#,###.##'`, `'€####[mega]M'`, `'####.#%'`.
+- Always single-quote the value: an unquoted `#` starts a shell comment.
+- `$` is stored quoted, as the editor stores it: `$#,###` is saved (and shown
+  in FORMAT) as `"$"#,###`. Both spellings are accepted on input.
+- Excel-style `0` placeholders (`#,##0.00`) and anything else outside the
+  table are rejected; the error suggests the `#` spelling when there is one.
+- There is no empty format. The editor's default is `#,###`; to reset a
+  metric, pass `--format '#,###'`.
+- On `update`, the CLI reads the metric first and sends its configuration back
+  with only `format` changed, so a CALC formula is left exactly as stored.
+
 ## Update / delete
 
 - `metrics update <id>` — partial PATCH. Flags: `--name`, `--description`,
   `--category`, `--dimensions`, `--hide`/`--unhide`, `--time-aggregation`,
   `--aggregator`, `--template`, `--value-field`, `--date-field`, `--filter`,
-  `--exclude-filter`, `--clear-filters`. `--description ""` clears to `null` on
-  the wire (matching how `get` round-trips an untouched field).
+  `--exclude-filter`, `--clear-filters`, `--format` (see above).
+  `--description ""` clears to `null` on the wire (matching how `get`
+  round-trips an untouched field).
   - **No `--formula`** — CALC formulas and other create-time fields (kind,
     template, value/date field, aggregator) are intentionally not editable in
     place; changing them yields a different metric. To fix a formula:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@datarails-ai/dr-cli",
-  "version": "1.6.148",
+  "version": "1.6.150",
   "description": "Datarails CLI",
   "type": "module",
   "engines": {
@@ -17,7 +17,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@datarails-ai/dr-appspace-cli": "0.12.20",
+    "@datarails-ai/dr-appspace-cli": "0.12.21",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@napi-rs/keyring": "^1.3.0",
     "commander": "^12.1.0",