@eigenpal/cli 0.10.22 → 0.10.24

package/dist/skill/reference/cli/agents.md

@@ -8,12 +8,11 @@ Manage Eigenpal agents: Git source, datasets, experiments, sessions, and release
 - [Commands](#commands)
   - [Core](#core)
   - [File](#file)
-  - [Secret](#secret)
+  - [Secrets](#secrets)
   - [Dataset](#dataset)
   - [Experiment](#experiment)
   - [Session](#session)
   - [Env](#env)
-  - [Secrets](#secrets)
 - [Details](#details)
   - [`eigenpal agents list|ls [options]`](#eigenpal-agents-listls-options)
   - [`eigenpal agents validate [options] [dir]`](#eigenpal-agents-validate-options-dir)
@@ -36,9 +35,11 @@ Manage Eigenpal agents: Git source, datasets, experiments, sessions, and release
   - [`eigenpal agents file list|ls [options] <agent-id-or-slug>`](#eigenpal-agents-file-listls-options-agent-id-or-slug)
   - [`eigenpal agents file get [options] <agent-id-or-slug> <remote-path>`](#eigenpal-agents-file-get-options-agent-id-or-slug-remote-path)
   - [`eigenpal agents file diff [options] <agent-id-or-slug> <remote-path> <local-path>`](#eigenpal-agents-file-diff-options-agent-id-or-slug-remote-path-local-path)
-  - [`eigenpal agents secret set [options] <name>`](#eigenpal-agents-secret-set-options-name)
-  - [`eigenpal agents secret unset [options] <name>`](#eigenpal-agents-secret-unset-options-name)
-  - [`eigenpal agents secret import [options] <env-file>`](#eigenpal-agents-secret-import-options-env-file)
+  - [`eigenpal agents secrets|secret list|ls [options]`](#eigenpal-agents-secretssecret-listls-options)
+  - [`eigenpal agents secrets|secret set [options] <name>`](#eigenpal-agents-secretssecret-set-options-name)
+  - [`eigenpal agents secrets|secret unset [options] <name>`](#eigenpal-agents-secretssecret-unset-options-name)
+  - [`eigenpal agents secrets|secret import [options] <env-file>`](#eigenpal-agents-secretssecret-import-options-env-file)
+  - [`eigenpal agents secrets|secret export [options] [target]`](#eigenpal-agents-secretssecret-export-options-target)
   - [`eigenpal agents dataset list|ls [options] <agent-id-or-slug>`](#eigenpal-agents-dataset-listls-options-agent-id-or-slug)
   - [`eigenpal agents dataset push [options] <agent-id-or-slug>`](#eigenpal-agents-dataset-push-options-agent-id-or-slug)
   - [`eigenpal agents dataset pull [options] <agent-id-or-slug>`](#eigenpal-agents-dataset-pull-options-agent-id-or-slug)
@@ -55,7 +56,6 @@ Manage Eigenpal agents: Git source, datasets, experiments, sessions, and release
   - [`eigenpal agents session message [options] <session-id>`](#eigenpal-agents-session-message-options-session-id)
   - [`eigenpal agents session stop [options] <session-id>`](#eigenpal-agents-session-stop-options-session-id)
   - [`eigenpal agents env pull [options] [target]`](#eigenpal-agents-env-pull-options-target)
-  - [`eigenpal agents secrets export [options] [target]`](#eigenpal-agents-secrets-export-options-target)
 
 ## Surface
 
@@ -83,10 +83,12 @@ agents
 ├── versions <package>
 ├── release <version> [dir]
 ├── sync [automation]
-├── secret
+├── secrets|secret
+│   ├── list|ls
 │   ├── set <name>
 │   ├── unset <name>
-│   └── import <env-file>
+│   ├── import <env-file>
+│   └── export [target]
 ├── dataset
 │   ├── list|ls <agent-id-or-slug>
 │   ├── push <agent-id-or-slug>
@@ -105,10 +107,8 @@ agents
 │   ├── start <agent-id-or-slug>
 │   ├── message <session-id>
 │   └── stop <session-id>
-├── env
-│   └── pull [target]
-└── secrets
-    └── export [target]
+└── env
+    └── pull [target]
 ```
 
 ## Commands
@@ -144,22 +144,24 @@ agents
 | `eigenpal agents file get [options] <agent-id-or-slug> <remote-path>`               | Download one live agent file.                     |
 | `eigenpal agents file diff [options] <agent-id-or-slug> <remote-path> <local-path>` | Compare one live agent file against a local file. |
 
-### Secret
+### Secrets
 
-| Command                                              | Description                                                      |
-| ---------------------------------------------------- | ---------------------------------------------------------------- |
-| `eigenpal agents secret set [options] <name>`        | Encrypt and set a secret value in secrets.enc.yaml.              |
-| `eigenpal agents secret unset [options] <name>`      | Remove a secret from secrets.enc.yaml.                           |
-| `eigenpal agents secret import [options] <env-file>` | Import KEY=value entries from an env file into secrets.enc.yaml. |
+| Command                                                       | Description                                                           |
+| ------------------------------------------------------------- | --------------------------------------------------------------------- |
+| `eigenpal agents secrets\|secret list\|ls [options]`          | List secret names declared in secrets.enc.yaml (never prints values). |
+| `eigenpal agents secrets\|secret set [options] <name>`        | Encrypt and set a secret value in secrets.enc.yaml.                   |
+| `eigenpal agents secrets\|secret unset [options] <name>`      | Remove a secret from secrets.enc.yaml.                                |
+| `eigenpal agents secrets\|secret import [options] <env-file>` | Import KEY=value entries from an env file into secrets.enc.yaml.      |
+| `eigenpal agents secrets\|secret export [options] [target]`   | Decrypt source secrets and print shell exports.                       |
 
 ### Dataset
 
-| Command                                                         | Description                                                                |
-| --------------------------------------------------------------- | -------------------------------------------------------------------------- |
-| `eigenpal agents dataset list\|ls [options] <agent-id-or-slug>` | List dataset examples for an agent.                                        |
-| `eigenpal agents dataset push [options] <agent-id-or-slug>`     | Upload dataset examples from a local dataset directory or zip archive.     |
-| `eigenpal agents dataset pull [options] <agent-id-or-slug>`     | Download an agent dataset as a .zip archive.                               |
-| `eigenpal agents dataset validate [options] [path]`             | Validate a local dataset directory against the agent input/output schemas. |
+| Command                                                         | Description                                                                                              |
+| --------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------- |
+| `eigenpal agents dataset list\|ls [options] <agent-id-or-slug>` | List dataset examples for an agent.                                                                      |
+| `eigenpal agents dataset push [options] <agent-id-or-slug>`     | Upload dataset examples from a local dataset directory or zip archive.                                   |
+| `eigenpal agents dataset pull [options] <agent-id-or-slug>`     | Download an agent dataset as a .zip archive.                                                             |
+| `eigenpal agents dataset validate [options] [path]`             | Validate a local dataset directory against the canonical examples/<name> layout. Defaults to ./dataset/. |
 
 ### Experiment
 
@@ -188,12 +190,6 @@ agents
 | --------------------------------------------- | ----------------------------------------------- |
 | `eigenpal agents env pull [options] [target]` | Decrypt source secrets and print shell exports. |
 
-### Secrets
-
-| Command                                             | Description                                     |
-| --------------------------------------------------- | ----------------------------------------------- |
-| `eigenpal agents secrets export [options] [target]` | Decrypt source secrets and print shell exports. |
-
 ## Details
 
 ### `eigenpal agents list|ls [options]`
@@ -500,7 +496,18 @@ Compare one live agent file against a local file.
 | `--base-url <url>` | no       |         | Server base URL                        |
 | `--json`           | no       |         | Output the raw server response as JSON |
 
-### `eigenpal agents secret set [options] <name>`
+### `eigenpal agents secrets|secret list|ls [options]`
+
+List secret names declared in secrets.enc.yaml (never prints values).
+
+### Options
+
+| Flag          | Required | Default | Description                            |
+| ------------- | -------- | ------- | -------------------------------------- |
+| `--json`      | no       |         | Output the raw server response as JSON |
+| `--dir <dir>` | no       |         | Directory to inspect                   |
+
+### `eigenpal agents secrets|secret set [options] <name>`
 
 Encrypt and set a secret value in secrets.enc.yaml.
 
@@ -519,7 +526,7 @@ Encrypt and set a secret value in secrets.enc.yaml.
 | `--value-file <path>`  | no       |         | Read the secret value from a file |
 | `--description <text>` | no       |         | Secret description                |
 
-### `eigenpal agents secret unset [options] <name>`
+### `eigenpal agents secrets|secret unset [options] <name>`
 
 Remove a secret from secrets.enc.yaml.
 
@@ -535,7 +542,7 @@ Remove a secret from secrets.enc.yaml.
 | ------------- | -------- | ------- | -------------------- |
 | `--dir <dir>` | no       |         | Directory to inspect |
 
-### `eigenpal agents secret import [options] <env-file>`
+### `eigenpal agents secrets|secret import [options] <env-file>`
 
 Import KEY=value entries from an env file into secrets.enc.yaml.
 
@@ -551,6 +558,24 @@ Import KEY=value entries from an env file into secrets.enc.yaml.
 | ------------- | -------- | ------- | -------------------- |
 | `--dir <dir>` | no       |         | Directory to inspect |
 
+### `eigenpal agents secrets|secret export [options] [target]`
+
+Decrypt source secrets and print shell exports.
+
+### Arguments
+
+| Name     | Required | Variadic | Description |
+| -------- | -------- | -------- | ----------- |
+| `target` | no       | no       |             |
+
+### Options
+
+| Flag                | Required | Default   | Description                       |
+| ------------------- | -------- | --------- | --------------------------------- |
+| `--base-url <url>`  | no       |           | Server base URL                   |
+| `--dir <dir>`       | no       | `"."`     | Installed agent package directory |
+| `--format <format>` | no       | `"shell"` | Output format: shell or dotenv    |
+
 ### `eigenpal agents dataset list|ls [options] <agent-id-or-slug>`
 
 List dataset examples for an agent.
@@ -609,7 +634,7 @@ Download an agent dataset as a .zip archive.
 
 ### `eigenpal agents dataset validate [options] [path]`
 
-Validate a local dataset directory against the agent input/output schemas.
+Validate a local dataset directory against the canonical examples/<name> layout. Defaults to ./dataset/.
 
 ### Arguments
 
@@ -619,10 +644,10 @@ Validate a local dataset directory against the agent input/output schemas.
 
 ### Options
 
-| Flag                | Required | Default | Description                                             |
-| ------------------- | -------- | ------- | ------------------------------------------------------- |
-| `--json`            | no       |         | Output the raw server response as JSON                  |
-| `--agent-dir <dir>` | no       | `"."`   | Agent package directory containing input/output schemas |
+| Flag                | Required | Default | Description                                                                             |
+| ------------------- | -------- | ------- | --------------------------------------------------------------------------------------- |
+| `--json`            | no       |         | Output the raw server response as JSON                                                  |
+| `--agent-dir <dir>` | no       | `"."`   | Agent package directory with optional input/output schemas for extra value-level checks |
 
 ### `eigenpal agents experiment|exp run [options] <agent-id-or-slug>`
 
@@ -852,21 +877,3 @@ Decrypt source secrets and print shell exports.
 | `--base-url <url>`  | no       |           | Server base URL                   |
 | `--dir <dir>`       | no       | `"."`     | Installed agent package directory |
 | `--format <format>` | no       | `"shell"` | Output format: shell or dotenv    |
-
-### `eigenpal agents secrets export [options] [target]`
-
-Decrypt source secrets and print shell exports.
-
-### Arguments
-
-| Name     | Required | Variadic | Description |
-| -------- | -------- | -------- | ----------- |
-| `target` | no       | no       |             |
-
-### Options
-
-| Flag                | Required | Default   | Description                       |
-| ------------------- | -------- | --------- | --------------------------------- |
-| `--base-url <url>`  | no       |           | Server base URL                   |
-| `--dir <dir>`       | no       | `"."`     | Installed agent package directory |
-| `--format <format>` | no       | `"shell"` | Output format: shell or dotenv    |

package/dist/skill/reference/cli/surface.md

@@ -76,10 +76,12 @@ eigenpal
 │   ├── versions <package>
 │   ├── release <version> [dir]
 │   ├── sync [automation]
-│   ├── secret
+│   ├── secrets|secret
+│   │   ├── list|ls
 │   │   ├── set <name>
 │   │   ├── unset <name>
-│   │   └── import <env-file>
+│   │   ├── import <env-file>
+│   │   └── export [target]
 │   ├── dataset
 │   │   ├── list|ls <agent-id-or-slug>
 │   │   ├── push <agent-id-or-slug>
@@ -98,10 +100,8 @@ eigenpal
 │   │   ├── start <agent-id-or-slug>
 │   │   ├── message <session-id>
 │   │   └── stop <session-id>
-│   ├── env
-│   │   └── pull [target]
-│   └── secrets
-│       └── export [target]
+│   └── env
+│       └── pull [target]
 ├── run <target>
 ├── rerun <run-id>
 ├── runs

package/dist/skill/reference/dataset-format.md

@@ -54,7 +54,9 @@ same reference shape with the `expected/` prefix.
   `{ "$file": "expected/<path>" }`.
 - File references cannot use `..`, absolute paths, backslashes, or null bytes.
 - `expected.json` is optional. When present, it must be a JSON object.
-- Failure-expected examples use `expected.json` with a single `$error` key:
+- Failure-expected examples use `expected.json` with a single `$error` key.
+  They are supported for workflow datasets only; agent datasets reject them,
+  because agent runs are evaluated only when they complete:
 
 ```json
 {

package/dist/skill/reference/step-types.md

@@ -400,8 +400,8 @@ Extract structured data from text using AI with a JSON schema
 | `provider` | string | no |  | Provider ID (e.g., "openai-gpt4o") |
 | `model` | string | no |  | Model override |
 | `maxInputTokens` | integer | no |  | Max input tokens. Truncates input text and logs a warning when exceeded. Omit for no limit. |
-| `grounded` | boolean | no |  | Optional. When true, adds a grounding pass: each schema field gets a source span + confidence (high=verbatim, medium=fuzzy, low=ungrounded) under a `_grounding` key, and ungrounded/fuzzy fields are flagged for human review. Grounding always calls OpenAI directly (independent of the extract provider) and requires OPENAI_API_KEY. Values stay the reliable schema-typed ones. |
-| `groundingModel` | string | no |  | Provider/model for the grounding pass. Defaults to the workspace default LLM; grounding runs against OpenAI, so pick an OpenAI-compatible model. |
+| `grounded` | boolean | no |  | Optional. When true, adds a grounding pass: each schema field gets a source span + confidence (high=verbatim, medium=fuzzy, low=ungrounded) under a `_grounding` key, and ungrounded/fuzzy fields are flagged for human review. Grounding is OpenAI-only: the pass always calls OpenAI directly (independent of the extract provider) and requires OPENAI_API_KEY on the worker. If the key is missing or the grounding model resolves to a non-OpenAI provider, the step fails instead of silently skipping grounding. Values stay the reliable schema-typed ones. |
+| `groundingModel` | string | no |  | Provider/model for the grounding pass. Defaults to the workspace default LLM. Grounding is OpenAI-only, so this must resolve to an OpenAI model; a non-OpenAI model fails the step at runtime. |
 | `groundingExamples` | array<object> | no |  | Optional few-shot examples pinning grounding to verbatim source text per field. |
 | `reviewOn` | `"medium_or_low"` \| `"low_only"` | no |  | Which grounding confidences flag a field for review. Default: medium_or_low. |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eigenpal/cli",
-  "version": "0.10.22",
+  "version": "0.10.24",
   "description": "Eigenpal CLI — author and run document workflows from your terminal. Agent-ready.",
   "keywords": [
     "eigenpal",