@epilot/cli 0.1.139 → 0.1.141

package/README.md

@@ -29,7 +29,7 @@ npm install -g @epilot/cli
 
 <!-- usage-help -->
 ```
-epilot v0.1.139 — CLI for epilot APIs
+epilot v0.1.141 — CLI for epilot APIs
 
 USAGE
   epilot <api> <operationId> [params...] [flags]

package/definitions/blueprint-manifest.json

@@ -2617,7 +2617,7 @@
       "post": {
         "operationId": "continueInstallationJob",
         "summary": "continueInstallationJob",
-        "description": "Resume an installation job that is paused at `status: \"WAITING_USER_ACTION\"` after\nplanning. Works for both Terraform and V3 jobs. Not needed for V3 installs created\nwith `auto_apply: true` (including all bulk-install child jobs), which apply\nwithout pausing.\n",
+        "description": "Resume an installation job that is paused at `status: \"WAITING_USER_ACTION\"` after\nplanning. Works for both Terraform and V3 jobs. Not needed for V3 installs created\nwith `auto_apply: true` (including all bulk-install child jobs), which apply\nwithout pausing.\n\nAlso resumes a V3 install paused at `status: \"REAUTH_REQUIRED\"`, where the\ncaller's credentials could not safely cover another run. The job keeps its\n`job_id`, so resuming continues from the operation-log checkpoint rather than\nre-applying completed work. The request's bearer token becomes the destination\ncredential; for a cross-org install whose SOURCE credential also expired, send a\nfreshly scoped source token as `source_auth_token` — the destination bearer is not\na valid substitute for it.\n",
         "tags": [
           "Jobs"
         ],
@@ -2636,7 +2636,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/BlueprintInstallationJobOptions"
+                "$ref": "#/components/schemas/ContinueInstallationJobRequest"
               }
             }
           }
@@ -2655,6 +2655,60 @@
         }
       }
     },
+    "/v2/blueprint-manifest/jobs/{job_id}:retry": {
+      "post": {
+        "operationId": "retryInstallationJob",
+        "summary": "retryInstallationJob",
+        "description": "Retry a finished V3 installation job whose status is `FAILED` or\n`PARTIAL_SUCCESS`. Starts a fresh install job (new `job_id`) with the same\nsource/destination and `auto_apply: true` — no `:continue` call is needed.\nThe plan phase re-resolves every resource: already-synced resources no-op,\nso effectively only the failed resources are re-applied.\n\nMust be called by a user of the destination org (where the job lives); the\ncaller's bearer token is used as the destination token. The plan reuses the\nmanifest persisted by the original install, so no source-org access is\nrequired. The original job's `options` (ignored resources, sync_notes) are\nreused when present; older jobs without persisted options fall back to the\ndestination blueprint's `ignored_resource_addresses`.\n",
+        "tags": [
+          "Jobs"
+        ],
+        "parameters": [
+          {
+            "in": "path",
+            "required": true,
+            "name": "job_id",
+            "schema": {
+              "$ref": "#/components/schemas/BlueprintJobID"
+            }
+          }
+        ],
+        "responses": {
+          "202": {
+            "description": "Retry install job started",
+            "headers": {
+              "Location": {
+                "description": "Path to poll the resulting job: GET /v2/blueprint-manifest/jobs/{job_id}",
+                "schema": {
+                  "type": "string"
+                }
+              }
+            },
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "job_id": {
+                      "$ref": "#/components/schemas/BlueprintJobID"
+                    },
+                    "destination_blueprint_id": {
+                      "$ref": "#/components/schemas/BlueprintID"
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Job is not a retryable V3 installation job"
+          },
+          "404": {
+            "description": "Job not found"
+          }
+        }
+      }
+    },
     "/v2/blueprint-manifest/jobs/{job_id}:cancel": {
       "post": {
         "operationId": "cancelBlueprintJob",
@@ -3354,6 +3408,29 @@
                     "type": "boolean",
                     "description": "When `true`, the install skips the manual plan-approval step and applies\nstraight after plan + snapshot succeed (no `:continue` call needed).\nDefaults to `false`. Used internally by the bulk-install worker.\n",
                     "default": false
+                  },
+                  "session_credentials": {
+                    "type": "object",
+                    "description": "Lets the install refresh the caller's session on its own, so a run that\noutlives the ~60 minute token lifetime continues without the user present.\nHeld server-side for the job's lifetime, referenced from the state machine\nrather than embedded in it, and deleted when the job finishes.\n\nOptional. Without it an install that outruns its token pauses at\n`status: \"REAUTH_REQUIRED\"` and waits to be resumed through\n`POST /v2/blueprint-manifest/jobs/{job_id}:continue`.\n\nBounded by the refresh token itself (18 hours), not unlimited.\n",
+                    "required": [
+                      "refresh_token",
+                      "client_id"
+                    ],
+                    "properties": {
+                      "refresh_token": {
+                        "type": "string",
+                        "format": "password",
+                        "description": "Cognito refresh token for the caller, scoped to the source org."
+                      },
+                      "client_id": {
+                        "type": "string",
+                        "description": "The Cognito app client the refresh token was issued for. Required because\nepilot provisions one user pool and app client per organization at\nruntime, so the service cannot derive it.\n"
+                      },
+                      "pipeline_id": {
+                        "type": "string",
+                        "description": "Cross-org installs only. The destination credential is not a Cognito\nsession — it is minted from the refreshed source session through\nsandbox-api, so it is re-derived per continuation instead of stored.\n"
+                      }
+                    }
                   }
                 }
               },
@@ -5284,11 +5361,15 @@
                   "$ref": "#/components/schemas/V3ResourceProgressEntry"
                 }
               },
+              "options": {
+                "$ref": "#/components/schemas/BlueprintInstallationJobOptions"
+              },
               "status": {
                 "type": "string",
                 "enum": [
                   "IN_PROGRESS",
                   "WAITING_USER_ACTION",
+                  "REAUTH_REQUIRED",
                   "CANCELED",
                   "SUCCESS",
                   "PARTIAL_SUCCESS",
@@ -6440,6 +6521,23 @@
           }
         }
       },
+      "ContinueInstallationJobRequest": {
+        "allOf": [
+          {
+            "$ref": "#/components/schemas/BlueprintInstallationJobOptions"
+          },
+          {
+            "type": "object",
+            "properties": {
+              "source_auth_token": {
+                "description": "A freshly issued bearer for the SOURCE organization, used only when resuming a\njob paused at `REAUTH_REQUIRED` whose source credential also expired. Applies to\ncross-org installs: apply-time reads such as the authenticated File API fallback\nfor private source files run against the source org, so the destination bearer\ncannot stand in for them. Omit it to keep the source token the job already has.\n",
+                "type": "string",
+                "format": "password"
+              }
+            }
+          }
+        ]
+      },
       "ManifestID": {
         "type": "string",
         "description": "ID of an imported / installed manifest",
@@ -6512,6 +6610,7 @@
           "PENDING",
           "STARTED",
           "WAITING_USER_ACTION",
+          "REAUTH_REQUIRED",
           "CANCELED",
           "IN_PROGRESS",
           "SUCCESS",

package/definitions/entity-mapping.json

@@ -763,6 +763,10 @@
             "$ref": "#/components/schemas/EntityRef",
             "description": "A reference (id and schema) to the entity to be used as source."
           },
+          "loop_ref": {
+            "$ref": "#/components/schemas/EntityRef",
+            "description": "Reference to the current iteration's entity when running inside a flow loop.\nWhen set, its fields and relations are merged into the source context;\non schema conflicts the loop entity wins, so paths like `<schema>._id` resolve\nto the iteration entity rather than to a same-schema relation of the source.\n"
+          },
           "targets": {
             "type": "array",
             "items": {
@@ -960,6 +964,11 @@
               "type": "string"
             }
           },
+          "use_uniqueness_criteria": {
+            "type": "boolean",
+            "default": false,
+            "description": "Execution wire flag set per automation by automation-workers: resolve the target entity via the organization's global uniqueness criteria (deduplication-api) instead of target_unique. Never persisted in stored mapping configs.\n"
+          },
           "loop_config": {
             "type": "object",
             "description": "contains config in case of running in loop mode",
@@ -970,8 +979,7 @@
               },
               "length": {
                 "type": "number",
-                "description": "a hard limit of how many times the loop is allowed to run.",
-                "default": "the length of the array"
+                "description": "a hard limit of how many times the loop is allowed to run."
               }
             }
           },
@@ -1023,6 +1031,13 @@
             "items": {
               "type": "string"
             }
+          },
+          "graph_context": {
+            "type": "array",
+            "description": "Multi-hop entity graph lookups resolved before any mapping_attribute is evaluated. Each\nentry queries entity-api's `POST /v1/entity:graph` and merges every node's result into\nsourceContext under its own `graph.nodes[].id`, so mapping_attributes can `_copy`/`_template`\nfrom `<node id>.<field>`. A graph node's value overwrites any existing sourceContext key of\nthe same name (a source entity field, a 1-hop relation, or another graph node).\n",
+            "items": {
+              "$ref": "#/components/schemas/GraphContextEntry"
+            }
           }
         },
         "required": [
@@ -1093,6 +1108,13 @@
             "description": "Include all relation tags (labels) present on the main entity relation",
             "default": false
           },
+          "target_entity_tags": {
+            "type": "array",
+            "description": "Tags to add to the matched target entity's _tags array during mapping. Useful for assigning file collections to file entities.",
+            "items": {
+              "type": "string"
+            }
+          },
           "override_with_source_filter": {
             "type": "boolean",
             "description": "Whether to override the relation source_filter with the specified one",
@@ -1152,6 +1174,157 @@
           "mode"
         ]
       },
+      "GraphContextEntry": {
+        "type": "object",
+        "description": "One multi-hop graph lookup against entity-api's `POST /v1/entity:graph`, resolved during\ngraph_context enrichment (before mapping_attributes are evaluated). Every node in `graph.nodes`\nis merged into sourceContext under its own `id`, so listing several nodes here costs one\nentity-api call, not one per node.\n\nIf a node's `cardinality` is \"one\" (or it is the seed node), exactly one entity must be found\nfor it: zero or multiple matches fail the mapping execution instead of silently mapping\nmissing/wrong data. If \"many\" (the default), it resolves to an array - possibly empty - with no\nsuch failure. Each node's cardinality is validated independently.\n\n`seed.entity_id` and any `graph.nodes[].filter[].value` may contain `{{handlebars}}` placeholders\n(e.g. `{{contract._id}}`, `{{contract.origin_order}}`), resolved against the in-progress\nsourceContext (the source entity, its 1-hop relations, and any custom variables already\nresolved) before the graph query is sent.\n",
+        "properties": {
+          "seed": {
+            "$ref": "#/components/schemas/GraphSeed"
+          },
+          "graph": {
+            "$ref": "#/components/schemas/GraphDefinition"
+          }
+        },
+        "required": [
+          "seed",
+          "graph"
+        ]
+      },
+      "GraphSeed": {
+        "description": "Mirrors entity-api's GraphSeed (see entity-api openapi.yml) - the entity the graph traversal starts from.",
+        "type": "object",
+        "properties": {
+          "entity_id": {
+            "type": "string",
+            "description": "The id of the seed entity. Supports `{{handlebars}}` placeholders resolved against sourceContext.",
+            "example": "{{contract._id}}"
+          },
+          "node_id": {
+            "type": "string",
+            "description": "The node ID in `graph.nodes` that corresponds to the seed entity.",
+            "example": "contact"
+          }
+        },
+        "required": [
+          "entity_id",
+          "node_id"
+        ]
+      },
+      "GraphDefinition": {
+        "description": "Mirrors entity-api's GraphDefinition (see entity-api openapi.yml) - the shape of the graph to traverse.",
+        "type": "object",
+        "properties": {
+          "nodes": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/GraphNode"
+            }
+          },
+          "edges": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/GraphEdge"
+            }
+          }
+        },
+        "required": [
+          "nodes",
+          "edges"
+        ]
+      },
+      "GraphNode": {
+        "description": "Mirrors entity-api's GraphNode (see entity-api openapi.yml).",
+        "type": "object",
+        "properties": {
+          "id": {
+            "type": "string",
+            "description": "Unique identifier for this node in the graph definition.",
+            "example": "contact"
+          },
+          "schema": {
+            "type": "string",
+            "description": "Entity schema slug for this node.",
+            "example": "contact"
+          },
+          "cardinality": {
+            "type": "string",
+            "enum": [
+              "one",
+              "many"
+            ],
+            "description": "\"one\": this node resolves to a single entity. \"many\" (default if unset): this node\nresolves to an array of entities.\n"
+          },
+          "fields": {
+            "type": "array",
+            "description": "Optional entity fields to include in the hydrated response for this node.",
+            "items": {
+              "type": "string"
+            }
+          },
+          "filter": {
+            "type": "array",
+            "description": "Narrows this node's traversal results to entities matching every filter (AND semantics).\nUseful for disambiguating among multiple entities reachable via the same graph edge.\n",
+            "items": {
+              "$ref": "#/components/schemas/GraphNodeFilter"
+            }
+          }
+        },
+        "required": [
+          "id",
+          "schema"
+        ]
+      },
+      "GraphNodeFilter": {
+        "description": "Mirrors entity-api's GraphNodeFilter (see entity-api openapi.yml).",
+        "type": "object",
+        "properties": {
+          "attribute": {
+            "type": "string",
+            "description": "Entity attribute name to match against.",
+            "example": "order_number"
+          },
+          "value": {
+            "description": "Literal value the attribute must exactly equal. Supports `{{handlebars}}` placeholders\nresolved against sourceContext when given as a string.\n",
+            "oneOf": [
+              {
+                "type": "string",
+                "nullable": true
+              },
+              {
+                "type": "number"
+              },
+              {
+                "type": "boolean"
+              }
+            ],
+            "example": "{{contract.origin_order}}"
+          }
+        },
+        "required": [
+          "attribute",
+          "value"
+        ]
+      },
+      "GraphEdge": {
+        "description": "Mirrors entity-api's GraphEdge (see entity-api openapi.yml).",
+        "type": "object",
+        "properties": {
+          "from": {
+            "type": "string",
+            "description": "Source node ID.",
+            "example": "contact"
+          },
+          "to": {
+            "type": "string",
+            "description": "Target node ID.",
+            "example": "order"
+          }
+        },
+        "required": [
+          "from",
+          "to"
+        ]
+      },
       "MappingAttributeV2": {
         "type": "object",
         "properties": {
@@ -1256,6 +1429,20 @@
           "_random": {
             "description": "Generate random ids / numbers",
             "$ref": "#/components/schemas/RandomOperation"
+          },
+          "_each": {
+            "description": "Iterate over a source array. Use with _as and _map.\nThe value is a path to resolve from the source entity context.\nExample: \"submission.meterReadings\"\n",
+            "type": "string",
+            "example": "submission.meterReadings"
+          },
+          "_as": {
+            "description": "Name for the current iteration item in _each.\nAccessed as $<name> in _copy paths within _map.\nExample: \"reading\" (accessed as $reading)\n",
+            "type": "string",
+            "example": "reading"
+          },
+          "_map": {
+            "description": "Operation to evaluate per _each iteration item.\nCan be any OperationNode, typically an object with _copy\nreferences to the $<_as name> alias.\n",
+            "$ref": "#/components/schemas/OperationNode"
           }
         },
         "additionalProperties": true

package/dist/bin/epilot.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   API_LIST
-} from "../chunk-4A3TISYH.js";
+} from "../chunk-TPJG2M3D.js";
 
 // bin/epilot.ts
 import { runMain } from "citty";
@@ -11,7 +11,7 @@ import { defineCommand } from "citty";
 var main = defineCommand({
   meta: {
     name: "epilot",
-    version: "0.1.139",
+    version: "0.1.141",
     description: "CLI for epilot APIs"
   },
   args: {
@@ -30,8 +30,8 @@ var main = defineCommand({
     auth: () => import("../auth-WMXFMPWE.js").then((m) => m.default),
     profile: () => import("../profile-OZJL5ZPT.js").then((m) => m.default),
     config: () => import("../config-DGZIMLZK.js").then((m) => m.default),
-    completion: () => import("../completion-MSAMXF3P.js").then((m) => m.default),
-    upgrade: () => import("../upgrade-X5UUYWOI.js").then((m) => m.default),
+    completion: () => import("../completion-6OBSXXHS.js").then((m) => m.default),
+    upgrade: () => import("../upgrade-3YLZVTGJ.js").then((m) => m.default),
     "access-token": () => import("../access-token-WWE6BDJH.js").then((m) => m.default),
     address: () => import("../address-EH3C4CVB.js").then((m) => m.default),
     "address-suggestions": () => import("../address-suggestions-RRSLOBFW.js").then((m) => m.default),
@@ -134,13 +134,13 @@ process.stderr.on("error", (err) => {
   if (err.code === "EPIPE") process.exit(0);
   throw err;
 });
-var VERSION = true ? "0.1.139" : (await null).default.version;
+var VERSION = true ? "0.1.141" : (await null).default.version;
 var reorderedArgv = hoistFlagsAfterSubcommand(process.argv.slice(2));
 process.argv = [process.argv[0], process.argv[1], ...reorderedArgv];
 var args = process.argv.slice(2);
 var completionsIdx = args.indexOf("--_completions");
 if (completionsIdx >= 0) {
-  const { handleCompletions } = await import("../completion-MSAMXF3P.js");
+  const { handleCompletions } = await import("../completion-6OBSXXHS.js");
   handleCompletions(args[completionsIdx + 1], args[completionsIdx + 2]);
   process.exit(0);
 }

package/dist/{chunk-4A3TISYH.js → chunk-TPJG2M3D.js}

@@ -173,7 +173,7 @@ var API_LIST = [
     kebabName: "blueprint-manifest",
     title: "Blueprint Manifest API",
     serverUrl: "https://blueprint-manifest.sls.epilot.io",
-    operationCount: 72,
+    operationCount: 73,
     operationIds: [
       "getJob",
       "createExport",
@@ -220,6 +220,7 @@ var API_LIST = [
       "listBlueprintJobs",
       "getBlueprintJob",
       "continueInstallationJob",
+      "retryInstallationJob",
       "cancelBlueprintJob",
       "getMarketplaceListing",
       "createMarketplaceListing",

package/dist/{completion-MSAMXF3P.js → completion-6OBSXXHS.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   API_LIST
-} from "./chunk-4A3TISYH.js";
+} from "./chunk-TPJG2M3D.js";
 import {
   DIM,
   GREEN,

package/dist/{upgrade-X5UUYWOI.js → upgrade-3YLZVTGJ.js}

@@ -72,7 +72,7 @@ ${GREEN}${BOLD}Upgraded to @epilot/cli@${latest}${RESET}
   }
 });
 var getCurrentVersion = () => {
-  if (true) return "0.1.139";
+  if (true) return "0.1.141";
   try {
     const output = execSync("npm ls -g @epilot/cli --depth=0 --json 2>/dev/null", {
       encoding: "utf-8",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/cli",
-  "version": "0.1.139",
+  "version": "0.1.141",
   "description": "CLI for epilot APIs",
   "type": "module",
   "bin": {