@erdoai/cli 0.120.0 → 0.121.0

package/dist/index.js

@@ -5,7 +5,7 @@ function advertiserVerificationAction(container) {
   const verification = container.advertiser_verification;
   if (!verification || verification.action_url) return void 0;
   if (verification.status === "check_in_google_ads") {
-    return `Google cannot expose advertiser verification for card-billed account ${container.customer_id} through the API. Open Billing \u2192 Advertiser verification in Google Ads to check its status, and complete verification there only if Google shows it is pending.`;
+    return `Google cannot expose advertiser verification for card-billed account ${container.customer_id} through the API. Open Admin \u2192 Policy \u2192 Account in Google Ads to check its status, and complete verification there only if Google shows it is pending.`;
   }
   if (verification.status === "PENDING_USER_ACTION" || verification.status === "FAILURE") {
     return `Google shows no business name or logo on ${container.customer_id}'s ads until the advertiser is verified. Get a link with: erdo org managed ads-container ${container.org_slug} --provision --start-verification`;
@@ -3012,14 +3012,15 @@ ${res.from} to ${res.to} (${res.timezone} days)
   }
 );
 var tokenCmd = program.command("token").description("Manage your API tokens (account-level credentials)");
-tokenCmd.command("create").description("Mint a new API token; the secret is printed ONCE").requiredOption("--name <name>", "a label for the token").option("--expires-days <n>", "days until expiry (default: 30)", (v) => parseInt(v, 10)).addOption(
+tokenCmd.command("create").description("Mint a new API token; the secret is printed ONCE").requiredOption("--name <name>", "a label for the token").option("--expires-days <n>", "days until expiry (default: 30)", (v) => parseInt(v, 10)).option("--read-only", "mint a read-only token: it can read through the API in any org you belong to, and never write").addOption(
   orgOption("the token's default org (defaults to your active org; must be one you belong to)")
 ).action(async (opts) => {
   try {
     const res = await new ErdoClient().createToken({
       name: opts.name,
       expires_in_days: opts.expiresDays ?? 30,
-      organization_id: opts.org
+      organization_id: opts.org,
+      ...opts.readOnly ? { access: "read" } : {}
     });
     process.stderr.write(
       "Store this token now \u2014 it is shown only once and cannot be retrieved again.\n"
@@ -3031,8 +3032,8 @@ id: ${res.id}
 hint: ${res.hint}
 expires: ${res.expires_at}
 default org: ${res.default_org ? `${res.default_org.name} (${res.default_org.id})` : "(none)"}
-This token acts as you in any org you belong to; pass --org on a command to target another.
-`
+access: ${res.access ?? "full"}
+` + (res.access === "read" ? "This token can read as you in any org you belong to and cannot change anything; pass --org on a command to target another.\n" : "This token acts as you in any org you belong to; pass --org on a command to target another.\n")
     );
   } catch (e) {
     fail(e);
@@ -3048,7 +3049,7 @@ tokenCmd.command("list").description("List your API tokens (never shows the secr
     for (const t of tokens) {
       const org2 = t.default_org ? t.default_org.name || t.default_org.id : "-";
       const used = t.last_used_at ?? "never";
-      console.log(`${t.id}	${t.name || "-"}	${t.hint}	default-org:${org2}	expires:${t.expires_at}	used:${used}`);
+      console.log(`${t.id}	${t.name || "-"}	${t.hint}	access:${t.access ?? "full"}	default-org:${org2}	expires:${t.expires_at}	used:${used}`);
     }
   } catch (e) {
     fail(e);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.120.0",
+  "version": "0.121.0",
   "description": "Erdo CLI — drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {