@erdoai/cli 0.120.1 → 0.122.0

package/dist/index.js

@@ -186,7 +186,7 @@ async function rawRequest(baseURL, token, orgId, projectId, method, path, body,
         continue;
       }
       if (!retryNetworkFailures) {
-        throw new ErdoNetworkError(`${netErr.message}. The launch may have started; inspect agent runs before retrying.`, netErr);
+        throw new ErdoNetworkError(`${netErr.message}. The request may have succeeded; inspect the affected resource before retrying.`, netErr);
       }
       throw netErr;
     }
@@ -1200,6 +1200,12 @@ var ErdoClient = class {
   updateDatasetSchema(slug, input) {
     return this.request("POST", `/v1/datasets/${encodeURIComponent(slug)}/schema`, input);
   }
+  // Dataset row writes are deliberately never replayed after a network
+  // failure: the server may have committed the rows before the response was
+  // lost, and repeating an append or upsert can change the result.
+  writeDatasetRows(slug, input) {
+    return this.request("POST", `/v1/datasets/${encodeURIComponent(slug)}/rows`, input, false);
+  }
   // The endpoint's field is `question` (QueryDataNaturalLanguageInput). Sending  // The endpoint's field is `question` (QueryDataNaturalLanguageInput). Sending
   // `query` made every `erdo datasets query` fail with "question is required".
   //
@@ -3012,14 +3018,15 @@ ${res.from} to ${res.to} (${res.timezone} days)
   }
 );
 var tokenCmd = program.command("token").description("Manage your API tokens (account-level credentials)");
-tokenCmd.command("create").description("Mint a new API token; the secret is printed ONCE").requiredOption("--name <name>", "a label for the token").option("--expires-days <n>", "days until expiry (default: 30)", (v) => parseInt(v, 10)).addOption(
+tokenCmd.command("create").description("Mint a new API token; the secret is printed ONCE").requiredOption("--name <name>", "a label for the token").option("--expires-days <n>", "days until expiry (default: 30)", (v) => parseInt(v, 10)).option("--read-only", "mint a read-only token: it can read through the API in any org you belong to, and never write").addOption(
   orgOption("the token's default org (defaults to your active org; must be one you belong to)")
 ).action(async (opts) => {
   try {
     const res = await new ErdoClient().createToken({
       name: opts.name,
       expires_in_days: opts.expiresDays ?? 30,
-      organization_id: opts.org
+      organization_id: opts.org,
+      ...opts.readOnly ? { access: "read" } : {}
     });
     process.stderr.write(
       "Store this token now \u2014 it is shown only once and cannot be retrieved again.\n"
@@ -3031,8 +3038,8 @@ id: ${res.id}
 hint: ${res.hint}
 expires: ${res.expires_at}
 default org: ${res.default_org ? `${res.default_org.name} (${res.default_org.id})` : "(none)"}
-This token acts as you in any org you belong to; pass --org on a command to target another.
-`
+access: ${res.access ?? "full"}
+` + (res.access === "read" ? "This token can read as you in any org you belong to and cannot change anything; pass --org on a command to target another.\n" : "This token acts as you in any org you belong to; pass --org on a command to target another.\n")
     );
   } catch (e) {
     fail(e);
@@ -3048,7 +3055,7 @@ tokenCmd.command("list").description("List your API tokens (never shows the secr
     for (const t of tokens) {
       const org2 = t.default_org ? t.default_org.name || t.default_org.id : "-";
       const used = t.last_used_at ?? "never";
-      console.log(`${t.id}	${t.name || "-"}	${t.hint}	default-org:${org2}	expires:${t.expires_at}	used:${used}`);
+      console.log(`${t.id}	${t.name || "-"}	${t.hint}	access:${t.access ?? "full"}	default-org:${org2}	expires:${t.expires_at}	used:${used}`);
     }
   } catch (e) {
     fail(e);
@@ -4191,13 +4198,13 @@ runsCmd.command("list").description("List agent runs (filter by agent OR thread
     fail(e);
   }
 });
-runsCmd.command("get <id>").description("Show an agent run (status, output, trace metadata)").option("--resources", "also show the skills, knowledge and entities the run used").option("--steps", "also show the run's iterations, tool calls and sub-agent invocations").action(async (id, opts) => {
+runsCmd.command("get <id>").description("Show an agent run (status, output, trace metadata)").option("--resources", "also show the skills, knowledge and entities the run used").option("--steps", "also show the run's iterations, tool calls and sub-agent invocations").option("--json", "print the full JSON response, including requested resources and steps").action(async (id, opts) => {
   try {
     const include = [];
     if (opts.resources) include.push("resources");
     if (opts.steps) include.push("steps");
     const detail = await new ErdoClient().getAgentRun(id, include);
-    if (include.length === 0) {
+    if (opts.json || include.length === 0) {
       print(detail);
       return;
     }
@@ -6657,6 +6664,53 @@ datasetsCmd.command("purposes").description(
     fail(e);
   }
 });
+datasetsCmd.command("write <slug>").description(
+  "Write rows to a dataset. Without --key-column rows append. File and writable PostgreSQL datasets support keyed replace or merge. ClickHouse-backed writes always append, even with a key, and refuse merge."
+).requiredOption("--rows <json-or-@file>", "JSON array of row objects, or @path to a JSON file").option("--key-column <columns>", "non-blank key column, or comma-separated columns for a composite key").option("--write-mode <replace|merge>", "replace matching fields (files clear omitted fields; PostgreSQL updates batch columns), or merge; either explicit mode requires --key-column").option("--overwrite-columns <csv>", "comma-separated columns merge mode may overwrite").action(
+  async (slug, opts) => {
+    try {
+      const rawRows = readMaybeFile(opts.rows);
+      let parsed;
+      try {
+        parsed = JSON.parse(rawRows ?? "");
+      } catch (error) {
+        throw new Error(`--rows must contain valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+      }
+      if (!Array.isArray(parsed) || parsed.some((row) => row === null || typeof row !== "object" || Array.isArray(row))) {
+        throw new Error("--rows must contain a JSON array of non-null objects");
+      }
+      const writeMode = opts.writeMode;
+      if (writeMode !== void 0 && writeMode !== "replace" && writeMode !== "merge") {
+        throw new Error('--write-mode must be "replace" or "merge"');
+      }
+      if (writeMode !== void 0 && !opts.keyColumn?.trim()) {
+        throw new Error(`--write-mode "${writeMode}" requires a non-blank --key-column`);
+      }
+      if (opts.keyColumn !== void 0 && !opts.keyColumn.split(",").some((column) => column.trim())) {
+        throw new Error("--key-column must name at least one non-blank column");
+      }
+      let overwriteColumns;
+      if (opts.overwriteColumns !== void 0) {
+        if (writeMode !== "merge") {
+          throw new Error("--overwrite-columns requires --write-mode merge");
+        }
+        overwriteColumns = opts.overwriteColumns.split(",").map((column) => column.trim());
+        if (overwriteColumns.some((column) => !column)) {
+          throw new Error("--overwrite-columns must not contain empty column names");
+        }
+      }
+      const result = await new ErdoClient().writeDatasetRows(slug, {
+        rows: parsed,
+        ...opts.keyColumn !== void 0 ? { key_column: opts.keyColumn } : {},
+        ...writeMode !== void 0 ? { write_mode: writeMode } : {},
+        ...overwriteColumns !== void 0 ? { overwrite_columns: overwriteColumns } : {}
+      });
+      print(result);
+    } catch (e) {
+      fail(e);
+    }
+  }
+);
 function readSchemaFile(path) {
   const parsed = JSON.parse(readFileSync4(path, "utf8"));
   const schema = Array.isArray(parsed) ? { columns: parsed } : parsed;
@@ -7095,7 +7149,7 @@ refreshCmd.command("set <slug>").description(
 ).option(
   "--mode <replace|upsert>",
   "replace overwrites every row with what the recipe returned; upsert merges by --key-column and keeps rows outside the returned window. Omit it and you get upsert when you passed --key-column and replace when you did not, since a key column is only meaningful to a merge"
-).option("--key-column <c>", "the column an upsert merges on; required with --mode upsert").option(
+).option("--key-column <c>", "non-blank column, or comma-separated columns, an upsert merges on; required with --mode upsert").option(
   "--schedule <cron>",
   "a cron expression to run the refresh on a fixed cadence. Omit it and the refresh runs on view instead \u2014 cheaper, because it never runs while nobody is looking"
 ).option("--timezone <tz>", "IANA timezone the cron expression is read in (default UTC)").option(
@@ -7145,6 +7199,10 @@ refreshCmd.command("set <slug>").description(
         fail(new Error("--mode must be replace or upsert"));
         return;
       }
+      if (opts.keyColumn !== void 0 && !opts.keyColumn.split(",").some((column) => column.trim())) {
+        fail(new Error("--key-column must name at least one non-blank column"));
+        return;
+      }
       if (opts.mode === "upsert" && !opts.keyColumn) {
         fail(new Error("--mode upsert needs --key-column <c>: the column the merge keys on"));
         return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.120.1",
+  "version": "0.122.0",
   "description": "Erdo CLI — drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {