@erdoai/cli 0.135.0 → 0.136.0

package/dist/index.js

@@ -1189,6 +1189,15 @@ var ErdoClient = class {
     const qs = q.toString();
     return this.request("GET", `/v1/datasets${qs ? `?${qs}` : ""}`);
   }
+  listDatasetUserPermissions(slug) {
+    return this.request("GET", `/v1/datasets/${encodeURIComponent(slug)}/permissions/users`);
+  }
+  setDatasetUserPermission(slug, userID, level) {
+    return this.request("PUT", `/v1/datasets/${encodeURIComponent(slug)}/permissions/users/${encodeURIComponent(userID)}`, { level });
+  }
+  removeDatasetUserPermission(slug, userID) {
+    return this.request("DELETE", `/v1/datasets/${encodeURIComponent(slug)}/permissions/users/${encodeURIComponent(userID)}`);
+  }
   // The org's dataset vocabulary: every purpose in use, its current dataset,
   // and the declared producer contract on that same dataset.
   // scope="managed" reads the same across every client organization a manager
@@ -6872,6 +6881,40 @@ voiceAgentsCmd.command("whatsapp-replies <slug>").description("Turn a voice agen
   }
 });
 var datasetsCmd = program.command("datasets").description("Datasets");
+var datasetPermissionsCmd = datasetsCmd.command("permissions").description("Manage dataset user permissions");
+datasetPermissionsCmd.command("list <slug>").option("--json", "output raw JSON").action(async (slug, opts) => {
+  try {
+    const result = await new ErdoClient().listDatasetUserPermissions(slug);
+    if (opts.json) print(result);
+    else for (const p of result.permissions) console.log(`${p.user_id}	${p.level}`);
+  } catch (e) {
+    fail(e);
+  }
+});
+datasetPermissionsCmd.command("set-user <slug> <user-id>").requiredOption("--level <view|edit|admin>", "permission level").option("--json", "output raw JSON").action(async (slug, userID, opts) => {
+  try {
+    if (!["view", "edit", "admin"].includes(opts.level)) throw new Error("--level must be view, edit, or admin");
+    const result = await new ErdoClient().setDatasetUserPermission(slug, userID, opts.level);
+    if (opts.json) print(result);
+    else console.log(`${result.user_id}	${result.level}`);
+    if (result.user_id.toLowerCase() !== userID.toLowerCase() || result.level !== opts.level) {
+      console.error("Readback does not match the requested dataset user grant");
+      process.exitCode = 1;
+    }
+  } catch (e) {
+    fail(e);
+  }
+});
+datasetPermissionsCmd.command("remove-user <slug> <user-id>").option("--json", "output raw JSON").action(async (slug, userID, opts) => {
+  try {
+    const result = await new ErdoClient().removeDatasetUserPermission(slug, userID);
+    if (opts.json) print(result);
+    else console.log(result.direct_grant_absent ? "no direct user grant remains" : "direct grant absence was not verified");
+    if (result.inherited_access_may_remain) console.error("inherited access may remain");
+  } catch (e) {
+    fail(e);
+  }
+});
 datasetsCmd.command("list").description("List datasets").option(
   "--class <class>",
   "filter by structural class: 'table' or 'scratch', or 'all' to include scratch analysis by-products (default hides scratch)"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.135.0",
+  "version": "0.136.0",
   "description": "Erdo CLI \u2014 drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {