@erdoai/cli 0.151.1 → 0.154.0

package/dist/index.js

@@ -331,6 +331,9 @@ var ErdoClient = class {
   listTokens() {
     return this.request("GET", "/v1/tokens");
   }
+  rotateToken(id) {
+    return this.request("POST", `/v1/tokens/${encodeURIComponent(id)}/rotate`, void 0, false);
+  }
   revokeToken(id) {
     return this.request("DELETE", `/v1/tokens/${encodeURIComponent(id)}`);
   }
@@ -1261,6 +1264,33 @@ var ErdoClient = class {
   setDatasetRowAction(input) {
     return this.request("PUT", "/v1/dataset-row-actions", input, false);
   }
+  listProviderLeadSources(opts) {
+    const q = new URLSearchParams();
+    if (opts?.provider) q.set("provider", opts.provider);
+    if (opts?.account_id) q.set("account_id", opts.account_id);
+    const qs = q.toString();
+    return this.request(
+      "GET",
+      `/v1/provider-lead-sources${qs ? `?${qs}` : ""}`
+    );
+  }
+  listProviderLeadSourceForms(connectionId, accountId) {
+    const q = new URLSearchParams({ connection_id: connectionId, account_id: accountId });
+    return this.request(
+      "GET",
+      `/v1/provider-lead-sources/forms?${q.toString()}`
+    );
+  }
+  setProviderLeadSource(input) {
+    return this.request("PUT", "/v1/provider-lead-sources", input, false);
+  }
+  deleteProviderLeadSource(provider, accountId) {
+    const q = new URLSearchParams({ provider, account_id: accountId });
+    return this.request(
+      "DELETE",
+      `/v1/provider-lead-sources?${q.toString()}`
+    );
+  }
   listDatasetUserPermissions(slug) {
     return this.request("GET", `/v1/datasets/${encodeURIComponent(slug)}/permissions/users`);
   }
@@ -3321,6 +3351,25 @@ ${res.from} to ${res.to} (${res.timezone} days)
   }
 );
 var tokenCmd = program.command("token").description("Manage your API tokens (account-level credentials)");
+function printNewToken(res, replacedTokenID) {
+  process.stderr.write("Store this token now \u2014 it is shown only once and cannot be retrieved again.\n");
+  console.log(res.token);
+  const scoped = res.is_scoped === true || res.capabilities !== void 0;
+  const scopeDetails = scoped ? `capabilities: ${res.capabilities?.join(", ") || "(none)"}
+resource slugs: ${res.resource_slugs?.join(", ") || "(none)"}
+` : "";
+  const scopeDescription = scoped ? "This token is pinned to the default org above and can use only its listed capabilities; resource restrictions apply when slugs are listed.\n" : res.access === "read" ? "This token can read as you in any org you belong to and cannot change anything; pass --org on a command to target another.\n" : "This token acts as you in any org you belong to; pass --org on a command to target another.\n";
+  process.stderr.write(
+    `
+id: ${res.id}
+hint: ${res.hint}
+expires: ${res.expires_at}
+default org: ${res.default_org ? `${res.default_org.name} (${res.default_org.id})` : "(none)"}
+access: ${res.access ?? "full"}
+` + scopeDetails + (replacedTokenID ? `replaced token id: ${replacedTokenID}
+` : "") + scopeDescription
+  );
+}
 tokenCmd.command("create").description("Mint a new API token; the secret is printed ONCE").requiredOption("--name <name>", "a label for the token").option("--expires-days <n>", "days until expiry (default: 30)", (v) => parseInt(v, 10)).option("--read-only", "mint a read-only token: it can read through the API in any org you belong to, and never write").addOption(
   orgOption("the token's default org (defaults to your active org; must be one you belong to)")
 ).action(async (opts) => {
@@ -3331,19 +3380,37 @@ tokenCmd.command("create").description("Mint a new API token; the secret is prin
       organization_id: opts.org,
       ...opts.readOnly ? { access: "read" } : {}
     });
-    process.stderr.write(
-      "Store this token now \u2014 it is shown only once and cannot be retrieved again.\n"
-    );
-    console.log(res.token);
-    process.stderr.write(
-      `
-id: ${res.id}
-hint: ${res.hint}
-expires: ${res.expires_at}
-default org: ${res.default_org ? `${res.default_org.name} (${res.default_org.id})` : "(none)"}
-access: ${res.access ?? "full"}
-` + (res.access === "read" ? "This token can read as you in any org you belong to and cannot change anything; pass --org on a command to target another.\n" : "This token acts as you in any org you belong to; pass --org on a command to target another.\n")
-    );
+    printNewToken(res);
+  } catch (e) {
+    fail(e);
+  }
+});
+tokenCmd.command("rotate <id>").description("Replace an API token; the replacement secret is printed ONCE").option("--update-login", "save the new secret when the rotated token is the active account's credential").action(async (id, opts) => {
+  try {
+    let accountKey;
+    let savedToken;
+    if (opts.updateLogin) {
+      const file = loadConfigFile();
+      accountKey = file ? activeAccountKey(file) : void 0;
+      const saved = accountKey ? file?.accounts[accountKey] : void 0;
+      if (!saved?.token) throw new Error("No active saved login to update. Run: erdo auth login");
+      savedToken = saved.token;
+      const me = await fetchMe(saved.token);
+      if (!me.credential_id || me.credential_id !== id) {
+        throw new Error("--update-login requires the rotated token id to match the active saved login's credential id");
+      }
+    }
+    const res = await new ErdoClient().rotateToken(id);
+    printNewToken(res, res.replaced_token_id);
+    if (accountKey) {
+      const current = loadConfigFile();
+      if (!current || activeAccountKey(current) !== accountKey || current.accounts[accountKey]?.token !== savedToken) {
+        throw new Error("Rotation succeeded and the replacement secret was printed above, but the active saved login changed during the request and was not overwritten. Save the new key with erdo login --key if needed");
+      }
+      saveAccount(accountKey, { token: res.token }, false);
+      process.stderr.write(`Updated saved login for ${accountKey}.
+`);
+    }
   } catch (e) {
     fail(e);
   }
@@ -3358,7 +3425,7 @@ tokenCmd.command("list").description("List your API tokens (never shows the secr
     for (const t of tokens) {
       const org2 = t.default_org ? t.default_org.name || t.default_org.id : "-";
       const used = t.last_used_at ?? "never";
-      console.log(`${t.id}	${t.name || "-"}	${t.hint}	access:${t.access ?? "full"}	default-org:${org2}	expires:${t.expires_at}	used:${used}`);
+      console.log(`${t.id}	${t.name || "-"}	${t.hint}	access:${t.access ?? "full"}	default-org:${org2}	expires:${t.expires_at}	last-used:${used}`);
     }
   } catch (e) {
     fail(e);
@@ -7276,6 +7343,65 @@ voiceAgentsCmd.command("whatsapp-replies <slug>").description("Turn a voice agen
   }
 });
 var datasetsCmd = program.command("datasets").description("Datasets");
+var providerLeadSourcesCmd = program.command("provider-lead-sources").description("Ingest ad-platform lead form responses into a lead dataset");
+providerLeadSourcesCmd.command("list").description("List LinkedIn lead form source declarations").option("--provider <provider>", "filter by ad platform provider").option("--account-id <id>", "filter by provider ad account id").action(async (opts) => {
+  try {
+    print(await new ErdoClient().listProviderLeadSources({ provider: opts.provider, account_id: opts.accountId }));
+  } catch (e) {
+    fail(e);
+  }
+});
+providerLeadSourcesCmd.command("forms").description("List LinkedIn lead forms available on a connected ad account").requiredOption("--connection-id <id>", "LinkedIn Ads connector account id from /connectors/my-connections").requiredOption("--account-id <id>", "numeric LinkedIn ad account id").action(async (opts) => {
+  try {
+    print(await new ErdoClient().listProviderLeadSourceForms(opts.connectionId, opts.accountId));
+  } catch (e) {
+    fail(e);
+  }
+});
+providerLeadSourcesCmd.command("set").description("Replace a provider lead form source declaration from JSON or flags").option("-f, --file <path>", "one JSON declaration object; use - to read from stdin").option("--dataset <slug>", "lead dataset slug").option("--provider <provider>", "ad platform provider", "linkedin_ads").option("--connection-id <id>", "LinkedIn Ads connector account id from /connectors/my-connections").option("--account-id <id>", "numeric LinkedIn ad account id").option("--form <id>", "LinkedIn lead gen form id (repeatable)", collect, []).option("--disabled", "save the declaration disabled").action(async (opts) => {
+  try {
+    let input;
+    if (opts.file) {
+      input = await readJSONInput(opts.file, "--file");
+    } else {
+      input = {
+        dataset: opts.dataset,
+        provider: opts.provider,
+        connection_id: opts.connectionId,
+        account_id: opts.accountId,
+        forms: opts.form,
+        ...opts.disabled ? { enabled: false } : {}
+      };
+    }
+    const dataset = typeof input.dataset === "string" ? input.dataset.trim() : "";
+    const provider = typeof input.provider === "string" ? input.provider.trim() : "";
+    const connectionID = typeof input.connection_id === "string" ? input.connection_id.trim() : "";
+    const accountID = typeof input.account_id === "string" ? input.account_id.trim() : "";
+    const forms = Array.isArray(input.forms) ? input.forms.filter((form) => typeof form === "string" && form.trim().length > 0) : [];
+    if (!dataset) throw new Error("dataset must be a non-empty string");
+    if (!provider) throw new Error("provider must be a non-empty string");
+    if (!connectionID) throw new Error("connection_id must be a non-empty string");
+    if (!accountID) throw new Error("account_id must be a non-empty string");
+    if (forms.length === 0) throw new Error("forms must contain at least one form");
+    print(await new ErdoClient().setProviderLeadSource({
+      ...input,
+      dataset,
+      provider,
+      connection_id: connectionID,
+      account_id: accountID,
+      forms
+    }));
+  } catch (e) {
+    fail(e);
+  }
+});
+providerLeadSourcesCmd.command("delete").description("Delete a provider lead form source declaration").option("--provider <provider>", "ad platform provider", "linkedin_ads").requiredOption("--account-id <id>", "numeric provider ad account id").action(async (opts) => {
+  try {
+    print(await new ErdoClient().deleteProviderLeadSource(opts.provider, opts.accountId));
+  } catch (e) {
+    fail(e);
+  }
+});
 var datasetRowActionsCmd = datasetsCmd.command("row-actions").description("Read and replace actions for arriving or excluded dataset rows");
 datasetRowActionsCmd.command("get <slug>").description("Read the row-action declarations and optional bounded diagnostics for a dataset").option("--include-receipts", "include bounded provider receipt diagnostics").option("--include-unresolved", "include bounded unresolved lookup diagnostics").action(async (slug, opts) => {
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.151.1",
+  "version": "0.154.0",
   "description": "Erdo CLI \u2014 drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {