@erdoai/cli 0.34.0 → 0.35.0

package/dist/index.js

@@ -241,6 +241,25 @@ var ErdoClient = class {
   setAutonomyMode(mode) {
     return this.request("PUT", "/v1/autonomy-mode", { mode });
   }
+  // --- Manager accounts: operate many client (managed) orgs with ONE manager key ---
+  // The manager is your active org; you must be an admin/owner of it. A managed org
+  // is a client tenant you provision and operate. The manager key (createManagerKey)
+  // is a single credential that acts inside any managed org via X-Organization-ID.
+  listManagedOrganizations() {
+    return this.request("GET", "/v1/managed-organizations");
+  }
+  createManagedOrganization(input) {
+    return this.request("POST", "/v1/managed-organizations", input);
+  }
+  revokeManagedOrganization(slug) {
+    return this.request(
+      "DELETE",
+      `/v1/managed-organizations/${encodeURIComponent(slug)}`
+    );
+  }
+  createManagerKey() {
+    return this.request("POST", "/v1/manager-key");
+  }
   // Run a read-only HogQL query against the org's page-analytics events. Rows are
   // positional per columns; enabled:false means page analytics is off for the org
   // (not zero traffic). A rejected query surfaces PostHog's message as the error.
@@ -1239,6 +1258,61 @@ org.command("autonomy [mode]").description("Show or set the org's engine-autonom
     fail(e);
   }
 });
+var managed = org.command("managed").description("Operate client orgs via a manager account");
+managed.command("list").description("List the client orgs your org manages").action(async () => {
+  try {
+    const { organizations } = await new ErdoClient().listManagedOrganizations();
+    if (organizations.length === 0) {
+      console.log("No managed orgs. Create one with: erdo org managed create --name <name>");
+      return;
+    }
+    for (const o of organizations) {
+      console.log(`${o.slug || "-"}	${o.name}	${o.role}	${o.id}`);
+    }
+  } catch (e) {
+    fail(e);
+  }
+});
+managed.command("create").description("Provision a new client org managed by your org").requiredOption("--name <name>", "display name for the new managed org").option("--slug <slug>", "desired slug (a unique suffix is appended if it collides)").action(async (opts) => {
+  try {
+    const o = await new ErdoClient().createManagedOrganization({ name: opts.name, slug: opts.slug });
+    console.log(`Created managed org: ${o.name}`);
+    console.log(`slug: ${o.slug}
+id: ${o.id}`);
+    process.stderr.write(
+      `Operate it with the manager key by passing --org ${o.slug} on any command (e.g. erdo --org ${o.slug} datasets list).
+`
+    );
+  } catch (e) {
+    fail(e);
+  }
+});
+managed.command("revoke <slug>").description("Stop managing a client org (removes access; keeps an audit record)").action(async (slug) => {
+  try {
+    await new ErdoClient().revokeManagedOrganization(slug);
+    console.log(`revoked: ${slug}`);
+  } catch (e) {
+    fail(e);
+  }
+});
+managed.command("key").description("Mint (or rotate) your manager key \u2014 one credential for every managed org; shown ONCE").action(async () => {
+  try {
+    const res = await new ErdoClient().createManagerKey();
+    process.stderr.write(
+      "Store this manager key now \u2014 it is shown only once and cannot be retrieved again.\n"
+    );
+    console.log(res.token);
+    process.stderr.write(
+      `
+token id: ${res.token_id}
+expires: ${res.expires_at}
+This key operates every org you manage; target one with X-Organization-ID (or \`erdo --org <slug> \u2026\`). Running this again rotates the key.
+`
+    );
+  } catch (e) {
+    fail(e);
+  }
+});
 var tokenCmd = program.command("token").description("Manage your API tokens (account-level credentials)");
 tokenCmd.command("create").description("Mint a new API token; the secret is printed ONCE").requiredOption("--name <name>", "a label for the token").option("--expires-days <n>", "days until expiry (default: 30)", (v) => parseInt(v, 10)).option("--org <idOrSlug>", "the token's default org (defaults to your active org; must be one you belong to)").action(async (opts) => {
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.34.0",
+  "version": "0.35.0",
   "description": "Erdo CLI — drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {