@erdoai/cli 0.61.0 → 0.63.0

package/dist/index.js

@@ -269,6 +269,15 @@ var ErdoClient = class {
   setAutonomyMode(mode) {
     return this.request("PUT", "/v1/autonomy-mode", { mode });
   }
+  // Personal approval settings — which risk classes of the caller's OWN agent
+  // runs still raise a card in the active org. gates null = no personal
+  // setting (org default); [] = nothing asks; otherwise the listed classes ask.
+  getApprovalSettings() {
+    return this.request("GET", "/v1/approval-settings");
+  }
+  setApprovalSettings(gates) {
+    return this.request("PUT", "/v1/approval-settings", { gates });
+  }
   // --- Manager accounts: operate many client (managed) orgs with ONE manager key ---
   // The manager is your active org; you must be an admin/owner of it. A managed org
   // is a client tenant you provision and operate. The manager key (createManagerKey)
@@ -844,6 +853,15 @@ var ErdoClient = class {
   listIntegrations() {
     return this.request("GET", "/v1/integrations");
   }
+  // For a Pipedream-backed integration this is the full disconnect: the
+  // credential is released at the provider and the connection removed, not just
+  // the integration row deleted.
+  deleteIntegration(integrationId) {
+    return this.request(
+      "DELETE",
+      `/v1/integrations/${encodeURIComponent(integrationId)}`
+    );
+  }
   getConnectionScope(integrationId) {
     return this.request(
       "GET",
@@ -3100,6 +3118,50 @@ ${listing}`);
     }
   }
 );
+approvalsCmd.command("settings [mode]").description(
+  "Show or set YOUR approval settings: which classes of your agents' actions still ask. mode: safe (auto-approve page work + bookkeeping; spend and destructive still ask) | all (approve everything) | reset (back to the org default)"
+).option(
+  "--gates <classes>",
+  "explicit comma-separated gate list, e.g. spend,destructive (overrides <mode>)"
+).action(async (mode, opts = {}) => {
+  try {
+    const client = new ErdoClient();
+    let gates;
+    if (opts.gates !== void 0) {
+      gates = opts.gates.split(",").map((g) => g.trim()).filter(Boolean);
+    } else {
+      switch (mode) {
+        case void 0:
+          break;
+        // show
+        case "safe":
+          gates = ["spend", "destructive"];
+          break;
+        case "all":
+          gates = [];
+          break;
+        case "reset":
+          gates = null;
+          break;
+        default:
+          throw new Error(`unknown mode ${mode} \u2014 use safe | all | reset, or --gates spend,destructive`);
+      }
+    }
+    if (gates !== void 0) {
+      await client.setApprovalSettings(gates);
+    }
+    const { gates: current } = await client.getApprovalSettings();
+    if (current === null) {
+      console.log("Approval settings: org default (every gated action asks, subject to the org's own gates and standing policies)");
+    } else if (current.length === 0) {
+      console.log("Approval settings: approve everything \u2014 no class of your agents' actions asks (a standing always-require policy still applies)");
+    } else {
+      console.log(`Approval settings: ${current.join(", ")} still ask; the rest of your agents' actions auto-approve`);
+    }
+  } catch (e) {
+    fail(e);
+  }
+});
 var attnCmd = program.command("attention").description("The attention feed \u2014 digests, choices, escalations awaiting a human");
 attnCmd.command("list").description("List attention items").option("--status <status...>", "open | answered | dismissed | expired").option("--open", "shorthand for --status open").option("--engine-actions", "only engine-generated items").option("--item <idOrSlug>", "read one item: its slug or its uuid").option("-n, --limit <n>", "max items", (v) => parseInt(v, 10)).option("--offset <n>", "pagination offset", (v) => parseInt(v, 10)).action(
   async (opts) => {
@@ -4180,7 +4242,7 @@ integrationsCmd.command("apps [query]").description("Search connectable apps (na
     fail(e);
   }
 });
-integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass its API key or other credentials with -c, or omit them to get a browser connect URL for OAuth apps").option("-c, --credential <key=value...>", "credential field, e.g. -c api_key=\u2026 (repeatable); rejected by OAuth apps, which have no credential to pass", (v, acc) => acc.concat(v), []).option("-n, --name <name>", "display name for the connection").option("--rotate", "replace the credentials of the app's existing connection instead of adding a second one \u2014 for a key that was rotated at the provider; requires -c").action(async (app, opts) => {
+integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass its API key or other credentials with -c, or omit them to get a browser connect URL for OAuth apps").option("-c, --credential <key=value...>", "credential field, e.g. -c api_key=\u2026 (repeatable); rejected by OAuth apps, which have no credential to pass", (v, acc) => acc.concat(v), []).option("-n, --name <name>", "display name for the connection").option("--rotate", "replace the credentials of the app's existing connection instead of adding a second one \u2014 for a key that was rotated at the provider; requires -c").option("--share", "share the connection with the whole organization instead of keeping it private to you \u2014 for org-level credentials teammates and agents should see").action(async (app, opts) => {
   try {
     let credentials;
     if (opts.credential.length) {
@@ -4195,7 +4257,8 @@ integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass
       app,
       name: opts.name,
       credentials,
-      rotate_credentials: opts.rotate || void 0
+      rotate_credentials: opts.rotate || void 0,
+      share_with_org: opts.share || void 0
     });
     print(res);
     const notes = [];
@@ -4210,6 +4273,24 @@ ${notes.join("\n")}`);
     fail(e);
   }
 });
+integrationsCmd.command("disconnect <app>").description("Disconnect an app \u2014 releases the stored credential and removes the connection; org admins can disconnect any of the org's connections").action(async (app) => {
+  try {
+    const client = new ErdoClient();
+    const { integrations } = await client.listIntegrations();
+    const matches = integrations.filter((i) => i.app === app);
+    if (!matches.length) fail(new Error(`no ${app} connection found \u2014 see: erdo integrations list`));
+    if (matches.length > 1) {
+      fail(
+        new Error(
+          `there are ${matches.length} ${app} connections (${matches.map((i) => i.name || i.id).join(", ")}) \u2014 disconnect the right one from Data \u2192 Connectors in the Erdo web app`
+        )
+      );
+    }
+    print(await client.deleteIntegration(matches[0].id));
+  } catch (e) {
+    fail(e);
+  }
+});
 integrationsCmd.command("status <app>").description("Check whether an app is connected (completes browser-authorized connections)").action(async (app) => {
   try {
     print(await new ErdoClient().checkIntegrationConnection(app));

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.61.0",
-  "description": "Erdo CLI \u2014 drive datasets, pages, and evals from the terminal or CI",
+  "version": "0.63.0",
+  "description": "Erdo CLI — drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {
     "erdo": "dist/index.js"
@@ -52,4 +52,4 @@
   "overrides": {
     "esbuild": "^0.28.1"
   }
-}
+}