@erdoai/cli 0.64.0 → 0.65.0

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync4 } from "fs";
 import { basename } from "path";
 import { select } from "@inquirer/prompts";
 import { Command } from "commander";
@@ -297,6 +297,36 @@ var ErdoClient = class {
   createManagerKey() {
     return this.request("POST", "/v1/manager-key");
   }
+  // Brings an EXISTING org under your manager org by redeeming a one-time consent
+  // token — a manager credential on its own can never adopt an arbitrary org, it
+  // has to present a secret only the target org's owner (or, for an ownerless
+  // managed org, its current manager) could have minted. The path is a sibling of
+  // /v1/managed-organizations rather than a nested `adopt` because Encore rejects
+  // a static segment alongside the parameterized /:orgSlug routes.
+  adoptManagedOrganization(token) {
+    return this.request("POST", "/v1/managed-organization-adoptions", { token });
+  }
+  // Seats a person in a managed org. The role is capped at admin — ownership of a
+  // client org stays with the client — and an omitted role means the backend's
+  // default (member).
+  addManagedOrganizationMember(slug, input) {
+    return this.request(
+      "POST",
+      `/v1/managed-organizations/${encodeURIComponent(slug)}/members`,
+      input
+    );
+  }
+  // Offers an ownerless managed org to another manager. Such an org has no owner
+  // to consent, so without this it stays pinned to whoever created it; the mint is
+  // refused the moment the org has a real owner, since re-parenting is then the
+  // owner's call through an adoption token.
+  createManagedOrganizationHandoffToken(slug, successorManagerSlug) {
+    return this.request(
+      "POST",
+      `/v1/managed-organizations/${encodeURIComponent(slug)}/handoff-tokens`,
+      { successor_manager_slug: successorManagerSlug }
+    );
+  }
   // --- Custom page domains: the branded hostnames the org's pages serve from ---
   listCustomDomains() {
     return this.request("GET", "/v1/custom-domains");
@@ -1333,9 +1363,17 @@ async function browserLogin() {
   return { token: data.access_token, me };
 }
 
+// src/input.ts
+import { readFileSync as readFileSync2 } from "fs";
+function readMaybeFile(value) {
+  if (!value) return void 0;
+  if (value.startsWith("@@")) return value.slice(1);
+  return value.startsWith("@") ? readFileSync2(value.slice(1), "utf8") : value;
+}
+
 // src/update.ts
 import { spawn as spawn2, spawnSync } from "child_process";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname2 } from "path";
 var PKG = "@erdoai/cli";
 var MANUAL_HINT = `npm install -g ${PKG}@latest`;
@@ -1373,7 +1411,7 @@ async function fetchLatestVersion(timeoutMs) {
 function readVersionCache() {
   try {
     if (!existsSync2(CACHE_PATH)) return {};
-    const raw = JSON.parse(readFileSync2(CACHE_PATH, "utf8"));
+    const raw = JSON.parse(readFileSync3(CACHE_PATH, "utf8"));
     return raw && typeof raw === "object" ? raw : {};
   } catch {
     return {};
@@ -1441,7 +1479,7 @@ async function update(current) {
 }
 
 // src/index.ts
-var pkg = JSON.parse(readFileSync3(new URL("../package.json", import.meta.url), "utf8"));
+var pkg = JSON.parse(readFileSync4(new URL("../package.json", import.meta.url), "utf8"));
 function fail(err) {
   if (err instanceof ErdoApiError) {
     console.error(`Error ${err.status}: ${err.message}`);
@@ -1743,6 +1781,57 @@ id: ${o.id}`);
     fail(e);
   }
 });
+managed.command("adopt <token>").description("Take over an existing org by redeeming a one-time consent token").action(async (token) => {
+  try {
+    const o = await new ErdoClient().adoptManagedOrganization(token);
+    console.log(`Adopted managed org: ${o.name}`);
+    console.log(`slug: ${o.slug}
+id: ${o.id}`);
+    process.stderr.write(
+      `Operate it with the manager key by passing --org ${o.slug} on any command (e.g. erdo --org ${o.slug} datasets list).
+`
+    );
+  } catch (e) {
+    fail(e);
+  }
+});
+managed.command("add-member <orgSlug> <email>").description("Seat a person in a managed org (role member or admin)").option("--role <role>", "member (default) or admin").action(async (orgSlug, email, opts) => {
+  try {
+    if (opts.role && opts.role !== "member" && opts.role !== "admin") {
+      fail(new Error("--role must be member or admin (ownership of a managed org stays with the client)"));
+    }
+    const m = await new ErdoClient().addManagedOrganizationMember(orgSlug, {
+      email,
+      role: opts.role
+    });
+    if (m.invited) {
+      console.log(`Invited ${m.email} to ${m.org_slug} as ${m.role} \u2014 pending until they accept`);
+    } else {
+      console.log(`Added ${m.email} to ${m.org_slug} as ${m.role}`);
+    }
+  } catch (e) {
+    fail(e);
+  }
+});
+managed.command("handoff-token <orgSlug>").description("Mint a one-time token offering an ownerless managed org to another manager; shown ONCE").requiredOption("--successor <managerOrgSlug>", "the manager org allowed to redeem the token").action(async (orgSlug, opts) => {
+  try {
+    const res = await new ErdoClient().createManagedOrganizationHandoffToken(orgSlug, opts.successor);
+    process.stderr.write(
+      "Give this handoff token to the successor manager now \u2014 it is shown only once and cannot be retrieved again.\n"
+    );
+    console.log(res.token);
+    process.stderr.write(
+      `
+org: ${res.org_slug}
+successor: ${res.successor_manager_slug}
+expires: ${res.expires_at}
+Only ${res.successor_manager_slug} can redeem it, with: erdo org managed adopt <token>, and only until it expires at the time above.
+`
+    );
+  } catch (e) {
+    fail(e);
+  }
+});
 managed.command("revoke <slug>").description("Stop managing a client org (removes access; keeps an audit record)").action(async (slug) => {
   try {
     await new ErdoClient().revokeManagedOrganization(slug);
@@ -2643,14 +2732,14 @@ caseCmd.command("rm <slug> <caseName>").description("Archive a case from a suite
   }
 });
 var agentCmd = program.command("agent").description("Run agents");
-agentCmd.command("ask <question>").description("Ask the data-question agent (one-shot); prints the answer").option("-d, --datasets <csv>", "dataset slugs to scope to").option(
+agentCmd.command("ask <question>").description("Ask the data-question agent (one-shot); question accepts @path to a UTF-8 file").option("-d, --datasets <csv>", "dataset slugs to scope to").option(
   "--sync",
   "hold one long HTTP request open until the run finishes, instead of polling. Faster for quick questions; a proxy will time it out on any run over ~100s, losing the thread id while the run continues server-side"
 ).action(async (question, opts) => {
   try {
     const client = new ErdoClient();
     const res = await client.ask({
-      question,
+      question: readMaybeFile(question) ?? "",
       dataset_slugs: opts.datasets ? opts.datasets.split(",").map((s) => s.trim()) : void 0,
       async: !opts.sync
     });
@@ -2676,9 +2765,9 @@ thread: ${res.thread_id}`);
     fail(e);
   }
 });
-agentCmd.command("send <threadId> <message>").description("Send a message to a thread and print the agent's reply").option("-a, --agent <key>", "agent to invoke (e.g. erdo.artifact-builder)").option(
+agentCmd.command("send <threadId> <message>").description("Send a message to a thread and print the agent's reply; message accepts @path to a UTF-8 file").option("-a, --agent <key>", "agent to invoke (e.g. erdo.artifact-builder)").option(
   "--context <text>",
-  "application context for this turn; available to the agent but omitted from the visible user message"
+  "application context for this turn, or @path to a UTF-8 file; omitted from the visible user message"
 ).option(
   "--sync",
   "hold one long HTTP request open until the run finishes, instead of polling. Faster for quick questions; a proxy will time it out on any run over ~100s while the run continues server-side"
@@ -2687,8 +2776,8 @@ agentCmd.command("send <threadId> <message>").description("Send a message to a t
     const client = new ErdoClient();
     const baselineRunID = opts.sync ? void 0 : await client.latestRunID(threadId);
     const res = await client.sendMessage(threadId, {
-      message,
-      context: opts.context,
+      message: readMaybeFile(message) ?? "",
+      context: readMaybeFile(opts.context),
       agent_key: opts.agent,
       async: !opts.sync
     });
@@ -3596,10 +3685,6 @@ reviewsCmd.command("decide <id>").description(
   }
 );
 var pagesCmd = program.command("pages").description("Create and manage pages/artifacts");
-function readMaybeFile(v) {
-  if (!v) return void 0;
-  return v.startsWith("@") ? readFileSync3(v.slice(1), "utf8") : v;
-}
 function grantList(v) {
   if (v === void 0) return void 0;
   if (v.trim() === "[]") return [];
@@ -4139,7 +4224,7 @@ datasetsCmd.command("schema <slug>").alias("describe").description(
 var MAX_UPLOAD_BYTES = 20 * 1024 * 1024;
 datasetsCmd.command("upload <file>").description("Upload a file (CSV, Excel, JSON, ...) and create a dataset from it").option("-n, --name <name>", "display name for the dataset (defaults to the filename)").option("-d, --description <text>", "description shown to agents analyzing the dataset").action(async (file, opts) => {
   try {
-    const content = readFileSync3(file);
+    const content = readFileSync4(file);
     if (content.byteLength > MAX_UPLOAD_BYTES) {
       fail(
         new Error(
@@ -4568,7 +4653,7 @@ knowledgeCmd.command("attach <objectId> <file>").description(
     try {
       const body = opts.url ? { filename: basename(file), source_url: opts.url } : {
         filename: basename(file),
-        content_base64: readFileSync3(file).toString("base64")
+        content_base64: readFileSync4(file).toString("base64")
       };
       print(
         await new ErdoClient().attachKnowledgeAsset(objectId, {
@@ -4608,7 +4693,7 @@ autoCmd.command("update <id>").description("Edit an automation \u2014 rename, re
         fail(new Error("pass either --script-js or --script-file, not both"));
         return;
       }
-      const scriptJs = opts.scriptFile ? readFileSync3(opts.scriptFile, "utf8") : opts.scriptJs;
+      const scriptJs = opts.scriptFile ? readFileSync4(opts.scriptFile, "utf8") : opts.scriptJs;
       const body = {
         name: opts.name,
         description: opts.description,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.64.0",
+  "version": "0.65.0",
   "description": "Erdo CLI — drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {
@@ -35,6 +35,7 @@
   "scripts": {
     "build": "tsup src/index.ts --format esm --clean",
     "build:check": "tsc --noEmit",
+    "test": "node --import tsx --test src/input.test.ts",
     "dev": "tsx src/index.ts",
     "postinstall": "node scripts/postinstall.mjs",
     "prepublishOnly": "npm run build"