@erdoai/cli 0.64.1 → 0.66.0

package/dist/index.js

@@ -297,6 +297,36 @@ var ErdoClient = class {
   createManagerKey() {
     return this.request("POST", "/v1/manager-key");
   }
+  // Brings an EXISTING org under your manager org by redeeming a one-time consent
+  // token — a manager credential on its own can never adopt an arbitrary org, it
+  // has to present a secret only the target org's owner (or, for an ownerless
+  // managed org, its current manager) could have minted. The path is a sibling of
+  // /v1/managed-organizations rather than a nested `adopt` because Encore rejects
+  // a static segment alongside the parameterized /:orgSlug routes.
+  adoptManagedOrganization(token) {
+    return this.request("POST", "/v1/managed-organization-adoptions", { token });
+  }
+  // Seats a person in a managed org. The role is capped at admin — ownership of a
+  // client org stays with the client — and an omitted role means the backend's
+  // default (member).
+  addManagedOrganizationMember(slug, input) {
+    return this.request(
+      "POST",
+      `/v1/managed-organizations/${encodeURIComponent(slug)}/members`,
+      input
+    );
+  }
+  // Offers an ownerless managed org to another manager. Such an org has no owner
+  // to consent, so without this it stays pinned to whoever created it; the mint is
+  // refused the moment the org has a real owner, since re-parenting is then the
+  // owner's call through an adoption token.
+  createManagedOrganizationHandoffToken(slug, successorManagerSlug) {
+    return this.request(
+      "POST",
+      `/v1/managed-organizations/${encodeURIComponent(slug)}/handoff-tokens`,
+      { successor_manager_slug: successorManagerSlug }
+    );
+  }
   // --- Custom page domains: the branded hostnames the org's pages serve from ---
   listCustomDomains() {
     return this.request("GET", "/v1/custom-domains");
@@ -366,6 +396,22 @@ var ErdoClient = class {
       `/v1/received-emails${qs ? `?${qs}` : ""}`
     );
   }
+  // The audited outbound side of email. Listing omits bodies; get reads the
+  // exact stored message. The scalar filters use the GET mirror of the same
+  // service that backs MCP's erdo_list_emails.
+  listSentEmails(params) {
+    const q = new URLSearchParams();
+    if (params?.to) q.set("to", params.to);
+    if (params?.since) q.set("since", params.since);
+    if (params?.search) q.set("search", params.search);
+    if (params?.limit) q.set("limit", String(params.limit));
+    if (params?.offset) q.set("offset", String(params.offset));
+    const qs = q.toString();
+    return this.request("GET", `/v1/emails${qs ? `?${qs}` : ""}`);
+  }
+  getSentEmail(emailID) {
+    return this.request("GET", `/v1/emails/${encodeURIComponent(emailID)}`);
+  }
   // Run a read-only HogQL query against the org's page-analytics events. Rows are
   // positional per columns; enabled:false means page analytics is off for the org
   // (not zero traffic). A rejected query surfaces PostHog's message as the error.
@@ -484,6 +530,14 @@ var ErdoClient = class {
       `/v1/pages/restore/${encodeURIComponent(id)}`
     );
   }
+  // Copy a page: the deploy endpoint's clone mode. clone_from_page_id makes
+  // POST /v1/pages copy an existing page server-side instead of taking content.
+  clonePage(id, input) {
+    return this.request("POST", "/v1/pages", {
+      clone_from_page_id: id,
+      title: input?.title
+    });
+  }
   // --- workstreams ---
   listWorkstreams(status) {
     const q = new URLSearchParams();
@@ -1751,6 +1805,57 @@ id: ${o.id}`);
     fail(e);
   }
 });
+managed.command("adopt <token>").description("Take over an existing org by redeeming a one-time consent token").action(async (token) => {
+  try {
+    const o = await new ErdoClient().adoptManagedOrganization(token);
+    console.log(`Adopted managed org: ${o.name}`);
+    console.log(`slug: ${o.slug}
+id: ${o.id}`);
+    process.stderr.write(
+      `Operate it with the manager key by passing --org ${o.slug} on any command (e.g. erdo --org ${o.slug} datasets list).
+`
+    );
+  } catch (e) {
+    fail(e);
+  }
+});
+managed.command("add-member <orgSlug> <email>").description("Seat a person in a managed org (role member or admin)").option("--role <role>", "member (default) or admin").action(async (orgSlug, email, opts) => {
+  try {
+    if (opts.role && opts.role !== "member" && opts.role !== "admin") {
+      fail(new Error("--role must be member or admin (ownership of a managed org stays with the client)"));
+    }
+    const m = await new ErdoClient().addManagedOrganizationMember(orgSlug, {
+      email,
+      role: opts.role
+    });
+    if (m.invited) {
+      console.log(`Invited ${m.email} to ${m.org_slug} as ${m.role} \u2014 pending until they accept`);
+    } else {
+      console.log(`Added ${m.email} to ${m.org_slug} as ${m.role}`);
+    }
+  } catch (e) {
+    fail(e);
+  }
+});
+managed.command("handoff-token <orgSlug>").description("Mint a one-time token offering an ownerless managed org to another manager; shown ONCE").requiredOption("--successor <managerOrgSlug>", "the manager org allowed to redeem the token").action(async (orgSlug, opts) => {
+  try {
+    const res = await new ErdoClient().createManagedOrganizationHandoffToken(orgSlug, opts.successor);
+    process.stderr.write(
+      "Give this handoff token to the successor manager now \u2014 it is shown only once and cannot be retrieved again.\n"
+    );
+    console.log(res.token);
+    process.stderr.write(
+      `
+org: ${res.org_slug}
+successor: ${res.successor_manager_slug}
+expires: ${res.expires_at}
+Only ${res.successor_manager_slug} can redeem it, with: erdo org managed adopt <token>, and only until it expires at the time above.
+`
+    );
+  } catch (e) {
+    fail(e);
+  }
+});
 managed.command("revoke <slug>").description("Stop managing a client org (removes access; keeps an audit record)").action(async (slug) => {
   try {
     await new ErdoClient().revokeManagedOrganization(slug);
@@ -3726,6 +3831,24 @@ pagesCmd.command("restore <id>").description("Restore a previously deleted page
     fail(e);
   }
 });
+pagesCmd.command("clone <id>").description(
+  "Copy a page. The copy is byte-identical and starts private (publish state is never inherited); the source's lead-form pipelines are duplicated onto it and the ids in its content rewritten, so it captures its own leads"
+).option("--title <title>", 'title for the copy (default: "Copy of <source title>")').option("--json", "print the full JSON, including the cloned pipelines and id rewrites").action(async (id, opts) => {
+  try {
+    const res = await new ErdoClient().clonePage(id, { title: opts.title });
+    if (opts.json) {
+      print(res);
+      return;
+    }
+    console.log(`${res.id}	${res.url}`);
+    for (const p of res.cloned_pipelines || []) {
+      console.error(`cloned pipeline: ${p.source_id} -> ${p.id}${p.slug ? ` (${p.slug})` : ""}`);
+    }
+    for (const note of res.notes || []) console.error(`note: ${note}`);
+  } catch (e) {
+    fail(e);
+  }
+});
 pagesCmd.command("get <id>").description("Show an artifact").action(async (id) => {
   try {
     print(await new ErdoClient().getArtifact(id));
@@ -3998,6 +4121,52 @@ emailCmd.command("received").description(
     fail(e);
   }
 });
+var sentEmailsCmd = emailCmd.command("sent").description("Read the audited outbound email log and provider delivery evidence");
+sentEmailsCmd.command("list").description("List sent email, newest first, including immutable delivered_at evidence").option("--to <email>", "only mail sent to this address").option("--since <timestamp>", "only mail created at or after this RFC 3339 timestamp").option("--search <text>", "case-insensitive subject substring").option("--limit <n>", "page size (default 25, max 200)").option("--offset <n>", "rows to skip").option("--json", "print the raw JSON result instead of a table").action(
+  async (opts) => {
+    try {
+      const res = await new ErdoClient().listSentEmails({
+        to: opts.to,
+        since: opts.since,
+        search: opts.search,
+        limit: opts.limit ? Number(opts.limit) : void 0,
+        offset: opts.offset ? Number(opts.offset) : void 0
+      });
+      if (opts.json) {
+        print(res);
+        return;
+      }
+      const emails = res.emails ?? [];
+      if (emails.length === 0) {
+        console.log("No sent email matches those filters.");
+        return;
+      }
+      printAlignedTable(
+        ["id", "to", "subject", "status", "delivered at", "latest event", "sent at"],
+        emails.map((email) => [
+          email.id,
+          email.to,
+          email.subject,
+          email.status_reason ? `${email.status}: ${email.status_reason}` : email.status,
+          email.delivered_at ?? "",
+          email.last_delivery_event_at ?? "",
+          email.sent_at ?? ""
+        ])
+      );
+      process.stderr.write(`showing ${emails.length} of ${res.total} matching message(s)
+`);
+    } catch (e) {
+      fail(e);
+    }
+  }
+);
+sentEmailsCmd.command("get <emailID>").description("Read one sent email, including exact bodies and delivery evidence").action(async (emailID) => {
+  try {
+    print(await new ErdoClient().getSentEmail(emailID));
+  } catch (e) {
+    fail(e);
+  }
+});
 var datasetsCmd = program.command("datasets").description("Datasets");
 datasetsCmd.command("list").description("List datasets").option(
   "--class <class>",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.64.1",
+  "version": "0.66.0",
   "description": "Erdo CLI — drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {