@erdoai/cli 0.78.0 → 0.80.0

package/dist/index.js

@@ -689,6 +689,16 @@ var ErdoClient = class {
       input
     );
   }
+  // The reverse of attachWorkstreamResource. The API reads a DELETE's fields
+  // from the query string, so these ride there rather than in a body. Omitting
+  // relationship_type removes every link the workstream holds to the resource.
+  detachWorkstreamResource(slug, input) {
+    const q = new URLSearchParams();
+    q.set("resource_type", input.resource_type);
+    q.set("resource_id", input.resource_id);
+    if (input.relationship_type) q.set("relationship_type", input.relationship_type);
+    return this.request("DELETE", `/v1/workstreams/${encodeURIComponent(slug)}/resources?${q.toString()}`);
+  }
   // --- experiments ---
   listExperiments(params) {
     const q = new URLSearchParams();
@@ -1083,9 +1093,21 @@ var ErdoClient = class {
     const qs = schemaName ? `?schema_name=${encodeURIComponent(schemaName)}` : "";
     return this.request("GET", `/v1/integrations/${encodeURIComponent(integration)}/tables${qs}`);
   }
+  // `provided_by_organization_slug` marks a connection your manager
+  // organization lends to you rather than one this org connected. It is usable
+  // exactly like your own for as long as the management link lives, and is not
+  // yours to rotate or disconnect.
   listIntegrations() {
     return this.request("GET", "/v1/integrations");
   }
+  // Start or stop lending a connection to the organizations this one manages.
+  // `managed_organizations` names the orgs it now serves — empty when this org
+  // manages nobody yet, which is a truthful answer rather than a failure.
+  setIntegrationManagedAccess(integrationId, managedAccess) {
+    return this.request("POST", `/v1/integrations/${encodeURIComponent(integrationId)}/managed-access`, {
+      managed_access: managedAccess
+    });
+  }
   // For a Pipedream-backed integration this is the full disconnect: the
   // credential is released at the provider and the connection removed, not just
   // the integration row deleted.
@@ -2440,6 +2462,22 @@ wsCmd.command("attach <slug>").description("Link a resource (page, dataset, hear
     }
   }
 );
+wsCmd.command("detach <slug>").description("Unlink a resource from a workstream (the reverse of attach)").requiredOption("--type <resourceType>", "resource type (page, dataset, heartbeat, experiment_run, \u2026)").requiredOption("--id <resourceId>", "the resource's UUID").option(
+  "--rel <relationshipType>",
+  "which link to remove: output | input | evidence | monitoring | subject | parent | child | running. Omit to remove every link to this resource"
+).action(async (slug, opts) => {
+  try {
+    print(
+      await new ErdoClient().detachWorkstreamResource(slug, {
+        resource_type: opts.type,
+        resource_id: opts.id,
+        relationship_type: opts.rel
+      })
+    );
+  } catch (e) {
+    fail(e);
+  }
+});
 var VARIANT_SPEC_KEYS = /* @__PURE__ */ new Set([
   "key",
   "label",
@@ -5270,7 +5308,10 @@ var integrationsCmd = program.command("integrations").description("Connect and i
 integrationsCmd.command("list").description("List connected integrations").action(async () => {
   try {
     const { integrations } = await new ErdoClient().listIntegrations();
-    for (const i of integrations) console.log(`${i.app}	${i.status}	${i.auth_type}	${i.name}`);
+    for (const i of integrations) {
+      const provided = i.provided_by_organization_slug ? `	provided by ${i.provided_by_organization_slug}` : "";
+      console.log(`${i.app}	${i.status}	${i.auth_type}	${i.name}${provided}`);
+    }
   } catch (e) {
     fail(e);
   }
@@ -5283,7 +5324,10 @@ integrationsCmd.command("apps [query]").description("Search connectable apps (na
     fail(e);
   }
 });
-integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass its API key or other credentials with -c, or omit them to get a browser connect URL for OAuth apps").option("-c, --credential <key=value...>", "credential field, e.g. -c api_key=\u2026 (repeatable); rejected by OAuth apps, which have no credential to pass", (v, acc) => acc.concat(v), []).option("-n, --name <name>", "display name for the connection").option("--rotate", "replace the credentials of the app's existing connection instead of adding a second one \u2014 for a key that was rotated at the provider; requires -c").option("--share", "share the connection with the whole organization instead of keeping it private to you \u2014 for org-level credentials teammates and agents should see").action(async (app, opts) => {
+integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass its API key or other credentials with -c, or omit them to get a browser connect URL for OAuth apps").option("-c, --credential <key=value...>", "credential field, e.g. -c api_key=\u2026 (repeatable); rejected by OAuth apps, which have no credential to pass", (v, acc) => acc.concat(v), []).option("-n, --name <name>", "display name for the connection").option("--rotate", "replace the credentials of the app's existing connection instead of adding a second one \u2014 for a key that was rotated at the provider; requires -c").option("--share", "share the connection with the whole organization instead of keeping it private to you \u2014 for org-level credentials teammates and agents should see").option(
+  "--provide-to-managed",
+  "let the organizations you manage use this connection as if it were their own \u2014 for a vendor key your agency pays for. Key-authenticated native integrations only, connected in a manager organization"
+).action(async (app, opts) => {
   try {
     let credentials;
     if (opts.credential.length) {
@@ -5299,7 +5343,8 @@ integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass
       name: opts.name,
       credentials,
       rotate_credentials: opts.rotate || void 0,
-      share_with_org: opts.share || void 0
+      share_with_org: opts.share || void 0,
+      managed_access: opts.provideToManaged ? "managed_organizations" : void 0
     });
     print(res);
     const notes = [];
@@ -5314,6 +5359,27 @@ ${notes.join("\n")}`);
     fail(e);
   }
 });
+integrationsCmd.command("managed-access <integration-id> <owner_only|managed_organizations>").description(
+  "Start or stop providing a connection to the organizations you manage \u2014 a vendor key your agency pays for, spendable by every client for as long as you manage it. Key-authenticated connections only"
+).action(async (integrationId, managedAccess) => {
+  try {
+    const res = await new ErdoClient().setIntegrationManagedAccess(integrationId, managedAccess);
+    print(res);
+    if (res.managed_access !== "managed_organizations") return;
+    const orgs = res.managed_organizations ?? [];
+    if (!orgs.length) {
+      console.error(
+        "\nNo organizations are managed by this one yet, so nothing uses it today \u2014 a client you link later picks it up with nothing further to do here."
+      );
+      return;
+    }
+    console.error(`
+Provided to ${orgs.length} organization${orgs.length === 1 ? "" : "s"}:`);
+    for (const o of orgs) console.error(`  ${o.slug}	${o.name}`);
+  } catch (e) {
+    fail(e);
+  }
+});
 integrationsCmd.command("disconnect <app>").description("Disconnect an app \u2014 releases the stored credential and removes the connection; org admins can disconnect any of the org's connections").action(async (app) => {
   try {
     const client = new ErdoClient();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.78.0",
+  "version": "0.80.0",
   "description": "Erdo CLI \u2014 drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {