@erdoai/cli 0.79.0 → 0.80.0

package/dist/index.js

@@ -1093,9 +1093,21 @@ var ErdoClient = class {
     const qs = schemaName ? `?schema_name=${encodeURIComponent(schemaName)}` : "";
     return this.request("GET", `/v1/integrations/${encodeURIComponent(integration)}/tables${qs}`);
   }
+  // `provided_by_organization_slug` marks a connection your manager
+  // organization lends to you rather than one this org connected. It is usable
+  // exactly like your own for as long as the management link lives, and is not
+  // yours to rotate or disconnect.
   listIntegrations() {
     return this.request("GET", "/v1/integrations");
   }
+  // Start or stop lending a connection to the organizations this one manages.
+  // `managed_organizations` names the orgs it now serves — empty when this org
+  // manages nobody yet, which is a truthful answer rather than a failure.
+  setIntegrationManagedAccess(integrationId, managedAccess) {
+    return this.request("POST", `/v1/integrations/${encodeURIComponent(integrationId)}/managed-access`, {
+      managed_access: managedAccess
+    });
+  }
   // For a Pipedream-backed integration this is the full disconnect: the
   // credential is released at the provider and the connection removed, not just
   // the integration row deleted.
@@ -5296,7 +5308,10 @@ var integrationsCmd = program.command("integrations").description("Connect and i
 integrationsCmd.command("list").description("List connected integrations").action(async () => {
   try {
     const { integrations } = await new ErdoClient().listIntegrations();
-    for (const i of integrations) console.log(`${i.app}	${i.status}	${i.auth_type}	${i.name}`);
+    for (const i of integrations) {
+      const provided = i.provided_by_organization_slug ? `	provided by ${i.provided_by_organization_slug}` : "";
+      console.log(`${i.app}	${i.status}	${i.auth_type}	${i.name}${provided}`);
+    }
   } catch (e) {
     fail(e);
   }
@@ -5309,7 +5324,10 @@ integrationsCmd.command("apps [query]").description("Search connectable apps (na
     fail(e);
   }
 });
-integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass its API key or other credentials with -c, or omit them to get a browser connect URL for OAuth apps").option("-c, --credential <key=value...>", "credential field, e.g. -c api_key=\u2026 (repeatable); rejected by OAuth apps, which have no credential to pass", (v, acc) => acc.concat(v), []).option("-n, --name <name>", "display name for the connection").option("--rotate", "replace the credentials of the app's existing connection instead of adding a second one \u2014 for a key that was rotated at the provider; requires -c").option("--share", "share the connection with the whole organization instead of keeping it private to you \u2014 for org-level credentials teammates and agents should see").action(async (app, opts) => {
+integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass its API key or other credentials with -c, or omit them to get a browser connect URL for OAuth apps").option("-c, --credential <key=value...>", "credential field, e.g. -c api_key=\u2026 (repeatable); rejected by OAuth apps, which have no credential to pass", (v, acc) => acc.concat(v), []).option("-n, --name <name>", "display name for the connection").option("--rotate", "replace the credentials of the app's existing connection instead of adding a second one \u2014 for a key that was rotated at the provider; requires -c").option("--share", "share the connection with the whole organization instead of keeping it private to you \u2014 for org-level credentials teammates and agents should see").option(
+  "--provide-to-managed",
+  "let the organizations you manage use this connection as if it were their own \u2014 for a vendor key your agency pays for. Key-authenticated native integrations only, connected in a manager organization"
+).action(async (app, opts) => {
   try {
     let credentials;
     if (opts.credential.length) {
@@ -5325,7 +5343,8 @@ integrationsCmd.command("connect <app>").description("Connect an app \u2014 pass
       name: opts.name,
       credentials,
       rotate_credentials: opts.rotate || void 0,
-      share_with_org: opts.share || void 0
+      share_with_org: opts.share || void 0,
+      managed_access: opts.provideToManaged ? "managed_organizations" : void 0
     });
     print(res);
     const notes = [];
@@ -5340,6 +5359,27 @@ ${notes.join("\n")}`);
     fail(e);
   }
 });
+integrationsCmd.command("managed-access <integration-id> <owner_only|managed_organizations>").description(
+  "Start or stop providing a connection to the organizations you manage \u2014 a vendor key your agency pays for, spendable by every client for as long as you manage it. Key-authenticated connections only"
+).action(async (integrationId, managedAccess) => {
+  try {
+    const res = await new ErdoClient().setIntegrationManagedAccess(integrationId, managedAccess);
+    print(res);
+    if (res.managed_access !== "managed_organizations") return;
+    const orgs = res.managed_organizations ?? [];
+    if (!orgs.length) {
+      console.error(
+        "\nNo organizations are managed by this one yet, so nothing uses it today \u2014 a client you link later picks it up with nothing further to do here."
+      );
+      return;
+    }
+    console.error(`
+Provided to ${orgs.length} organization${orgs.length === 1 ? "" : "s"}:`);
+    for (const o of orgs) console.error(`  ${o.slug}	${o.name}`);
+  } catch (e) {
+    fail(e);
+  }
+});
 integrationsCmd.command("disconnect <app>").description("Disconnect an app \u2014 releases the stored credential and removes the connection; org admins can disconnect any of the org's connections").action(async (app) => {
   try {
     const client = new ErdoClient();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@erdoai/cli",
-  "version": "0.79.0",
+  "version": "0.80.0",
   "description": "Erdo CLI \u2014 drive datasets, pages, and evals from the terminal or CI",
   "type": "module",
   "bin": {