@ghostystudio/cli 0.10.0 → 0.10.2

package/README.md

@@ -31,7 +31,7 @@ ghosty agents set <id> --voice elevenlabs:ID --voice-replies auto --auto-stage o
 ghosty files ls|get|put|rm <id> [path]   [--file LOCAL] [--out LOCAL]
 ghosty skills ls|get|add|rm <id> [slug]  [--file SKILL.md | --dir FOLDER] [--out DIR]   # get without --out only lists
 ghosty skills templates <id>             # pdf-doc templates: its own and Ghosty's, and which folder wins
-ghosty dbs ls|tables|query|import|grant|revoke <id> [db]   [--write] [--arg V]… [--external-write t1,t2] [--from easybits:ID --tables a,b --append --dry-run]
+ghosty dbs ls|tables|query|import|grant|revoke <id> [db]   [--write] [--arg V]… [--external-write t1,t2] [--external-rows t:col+col] [--from easybits:ID --tables a,b --append --dry-run]
 ghosty turns ls <id>                     [--errors | --status running|done|stopped|error] [--since 1h] [--limit N]
 ghosty turns show <id> [turn-id|last]    # where a turn's time went: each tool with its seconds, output tokens
 ghosty channels whatsapp ls|enable|disable <id> [number]   [--dry-run]

package/dist/index.js

@@ -282,7 +282,7 @@ async function postLong(path, body, timeoutMs = 9e5) {
     const req = httpsRequest(`${base}${path}`, {
       method: "POST",
       timeout: timeoutMs,
-      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.10.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
+      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.10.2"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
     }, (res) => {
       let buf = "";
       res.on("data", (c) => buf += c);
@@ -324,7 +324,7 @@ async function request(path, opts = {}, retried = false) {
     method: opts.method ?? (opts.body !== void 0 || opts.raw !== void 0 ? "POST" : "GET"),
     headers: {
       authorization: `Bearer ${token}`,
-      "user-agent": `ghosty-cli/${"0.10.0"}`,
+      "user-agent": `ghosty-cli/${"0.10.2"}`,
       ...opts.body !== void 0 ? { "content-type": "application/json" } : {},
       ...opts.headers
     },
@@ -712,9 +712,9 @@ ${dim(`Download: ghosty skills get ${id} ${slug} --out DIR`)}`);
     }
     case "templates": {
       const r = await api(agentPath(id, "/templates"));
-      const rows = r.templates.map((t) => ({ name: t.name, source: t.source, used: t.active ? "yes" : "no (shadowed)", description: (t.description ?? "").replace(/\s+/g, " ").slice(0, 60) }));
-      out(r, () => `${table(rows, ["name", "source", "used", "description"])}
-${dim(`pdf-doc reads from: ${r.active ?? "(not found)"}`)}`);
+      const rows = r.templates.map((t) => ({ name: t.name, source: t.source, description: (t.description ?? "").replace(/\s+/g, " ").slice(0, 60) }));
+      out(r, () => `${table(rows, ["name", "source", "description"])}
+${dim("Its own: put <name>.html in <skill>/pdf-templates/ of any of its skills (it wins over a house one with the same name).")}`);
       return;
     }
     case "rm":
@@ -782,7 +782,7 @@ async function agentsDemo(id, v) {
   );
 }
 async function agentsBox(id, v) {
-  id = need(id, "agent id", "ghosty agents box <agent-id> [--check /opt/claude-worker/skills/pdf-doc/templates/calendario.html] [--recycle]");
+  id = need(id, "agent id", "ghosty agents box <agent-id> [--check PATH] [--contains PATH=TEXT] [--recycle]");
   if (v.recycle) {
     const r2 = await api(agentPath(id, "/box"), { method: "POST", body: { recycle: true } });
     out(r2, () => `${lavender("\u2713")} Recycled. ${dim(r2?.note ?? "")}
@@ -1125,7 +1125,7 @@ async function call(path, v, init = {}) {
         "x-ghosty-ts": ts,
         "x-ghosty-sig": sig,
         "content-type": "application/json",
-        "user-agent": `ghosty-cli/${"0.10.0"}`
+        "user-agent": `ghosty-cli/${"0.10.2"}`
       },
       body: method === "GET" ? void 0 : raw
     });
@@ -1290,6 +1290,24 @@ async function partnerCmd(sub, a1, a2, v) {
   }
 }
 
+// src/rows.ts
+var IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;
+function parseRowScope(raw) {
+  const s = raw.trim();
+  if (!s) return null;
+  const out2 = {};
+  for (const part of s.split(",").map((x) => x.trim()).filter(Boolean)) {
+    const [table2, cols = ""] = part.split(":").map((x) => x.trim());
+    const list = cols.split("+").map((x) => x.trim()).filter(Boolean);
+    if (!IDENT.test(table2 ?? "") || !list.length || !list.every((c) => IDENT.test(c))) {
+      throw new Error(`\xAB${part}\xBB no es tabla:columna(+columna); ej. clientes:telefono+tel_secundario`);
+    }
+    out2[table2] = list;
+  }
+  return out2;
+}
+var describeRowScope = (scope) => Object.entries(scope ?? {}).map(([t, c]) => `${t} (${c.join(", ")})`).join("; ");
+
 // src/commands/data.ts
 var enc6 = encodeURIComponent;
 var agentPath2 = (id, rest = "") => `/api/v2/agents/${enc6(id)}${rest}`;
@@ -1327,16 +1345,17 @@ async function dbsCmd(sub, id, db, rest, v) {
     case "ls":
     case "list": {
       const r = await api(agentPath2(id, "/dbs"));
-      const rows = r.dbs.map((d) => ({ name: d.name, access: d.granted ? "granted" : "\u2014", "writes from customers": d.granted ? d.externalWriteTables.join(", ") || "(none)" : "", id: d.id }));
-      return out(r.dbs, () => rows.length ? table(rows, ["name", "access", "writes from customers", "id"]) : dim("This account has no databases yet: create one at /app/dbs."));
+      const rows = r.dbs.map((d) => ({ name: d.name, access: d.granted ? "granted" : "\u2014", "writes from customers": d.granted ? d.externalWriteTables.join(", ") || "(none)" : "", "own rows": d.granted ? Object.keys(d.externalRowScope ?? {}).join(", ") : "", id: d.id }));
+      return out(r.dbs, () => rows.length ? table(rows, ["name", "access", "writes from customers", "own rows", "id"]) : dim("This account has no databases yet: create one at /app/dbs."));
     }
     case "tables": {
       db = need2(db, "database (id or name)", "ghosty dbs tables <agent-id> <db>");
       const r = await api(agentPath2(id, `/dbs/${enc6(db)}`));
       const ext = new Set(r.externalWriteTables);
-      const rows = r.tables.map((t) => ({ table: t.name, rows: t.rows, "customer writes": ext.has(t.name) ? "yes" : "", columns: t.columns.map((c) => `${c.name}${c.pk ? "*" : ""}`).join(", ") }));
+      const own = r.externalRowScope ?? {};
+      const rows = r.tables.map((t) => ({ table: t.name, rows: t.rows, "customer writes": ext.has(t.name) ? "yes" : "", "customer sees": own[t.name] ? `own rows (${own[t.name].join(", ")})` : "", columns: t.columns.map((c) => `${c.name}${c.pk ? "*" : ""}`).join(", ") }));
       return out(r, () => `${bold(r.name)} ${r.granted ? lavender("granted") : dim("not granted")}
-${table(rows, ["table", "rows", "customer writes", "columns"])}`);
+${table(rows, ["table", "rows", "customer writes", "customer sees", "columns"])}`);
     }
     case "query":
     case "sql": {
@@ -1354,10 +1373,20 @@ ${dim(`${rows.length} row(s) \xB7 ${Math.round(r.ms)} ms`)}`;
       });
     }
     case "grant": {
-      db = need2(db, "database (id or name)", "ghosty dbs grant <agent-id> <db> [--external-write t1,t2]");
-      const body = v["external-write"] !== void 0 ? { externalWriteTables: csv(v["external-write"]) } : {};
+      db = need2(db, "database (id or name)", "ghosty dbs grant <agent-id> <db> [--external-write t1,t2] [--external-rows t:col+col]");
+      let rowScope;
+      try {
+        rowScope = v["external-rows"] !== void 0 ? parseRowScope(v["external-rows"]) : void 0;
+      } catch (e) {
+        throw usage(e.message, `ghosty dbs grant ${id} ${db} --external-rows clientes:telefono+tel_secundario`);
+      }
+      const body = {
+        ...v["external-write"] !== void 0 ? { externalWriteTables: csv(v["external-write"]) } : {},
+        ...rowScope !== void 0 ? { externalRowScope: rowScope } : {}
+      };
       const r = await api(agentPath2(id, `/dbs/${enc6(db)}`), { method: "PUT", body });
-      return out(r, () => `${lavender("\u2713")} ${r.name} granted. ${dim(`From customer channels it writes to: ${r.externalWriteTables.join(", ") || "nothing (read only)"}.`)}`);
+      const own = describeRowScope(r.externalRowScope);
+      return out(r, () => `${lavender("\u2713")} ${r.name} granted. ${dim(`From customer channels it writes to: ${r.externalWriteTables.join(", ") || "nothing (read only)"}.${own ? ` Each customer sees only their own rows of: ${own}.` : ""}`)}`);
     }
     case "import": {
       db = need2(db, "database (id or name)", "ghosty dbs import <agent-id> <db> --from easybits:<db-id>");
@@ -1636,7 +1665,7 @@ var HELPS = {
       'ghosty agents docs grant <id> "Cat\xE1logo 2026.pdf"',
       "ghosty agents docs grant <id> precios.xlsx --write --no-deliver",
       'ghosty agents demo <id> --slug guardias --on --vence "2026-10-15T20:00" --starter "Ens\xE9\xF1ame c\xF3mo empezar"',
-      "ghosty agents box <id> --check /opt/claude-worker/skills/pdf-doc/templates/calendario.html"
+      "ghosty agents box <id> --contains /opt/claude-worker/skills/pdf-doc/render-doc.mjs=pdf-templates"
     ],
     notes: ["doctor exits 1 when it finds a problem, so it can gate a script or CI.", "demo with no flags only prints its status: link, expiry, caps and numbers."],
     learn: `${REF}#agentes`
@@ -1664,7 +1693,7 @@ var HELPS = {
     ],
     notes: [
       "rm saves a copy under ~/.config/ghosty/trash/ and prints the command that restores it.",
-      "templates reads a live machine (run one turn first). pdf-doc uses the FIRST folder with print.css: a full skill of your own shadows Ghosty's templates."
+      "templates reads a live machine (run one turn first). An agent's own template is <skill>/pdf-templates/<name>.html in any of its skills; it wins over a house one with the same name."
     ],
     learn: `${REF}#skills`
   },
@@ -1675,13 +1704,14 @@ var HELPS = {
       "ghosty dbs tables <agent-id> <db>",
       'ghosty dbs query <agent-id> <db> "SQL" [--arg V]\u2026 [--write]',
       "ghosty dbs import <agent-id> <db> --from easybits:<db-id> [--tables a,b] [--append] [--dry-run] [--yes]",
-      "ghosty dbs grant <agent-id> <db> [--external-write t1,t2]",
+      "ghosty dbs grant <agent-id> <db> [--external-write t1,t2] [--external-rows t:col+col,\u2026]",
       "ghosty dbs revoke <agent-id> <db>"
     ],
     flags: [
       ["--arg V", "query: value for a ? placeholder (repeatable)"],
       ["--write", "query: allow INSERT/UPDATE/DELETE/DDL (default: read only)"],
       ["--external-write t1,t2", 'grant: tables it may write from WhatsApp/Messenger ("" = none)'],
+      ["--external-rows t:col+col", 'grant: from WhatsApp/Messenger each customer sees only THEIR rows of t, matched by phone column(s) ("" = no filter)'],
       ["--from easybits:ID", "import: source database in EasyBits (key from $EASYBITS_API_KEY)"],
       ["--tables a,b", "import: only these tables (default: all)"],
       ["--append", "import: add rows instead of replacing them (replace is the idempotent default)"],
@@ -1692,6 +1722,7 @@ var HELPS = {
       "ghosty dbs tables <id> totequim",
       'ghosty dbs query <id> totequim "SELECT count(*) AS n FROM productos"',
       "ghosty dbs grant <id> totequim --external-write cotizaciones,folio",
+      "ghosty dbs grant <id> totequim --external-rows clientes:telefono+tel_secundario,cotizaciones:cliente_tel",
       "ghosty dbs import <id> totequim --from easybits:6a10c84c\u2026 --dry-run   # reads $EASYBITS_API_KEY"
     ],
     notes: ["<db> is the database id or its name. From owner channels the agent reads and writes everything granted."],
@@ -1899,7 +1930,7 @@ ${bold("Configure an agent")}
   files ls|get|put|rm <id> [path]    Files in the agent's machine   [--file LOCAL] [--out LOCAL]
   skills ls|get|add|rm <id> [slug]   Skills (add from catalog, --file SKILL.md or --dir FOLDER; get lists, --out DIR saves; rm keeps a copy)
   skills templates <id>              pdf-doc templates it sees: its own and Ghosty's, and which folder wins
-  dbs ls|tables|query|import|grant|revoke <id> [db]   Databases it uses   [--write] [--external-write t1,t2] [--from easybits:ID --dry-run]
+  dbs ls|tables|query|import|grant|revoke <id> [db]   Databases it uses   [--write] [--external-write t1,t2] [--external-rows t:col] [--from easybits:ID --dry-run]
   mcp get|set <id>                   MCP servers                    [--file servers.json]
   channels whatsapp ls|enable|disable <id> [number]   Which WhatsApp Business numbers it answers   [--dry-run]
   board archive <id>        Archive cards in bulk (reversible)   --integration X | --column X | --before 30d   [--dry-run]
@@ -2008,6 +2039,7 @@ async function main() {
       arg: { type: "string", multiple: true },
       write: { type: "boolean" },
       "external-write": { type: "string" },
+      "external-rows": { type: "string" },
       "no-deliver": { type: "boolean" },
       deliver: { type: "boolean" },
       errors: { type: "boolean" },
@@ -2035,7 +2067,7 @@ async function main() {
   const tokens = splitTokens(pos, v);
   globals.token = tokens.session;
   globals.profile = v.profile;
-  if (v.version) return out({ version: "0.10.0" }, () => "0.10.0");
+  if (v.version) return out({ version: "0.10.2" }, () => "0.10.2");
   const [cmd, sub, a1, a2] = pos;
   if (cmd === "partner" && (v.help || !sub || sub === "help")) return out({ help: PARTNER_HELP }, () => PARTNER_HELP);
   const topic = cmd === "help" ? sub : v.help ? cmd : void 0;
@@ -2118,7 +2150,7 @@ async function main() {
       throw unknown(cmd, cmd, COMMANDS, "ghosty --help");
   }
 }
-var notice = updateNotice("0.10.0").catch(() => null);
+var notice = updateNotice("0.10.2").catch(() => null);
 main().then(
   async () => {
     const n = await notice;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghostystudio/cli",
-  "version": "0.10.0",
+  "version": "0.10.2",
   "description": "Official Ghosty Studio CLI — configure, test and chat with your agents from the terminal. Built for humans and coding agents.",
   "type": "module",
   "bin": {
@@ -16,7 +16,7 @@
   "scripts": {
     "build": "esbuild src/index.ts --bundle --platform=node --format=esm --target=node22 --outfile=dist/index.js --banner:js='#!/usr/bin/env node' --define:__VERSION__=\\\"$npm_package_version\\\"",
     "prepack": "npm run build",
-    "test": "for t in flags prompt api; do esbuild src/$t.test.ts --bundle --platform=node --format=esm --outfile=/tmp/ghosty-cli-$t.test.mjs --log-level=error || exit 1; done && node --test /tmp/ghosty-cli-*.test.mjs"
+    "test": "for t in flags prompt api rows; do esbuild src/$t.test.ts --bundle --platform=node --format=esm --outfile=/tmp/ghosty-cli-$t.test.mjs --log-level=error || exit 1; done && node --test /tmp/ghosty-cli-*.test.mjs"
   },
   "keywords": [
     "ghosty",