@graphit/cli 0.2.113 → 0.2.136

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "Graphit CLI plugin for AI coding assistants",
-    "version": "0.2.113"
+    "version": "0.2.136"
   },
   "plugins": [
     {
@@ -16,9 +16,9 @@
       "source": {
         "source": "npm",
         "package": "@graphit/cli",
-        "version": "0.2.113"
+        "version": "0.2.136"
       },
-      "version": "0.2.113",
+      "version": "0.2.136",
       "category": "data-visualization",
       "tags": [
         "bi",

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "graphit",
-  "version": "0.2.113",
+  "version": "0.2.136",
   "description": "Build custom HTML dashboards from real data using the Graphit CLI. KB-aware queries, entity wrapping, cached data sources.",
   "author": {
     "name": "Graphit",

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "graphit",
-  "version": "0.2.113",
+  "version": "0.2.136",
   "description": "Build custom HTML dashboards from real data using the Graphit CLI. KB-aware queries, entity wrapping, cached data sources.",
   "author": {
     "name": "Graphit",

package/README.md

@@ -51,6 +51,8 @@ graphit setup
 
 Either path installs the Graphit skill so the assistant can drive the CLI on your behalf.
 
+> **Start a new session after installing the plugin.** Claude Code (and Codex) load plugin skills and commands at session start, so the Graphit skill, `/graphit`, and the `graphit` commands are not available in the session you installed from. Open a new session first - otherwise the assistant will not have the skill loaded and will improvise instead of following the guided workflow.
+
 ## Authenticate
 
 ```bash

package/bin/graphit

@@ -14,7 +14,7 @@ if [ -z "${GRAPHIT_PLUGIN_ROOT:-}" ]; then
 fi
 
 # graphit:floor (stamped by scripts/sync-plugin-version.mjs from cli/package.json)
-FLOOR_VERSION="0.2.113"
+FLOOR_VERSION="0.2.136"
 
 PACKAGE_NAME="@graphit/cli"
 # Strict semver: anything else is rejected so a tampered cache cannot inject.

package/bin/graphit.ps1

@@ -7,7 +7,7 @@ if (-not $env:GRAPHIT_PLUGIN_ROOT) {
 }
 
 # graphit:floor (stamped by scripts/sync-plugin-version.mjs from cli/package.json)
-$FloorVersion = "0.2.113"
+$FloorVersion = "0.2.136"
 
 $PackageName = "@graphit/cli"
 # Strict semver: anything else is rejected so a tampered cache cannot inject.

package/dist/commands/connector.js

@@ -1,18 +1,48 @@
 import { readFile, stat } from "node:fs/promises";
 import { apiClient } from "../api/client.js";
 import { output, errorOutput } from "../output/format.js";
+// Mirrors the backend SA-key required fields; the client-side check gives fast
+// feedback (bad path / not JSON / wrong key file) before the network call. The
+// backend re-validates authoritatively.
+const SA_KEY_REQUIRED_FIELDS = [
+    "type", "project_id", "private_key_id", "private_key",
+    "client_email", "client_id", "auth_uri", "token_uri",
+];
+function parseServiceAccountKey(raw) {
+    let key;
+    try {
+        key = JSON.parse(raw);
+    }
+    catch {
+        throw new Error("Invalid JSON in key file. Pass the full service-account key file with --key-file.");
+    }
+    if (typeof key !== "object" || key === null || Array.isArray(key)) {
+        throw new Error("Service-account key must be a JSON object.");
+    }
+    if (key.type !== "service_account") {
+        throw new Error(`Expected key type 'service_account', got '${key.type ?? "(missing)"}'.`);
+    }
+    const missing = SA_KEY_REQUIRED_FIELDS.filter((f) => !(f in key));
+    if (missing.length > 0) {
+        throw new Error(`Service-account key is missing required fields: ${missing.sort().join(", ")}`);
+    }
+    return key;
+}
 export function registerConnectorCommands(program) {
     const connector = program
         .command("connector")
         .description("Connection management. OAuth and GitHub connections are set up in the Graphit web app.");
     connector
         .command("list")
-        .description("List active connections")
+        .description("List active connections (Snowflake + BigQuery)")
         .action(async function () {
         try {
             const resp = await apiClient.get("/api/v1/cli/connectors");
+            // Warehouse-agnostic columns: `type` distinguishes the warehouse;
+            // per-type fields (account/warehouse vs project/dataset) fill in where
+            // present and render blank where not applicable.
             output(this, resp.connectors, {
-                columns: ["id", "name", "account", "auth_type"],
+                columns: ["id", "name", "type", "account", "warehouse", "project", "dataset"],
             });
         }
         catch (err) {
@@ -56,6 +86,40 @@ export function registerConnectorCommands(program) {
             errorOutput(err);
         }
     });
+    add
+        .command("bigquery-serviceaccount")
+        .description("Add BigQuery via a service-account key (org admin only)")
+        .requiredOption("--key-file <path>", "Path to the service-account key JSON file")
+        .option("--project <id>", "GCP project for billing/queries (defaults to the key's project_id)")
+        .option("--dataset <name>", "Default BigQuery dataset")
+        .option("--location <loc>", "BigQuery location, e.g. US or EU (must match the dataset region)")
+        .option("--name <name>", "Connection name (defaults to the project id)")
+        .option("--max-bytes-billed <n>", "Per-query scan cap in bytes (default 10 GiB)")
+        .action(async function () {
+        try {
+            const opts = this.opts();
+            const keyStats = await stat(opts.keyFile);
+            const mode = keyStats.mode & 0o777;
+            if (mode > 0o600) {
+                console.error(`Warning: Key file has loose permissions (${mode.toString(8)}). Consider chmod 600.`);
+            }
+            const raw = await readFile(opts.keyFile, "utf-8");
+            const key = parseServiceAccountKey(raw);
+            const projectId = opts.project || key.project_id;
+            const resp = await apiClient.post("/api/v1/cli/connectors/bigquery-serviceaccount", {
+                name: opts.name || projectId,
+                sa_key_json: raw,
+                project_id: projectId || null,
+                dataset: opts.dataset || null,
+                location: opts.location || null,
+                max_bytes_billed: opts.maxBytesBilled ? Number(opts.maxBytesBilled) : null,
+            });
+            output(this, resp, { keyValue: true });
+        }
+        catch (err) {
+            errorOutput(err);
+        }
+    });
     connector
         .command("test <id>")
         .description("Test a connection")

package/dist/commands/connector.js.map

@@ -1 +1 @@
-{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../src/commands/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,SAAS,GAAG,OAAO;SACtB,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,wFAAwF,CAAC,CAAC;IAEzG,SAAS;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,KAAK;QACX,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,wBAAwB,CACzB,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE;gBAC5B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,GAAG,GAAG,SAAS;SAClB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,2FAA2F,CAAC,CAAC;IAE5G,GAAG;SACA,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,gCAAgC,CAAC;SAC7C,cAAc,CAAC,qBAAqB,EAAE,8BAA8B,CAAC;SACrE,cAAc,CAAC,eAAe,EAAE,oBAAoB,CAAC;SACrD,cAAc,CAAC,cAAc,EAAE,gCAAgC,CAAC;SAChE,MAAM,CAAC,eAAe,EAAE,uDAAuD,CAAC;SAChF,cAAc,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;SACvD,cAAc,CAAC,eAAe,EAAE,cAAc,CAAC;SAC/C,cAAc,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;SACrD,MAAM,CAAC,KAAK;QACX,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAEzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC;YACnC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,4CAA4C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;YACtG,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,0CAA0C,EAC1C;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,eAAe,EAAE,MAAM;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;aAChC,CACF,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,mBAAmB,CAAC;SAChC,MAAM,CAAC,KAAK,WAA0B,EAAU;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,0BAA0B,EAAE,OAAO,EACnC,EAAE,CACH,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,sCAAsC,CAAC;SACnD,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC;SAC1C,MAAM,CAAC,KAAK,WAA0B,EAAU;QAC/C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../src/commands/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAS1D,+EAA+E;AAC/E,+EAA+E;AAC/E,wCAAwC;AACxC,MAAM,sBAAsB,GAAG;IAC7B,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,aAAa;IACrD,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW;CACrD,CAAC;AAEF,SAAS,sBAAsB,CAAC,GAAW;IACzC,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,CAAC,IAAI,IAAI,WAAW,IAAI,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,mDAAmD,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,SAAS,GAAG,OAAO;SACtB,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,wFAAwF,CAAC,CAAC;IAEzG,SAAS;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gDAAgD,CAAC;SAC7D,MAAM,CAAC,KAAK;QACX,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAC9B,wBAAwB,CACzB,CAAC;YACF,kEAAkE;YAClE,uEAAuE;YACvE,iDAAiD;YACjD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE;gBAC5B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM,GAAG,GAAG,SAAS;SAClB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,2FAA2F,CAAC,CAAC;IAE5G,GAAG;SACA,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,gCAAgC,CAAC;SAC7C,cAAc,CAAC,qBAAqB,EAAE,8BAA8B,CAAC;SACrE,cAAc,CAAC,eAAe,EAAE,oBAAoB,CAAC;SACrD,cAAc,CAAC,cAAc,EAAE,gCAAgC,CAAC;SAChE,MAAM,CAAC,eAAe,EAAE,uDAAuD,CAAC;SAChF,cAAc,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;SACvD,cAAc,CAAC,eAAe,EAAE,cAAc,CAAC;SAC/C,cAAc,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;SACrD,MAAM,CAAC,KAAK;QACX,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAEzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC;YACnC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,4CAA4C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;YACtG,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,0CAA0C,EAC1C;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,eAAe,EAAE,MAAM;gBACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;aAChC,CACF,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,GAAG;SACA,OAAO,CAAC,yBAAyB,CAAC;SAClC,WAAW,CAAC,yDAAyD,CAAC;SACtE,cAAc,CAAC,mBAAmB,EAAE,2CAA2C,CAAC;SAChF,MAAM,CAAC,gBAAgB,EAAE,oEAAoE,CAAC;SAC9F,MAAM,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;SACtD,MAAM,CAAC,kBAAkB,EAAE,kEAAkE,CAAC;SAC9F,MAAM,CAAC,eAAe,EAAE,8CAA8C,CAAC;SACvE,MAAM,CAAC,wBAAwB,EAAE,8CAA8C,CAAC;SAChF,MAAM,CAAC,KAAK;QACX,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAEzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC;YACnC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,4CAA4C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;YACtG,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;YAExC,MAAM,SAAS,GAAuB,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC;YAErE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,gDAAgD,EAChD;gBACE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;gBAC5B,WAAW,EAAE,GAAG;gBAChB,UAAU,EAAE,SAAS,IAAI,IAAI;gBAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;gBAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC/B,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI;aAC3E,CACF,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,mBAAmB,CAAC;SAChC,MAAM,CAAC,KAAK,WAA0B,EAAU;QAC/C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAC/B,0BAA0B,EAAE,OAAO,EACnC,EAAE,CACH,CAAC;YACF,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,SAAS;SACN,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,sCAAsC,CAAC;SACnD,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC;SAC1C,MAAM,CAAC,KAAK,WAA0B,EAAU;QAC/C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/ds-config.d.ts

@@ -0,0 +1,45 @@
+export type CreateMode = {
+    kind: "file";
+} | {
+    kind: "sql";
+} | {
+    kind: "error";
+    message: string;
+};
+/**
+ * Decide whether `ds create` runs in file-upload or SQL mode (Feature #645).
+ * Pure + exported so it is unit-testable without a backend.
+ */
+export declare function resolveCreateMode(opts: {
+    file?: unknown;
+    sql?: unknown;
+    name?: unknown;
+}): CreateMode;
+/**
+ * Parse one `--table-lookback` spec of the form `TABLE:COLUMN:DAYS`. Split from
+ * the RIGHT so schema-qualified table names (`DB.SCHEMA.TABLE`) pass through
+ * verbatim - column names can never contain `:` (server-validated identifiers).
+ * Pure + exported so it is unit-testable without a backend.
+ */
+export declare function parseTableLookback(spec: string): {
+    table: string;
+    column: string;
+    lookback_days: number;
+};
+/**
+ * Validate `ds refresh-config` flags and build the PATCH body. Pure + exported
+ * so it is unit-testable without a backend. Throws on invalid input; the action
+ * surfaces the message via errorOutput. Sets the COMPLETE incremental config -
+ * omitted fields fall back to server defaults (merge window 3, reconciliation
+ * off, table lookback windows cleared).
+ */
+export declare function buildRefreshConfigBody(opts: {
+    mode?: unknown;
+    watermarkColumn?: unknown;
+    watermarkType?: unknown;
+    mergeKey?: unknown;
+    lookback?: unknown;
+    mergeWindow?: unknown;
+    reconciliation?: unknown;
+    tableLookback?: unknown;
+}): Record<string, unknown>;

package/dist/commands/ds-config.js

@@ -0,0 +1,122 @@
+/**
+ * Decide whether `ds create` runs in file-upload or SQL mode (Feature #645).
+ * Pure + exported so it is unit-testable without a backend.
+ */
+export function resolveCreateMode(opts) {
+    if (opts.file) {
+        if (opts.sql) {
+            return { kind: "error", message: "Use either --file or --sql, not both." };
+        }
+        return { kind: "file" };
+    }
+    if (!opts.sql || !opts.name) {
+        return {
+            kind: "error",
+            message: "Provide --file <path> to upload a local Excel/CSV, or both --sql <query> and --name <name> for a SQL data source.",
+        };
+    }
+    return { kind: "sql" };
+}
+/**
+ * Parse one `--table-lookback` spec of the form `TABLE:COLUMN:DAYS`. Split from
+ * the RIGHT so schema-qualified table names (`DB.SCHEMA.TABLE`) pass through
+ * verbatim - column names can never contain `:` (server-validated identifiers).
+ * Pure + exported so it is unit-testable without a backend.
+ */
+export function parseTableLookback(spec) {
+    const last = spec.lastIndexOf(":");
+    const mid = last === -1 ? -1 : spec.lastIndexOf(":", last - 1);
+    const column = mid === -1 ? "" : spec.slice(mid + 1, last);
+    if (mid <= 0 || !column) {
+        throw new Error(`Invalid --table-lookback "${spec}". Use TABLE:COLUMN:DAYS (e.g. "ANALYTICS.PUBLIC.EVENTS:EVENT_DATE:30").`);
+    }
+    const days = Number(spec.slice(last + 1));
+    if (!Number.isInteger(days) || days < 1 || days > 3650) {
+        throw new Error(`Invalid days in --table-lookback "${spec}". Must be an integer between 1 and 3650.`);
+    }
+    return { table: spec.slice(0, mid), column, lookback_days: days };
+}
+// Mirrors the server's canonical table matching: last dotted segment, uppercased.
+function canonicalTableKey(table) {
+    return (table.split(".").pop() ?? table).toUpperCase();
+}
+/**
+ * Validate `ds refresh-config` flags and build the PATCH body. Pure + exported
+ * so it is unit-testable without a backend. Throws on invalid input; the action
+ * surfaces the message via errorOutput. Sets the COMPLETE incremental config -
+ * omitted fields fall back to server defaults (merge window 3, reconciliation
+ * off, table lookback windows cleared).
+ */
+export function buildRefreshConfigBody(opts) {
+    const mode = opts.mode;
+    if (!mode) {
+        throw new Error('--mode is required. Use "full" or "incremental".');
+    }
+    if (mode !== "full" && mode !== "incremental") {
+        throw new Error(`Invalid --mode "${mode}". Use "full" or "incremental".`);
+    }
+    // Mirror the backend 400 client-side so the user fixes it in one turn.
+    if (mode === "incremental" && (!opts.watermarkColumn || !opts.watermarkType)) {
+        throw new Error("Incremental mode requires --watermark-column and --watermark-type.");
+    }
+    const WM_TYPES = new Set(["timestamp", "date", "integer"]);
+    if (opts.watermarkType && !WM_TYPES.has(opts.watermarkType)) {
+        throw new Error(`Invalid --watermark-type "${opts.watermarkType}". Use timestamp, date, or integer.`);
+    }
+    const RECON = new Set(["daily", "weekly", "monthly", "off"]);
+    if (opts.reconciliation !== undefined && !RECON.has(opts.reconciliation)) {
+        throw new Error(`Invalid --reconciliation "${opts.reconciliation}". Use daily, weekly, monthly, or off.`);
+    }
+    // Clean break: the pre-rename --lookback flag set the merge window, while
+    // "lookback" now means the per-table read windows - silently honoring
+    // either meaning would be a trap. Hidden from help; always errors with the fix.
+    if (opts.lookback !== undefined) {
+        throw new Error("--lookback was renamed to --merge-window (it sets the merge window - how far back " +
+            "each run re-fetches and upserts). For per-table lookback windows use --table-lookback.");
+    }
+    const body = { refresh_mode: mode };
+    if (opts.watermarkColumn)
+        body.watermark_column = opts.watermarkColumn;
+    if (opts.watermarkType)
+        body.watermark_type = opts.watermarkType;
+    if (opts.mergeKey)
+        body.merge_key = opts.mergeKey;
+    if (opts.mergeWindow !== undefined) {
+        const n = parseInt(opts.mergeWindow, 10);
+        if (isNaN(n)) {
+            throw new Error(`Invalid --merge-window "${opts.mergeWindow}". Must be a number.`);
+        }
+        body.lookback_periods = n;
+    }
+    if (opts.reconciliation !== undefined) {
+        // "off" disables the reconciliation full-refresh backstop.
+        body.reconciliation_schedule = opts.reconciliation === "off" ? null : opts.reconciliation;
+    }
+    // Per-table lookback windows (repeatable TABLE:COLUMN:DAYS). The server
+    // clears windows SILENTLY in full mode and rejects integer watermarks -
+    // both are mirrored loudly here so the user fixes the call in one turn.
+    const specs = (opts.tableLookback ?? []);
+    if (specs.length > 0) {
+        if (mode !== "incremental") {
+            throw new Error("--table-lookback requires --mode incremental.");
+        }
+        if (opts.watermarkType === "integer") {
+            throw new Error("--table-lookback needs --watermark-type date or timestamp (lookback windows are day-based).");
+        }
+        if (specs.length > 20) {
+            throw new Error(`Too many --table-lookback windows (${specs.length}); max 20.`);
+        }
+        const windows = specs.map(parseTableLookback);
+        const seen = new Set();
+        for (const w of windows) {
+            const key = canonicalTableKey(w.table);
+            if (seen.has(key)) {
+                throw new Error(`Duplicate --table-lookback for table "${w.table}" (tables match on the last dotted segment, case-insensitive).`);
+            }
+            seen.add(key);
+        }
+        body.table_lookback_windows = windows;
+    }
+    return body;
+}
+//# sourceMappingURL=ds-config.js.map

package/dist/commands/ds-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ds-config.js","sourceRoot":"","sources":["../../src/commands/ds-config.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAIjC;IACC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QAC7E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EACL,mHAAmH;SACtH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAK7C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,0EAA0E,CAC5G,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,2CAA2C,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAStC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,IAA0B,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,iCAAiC,CAAC,CAAC;IAC5E,CAAC;IACD,uEAAuE;IACvE,IAAI,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAuB,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,CAAC,aAAa,qCAAqC,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7D,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAwB,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,CAAC,cAAc,wCAAwC,CACzF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,sEAAsE;IACtE,gFAAgF;IAChF,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,oFAAoF;YAClF,wFAAwF,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAA4B,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,IAAI,CAAC,eAAe;QAAE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC;IACvE,IAAI,IAAI,CAAC,aAAa;QAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC;IACjE,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;IAClD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAqB,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,WAAW,sBAAsB,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACtC,2DAA2D;QAC3D,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;IAC5F,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAa,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,MAAM,YAAY,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,yCAAyC,CAAC,CAAC,KAAK,gEAAgE,CACjH,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/commands/ds.d.ts

@@ -1,47 +1,2 @@
 import { Command } from "commander";
-export type CreateMode = {
-    kind: "file";
-} | {
-    kind: "sql";
-} | {
-    kind: "error";
-    message: string;
-};
-/**
- * Decide whether `ds create` runs in file-upload or SQL mode (Feature #645).
- * Pure + exported so it is unit-testable without a backend.
- */
-export declare function resolveCreateMode(opts: {
-    file?: unknown;
-    sql?: unknown;
-    name?: unknown;
-}): CreateMode;
-/**
- * Parse one `--table-lookback` spec of the form `TABLE:COLUMN:DAYS`. Split from
- * the RIGHT so schema-qualified table names (`DB.SCHEMA.TABLE`) pass through
- * verbatim - column names can never contain `:` (server-validated identifiers).
- * Pure + exported so it is unit-testable without a backend.
- */
-export declare function parseTableLookback(spec: string): {
-    table: string;
-    column: string;
-    lookback_days: number;
-};
-/**
- * Validate `ds refresh-config` flags and build the PATCH body. Pure + exported
- * so it is unit-testable without a backend. Throws on invalid input; the action
- * surfaces the message via errorOutput. Sets the COMPLETE incremental config -
- * omitted fields fall back to server defaults (merge window 3, reconciliation
- * off, table lookback windows cleared).
- */
-export declare function buildRefreshConfigBody(opts: {
-    mode?: unknown;
-    watermarkColumn?: unknown;
-    watermarkType?: unknown;
-    mergeKey?: unknown;
-    lookback?: unknown;
-    mergeWindow?: unknown;
-    reconciliation?: unknown;
-    tableLookback?: unknown;
-}): Record<string, unknown>;
 export declare function registerDSCommands(program: Command): void;

package/dist/commands/ds.js

@@ -6,6 +6,7 @@ import { apiClient } from "../api/client.js";
 import { output, errorOutput, note } from "../output/format.js";
 import { getFrontendUrl } from "../config.js";
 import { reconcilePoll, NOT_FOUND_STATUS } from "./ds-poll.js";
+import { buildRefreshConfigBody, resolveCreateMode } from "./ds-config.js";
 import { registerRefreshHistoryCommand } from "./ds/refresh-history.js";
 // Project #244: print soft, non-blocking shape advisories. Print-and-proceed -
 // these never gate a create or verify.
@@ -215,127 +216,6 @@ async function scanAndPrintSummary(dsId, dsName, rowCount, force = false, accept
         return null;
     }
 }
-/**
- * Decide whether `ds create` runs in file-upload or SQL mode (Feature #645).
- * Pure + exported so it is unit-testable without a backend.
- */
-export function resolveCreateMode(opts) {
-    if (opts.file) {
-        if (opts.sql) {
-            return { kind: "error", message: "Use either --file or --sql, not both." };
-        }
-        return { kind: "file" };
-    }
-    if (!opts.sql || !opts.name) {
-        return {
-            kind: "error",
-            message: "Provide --file <path> to upload a local Excel/CSV, or both --sql <query> and --name <name> for a SQL data source.",
-        };
-    }
-    return { kind: "sql" };
-}
-/**
- * Parse one `--table-lookback` spec of the form `TABLE:COLUMN:DAYS`. Split from
- * the RIGHT so schema-qualified table names (`DB.SCHEMA.TABLE`) pass through
- * verbatim - column names can never contain `:` (server-validated identifiers).
- * Pure + exported so it is unit-testable without a backend.
- */
-export function parseTableLookback(spec) {
-    const last = spec.lastIndexOf(":");
-    const mid = last === -1 ? -1 : spec.lastIndexOf(":", last - 1);
-    const column = mid === -1 ? "" : spec.slice(mid + 1, last);
-    if (mid <= 0 || !column) {
-        throw new Error(`Invalid --table-lookback "${spec}". Use TABLE:COLUMN:DAYS (e.g. "ANALYTICS.PUBLIC.EVENTS:EVENT_DATE:30").`);
-    }
-    const days = Number(spec.slice(last + 1));
-    if (!Number.isInteger(days) || days < 1 || days > 3650) {
-        throw new Error(`Invalid days in --table-lookback "${spec}". Must be an integer between 1 and 3650.`);
-    }
-    return { table: spec.slice(0, mid), column, lookback_days: days };
-}
-// Mirrors the server's canonical table matching: last dotted segment, uppercased.
-function canonicalTableKey(table) {
-    return (table.split(".").pop() ?? table).toUpperCase();
-}
-/**
- * Validate `ds refresh-config` flags and build the PATCH body. Pure + exported
- * so it is unit-testable without a backend. Throws on invalid input; the action
- * surfaces the message via errorOutput. Sets the COMPLETE incremental config -
- * omitted fields fall back to server defaults (merge window 3, reconciliation
- * off, table lookback windows cleared).
- */
-export function buildRefreshConfigBody(opts) {
-    const mode = opts.mode;
-    if (!mode) {
-        throw new Error('--mode is required. Use "full" or "incremental".');
-    }
-    if (mode !== "full" && mode !== "incremental") {
-        throw new Error(`Invalid --mode "${mode}". Use "full" or "incremental".`);
-    }
-    // Mirror the backend 400 client-side so the user fixes it in one turn.
-    if (mode === "incremental" && (!opts.watermarkColumn || !opts.watermarkType)) {
-        throw new Error("Incremental mode requires --watermark-column and --watermark-type.");
-    }
-    const WM_TYPES = new Set(["timestamp", "date", "integer"]);
-    if (opts.watermarkType && !WM_TYPES.has(opts.watermarkType)) {
-        throw new Error(`Invalid --watermark-type "${opts.watermarkType}". Use timestamp, date, or integer.`);
-    }
-    const RECON = new Set(["daily", "weekly", "monthly", "off"]);
-    if (opts.reconciliation !== undefined && !RECON.has(opts.reconciliation)) {
-        throw new Error(`Invalid --reconciliation "${opts.reconciliation}". Use daily, weekly, monthly, or off.`);
-    }
-    // Clean break: the pre-rename --lookback flag set the merge window, while
-    // "lookback" now means the per-table read windows - silently honoring
-    // either meaning would be a trap. Hidden from help; always errors with the fix.
-    if (opts.lookback !== undefined) {
-        throw new Error("--lookback was renamed to --merge-window (it sets the merge window - how far back " +
-            "each run re-fetches and upserts). For per-table lookback windows use --table-lookback.");
-    }
-    const body = { refresh_mode: mode };
-    if (opts.watermarkColumn)
-        body.watermark_column = opts.watermarkColumn;
-    if (opts.watermarkType)
-        body.watermark_type = opts.watermarkType;
-    if (opts.mergeKey)
-        body.merge_key = opts.mergeKey;
-    if (opts.mergeWindow !== undefined) {
-        const n = parseInt(opts.mergeWindow, 10);
-        if (isNaN(n)) {
-            throw new Error(`Invalid --merge-window "${opts.mergeWindow}". Must be a number.`);
-        }
-        body.lookback_periods = n;
-    }
-    if (opts.reconciliation !== undefined) {
-        // "off" disables the reconciliation full-refresh backstop.
-        body.reconciliation_schedule = opts.reconciliation === "off" ? null : opts.reconciliation;
-    }
-    // Per-table lookback windows (repeatable TABLE:COLUMN:DAYS). The server
-    // clears windows SILENTLY in full mode and rejects integer watermarks -
-    // both are mirrored loudly here so the user fixes the call in one turn.
-    const specs = (opts.tableLookback ?? []);
-    if (specs.length > 0) {
-        if (mode !== "incremental") {
-            throw new Error("--table-lookback requires --mode incremental.");
-        }
-        if (opts.watermarkType === "integer") {
-            throw new Error("--table-lookback needs --watermark-type date or timestamp (lookback windows are day-based).");
-        }
-        if (specs.length > 20) {
-            throw new Error(`Too many --table-lookback windows (${specs.length}); max 20.`);
-        }
-        const windows = specs.map(parseTableLookback);
-        const seen = new Set();
-        for (const w of windows) {
-            const key = canonicalTableKey(w.table);
-            if (seen.has(key)) {
-                throw new Error(`Duplicate --table-lookback for table "${w.table}" (tables match on the last dotted segment, case-insensitive).`);
-            }
-            seen.add(key);
-        }
-        body.table_lookback_windows = windows;
-    }
-    return body;
-}
 /**
  * Create a data source from a local Excel/CSV file (Feature #645). Uploads the
  * file as multipart; the server parses, runs the inline AI scan, encrypts, and
@@ -393,8 +273,8 @@ export function registerDSCommands(program) {
         .description("Create a data source from a SQL query (--sql) or a local Excel/CSV file (--file)")
         .option("--sql <query>", "Source SQL query")
         .option("--name <name>", "Data source name (defaults to the file name in --file mode)")
-        .option("--connection <id>", "Snowflake connection ID (SQL mode)")
-        .option("--schema <name>", "Schema name (SQL mode)")
+        .option("--connection <id>", "Warehouse connection ID - Snowflake or BigQuery (SQL mode)")
+        .option("--schema <name>", "Schema (Snowflake) or dataset (BigQuery) name (SQL mode)")
         .option("--skip-scan", "Skip schema scan after creation (SQL mode)")
         .option("--detect-tables", "Print the tables detected in the SQL and exit, without creating (SQL mode preview)")
         .option("--source-tables <list>", "Comma-separated override for the tables referenced in the SQL (SQL mode; omit to auto-detect)")
@@ -647,16 +527,12 @@ export function registerDSCommands(program) {
         }
     });
     ds.command("update <id>")
-        .description("Update data source governance settings")
-        .option("--governed-mode <mode>", "Governance mode: on|off")
+        .description("Update a data source row cap")
         .option("--max-rows <n>", "Max rows limit (0 to remove)")
         .action(async function (id) {
         try {
             const opts = this.opts();
             const body = {};
-            if (opts.governedMode !== undefined) {
-                body.governed_mode = opts.governedMode === "on";
-            }
             if (opts.maxRows !== undefined) {
                 const val = parseInt(opts.maxRows, 10);
                 if (isNaN(val))