@trillioncore/cli 1.0.0-next.1 → 1.0.0-next.2

package/README.md

@@ -37,6 +37,24 @@ CLI and MCP share four data-tool names: `index`, `search`, `get`, and `sql`. CLI
 
 Use `tc <command> --help` for supported flags. PostgreSQL SQL is a focused v1 command, not general v0 compatibility. There is no v0 `agent start`, chat, or write-command compatibility layer. CLI credentials cannot be used as MCP credentials or browser administration sessions. Authorize Codex or Claude Code separately through hosted MCP.
 
+## Resource discovery
+
+Run `tc index` to obtain an authorized account path, then:
+
+```sh
+tc index 'org/<organization-id>/account/<account-id>' --resources --json
+```
+
+For interactive inspection, omit `--json` to print schema columns, operation availability, warnings and the next-page cursor as text. Use `tc index --help` to discover resource and pagination options.
+
+MCP uses the same `index` tool with that `path` and `resources: true`. Resource mode returns an additive `catalog`, empty `entries`, and the normal `nextCursor` pagination field. Repeat the same resource request with `--cursor` while a cursor is returned. Changed catalog metadata invalidates old resource cursors; restart discovery. Normal index responses and record refs are unchanged. Resource mode avoids enumerating every stored record.
+
+The catalog describes stored content kinds or approved **active synchronized** PostgreSQL relations, supported operations, schema metadata and known sync timestamps. Resource keys identify catalog entries; they are **not** refs accepted by `get`. Obtain a record ref through normal index/search before reading. Search is lexical across authorized connections, not scoped to the resource just inspected; optional source-type filters do not identify a unique connection.
+
+Respect `operations[].available` and `warnings`. Production synced SQL is currently not wired, so its schemas can be discovered but SQL is explicitly unavailable with `synced_sql_not_configured`. Live PostgreSQL resources are outside this catalog's coverage. No semantic search or actions are advertised. Native connectors retain search/get capabilities when empty; `recordKinds` lists only observed kinds (capped at 100 with an explicit warning). Synced manifests use existing limits of 25 tables/1,000 columns. A successful sync timestamp does not establish complete history or current provider state. Business definitions, currency and attribution are not inferred.
+
+All discovery uses the same organization, live token scope, connection permission and enabled-state checks as existing agent reads. Multiple internal adapters may eventually fulfill a connection's capabilities; this catalog does not introduce a separate user-visible integration for each adapter.
+
 ## Sessions and troubleshooting
 
 Sessions refresh automatically. File-based credentials live in `~/.trillioncore/cli-v1/session.json`, with private directory/file permissions (0700/0600 on POSIX), atomic replacement and cross-process refresh locking. Never share or print this file. Keep the OS account and its private home directory secure; Windows ACL behavior has not yet been independently validated.

package/dist/index.js

@@ -3757,6 +3757,7 @@ async function index(input) {
   const limit = parsedPositiveInteger(input.limit, "--limit", 200);
   const parameters = new URLSearchParams();
   if (input.path) parameters.set("path", input.path);
+  if (input.resources) parameters.set("resources", "true");
   if (depth) parameters.set("depth", String(depth));
   if (limit) parameters.set("limit", String(limit));
   if (input.cursor) parameters.set("cursor", input.cursor);
@@ -3847,6 +3848,25 @@ function isAgentError(value) {
   return "error" in value;
 }
 function renderIndex(result) {
+  if (result.catalog) {
+    const catalog = result.catalog;
+    return [
+      `Resources: ${catalog.connectionRef}`,
+      `Last successful sync: ${catalog.freshness.lastSuccessfulSyncAt ?? "unknown"}; source completeness: ${catalog.freshness.sourceCompleteness}`,
+      ...catalog.resources.flatMap((resource) => [
+        `${resource.name} (${resource.kind})`,
+        ...resource.recordKinds ? [`  Observed record kinds: ${resource.recordKinds.join(", ") || "none"}`] : [],
+        ...resource.operations.map((operation) => `  ${operation.tool}${operation.target ? ` --target ${operation.target}` : ""}: ${operation.available ? "available" : `unavailable (${operation.reason})`}; scope: ${operation.scope}`),
+        ...resource.relation ? [
+          `  SQL relation: ${resource.relation.name}; connection: ${catalog.integrationAccountId}`,
+          ...resource.relation.columns.map((column) => `    ${column.name}: ${column.type}${column.nullable ? " (nullable)" : ""}`)
+        ] : []
+      ]),
+      ...catalog.warnings.map((warning) => `Warning: ${warning}`),
+      ...result.nextCursor ? [`More: --cursor ${result.nextCursor}`] : [],
+      "Resource keys are not record refs. Use search or normal index to find a record for get."
+    ].join("\n");
+  }
   if (!result.entries.length) return "No authorized records found.";
   const lines = [`Index: ${result.path}`];
   for (const entry of result.entries) {
@@ -4051,7 +4071,7 @@ ${result.issuer}`
       writeError(error, Boolean(options.json));
     }
   });
-  program2.command("index [path]").description("Browse authorized integration records").option("--organization <id>", "Assert configured organization").option("--depth <depth>", "Inventory depth (default 3)").option("--limit <limit>", "Maximum entries (1-200)").option("--cursor <cursor>", "Opaque pagination cursor").option("-j, --json", "Output shared DTO JSON").action(async (path, options) => {
+  program2.command("index [path]").description("Browse authorized integration records").option("--organization <id>", "Assert configured organization").option("--depth <depth>", "Inventory depth (default 3)").option("--resources", "Inspect resources at an account path instead of listing records").option("--limit <limit>", "Maximum entries or resources (1-200)").option("--cursor <cursor>", "Opaque pagination cursor").option("-j, --json", "Output shared DTO JSON").action(async (path, options) => {
     try {
       const result = await commands.index({ ...options, path });
       writeResult(result, Boolean(options.json), renderIndex(result));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trillioncore/cli",
-  "version": "1.0.0-next.1",
+  "version": "1.0.0-next.2",
   "description": "Trillioncore v1 CLI: sign in and read your authorized integration records",
   "type": "module",
   "license": "MIT",