@vectros-ai/cli 0.6.7 → 0.7.0

package/CHANGELOG.md

@@ -3,6 +3,34 @@
 All notable changes to `@vectros-ai/cli` are documented here.
 This project adheres to [Semantic Versioning](https://semver.org).
 
+## 0.7.0 — 2026-07-08
+
+### Added
+
+- **`--tenant test|live` on `context create`, `context list`, and `context get`** —
+  pick the tenant a context is created in / read from (default `live`), mirroring the
+  flag `context destroy` and `blueprint-test` already carried. Previously these verbs
+  always targeted the live tenant, so a context on the test tenant could neither be
+  created, read, nor listed from the CLI.
+- **`vectros context destroy <contextId>`** — permanently destroy an app context and
+  everything in it (records, documents, folders, schemas, roles, access profiles; the
+  context's scoped keys are revoked up front). The teardown is irreversible and runs
+  asynchronously on the server (the context reports `purging` until the drain
+  completes). Two safety rails: interactively you must re-type the context id to
+  confirm; `--force` skips the prompt and is required when stdin is not a terminal.
+  `--tenant test|live` picks the tenant the context lives in (default `live`).
+  Authenticates as the account owner — no root API key required.
+
+## 0.6.8 — 2026-07-05
+
+### Changed
+
+- Updated the bundled `@vectros-ai/sdk` to **0.33.0**, keeping the CLI aligned with
+  the current Vectros API. Text retention is now a file-upload-only choice: a
+  text-ingested document always keeps its body, so the loader no longer sends the
+  (now removed) `storeText` field when seeding text documents. No CLI command or
+  flag changes.
+
 ## 0.6.7 — 2026-07-04
 
 ### Fixed

package/dist/cli.js

@@ -4921,7 +4921,7 @@ var DocumentsClient = class {
     return handleNonStatusCodeError(_response.error, _response.rawResponse, "DELETE", "/v1/documents/{id}");
   }
   /**
-   * Partially updates a document using an RFC 7386 JSON Merge Patch. The `payload` object is deep-merged: keys you send overwrite existing values (recursing into nested objects), a key set to `null` is deleted, and keys you omit are preserved — unlike PUT, which replaces the whole payload. Top-level fields (`title`, `storeText`, `folderId`, `schemaId`, ownership) are set when present and left unchanged when omitted; sending a top-level field as `null` is rejected. Supplying `text` re-ingests the document body (same as PUT). `indexMode` and `externalId` are immutable and rejected if present. The merged result is validated against the bound schema. Pass `expectedVersion` for optimistic concurrency (409 on conflict). Requires the `documents:u` scope.
+   * Partially updates a document using an RFC 7386 JSON Merge Patch. The `payload` object is deep-merged: keys you send overwrite existing values (recursing into nested objects), a key set to `null` is deleted, and keys you omit are preserved — unlike PUT, which replaces the whole payload. Top-level fields (`title`, `folderId`, `schemaId`, ownership) are set when present and left unchanged when omitted; sending a top-level field as `null` is rejected. Supplying `text` re-ingests the document body (same as PUT). `indexMode`, `externalId`, and `storeText` (text retention is fixed at ingest) are immutable and rejected if present. The merged result is validated against the bound schema. Pass `expectedVersion` for optimistic concurrency (409 on conflict). Requires the `documents:u` scope.
    *
    * @param {Vectros.PatchDocumentRequest} request
    * @param {DocumentsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -5173,7 +5173,7 @@ var DocumentsClient = class {
     return handleNonStatusCodeError(_response.error, _response.rawResponse, "GET", "/v1/documents/{id}/download");
   }
   /**
-   * Returns the full extracted or ingested text body for documents that were stored with `storeText=true`. Returns 404 when the document does not exist or when no text is available (because `storeText` was false, or extraction has not yet completed). Requires the `documents:r` scope.
+   * Returns the document's full text body when it is retained: always available for text-ingested documents, and for file-uploaded documents unless they were uploaded with `storeText=false` (which discards the extracted text once indexing completes — the original file remains available via `GET /{id}/download`). Returns 404 when the document does not exist, its text was not retained, or extraction has not yet completed. Requires the `documents:r` scope.
    *
    * @param {Vectros.GetDocumentTextRequest} request
    * @param {DocumentsClient.RequestOptions} requestOptions - Request-specific configuration.
@@ -11595,11 +11595,7 @@ async function runLoader(client, input) {
           schemaId,
           externalId: rec.externalId,
           // Optional structured payload (the document's `fields`); omitted when absent.
-          payload: rec.fields,
-          // Retain the raw text so a seeded document is retrievable via
-          // GET /v1/documents/{id}/text (mirrors the MCP document_ingest default) —
-          // a seed's text IS its content, worth keeping for the getting-started graph.
-          storeText: true
+          payload: rec.fields
         }
       });
       if (created.id) seededDocumentIds.push(created.id);
@@ -13450,6 +13446,7 @@ async function runRoleDelete(opts, deps = {}) {
 }
 
 // src/commands/context.ts
+var readline2 = __toESM(require("readline/promises"));
 function renderContext(c) {
   return formatKeyValues([
     ["context", c.contextId],
@@ -13511,6 +13508,80 @@ async function runContextList(opts, deps = {}) {
     }
   });
 }
+async function runContextDestroy(opts, deps = {}) {
+  const { contextId } = opts;
+  if (!opts.force) {
+    const isTty = deps.isTty ?? Boolean(process.stdin.isTTY);
+    if (!isTty) {
+      process.stderr.write(
+        `  \u2716 context destroy is irreversible and needs an interactive confirmation.
+    Re-run with --force to destroy '${contextId}' without a prompt.
+`
+      );
+      return 2;
+    }
+    const promptCtx = deps.createPrompt ? deps.createPrompt() : (() => {
+      const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
+      return { prompt: (q) => rl.question(q), close: () => rl.close() };
+    })();
+    try {
+      process.stdout.write(
+        `
+  \u26A0 Destroying app context '${contextId}' permanently erases it AND all of its
+    records, documents, folders, schemas, roles, and access profiles, and revokes
+    its scoped keys. This cannot be undone.
+
+`
+      );
+      const typed = await promptCtx.prompt(`  Type the context id ('${contextId}') to confirm: `);
+      if (typed.trim() !== contextId) {
+        process.stderr.write(`  \u2716 Confirmation did not match \u2014 nothing destroyed.
+`);
+        return 1;
+      }
+    } finally {
+      promptCtx.close();
+    }
+  }
+  return withAuth({ ...opts, provisioning: true }, deps, async (auth) => {
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const url = `${auth.baseUrl.replace(/\/$/, "")}/developer/app-contexts/${encodeURIComponent(contextId)}?tenant=${encodeURIComponent(auth.tenant)}&confirm=${encodeURIComponent(contextId)}`;
+    try {
+      const res = await fetchImpl(url, {
+        method: "DELETE",
+        headers: { Authorization: `Bearer ${auth.cognitoToken}` }
+      });
+      if (!res.ok) {
+        const body = await res.text().catch(() => "");
+        let message = body;
+        try {
+          const parsed = JSON.parse(body);
+          if (parsed.message) message = parsed.message;
+        } catch {
+        }
+        process.stderr.write(`  \u2716 context destroy failed: HTTP ${res.status}${message ? ` \u2014 ${message}` : ""}
+`);
+        return 1;
+      }
+      if (opts.json) {
+        process.stdout.write(`${formatJson({ contextId, status: "purging" })}
+`);
+        return 0;
+      }
+      process.stdout.write(
+        `
+  \u2714 teardown of '${contextId}' started \u2014 the context and its contents are being
+    deleted asynchronously (it reports status 'purging' until the drain completes)
+`
+      );
+      return 0;
+    } catch (err) {
+      process.stderr.write(`  \u2716 context destroy failed: ${formatError(err)}
+`);
+      return 1;
+    }
+  });
+}
 async function runContextGet(opts, deps = {}) {
   return withAuth({ ...opts, context: opts.contextId }, deps, async (auth) => {
     const client = auth.client;
@@ -14095,8 +14166,8 @@ async function runBlueprintTest(fileOrName, opts, deps = {}) {
 
 // src/build-info.ts
 var BUILD_INFO = {
-  cli: true ? "0.6.7" : "dev",
-  sdk: true ? "0.32.0" : "dev",
+  cli: true ? "0.7.0" : "dev",
+  sdk: true ? "0.33.0" : "dev",
   blueprints: true ? "0.6.5" : "dev"
 };
 function formatBuildInfo() {
@@ -14171,18 +14242,75 @@ function buildProgram(deps = {}) {
 }
 function registerContextCommands(program, deps) {
   const context = program.command("context").description("Manage app contexts (the namespace all data lives in).");
-  const create = context.command("create").description("Create (idempotent) an app context.").argument("<contextId>", "context id (3-31 chars; lowercase letter + lowercase/digit/dash)").option("--name <name>", "human-readable name");
-  addCommonAuthOptions(create).action(async (contextId, flags) => {
-    process.exit(await runContextCreate({ ...toCommonOptions(flags), contextId, name: flags.name }, deps));
-  });
-  const list = context.command("list").description("List the tenant\u2019s app contexts.");
+  const create = context.command("create").description("Create (idempotent) an app context.").argument("<contextId>", "context id (3-31 chars; lowercase letter + lowercase/digit/dash)").option("--name <name>", "human-readable name").option("--tenant <tenant>", "tenant to create the context in: 'test' or 'live' (default live)");
+  addCommonAuthOptions(create).action(
+    async (contextId, flags) => {
+      if (flags.tenant !== void 0 && flags.tenant !== "test" && flags.tenant !== "live") {
+        process.stderr.write(`  \u2716 --tenant must be 'test' or 'live' (got '${flags.tenant}')
+`);
+        process.exit(2);
+      }
+      process.exit(
+        await runContextCreate(
+          {
+            ...toCommonOptions(flags),
+            contextId,
+            name: flags.name,
+            tenant: flags.tenant
+          },
+          deps
+        )
+      );
+    }
+  );
+  const list = context.command("list").description("List the tenant\u2019s app contexts.").option("--tenant <tenant>", "tenant to list: 'test' or 'live' (default live)");
   addCommonAuthOptions(list).action(async (flags) => {
-    process.exit(await runContextList(toCommonOptions(flags), deps));
+    if (flags.tenant !== void 0 && flags.tenant !== "test" && flags.tenant !== "live") {
+      process.stderr.write(`  \u2716 --tenant must be 'test' or 'live' (got '${flags.tenant}')
+`);
+      process.exit(2);
+    }
+    process.exit(
+      await runContextList({ ...toCommonOptions(flags), tenant: flags.tenant }, deps)
+    );
   });
-  const get = context.command("get").description("Show one app context.").argument("<contextId>");
+  const get = context.command("get").description("Show one app context.").argument("<contextId>").option("--tenant <tenant>", "tenant the context lives in: 'test' or 'live' (default live)");
   addCommonAuthOptions(get).action(async (contextId, flags) => {
-    process.exit(await runContextGet({ ...toCommonOptions(flags), contextId }, deps));
+    if (flags.tenant !== void 0 && flags.tenant !== "test" && flags.tenant !== "live") {
+      process.stderr.write(`  \u2716 --tenant must be 'test' or 'live' (got '${flags.tenant}')
+`);
+      process.exit(2);
+    }
+    process.exit(
+      await runContextGet(
+        { ...toCommonOptions(flags), contextId, tenant: flags.tenant },
+        deps
+      )
+    );
   });
+  const destroy = context.command("destroy").description(
+    "Permanently destroy an app context and ALL of its data (irreversible; asks for confirmation)."
+  ).argument("<contextId>", "the app context to destroy").option("--force", "skip the interactive confirmation (required when stdin is not a TTY)").option("--tenant <tenant>", "tenant the context lives in: 'test' or 'live' (default live)");
+  addCommonAuthOptions(destroy).action(
+    async (contextId, flags) => {
+      if (flags.tenant !== void 0 && flags.tenant !== "test" && flags.tenant !== "live") {
+        process.stderr.write(`  \u2716 --tenant must be 'test' or 'live' (got '${flags.tenant}')
+`);
+        process.exit(2);
+      }
+      process.exit(
+        await runContextDestroy(
+          {
+            ...toCommonOptions(flags),
+            contextId,
+            force: Boolean(flags.force),
+            tenant: flags.tenant
+          },
+          deps
+        )
+      );
+    }
+  );
 }
 function registerRoleCommands(program, deps) {
   const role = program.command("role").description("Manage context-scoped roles (reusable scope rules; bind via `access grant --role`).");