dataiku-sdk 3.1.0 → 3.3.0

package/dist/src/cli/commands/dataset.js

@@ -2,6 +2,7 @@ import { buildDatasetCloneSettings, } from "../../resources/datasets.js";
 import { deepMerge, } from "../../utils/deep-merge.js";
 import { compareStrings, stableHash, } from "../../utils/stable-hash.js";
 import { jsonInput, num, schemaColumnsInput, unknownJsonInput, } from "../coerce.js";
+import { executionMode, } from "../flags.js";
 import { datasetSourceSummary, } from "../helpers/dataset.js";
 import { moveCreatedItemsToZone, resolveFlowZoneIdFromFlags, } from "../helpers/flow-zone.js";
 import { enqueueCliWarning, readIfExists, skipResult, } from "../output.js";
@@ -195,7 +196,7 @@ export const datasetCommands = {
             requireArgs(a, 1, usage);
             const columns = schemaColumnsInput(f, usage);
             const pk = f["project-key"];
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 const current = await c.datasets.schema(a[0], pk);
                 return {
                     dryRun: true,
@@ -307,43 +308,38 @@ export const datasetCommands = {
         description: "Get dataset-level metadata.",
         examples: ["dss dataset metadata orders",],
     },
-    download: {
+    "metadata-set": {
         handler: async (c, a, f) => {
-            requireArgs(a, 1, "dss dataset download <name>");
-            const result = await c.datasets.download(a[0], {
-                outputPath: f["output"],
-                projectKey: f["project-key"],
-                limit: num(f["limit"], "--limit"),
-                rawData: f["raw-data"] === true,
-            });
-            if (result.truncated) {
-                enqueueCliWarning({
-                    code: "dataset_download_truncated",
-                    message: `Download of '${a[0]}' stopped at the ${result.limit}-row cap; the dataset has more rows. `
-                        + "Re-run with --limit N for more, or read inside a recipe (get_dataframe) for the full data.",
-                    dataset: a[0],
-                    rows: result.rows,
-                    limit: result.limit,
-                    path: result.path,
-                });
+            const usage = "dss dataset metadata-set <name> (--data JSON | --data-file PATH | --stdin) [--dry-run] [--project-key KEY]";
+            requireArgs(a, 1, usage);
+            // Validated identically for live, --plan, and --dry-run: the JSON
+            // input replaces the server metadata object verbatim (faithful PUT;
+            // no client-side merge).
+            const metadata = jsonInput(f);
+            if (metadata === undefined) {
+                throw new UsageError(`--data, --data-file, or --stdin is required. Usage: ${usage}`);
             }
-            if (!f["output"]) {
-                enqueueCliWarning({
-                    code: "dataset_download_default_location",
-                    message: `No --output was given, so '${a[0]}' was written to '${result.path}' in the current directory. `
-                        + "Pass --output PATH to control the destination and avoid writing into your working tree.",
-                    dataset: a[0],
-                    path: result.path,
-                });
+            const pk = f["project-key"];
+            if (executionMode(f).dryRun) {
+                // Zero HTTP: the replacement JSON is validated and echoed as-is;
+                // current server state is intentionally not fetched (faithful
+                // replace means the PUT body is exactly this object).
+                return {
+                    dryRun: true,
+                    action: "metadata-set",
+                    resource: "dataset",
+                    name: a[0],
+                    next: metadata,
+                };
             }
-            return result;
+            const updated = await c.datasets.updateMetadata(a[0], metadata, pk);
+            return { updated: a[0], resource: "dataset", metadata: updated, };
         },
-        usage: "dss dataset download <name> [--output PATH] [--limit N] [--raw-data] [--project-key KEY]",
-        description: "Download up to --limit rows (default 100k) as CSV and return { path, rows, truncated, limit }. Formula-like cells are neutralized for spreadsheets; --raw-data preserves exact bytes. Warnings report truncation and the default output path.",
+        usage: "dss dataset metadata-set <name> (--data JSON | --data-file PATH | --stdin) [--dry-run] [--project-key KEY]",
+        description: "Replace dataset-level metadata with the given JSON object (faithful PUT: GET, edit, PUT full object; no merge).",
         examples: [
-            "dss dataset download orders",
-            "dss dataset download orders --output ./data/",
-            "dss dataset download orders --raw-data",
+            `dss dataset metadata-set orders --data '{"label":"Orders","tags":["prod"]}' --dry-run`,
+            'echo \'{"label":"Orders"}\' | dss dataset metadata-set orders --stdin',
         ],
     },
     create: {
@@ -365,13 +361,13 @@ export const datasetCommands = {
                 projectKey: pk,
             };
             const zoneId = await resolveFlowZoneIdFromFlags(c, f, pk);
-            if (f["if-not-exists"] === true || f["dry-run"] === true) {
+            if (f["if-not-exists"] === true || executionMode(f).dryRun) {
                 const list = await c.datasets.list(pk);
                 const existing = list.find((d) => d.name === name);
-                if (existing && f["if-not-exists"] === true && f["dry-run"] !== true) {
+                if (existing && f["if-not-exists"] === true && !executionMode(f).dryRun) {
                     return skipResult("dataset", name, "exists", { current: existing, });
                 }
-                if (f["dry-run"] === true) {
+                if (executionMode(f).dryRun) {
                     return {
                         dryRun: true,
                         action: "create",
@@ -395,6 +391,140 @@ export const datasetCommands = {
             "dss dataset create --name orders --connection filesystem --type Filesystem --zone Experiments --dry-run",
         ],
     },
+    "create-managed": {
+        handler: async (c, _a, f) => {
+            const usage = "dss dataset create-managed --name NAME --connection CONN [--type-option-id ID] [--format-option-id ID] [--copy-partitioning-from REF] [--partitioning-folder] [--dry-run] [--project-key KEY]";
+            const name = f["name"];
+            if (!name || name.trim() === "") {
+                throw new UsageError(`--name is required. Usage: ${usage}`);
+            }
+            const connection = f["connection"];
+            if (!connection || connection.trim() === "") {
+                throw new UsageError(`--connection is required. Usage: ${usage}`);
+            }
+            const pk = f["project-key"];
+            // Server-derived settings only: no fabricated defaults are merged in.
+            const payload = {
+                name,
+                connection,
+                ...(typeof f["type-option-id"] === "string" ? { typeOptionId: f["type-option-id"], } : {}),
+                ...(typeof f["format-option-id"] === "string"
+                    ? { formatOptionId: f["format-option-id"], }
+                    : {}),
+                ...(typeof f["copy-partitioning-from"] === "string"
+                    ? {
+                        copyPartitioningFrom: {
+                            ref: f["copy-partitioning-from"],
+                            ...(f["partitioning-folder"] === true ? { type: "FOLDER", } : {}),
+                        },
+                    }
+                    : {}),
+            };
+            if (executionMode(f).dryRun) {
+                return { dryRun: true, action: "create-managed", resource: "dataset", ...payload, };
+            }
+            const created = await c.datasets.createManaged({
+                name,
+                connection,
+                ...(typeof f["type-option-id"] === "string" ? { typeOptionId: f["type-option-id"], } : {}),
+                ...(typeof f["format-option-id"] === "string"
+                    ? { formatOptionId: f["format-option-id"], }
+                    : {}),
+                ...(typeof f["copy-partitioning-from"] === "string"
+                    ? {
+                        copyPartitioningFrom: {
+                            ref: f["copy-partitioning-from"],
+                            ...(f["partitioning-folder"] === true ? { type: "FOLDER", } : {}),
+                        },
+                    }
+                    : {}),
+            }, pk);
+            return {
+                created: created.datasetName,
+                resource: "dataset",
+                managed: true,
+                projectKey: created.projectKey,
+                creationSettings: created.creationSettings,
+            };
+        },
+        usage: "dss dataset create-managed --name NAME --connection CONN [--type-option-id ID] [--format-option-id ID] [--copy-partitioning-from REF] [--partitioning-folder] [--dry-run] [--project-key KEY]",
+        description: "Create a managed dataset via the dedicated endpoint: DSS derives storage/format details; you pick name, connection, and optional type/format/partitioning options.",
+        examples: [
+            "dss dataset create-managed --name orders_copy --connection filesystem_managed",
+            "dss dataset create-managed --name events_parquet --connection s3_conn --format-option-id PARQUET_HIVE --dry-run",
+            "dss dataset create-managed --name partitioned --connection s3_conn --copy-partitioning-from raw_events",
+        ],
+    },
+    info: {
+        handler: (c, a, f) => {
+            requireArgs(a, 1, "dss dataset info <name>");
+            return c.datasets.info(a[0], f["project-key"]);
+        },
+        usage: "dss dataset info <name> [--project-key KEY]",
+        description: "Get the full info object for a dataset (type, parameters, last build information, schema, etc.).",
+        examples: ["dss dataset info orders", "dss dataset info orders --project-key MYPROJ",],
+    },
+    "column-lineage": {
+        handler: (c, a, f) => {
+            const usage = "dss dataset column-lineage <name> <column> [--max-dataset-count N] [--project-key KEY]";
+            requireArgs(a, 2, usage);
+            const maxDatasetCount = num(f["max-dataset-count"], "--max-dataset-count");
+            if (maxDatasetCount !== undefined
+                && (!Number.isSafeInteger(maxDatasetCount) || maxDatasetCount <= 0)) {
+                throw new UsageError(`--max-dataset-count must be a positive integer (got "${String(f["max-dataset-count"])}"). `
+                    + `Usage: ${usage}`, "validation_failed");
+            }
+            return c.datasets.getColumnLineage(a[0], a[1], {
+                maxDatasetCount,
+                projectKey: f["project-key"],
+            });
+        },
+        usage: "dss dataset column-lineage <name> <column> [--max-dataset-count N] [--project-key KEY]",
+        description: "Get the full column lineage (auto-computed and manual) of a column; includes local and foreign project relations.",
+        examples: [
+            "dss dataset column-lineage orders customer_id",
+            "dss dataset column-lineage orders customer_id --max-dataset-count 2000",
+        ],
+    },
+    download: {
+        handler: async (c, a, f) => {
+            requireArgs(a, 1, "dss dataset download <name>");
+            const result = await c.datasets.download(a[0], {
+                outputPath: f["output"],
+                projectKey: f["project-key"],
+                limit: num(f["limit"], "--limit"),
+                rawData: f["raw-data"] === true,
+            });
+            if (result.truncated) {
+                enqueueCliWarning({
+                    code: "dataset_download_truncated",
+                    message: `Download of '${a[0]}' stopped at the ${result.limit}-row cap; the dataset has more rows. `
+                        + "Re-run with --limit N for more, or read inside a recipe (get_dataframe) for the full data.",
+                    dataset: a[0],
+                    rows: result.rows,
+                    limit: result.limit,
+                    path: result.path,
+                });
+            }
+            if (!f["output"]) {
+                enqueueCliWarning({
+                    code: "dataset_download_default_location",
+                    message: `No --output was given, so '${a[0]}' was written to '${result.path}' in the current directory. `
+                        + "Pass --output PATH to control the destination and avoid writing into your working tree.",
+                    dataset: a[0],
+                    path: result.path,
+                });
+            }
+            return result;
+        },
+        usage: "dss dataset download <name> [--output PATH] [--limit N] [--raw-data] [--project-key KEY]",
+        description: "Download up to --limit rows (default 100k) as CSV and return { path, rows, truncated, limit }. Formula-like cells are neutralized for spreadsheets; --raw-data preserves exact bytes. Warnings report truncation and the default output path.",
+        examples: [
+            "dss dataset download orders",
+            "dss dataset download orders --output ./data/",
+            "dss dataset download orders --raw-data",
+        ],
+    },
     clone: {
         handler: async (c, a, f) => {
             const usage = "dss dataset clone <source> <target> [--path PATH] [--table TABLE] [--metastore-table TABLE] [--allow-same-path] [--zone ZONE|--zone-id ID] [--dry-run] [--project-key KEY]";
@@ -410,7 +540,7 @@ export const datasetCommands = {
             const current = await c.datasets.get(a[0], pk);
             const next = buildDatasetCloneSettings(current, a[1], pk ?? c.resolveProjectKey(pk), opts);
             const zoneId = await resolveFlowZoneIdFromFlags(c, f, pk);
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 return {
                     dryRun: true,
                     action: "clone",
@@ -437,11 +567,11 @@ export const datasetCommands = {
         handler: async (c, a, f) => {
             requireArgs(a, 1, "dss dataset delete <name>");
             const pk = f["project-key"];
-            if (f["dry-run"] === true || f["if-exists"] === true) {
+            if (executionMode(f).dryRun || f["if-exists"] === true) {
                 const current = await readIfExists(() => c.datasets.get(a[0], pk));
                 if (!current)
                     return skipResult("dataset", a[0], "missing");
-                if (f["dry-run"] === true) {
+                if (executionMode(f).dryRun) {
                     return { dryRun: true, action: "delete", resource: "dataset", name: a[0], current, };
                 }
             }
@@ -460,7 +590,7 @@ export const datasetCommands = {
                 throw new UsageError("--data, --data-file, or --stdin is required. Usage: dss dataset update <name> [--data '{...}' | --data-file PATH | --stdin]");
             }
             const pk = f["project-key"];
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 const current = await c.datasets.get(a[0], pk);
                 const next = deepMerge(current, data);
                 return { dryRun: true, action: "update", resource: "dataset", name: a[0], current, next, };

package/dist/src/cli/commands/doctor.js

@@ -1,7 +1,9 @@
-import { runDoctor, } from "../doctor.js";
 export const doctorCommands = {
     run: {
-        handler: async (_c, _a, f) => (await runDoctor(f)).result,
+        handler: async (_c, _a, f) => {
+            const { runDoctor, } = await import("../doctor.js");
+            return (await runDoctor(f)).result;
+        },
         usage: "dss doctor [--project-key KEY] [--capabilities] [--fast]",
         description: "Run JSON diagnostics for DSS credentials, connectivity, and project access.",
         examples: ["dss doctor", "dss doctor --project-key MYPROJ", "dss doctor --capabilities --fast",],

package/dist/src/cli/commands/flow-zone.js

@@ -1,5 +1,6 @@
 import { ClientValidationError, } from "../../errors.js";
 import { deepMerge, } from "../../utils/deep-merge.js";
+import { executionMode, } from "../flags.js";
 import { ensureFlowZonePlanTarget, findFlowZoneForPlan, flowZoneColor, flowZoneContains, flowZoneCurrentPosition, flowZoneDetailSummary, flowZoneId, flowZoneMoveDelta, flowZoneMoveItems, flowZoneName, flowZoneOrganizeStep, flowZonePlanFromZones, flowZonePlanItemKeys, flowZonePruneItems, flowZoneSamePosition, flowZoneSummary, readFlowZoneOrganizePlan, resolveFlowZoneIdFromFlags, throwFlowZoneValidationError, validateFlowZoneOrganizeObjects, } from "../helpers/flow-zone.js";
 import { readIfExists, skipResult, } from "../output.js";
 import { requireArgs, UsageError, } from "../usage.js";
@@ -63,13 +64,13 @@ export const flowZoneCommands = {
                 color: flowZoneColor(f["color"]),
                 projectKey: pk,
             };
-            if (f["if-not-exists"] === true || f["dry-run"] === true) {
+            if (f["if-not-exists"] === true || executionMode(f).dryRun) {
                 const list = await c.flowZones.list(pk);
                 const existing = list.find((zone) => zone.name === name);
-                if (existing && f["if-not-exists"] === true && f["dry-run"] !== true) {
+                if (existing && f["if-not-exists"] === true && !executionMode(f).dryRun) {
                     return skipResult("flow-zone", existing.id, "exists", { current: existing, });
                 }
-                if (f["dry-run"] === true) {
+                if (executionMode(f).dryRun) {
                     return {
                         dryRun: true,
                         action: "create",
@@ -103,7 +104,7 @@ export const flowZoneCommands = {
                 color: flowZoneColor(f["color"]),
                 projectKey: pk,
             };
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 const current = await c.flowZones.get(zoneId, pk);
                 const next = deepMerge(current, patch);
                 return { dryRun: true, action: "update", resource: "flow-zone", id: zoneId, current, next, };
@@ -118,11 +119,11 @@ export const flowZoneCommands = {
         handler: async (c, a, f) => {
             requireArgs(a, 1, "dss flow-zone delete <id>");
             const zoneId = flowZoneId(a[0]);
-            if (f["dry-run"] === true || f["if-exists"] === true) {
+            if (executionMode(f).dryRun || f["if-exists"] === true) {
                 const current = await readIfExists(() => c.flowZones.get(zoneId, f["project-key"]));
                 if (!current)
                     return skipResult("flow-zone", zoneId, "missing");
-                if (f["dry-run"] === true) {
+                if (executionMode(f).dryRun) {
                     return { dryRun: true, action: "delete", resource: "flow-zone", id: zoneId, current, };
                 }
             }
@@ -147,7 +148,7 @@ export const flowZoneCommands = {
             if (items.length === 0) {
                 throw new UsageError("At least one object is required. Use --dataset, --recipe, --folder, or --object TYPE:ID.");
             }
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 return {
                     dryRun: true,
                     action: "move",
@@ -206,7 +207,7 @@ export const flowZoneCommands = {
                 const pruneItems = Array.isArray(step.pruneItems) ? step.pruneItems : [];
                 return count + pruneItems.length;
             }, 0);
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 return {
                     dryRun: true,
                     action: "organize",

package/dist/src/cli/commands/folder.js

@@ -1,5 +1,6 @@
 import { deepMerge, } from "../../utils/deep-merge.js";
 import { jsonInput, } from "../coerce.js";
+import { executionMode, } from "../flags.js";
 import { addTransientTargetContext, encodedProjectEndpoint, readIfExists, skipResult, } from "../output.js";
 import { requireArgs, UsageError, } from "../usage.js";
 async function resolveFolderId(client, nameOrId, flags) {
@@ -28,13 +29,13 @@ export const folderCommands = {
                 path: f["path"],
                 projectKey: pk,
             };
-            if (f["if-not-exists"] === true || f["dry-run"] === true) {
+            if (f["if-not-exists"] === true || executionMode(f).dryRun) {
                 const list = await c.folders.list(pk);
                 const existing = list.find((folder) => folder.name === name);
-                if (existing && f["if-not-exists"] === true && f["dry-run"] !== true) {
+                if (existing && f["if-not-exists"] === true && !executionMode(f).dryRun) {
                     return skipResult("folder", existing.id ?? name, "exists", { current: existing, });
                 }
-                if (f["dry-run"] === true) {
+                if (executionMode(f).dryRun) {
                     return {
                         dryRun: true,
                         action: "create",
@@ -74,7 +75,7 @@ export const folderCommands = {
             }
             const pk = f["project-key"];
             const folderId = await resolveFolderId(c, a[0], f);
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 const current = await c.folders.get(folderId, pk);
                 const next = deepMerge(current, data);
                 return {
@@ -102,11 +103,11 @@ export const folderCommands = {
             requireArgs(a, 1, "dss folder delete <name-or-id>");
             const pk = f["project-key"];
             const folderId = await resolveFolderId(c, a[0], f);
-            if (f["dry-run"] === true || f["if-exists"] === true) {
+            if (executionMode(f).dryRun || f["if-exists"] === true) {
                 const current = await readIfExists(() => c.folders.get(folderId, pk));
                 if (!current)
                     return skipResult("folder", folderId, "missing");
-                if (f["dry-run"] === true) {
+                if (executionMode(f).dryRun) {
                     return {
                         dryRun: true,
                         action: "delete",
@@ -167,7 +168,7 @@ export const folderCommands = {
             requireArgs(a, 3, "dss folder upload <name-or-id> <path> <localPath>");
             const pk = f["project-key"];
             const folderId = await resolveFolderId(c, a[0], f);
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 return {
                     dryRun: true,
                     action: "upload",
@@ -190,7 +191,7 @@ export const folderCommands = {
     "delete-file": {
         handler: async (c, a, f) => {
             requireArgs(a, 2, "dss folder delete-file <name-or-id> <path>");
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 return { dryRun: true, action: "delete-file", resource: "folder", folder: a[0], path: a[1], };
             }
             await c.folders.deleteFile(await resolveFolderId(c, a[0], f), a[1], f["project-key"]);

package/dist/src/cli/commands/future.js

@@ -1,4 +1,5 @@
 import { num, } from "../coerce.js";
+import { executionMode, } from "../flags.js";
 import { planResult, } from "../output.js";
 import { requireArgs, } from "../usage.js";
 export const futureCommands = {
@@ -36,10 +37,10 @@ export const futureCommands = {
         handler: async (c, a, f) => {
             requireArgs(a, 1, "dss future abort <id>");
             const id = a[0];
-            if (f["dry-run"] === true) {
+            if (executionMode(f).dryRun) {
                 return planResult("future", "abort", {
-                    method: "POST",
-                    endpoint: `/public/api/futures/${encodeURIComponent(id)}/abort`,
+                    method: "DELETE",
+                    endpoint: `/public/api/futures/${encodeURIComponent(id)}`,
                     identifiers: { id, },
                     idempotency: "none",
                     asyncKind: "future",

package/dist/src/cli/commands/group.d.ts

@@ -0,0 +1,2 @@
+import type { CommandMeta } from "../types.js";
+export declare const groupCommands: Record<string, CommandMeta>;

package/dist/src/cli/commands/group.js

@@ -0,0 +1,109 @@
+import { requiredJsonInput, } from "../coerce.js";
+import { executionMode, } from "../flags.js";
+import { readIfExists, skipResult, } from "../output.js";
+import { requireArgs, UsageError, } from "../usage.js";
+/** Group identifiers must be non-empty before any request or dry-run preview. */
+function requireGroupName(value, usage) {
+    const trimmed = value?.trim() ?? "";
+    if (trimmed.length === 0) {
+        throw new UsageError(`group name must be a non-empty string.\nUsage: ${usage}`, "validation_failed");
+    }
+    return trimmed;
+}
+export const groupCommands = {
+    list: {
+        handler: (c) => c.groups.list(),
+        usage: "dss group list",
+        description: "List DSS groups (admin).",
+        examples: ["dss group list",],
+    },
+    get: {
+        handler: (c, a) => {
+            const usage = "dss group get <name>";
+            requireArgs(a, 1, usage);
+            return c.groups.get(requireGroupName(a[0], usage));
+        },
+        usage: "dss group get <name>",
+        description: "Get a DSS group (admin).",
+        examples: ["dss group get administrators",],
+    },
+    create: {
+        handler: async (c, _a, f) => {
+            const usage = "dss group create (--data JSON|--data-file PATH|--stdin)";
+            const body = requiredJsonInput(f, `--data, --data-file, or --stdin is required (group definition). Usage: ${usage}`);
+            if (executionMode(f).dryRun) {
+                return {
+                    dryRun: true,
+                    action: "create",
+                    resource: "group",
+                    name: typeof body.name === "string" ? body.name : undefined,
+                    method: "POST",
+                    endpoint: "/public/api/admin/groups",
+                    payload: body,
+                };
+            }
+            return c.groups.create(body);
+        },
+        usage: "dss group create (--data JSON|--data-file PATH|--stdin) [--dry-run]",
+        description: 'Create a DSS group (admin). Body follows the DSS Group schema, e.g. {"name":"analysts","admin":false,"description":"..."}.',
+        examples: [
+            `dss group create --data '{"name":"analysts","admin":false,"description":"Business analysts"}'`,
+        ],
+    },
+    update: {
+        handler: async (c, a, f) => {
+            const usage = "dss group update <name> (--data JSON|--data-file PATH|--stdin) [--dry-run]";
+            requireArgs(a, 1, usage);
+            const name = requireGroupName(a[0], usage);
+            const body = requiredJsonInput(f, `--data, --data-file, or --stdin is required (group definition). Usage: ${usage}`);
+            if (executionMode(f).dryRun) {
+                return {
+                    dryRun: true,
+                    action: "update",
+                    resource: "group",
+                    name,
+                    method: "PUT",
+                    endpoint: `/public/api/admin/groups/${encodeURIComponent(name)}`,
+                    payload: body,
+                    note: "PUT replaces the whole Group object; the body must come from `dss group get`. No GET was issued in dry-run.",
+                };
+            }
+            await c.groups.update(name, body);
+            return { updated: name, };
+        },
+        usage: "dss group update <name> (--data JSON|--data-file PATH|--stdin) [--dry-run]",
+        description: "Update a DSS group (admin). The body MUST be the Group object obtained from `dss group get` (PUT semantics); pass undocumented attributes through unchanged. Use --dry-run to preview the merged result without writing.",
+        examples: [
+            `dss group update analysts --data '{"name":"ANALYSTS","admin":false,"description":"Business analysts"}'`,
+        ],
+    },
+    delete: {
+        handler: async (c, a, f) => {
+            const usage = "dss group delete <name> [--if-exists] [--dry-run]";
+            requireArgs(a, 1, usage);
+            const name = requireGroupName(a[0], usage);
+            if (executionMode(f).dryRun) {
+                return {
+                    dryRun: true,
+                    action: "delete",
+                    resource: "group",
+                    name,
+                    method: "DELETE",
+                    endpoint: `/public/api/admin/groups/${encodeURIComponent(name)}`,
+                    ...(f["if-exists"] === true
+                        ? { note: "Existence not checked in dry-run; live --if-exists issues a GET probe first.", }
+                        : {}),
+                };
+            }
+            if (f["if-exists"] === true) {
+                const current = await readIfExists(() => c.groups.get(name));
+                if (!current)
+                    return skipResult("group", name, "missing");
+            }
+            return c.groups.delete(name);
+        },
+        usage: "dss group delete <name> [--if-exists] [--dry-run]",
+        description: "Delete a DSS group (admin). Destructive and irreversible.",
+        examples: ["dss group delete analysts", "dss group delete analysts --if-exists",],
+    },
+};