mammoth-cli 2.0.10__tar.gz → 2.0.11__tar.gz

{mammoth_cli-2.0.10 → mammoth_cli-2.0.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mammoth-cli
-Version: 2.0.10
+Version: 2.0.11
 Summary: Command-line interface for the Mammoth Analytics platform
 Project-URL: homepage, https://mammoth.io
 Project-URL: repository, https://github.com/EdgeMetric/mammothsdk

{mammoth_cli-2.0.10 → mammoth_cli-2.0.11}/mammoth_cli/__init__.py

@@ -6,7 +6,7 @@ not implement a second HTTP client and does not call private SDK members.
 
 from __future__ import annotations
 
-__version__ = "2.0.10"
+__version__ = "2.0.11"
 
 # The versioned machine output envelope contract.
 SCHEMA_VERSION = 1

{mammoth_cli-2.0.10 → mammoth_cli-2.0.11}/mammoth_cli/bundled_skill/mammoth-cli/references/auth.md

@@ -72,6 +72,11 @@ present and its endpoint matches, verify the live connection:
 mammoth doctor --profile PROFILE --output json --no-input
 ```
 
+`doctor` also lists the projects the credential can see (`projects` check)
+and verifies that `--project` or the selected project is one of them
+(`project_context` check). Pick the project id from that list; the API does
+not expose write permission, so the first write is what proves it.
+
 Do not continue to schema discovery or business operations after an
 authentication or doctor failure. The `app` server prefix is the production
 default; release or other environment credentials do not imply authorization

{mammoth_cli-2.0.10 → mammoth_cli-2.0.11}/mammoth_cli/commands/doctor.py

@@ -111,6 +111,16 @@ def _safe_connection_diagnostics(error: CliError, *, debug: bool) -> dict[str, A
     return result
 
 
+_PROJECT_LIMIT = 20
+
+
+def _visible_projects(service: Any) -> list[dict[str, Any]]:
+    """Return the projects this credential can list, or an empty list."""
+    response = service.list_projects(limit=_PROJECT_LIMIT + 1)
+    projects = response.get("projects", []) if isinstance(response, dict) else []
+    return [p for p in projects if isinstance(p, dict)]
+
+
 def doctor(invocation: Invocation) -> HandlerResult:
     """Run environment and connectivity diagnostics.
 
@@ -168,10 +178,12 @@ def doctor(invocation: Invocation) -> HandlerResult:
 
     connection_ok = False
     connection_detail = "not attempted"
+    projects: list[dict[str, Any]] | None = None
     if auth_ok:
         try:
             with open_service(invocation) as (service, _auth):
                 service.check_connection()
+                projects = _visible_projects(service)
             connection_ok = True
             connection_detail = "authenticated request succeeded"
         except CliError as error:
@@ -185,11 +197,56 @@ def doctor(invocation: Invocation) -> HandlerResult:
     if not auth_ok:
         checks.append(_check("connection", connection_ok, connection_detail))
 
+    # Authentication proves an identity, not a place to work. Report the
+    # projects this credential can see and whether the selected project is
+    # one of them. The API exposes no role or permission data, so write
+    # access is claimed by nobody here: the first write reports it.
+    selected_project = resolved_project(invocation)
+    if projects is not None:
+        visible_ids = [p.get("id") for p in projects]
+        checks.append(
+            {
+                **_check(
+                    "projects",
+                    bool(projects),
+                    (
+                        f"{len(projects)} project(s) visible in workspace"
+                        if projects
+                        else "no projects visible to this credential in the workspace"
+                    ),
+                ),
+                "projects": [
+                    {"id": p.get("id"), "name": p.get("name")} for p in projects[:_PROJECT_LIMIT]
+                ],
+                "truncated": len(projects) > _PROJECT_LIMIT,
+            }
+        )
+        if selected_project is None:
+            # Not a failure: every command accepts --project explicitly. It is
+            # reported so an agent knows it still has to choose one.
+            project_ok = True
+            project_detail = "no project selected; pass --project per command or set one"
+        elif selected_project in visible_ids:
+            project_ok, project_detail = True, f"project {selected_project} is visible"
+        else:
+            project_ok = False
+            project_detail = f"project {selected_project} is not among the visible projects"
+        checks.append(
+            {
+                **_check("project_context", project_ok, project_detail),
+                "project_id": selected_project,
+                "write_access": "not verifiable from the API; the first write reports it",
+            }
+        )
+
     recommendations: list[str] = []
     if record is None or not credentials.has_credentials(profile_name):
         login_profile = f" --profile {shlex.quote(profile_name)}" if profile_name else ""
         recommendations.append(f"mammoth auth login{login_profile}")
-    elif resolved_project(invocation) is None:
+    elif selected_project is None or (
+        projects is not None and selected_project not in [p.get("id") for p in projects]
+    ):
+        recommendations.append("mammoth project list --output json --no-input")
         recommendations.append("mammoth context project use PROJECT_ID")
     if not connection_ok and auth_ok and not invocation.debug:
         debug_profile = f" --profile {shlex.quote(profile_name)}" if profile_name else ""

{mammoth_cli-2.0.10 → mammoth_cli-2.0.11}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "mammoth-cli"
-version = "2.0.10"
+version = "2.0.11"
 description = "Command-line interface for the Mammoth Analytics platform"
 authors = [{name = "Mammoth Analytics", email = "support@mammoth.io"}]
 readme = "README.md"