mammoth-cli 2.0.54__tar.gz → 2.0.55__tar.gz

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/.gitignore

@@ -11,3 +11,4 @@ build/
 .ruff_cache/
 __pycache__/
 .coverage
+release-assets/

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mammoth-cli
-Version: 2.0.54
+Version: 2.0.55
 Summary: Command-line interface for the Mammoth Analytics platform
 Project-URL: homepage, https://mammoth.io
 Project-URL: repository, https://github.com/EdgeMetric/mammothsdk
@@ -17,7 +17,7 @@ Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Requires-Python: <3.15,>=3.12
 Requires-Dist: jsonschema>=4.20
 Requires-Dist: keyring<26,>=25.7
-Requires-Dist: mammoth-io<0.8,>=0.7.25
+Requires-Dist: mammoth-io<0.8,>=0.7.26
 Requires-Dist: platformdirs<5,>=4.10
 Requires-Dist: pydantic<3,>=2.13
 Requires-Dist: pyyaml<7,>=6

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/mammoth_cli/__init__.py

@@ -6,7 +6,7 @@ not implement a second HTTP client and does not call private SDK members.
 
 from __future__ import annotations
 
-__version__ = "2.0.54"
+__version__ = "2.0.55"
 
 # The versioned machine output envelope contract.
 SCHEMA_VERSION = 1

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/mammoth_cli/bundled_skill/mammoth-cli/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: mammoth-cli
-version: 2.0.54
+version: 2.0.55
 description: "Use Mammoth Analytics from a terminal: install or authenticate the CLI, discover its live command contract, and safely manage projects, data, views, pipelines (join, merge, pivot, filter, clean), dashboards, exports, and handoffs."
 ---
 

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/mammoth_cli/bundled_skill/mammoth-cli/references/command-index.md

@@ -1,6 +1,6 @@
 # Published CLI command catalog
 
-This generated catalog is a lookup table for every command in the published CLI manifest, currently 557; each entry carries its release status line. It is a command-contract index, not an assertion that every backend/OpenAPI operation has a CLI binding. For an exact local CLI contract, run `mammoth schema get COMMAND_ID`; `mammoth capability list` is an API-binding inventory and can omit typed/local CLI routes. For focused workflows, read the [recipes index](recipes/index.md). Sensitive structured input must come from a private file or pipe; never put secrets in literal argv.
+This generated catalog is a lookup table for every command in the published CLI manifest, currently 565; each entry carries its release status line. It is a command-contract index, not an assertion that every backend/OpenAPI operation has a CLI binding. For an exact local CLI contract, run `mammoth schema get COMMAND_ID`; `mammoth capability list` is an API-binding inventory and can omit typed/local CLI routes. For focused workflows, read the [recipes index](recipes/index.md). Sensitive structured input must come from a private file or pipe; never put secrets in literal argv.
 
 Load only the applicable domain file:
 
@@ -21,7 +21,7 @@ Load only the applicable domain file:
 - [connector](commands/connector.md) — 22 published commands
 - [context](commands/context.md) — 3 published commands
 - [dashboard-qa](commands/dashboard-qa.md) — 13 published commands
-- [dashboard](commands/dashboard.md) — 90 published commands
+- [dashboard](commands/dashboard.md) — 98 published commands
 - [data-app](commands/data-app.md) — 12 published commands
 - [dataset](commands/dataset.md) — 17 published commands
 - [doctor](commands/doctor.md) — 1 published commands

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/mammoth_cli/bundled_skill/mammoth-cli/references/commands/dashboard.md

@@ -222,6 +222,86 @@ Result: `DashboardDuplicateResult`; mutation `benign_mutation`, confirmation `no
 
 Status on release: ran once on CLI 2.0.12 — Dashboard sweep 2026-09-18: exit 0 on release with CLI 2.0.12; result keys: id. duplicated D=52 -> D2=54 Single invocation only; no error-path or variant coverage.
 
+### `dashboard.embed.config.get`
+
+Run: `mammoth dashboard embed config get`. Exact input fields: `mammoth schema get dashboard.embed.config.get`.
+
+Example: `mammoth dashboard embed config get 123`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardEmbedConfigGetResult`; mutation `read`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.config.set`
+
+Run: `mammoth dashboard embed config set`. Exact input fields: `mammoth schema get dashboard.embed.config.set`.
+
+Example: `mammoth dashboard embed config set 123 --yes --confirm 123`. Illustrative only: append `--yes --confirm <EXACT_TARGET>` after observing the target.
+
+Result: `DashboardEmbedConfigSetResult`; mutation `high_impact`, confirmation `confirm_target`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.key.rotate`
+
+Run: `mammoth dashboard embed key rotate`. Exact input fields: `mammoth schema get dashboard.embed.key.rotate`.
+
+Example: `mammoth dashboard embed key rotate 123 --yes --confirm 123`. Illustrative only: append `--yes --confirm <EXACT_TARGET>` after observing the target.
+
+Result: `DashboardEmbedKeyRotateResult`; mutation `high_impact`, confirmation `confirm_target`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.lifetime.set`
+
+Run: `mammoth dashboard embed lifetime set`. Exact input fields: `mammoth schema get dashboard.embed.lifetime.set`.
+
+Example: `mammoth dashboard embed lifetime set 123 --input '{"token_ttl": 1}'`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardEmbedLifetimeSetResult`; mutation `benign_mutation`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.origin.revoke`
+
+Run: `mammoth dashboard embed origin revoke`. Exact input fields: `mammoth schema get dashboard.embed.origin.revoke`.
+
+Example: `mammoth dashboard embed origin revoke 123 --input '{"origin": "sample"}' --yes --confirm 123`. Illustrative only: append `--yes --confirm <EXACT_TARGET>` after observing the target.
+
+Result: `DashboardEmbedOriginRevokeResult`; mutation `high_impact`, confirmation `confirm_target`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.preview-token.create`
+
+Run: `mammoth dashboard embed preview-token create`. Exact input fields: `mammoth schema get dashboard.embed.preview-token.create`.
+
+Example: `mammoth dashboard embed preview-token create 123`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardEmbedPreviewTokenCreateResult`; mutation `benign_mutation`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.secret.rotate`
+
+Run: `mammoth dashboard embed secret rotate`. Exact input fields: `mammoth schema get dashboard.embed.secret.rotate`.
+
+Example: `mammoth dashboard embed secret rotate 123 --yes --confirm 123`. Illustrative only: append `--yes --confirm <EXACT_TARGET>` after observing the target.
+
+Result: `DashboardEmbedSecretRotateResult`; mutation `high_impact`, confirmation `confirm_target`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.usage.get`
+
+Run: `mammoth dashboard embed usage get`. Exact input fields: `mammoth schema get dashboard.embed.usage.get`.
+
+Example: `mammoth dashboard embed usage get 123`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardEmbedUsageGetResult`; mutation `read`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
 ### `dashboard.exemplar.extract`
 
 Run: `mammoth dashboard exemplar extract`. Exact input fields: `mammoth schema get dashboard.exemplar.extract`.

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/mammoth_cli/bundled_skill/mammoth-cli/references/recipes/dashboards.md

@@ -155,3 +155,36 @@ before that they return 404 `DASHBOARD_NOT_FOUND`. Legacy widget routes
 `video export` needs a motion-story dashboard. Revert the share
 (`type_of_auth: "mammoth"`) before trashing a temporary dashboard.
 
+## Embedding a board on a third-party page
+
+`dashboard embed config get DASHBOARD_ID` reads the board's embed settings
+(mode, origin allowlist, the `embed_url`/`sdk_url` a snippet needs); the first
+read on a non-public board without a key auto-mints one, so there is always a
+key to copy. `dashboard embed config set DASHBOARD_ID --yes --confirm
+DASHBOARD_ID --input '{"allow_any_origin": false, "allowed_origins":
+["https://intranet.example.com"]}'` restricts which sites may frame it —
+`allow_any_origin` defaults to true (any site). `mode: "signed"` requires a
+host-signed token instead of the board's key, and only applies while the
+board has no public link. `config set` is a `confirm_target` command, like
+`dashboard archive`: it can expose the board outside Mammoth (enabling
+embedding or widening the allowlist) or break every live embed on that board
+(disabling it or narrowing the allowlist).
+
+`dashboard embed key rotate DASHBOARD_ID --yes --confirm DASHBOARD_ID`
+replaces the board's embed key (the old key keeps working for 24h unless
+`keep_previous: false` is passed) — also `confirm_target`. `dashboard embed
+origin revoke DASHBOARD_ID --yes --confirm DASHBOARD_ID --input
+'{"origin": "https://old.example.com"}'` removes one origin from the
+allowlist without touching the rest — also `confirm_target`: it immediately
+breaks the embed on that origin's site. `dashboard embed usage get
+DASHBOARD_ID` reports per-origin render counts and health from the embed
+registry. `dashboard embed preview-token create DASHBOARD_ID` mints a
+short-lived signed token for testing a row-level-security-scoped embed
+before publishing.
+
+Two settings are workspace-scoped, not board-scoped: `dashboard embed secret
+rotate WORKSPACE_ID --yes --confirm WORKSPACE_ID` (also `confirm_target`;
+returns the plaintext signing secret once, never on a read) and `dashboard
+embed lifetime set WORKSPACE_ID --input '{"token_ttl": 900}'` (60-3600
+seconds, how long a minted embed viewer session lives).
+

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/mammoth_cli/commands/registry.py

@@ -376,6 +376,14 @@ HANDLERS: dict[str, Handler] = {
     "dashboard.assess-twb": dashboard_cmd.dashboard_assess_twb,
     "dashboard.assess-pbix": dashboard_cmd.dashboard_assess_pbix,
     "dashboard.import-workbook": dashboard_cmd.dashboard_import_workbook,
+    "dashboard.embed.config.get": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.config.set": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.key.rotate": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.usage.get": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.origin.revoke": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.preview-token.create": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.secret.rotate": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.lifetime.set": dashboard_cmd.generated_dashboard,
     # workflow family
     "workflow.block.add": workflow_cmd.workflow_block_add,
     "workflow.block.auth": workflow_cmd.workflow_block_auth,

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/mammoth_cli/commands/schema.py

@@ -893,8 +893,14 @@ def runnable_example(
         # their manifests advertise; otherwise discovery emits a command that
         # deterministically fails before dispatch.
         tokens.append("--yes")
-    if record["command_id"] == "project.resource-dependencies.update":
-        # This command has a confirm_target policy.  Keep its generated
+    if record["command_id"] in {
+        "project.resource-dependencies.update",
+        "dashboard.embed.key.rotate",
+        "dashboard.embed.secret.rotate",
+        "dashboard.embed.config.set",
+        "dashboard.embed.origin.revoke",
+    }:
+        # These commands have a confirm_target policy.  Keep their generated
         # example executable in non-interactive mode instead of advertising a
         # request that the safety guard will reject.
         tokens.extend(["--yes", "--confirm", str(_sample_positional_value(positionals[0]))])

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/pyproject.toml

@@ -1,13 +1,13 @@
 [project]
 name = "mammoth-cli"
-version = "2.0.54"
+version = "2.0.55"
 description = "Command-line interface for the Mammoth Analytics platform"
 authors = [{name = "Mammoth Analytics", email = "support@mammoth.io"}]
 readme = "README.md"
 license = "LicenseRef-Proprietary"
 requires-python = ">=3.12,<3.15"
 dependencies = [
-    "mammoth-io (>=0.7.25,<0.8)",
+    "mammoth-io (>=0.7.26,<0.8)",
     "typer (>=0.27,<0.28)",
     "rich (>=15,<16)",
     "platformdirs (>=4.10,<5)",

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/spec/manifests/commands/dashboard.yaml

@@ -864,6 +864,333 @@ commands:
   undo_test: null
   known_restrictions: null
   reviewed_by: primary
+- command_id: dashboard.embed.config.get
+  command_path: dashboard embed config get
+  disposition: command
+  alias_of: null
+  operation_ids:
+  - GetEmbedConfig
+  positionals:
+  - name: dashboard_id
+    type: int
+    required: true
+    metavar: DASHBOARD_ID
+    falls_back_to_field: null
+    help: ID of the dashboard.
+  options: []
+  sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_config_get
+  sdk_conversion: Call mammoth.api.dashboards.DashboardsAPI.embed_config_get with validated request fields.
+  request_model: DashboardEmbedConfigGetRequest
+  result_model: DashboardEmbedConfigGetResult
+  mutation_class: read
+  confirmation: none
+  wait_policy: not_async
+  pagination_policy: none
+  acceptance_evidence: live_read_only
+  live_test: LT-DASHBOARD-EMBED-CONFIG-GET
+  live_exemption_reason: null
+  contract_fixture: null
+  required_fixture_guard: null
+  secret_fields: []
+  human_example: mammoth dashboard embed config get DASHBOARD_ID --help
+  agent_example: 'mammoth dashboard embed config get 123'
+  unit_tests:
+  - UT-DASHBOARD-EMBED-CONFIG-GET
+  contract_tests:
+  - CT-DASHBOARD-EMBED-CONFIG-GET-HUMAN
+  - CT-DASHBOARD-EMBED-CONFIG-GET-JSON
+  - CT-DASHBOARD-EMBED-CONFIG-GET-ERROR
+  draft_test: null
+  undo_test: null
+  known_restrictions: null
+  reviewed_by: primary
+
+- command_id: dashboard.embed.config.set
+  command_path: dashboard embed config set
+  disposition: command
+  alias_of: null
+  operation_ids:
+  - PutEmbedConfig
+  positionals:
+  - name: dashboard_id
+    type: int
+    required: true
+    metavar: DASHBOARD_ID
+    falls_back_to_field: null
+    help: ID of the dashboard.
+  options: []
+  sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_config_set
+  sdk_conversion: Call mammoth.api.dashboards.DashboardsAPI.embed_config_set with validated request fields.
+  request_model: DashboardEmbedConfigSetRequest
+  result_model: DashboardEmbedConfigSetResult
+  mutation_class: high_impact
+  confirmation: confirm_target
+  wait_policy: not_async
+  pagination_policy: none
+  acceptance_evidence: contract_only_no_disposable_fixture
+  live_test: null
+  live_exemption_reason: Dashboard mutation has contract coverage but no automated disposable-dashboard fixture in tests/live.
+  contract_fixture: null
+  required_fixture_guard: null
+  secret_fields: []
+  human_example: mammoth dashboard embed config set DASHBOARD_ID --help
+  agent_example: mammoth dashboard embed config set 123 --yes --confirm 123
+  unit_tests:
+  - UT-DASHBOARD-EMBED-CONFIG-SET
+  contract_tests:
+  - CT-DASHBOARD-EMBED-CONFIG-SET-HUMAN
+  - CT-DASHBOARD-EMBED-CONFIG-SET-JSON
+  - CT-DASHBOARD-EMBED-CONFIG-SET-ERROR
+  draft_test: null
+  undo_test: null
+  known_restrictions: null
+  reviewed_by: primary
+
+- command_id: dashboard.embed.key.rotate
+  command_path: dashboard embed key rotate
+  disposition: command
+  alias_of: null
+  operation_ids:
+  - RotateEmbedKey
+  positionals:
+  - name: dashboard_id
+    type: int
+    required: true
+    metavar: DASHBOARD_ID
+    falls_back_to_field: null
+    help: ID of the dashboard.
+  options: []
+  sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_key_rotate
+  sdk_conversion: Call mammoth.api.dashboards.DashboardsAPI.embed_key_rotate with validated request fields.
+  request_model: DashboardEmbedKeyRotateRequest
+  result_model: DashboardEmbedKeyRotateResult
+  mutation_class: high_impact
+  confirmation: confirm_target
+  wait_policy: not_async
+  pagination_policy: none
+  acceptance_evidence: contract_only_high_impact
+  live_test: null
+  live_exemption_reason: High-impact or external-effect operation without a disposable fixture.
+  contract_fixture: null
+  required_fixture_guard: null
+  secret_fields: []
+  human_example: mammoth dashboard embed key rotate DASHBOARD_ID --help
+  agent_example: 'mammoth dashboard embed key rotate 123 --yes --confirm 123'
+  unit_tests:
+  - UT-DASHBOARD-EMBED-KEY-ROTATE
+  contract_tests:
+  - CT-DASHBOARD-EMBED-KEY-ROTATE-HUMAN
+  - CT-DASHBOARD-EMBED-KEY-ROTATE-JSON
+  - CT-DASHBOARD-EMBED-KEY-ROTATE-ERROR
+  draft_test: null
+  undo_test: null
+  known_restrictions: null
+  reviewed_by: primary
+
+- command_id: dashboard.embed.usage.get
+  command_path: dashboard embed usage get
+  disposition: command
+  alias_of: null
+  operation_ids:
+  - GetEmbedUsage
+  positionals:
+  - name: dashboard_id
+    type: int
+    required: true
+    metavar: DASHBOARD_ID
+    falls_back_to_field: null
+    help: ID of the dashboard.
+  options: []
+  sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_usage_get
+  sdk_conversion: Call mammoth.api.dashboards.DashboardsAPI.embed_usage_get with validated request fields.
+  request_model: DashboardEmbedUsageGetRequest
+  result_model: DashboardEmbedUsageGetResult
+  mutation_class: read
+  confirmation: none
+  wait_policy: not_async
+  pagination_policy: none
+  acceptance_evidence: live_read_only
+  live_test: LT-DASHBOARD-EMBED-USAGE-GET
+  live_exemption_reason: null
+  contract_fixture: null
+  required_fixture_guard: null
+  secret_fields: []
+  human_example: mammoth dashboard embed usage get DASHBOARD_ID --help
+  agent_example: 'mammoth dashboard embed usage get 123'
+  unit_tests:
+  - UT-DASHBOARD-EMBED-USAGE-GET
+  contract_tests:
+  - CT-DASHBOARD-EMBED-USAGE-GET-HUMAN
+  - CT-DASHBOARD-EMBED-USAGE-GET-JSON
+  - CT-DASHBOARD-EMBED-USAGE-GET-ERROR
+  draft_test: null
+  undo_test: null
+  known_restrictions: null
+  reviewed_by: primary
+
+- command_id: dashboard.embed.origin.revoke
+  command_path: dashboard embed origin revoke
+  disposition: command
+  alias_of: null
+  operation_ids:
+  - RevokeOrigin
+  positionals:
+  - name: dashboard_id
+    type: int
+    required: true
+    metavar: DASHBOARD_ID
+    falls_back_to_field: null
+    help: ID of the dashboard.
+  options: []
+  sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_origin_revoke
+  sdk_conversion: Call mammoth.api.dashboards.DashboardsAPI.embed_origin_revoke with validated request fields.
+  request_model: DashboardEmbedOriginRevokeRequest
+  result_model: DashboardEmbedOriginRevokeResult
+  mutation_class: high_impact
+  confirmation: confirm_target
+  wait_policy: not_async
+  pagination_policy: none
+  acceptance_evidence: contract_only_no_disposable_fixture
+  live_test: null
+  live_exemption_reason: Dashboard mutation has contract coverage but no automated disposable-dashboard fixture in tests/live.
+  contract_fixture: null
+  required_fixture_guard: null
+  secret_fields: []
+  human_example: mammoth dashboard embed origin revoke DASHBOARD_ID --help
+  agent_example: 'mammoth dashboard embed origin revoke 123 --input ''{"origin": "sample"}'' --yes --confirm 123'
+  unit_tests:
+  - UT-DASHBOARD-EMBED-ORIGIN-REVOKE
+  contract_tests:
+  - CT-DASHBOARD-EMBED-ORIGIN-REVOKE-HUMAN
+  - CT-DASHBOARD-EMBED-ORIGIN-REVOKE-JSON
+  - CT-DASHBOARD-EMBED-ORIGIN-REVOKE-ERROR
+  draft_test: null
+  undo_test: null
+  known_restrictions: null
+  reviewed_by: primary
+
+- command_id: dashboard.embed.preview-token.create
+  command_path: dashboard embed preview-token create
+  disposition: command
+  alias_of: null
+  operation_ids:
+  - PreviewToken
+  positionals:
+  - name: dashboard_id
+    type: int
+    required: true
+    metavar: DASHBOARD_ID
+    falls_back_to_field: null
+    help: ID of the dashboard.
+  options: []
+  sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_preview_token_create
+  sdk_conversion: Call mammoth.api.dashboards.DashboardsAPI.embed_preview_token_create with validated request fields.
+  request_model: DashboardEmbedPreviewTokenCreateRequest
+  result_model: DashboardEmbedPreviewTokenCreateResult
+  mutation_class: benign_mutation
+  confirmation: none
+  wait_policy: not_async
+  pagination_policy: none
+  acceptance_evidence: contract_only_no_disposable_fixture
+  live_test: null
+  live_exemption_reason: Dashboard mutation has contract coverage but no automated disposable-dashboard fixture in tests/live.
+  contract_fixture: null
+  required_fixture_guard: null
+  secret_fields: []
+  human_example: mammoth dashboard embed preview-token create DASHBOARD_ID --help
+  agent_example: mammoth dashboard embed preview-token create 123
+  unit_tests:
+  - UT-DASHBOARD-EMBED-PREVIEW-TOKEN-CREATE
+  contract_tests:
+  - CT-DASHBOARD-EMBED-PREVIEW-TOKEN-CREATE-HUMAN
+  - CT-DASHBOARD-EMBED-PREVIEW-TOKEN-CREATE-JSON
+  - CT-DASHBOARD-EMBED-PREVIEW-TOKEN-CREATE-ERROR
+  draft_test: null
+  undo_test: null
+  known_restrictions: null
+  reviewed_by: primary
+
+- command_id: dashboard.embed.secret.rotate
+  command_path: dashboard embed secret rotate
+  disposition: command
+  alias_of: null
+  operation_ids:
+  - RotateEmbedSecret
+  positionals:
+  - name: workspace_id
+    type: int
+    required: true
+    metavar: WORKSPACE_ID
+    falls_back_to_field: null
+    help: ID of the workspace.
+  options: []
+  sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_secret_rotate
+  sdk_conversion: Call mammoth.api.dashboards.DashboardsAPI.embed_secret_rotate with validated request fields.
+  request_model: DashboardEmbedSecretRotateRequest
+  result_model: DashboardEmbedSecretRotateResult
+  mutation_class: high_impact
+  confirmation: confirm_target
+  wait_policy: not_async
+  pagination_policy: none
+  acceptance_evidence: contract_only_high_impact
+  live_test: null
+  live_exemption_reason: High-impact or external-effect operation without a disposable fixture.
+  contract_fixture: null
+  required_fixture_guard: null
+  secret_fields: []
+  human_example: mammoth dashboard embed secret rotate WORKSPACE_ID --help
+  agent_example: 'mammoth dashboard embed secret rotate 123 --yes --confirm 123'
+  unit_tests:
+  - UT-DASHBOARD-EMBED-SECRET-ROTATE
+  contract_tests:
+  - CT-DASHBOARD-EMBED-SECRET-ROTATE-HUMAN
+  - CT-DASHBOARD-EMBED-SECRET-ROTATE-JSON
+  - CT-DASHBOARD-EMBED-SECRET-ROTATE-ERROR
+  draft_test: null
+  undo_test: null
+  known_restrictions: null
+  reviewed_by: primary
+
+- command_id: dashboard.embed.lifetime.set
+  command_path: dashboard embed lifetime set
+  disposition: command
+  alias_of: null
+  operation_ids:
+  - SetEmbedLifetime
+  positionals:
+  - name: workspace_id
+    type: int
+    required: true
+    metavar: WORKSPACE_ID
+    falls_back_to_field: null
+    help: ID of the workspace.
+  options: []
+  sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_lifetime_set
+  sdk_conversion: Call mammoth.api.dashboards.DashboardsAPI.embed_lifetime_set with validated request fields.
+  request_model: DashboardEmbedLifetimeSetRequest
+  result_model: DashboardEmbedLifetimeSetResult
+  mutation_class: benign_mutation
+  confirmation: none
+  wait_policy: not_async
+  pagination_policy: none
+  acceptance_evidence: contract_only_no_disposable_fixture
+  live_test: null
+  live_exemption_reason: Dashboard mutation has contract coverage but no automated disposable-dashboard fixture in tests/live.
+  contract_fixture: null
+  required_fixture_guard: null
+  secret_fields: []
+  human_example: mammoth dashboard embed lifetime set WORKSPACE_ID --help
+  agent_example: 'mammoth dashboard embed lifetime set 123 --input ''{"token_ttl": 1}'''
+  unit_tests:
+  - UT-DASHBOARD-EMBED-LIFETIME-SET
+  contract_tests:
+  - CT-DASHBOARD-EMBED-LIFETIME-SET-HUMAN
+  - CT-DASHBOARD-EMBED-LIFETIME-SET-JSON
+  - CT-DASHBOARD-EMBED-LIFETIME-SET-ERROR
+  draft_test: null
+  undo_test: null
+  known_restrictions: null
+  reviewed_by: primary
 - command_id: dashboard.exemplar.extract
   command_path: dashboard exemplar extract
   disposition: command

{mammoth_cli-2.0.54 → mammoth_cli-2.0.55}/spec/manifests/sdk-catalog.source.yaml

@@ -1087,6 +1087,78 @@ sdk_methods:
   pagination_policy: none
   openapi_operation_ids:
   - ArchiveDashboard
+- sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_config_get
+  canonical_command: dashboard.embed.config.get
+  alias_of: null
+  mutation_class: read
+  wait_policy: not_async
+  pagination_policy: none
+  openapi_operation_ids:
+  - GetEmbedConfig
+- sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_config_set
+  canonical_command: dashboard.embed.config.set
+  alias_of: null
+  mutation_class: high_impact
+  confirmation: confirm_target
+  wait_policy: not_async
+  pagination_policy: none
+  openapi_operation_ids:
+  - PutEmbedConfig
+  notes: Can expose the board outside Mammoth (enabling embedding) or break live embeds (disabling it or narrowing the origin allowlist).
+- sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_key_rotate
+  canonical_command: dashboard.embed.key.rotate
+  alias_of: null
+  mutation_class: high_impact
+  confirmation: confirm_target
+  wait_policy: not_async
+  pagination_policy: none
+  openapi_operation_ids:
+  - RotateEmbedKey
+  notes: Invalidates the board's previous embed key (24h overlap unless keep_previous is false).
+- sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_usage_get
+  canonical_command: dashboard.embed.usage.get
+  alias_of: null
+  mutation_class: read
+  wait_policy: not_async
+  pagination_policy: none
+  openapi_operation_ids:
+  - GetEmbedUsage
+- sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_origin_revoke
+  canonical_command: dashboard.embed.origin.revoke
+  alias_of: null
+  mutation_class: high_impact
+  confirmation: confirm_target
+  wait_policy: not_async
+  pagination_policy: none
+  openapi_operation_ids:
+  - RevokeOrigin
+  notes: Immediately breaks the embedded dashboard on that origin's site.
+- sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_preview_token_create
+  canonical_command: dashboard.embed.preview-token.create
+  alias_of: null
+  mutation_class: benign_mutation
+  wait_policy: not_async
+  pagination_policy: none
+  openapi_operation_ids:
+  - PreviewToken
+- sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_secret_rotate
+  canonical_command: dashboard.embed.secret.rotate
+  alias_of: null
+  mutation_class: high_impact
+  confirmation: confirm_target
+  wait_policy: not_async
+  pagination_policy: none
+  openapi_operation_ids:
+  - RotateEmbedSecret
+  notes: Invalidates the workspace's previous embed signing secret (24h overlap). Owners/admins only.
+- sdk_symbol: mammoth.api.dashboards.DashboardsAPI.embed_lifetime_set
+  canonical_command: dashboard.embed.lifetime.set
+  alias_of: null
+  mutation_class: benign_mutation
+  wait_policy: not_async
+  pagination_policy: none
+  openapi_operation_ids:
+  - SetEmbedLifetime
 - sdk_symbol: mammoth.api.dashboards.DashboardsAPI.action
   canonical_command: dashboard.action
   alias_of: null