mammoth-cli 2.0.54__tar.gz → 2.0.56__tar.gz

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/.gitignore

@@ -11,3 +11,4 @@ build/
 .ruff_cache/
 __pycache__/
 .coverage
+release-assets/

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mammoth-cli
-Version: 2.0.54
+Version: 2.0.56
 Summary: Command-line interface for the Mammoth Analytics platform
 Project-URL: homepage, https://mammoth.io
 Project-URL: repository, https://github.com/EdgeMetric/mammothsdk
@@ -17,7 +17,7 @@ Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Requires-Python: <3.15,>=3.12
 Requires-Dist: jsonschema>=4.20
 Requires-Dist: keyring<26,>=25.7
-Requires-Dist: mammoth-io<0.8,>=0.7.25
+Requires-Dist: mammoth-io<0.8,>=0.7.26
 Requires-Dist: platformdirs<5,>=4.10
 Requires-Dist: pydantic<3,>=2.13
 Requires-Dist: pyyaml<7,>=6

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/mammoth_cli/__init__.py

@@ -6,7 +6,7 @@ not implement a second HTTP client and does not call private SDK members.
 
 from __future__ import annotations
 
-__version__ = "2.0.54"
+__version__ = "2.0.56"
 
 # The versioned machine output envelope contract.
 SCHEMA_VERSION = 1

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/mammoth_cli/bundled_skill/mammoth-cli/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: mammoth-cli
-version: 2.0.54
+version: 2.0.56
 description: "Use Mammoth Analytics from a terminal: install or authenticate the CLI, discover its live command contract, and safely manage projects, data, views, pipelines (join, merge, pivot, filter, clean), dashboards, exports, and handoffs."
 ---
 

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/mammoth_cli/bundled_skill/mammoth-cli/references/command-index.md

@@ -1,6 +1,6 @@
 # Published CLI command catalog
 
-This generated catalog is a lookup table for every command in the published CLI manifest, currently 557; each entry carries its release status line. It is a command-contract index, not an assertion that every backend/OpenAPI operation has a CLI binding. For an exact local CLI contract, run `mammoth schema get COMMAND_ID`; `mammoth capability list` is an API-binding inventory and can omit typed/local CLI routes. For focused workflows, read the [recipes index](recipes/index.md). Sensitive structured input must come from a private file or pipe; never put secrets in literal argv.
+This generated catalog is a lookup table for every command in the published CLI manifest, currently 565; each entry carries its release status line. It is a command-contract index, not an assertion that every backend/OpenAPI operation has a CLI binding. For an exact local CLI contract, run `mammoth schema get COMMAND_ID`; `mammoth capability list` is an API-binding inventory and can omit typed/local CLI routes. For focused workflows, read the [recipes index](recipes/index.md). Sensitive structured input must come from a private file or pipe; never put secrets in literal argv.
 
 Load only the applicable domain file:
 
@@ -21,7 +21,7 @@ Load only the applicable domain file:
 - [connector](commands/connector.md) — 22 published commands
 - [context](commands/context.md) — 3 published commands
 - [dashboard-qa](commands/dashboard-qa.md) — 13 published commands
-- [dashboard](commands/dashboard.md) — 90 published commands
+- [dashboard](commands/dashboard.md) — 98 published commands
 - [data-app](commands/data-app.md) — 12 published commands
 - [dataset](commands/dataset.md) — 17 published commands
 - [doctor](commands/doctor.md) — 1 published commands

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/mammoth_cli/bundled_skill/mammoth-cli/references/commands/dashboard.md

@@ -222,6 +222,86 @@ Result: `DashboardDuplicateResult`; mutation `benign_mutation`, confirmation `no
 
 Status on release: ran once on CLI 2.0.12 — Dashboard sweep 2026-09-18: exit 0 on release with CLI 2.0.12; result keys: id. duplicated D=52 -> D2=54 Single invocation only; no error-path or variant coverage.
 
+### `dashboard.embed.config.get`
+
+Run: `mammoth dashboard embed config get`. Exact input fields: `mammoth schema get dashboard.embed.config.get`.
+
+Example: `mammoth dashboard embed config get 123`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardEmbedConfigGetResult`; mutation `read`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.config.set`
+
+Run: `mammoth dashboard embed config set`. Exact input fields: `mammoth schema get dashboard.embed.config.set`.
+
+Example: `mammoth dashboard embed config set 123 --yes --confirm 123`. Illustrative only: append `--yes --confirm <EXACT_TARGET>` after observing the target.
+
+Result: `DashboardEmbedConfigSetResult`; mutation `high_impact`, confirmation `confirm_target`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.key.rotate`
+
+Run: `mammoth dashboard embed key rotate`. Exact input fields: `mammoth schema get dashboard.embed.key.rotate`.
+
+Example: `mammoth dashboard embed key rotate 123 --yes --confirm 123`. Illustrative only: append `--yes --confirm <EXACT_TARGET>` after observing the target.
+
+Result: `DashboardEmbedKeyRotateResult`; mutation `high_impact`, confirmation `confirm_target`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.lifetime.set`
+
+Run: `mammoth dashboard embed lifetime set`. Exact input fields: `mammoth schema get dashboard.embed.lifetime.set`.
+
+Example: `mammoth dashboard embed lifetime set 123 --input '{"token_ttl": 1}'`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardEmbedLifetimeSetResult`; mutation `benign_mutation`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.origin.revoke`
+
+Run: `mammoth dashboard embed origin revoke`. Exact input fields: `mammoth schema get dashboard.embed.origin.revoke`.
+
+Example: `mammoth dashboard embed origin revoke 123 --input '{"origin": "sample"}' --yes --confirm 123`. Illustrative only: append `--yes --confirm <EXACT_TARGET>` after observing the target.
+
+Result: `DashboardEmbedOriginRevokeResult`; mutation `high_impact`, confirmation `confirm_target`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.preview-token.create`
+
+Run: `mammoth dashboard embed preview-token create`. Exact input fields: `mammoth schema get dashboard.embed.preview-token.create`.
+
+Example: `mammoth dashboard embed preview-token create 123`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardEmbedPreviewTokenCreateResult`; mutation `benign_mutation`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.secret.rotate`
+
+Run: `mammoth dashboard embed secret rotate`. Exact input fields: `mammoth schema get dashboard.embed.secret.rotate`.
+
+Example: `mammoth dashboard embed secret rotate 123 --yes --confirm 123`. Illustrative only: append `--yes --confirm <EXACT_TARGET>` after observing the target.
+
+Result: `DashboardEmbedSecretRotateResult`; mutation `high_impact`, confirmation `confirm_target`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `dashboard.embed.usage.get`
+
+Run: `mammoth dashboard embed usage get`. Exact input fields: `mammoth schema get dashboard.embed.usage.get`.
+
+Example: `mammoth dashboard embed usage get 123`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardEmbedUsageGetResult`; mutation `read`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
 ### `dashboard.exemplar.extract`
 
 Run: `mammoth dashboard exemplar extract`. Exact input fields: `mammoth schema get dashboard.exemplar.extract`.

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/mammoth_cli/bundled_skill/mammoth-cli/references/recipes/dashboards.md

@@ -155,3 +155,36 @@ before that they return 404 `DASHBOARD_NOT_FOUND`. Legacy widget routes
 `video export` needs a motion-story dashboard. Revert the share
 (`type_of_auth: "mammoth"`) before trashing a temporary dashboard.
 
+## Embedding a board on a third-party page
+
+`dashboard embed config get DASHBOARD_ID` reads the board's embed settings
+(mode, origin allowlist, the `embed_url`/`sdk_url` a snippet needs); the first
+read on a non-public board without a key auto-mints one, so there is always a
+key to copy. `dashboard embed config set DASHBOARD_ID --yes --confirm
+DASHBOARD_ID --input '{"allow_any_origin": false, "allowed_origins":
+["https://intranet.example.com"]}'` restricts which sites may frame it —
+`allow_any_origin` defaults to true (any site). `mode: "signed"` requires a
+host-signed token instead of the board's key, and only applies while the
+board has no public link. `config set` is a `confirm_target` command, like
+`dashboard archive`: it can expose the board outside Mammoth (enabling
+embedding or widening the allowlist) or break every live embed on that board
+(disabling it or narrowing the allowlist).
+
+`dashboard embed key rotate DASHBOARD_ID --yes --confirm DASHBOARD_ID`
+replaces the board's embed key (the old key keeps working for 24h unless
+`keep_previous: false` is passed) — also `confirm_target`. `dashboard embed
+origin revoke DASHBOARD_ID --yes --confirm DASHBOARD_ID --input
+'{"origin": "https://old.example.com"}'` removes one origin from the
+allowlist without touching the rest — also `confirm_target`: it immediately
+breaks the embed on that origin's site. `dashboard embed usage get
+DASHBOARD_ID` reports per-origin render counts and health from the embed
+registry. `dashboard embed preview-token create DASHBOARD_ID` mints a
+short-lived signed token for testing a row-level-security-scoped embed
+before publishing.
+
+Two settings are workspace-scoped, not board-scoped: `dashboard embed secret
+rotate WORKSPACE_ID --yes --confirm WORKSPACE_ID` (also `confirm_target`;
+returns the plaintext signing secret once, never on a read) and `dashboard
+embed lifetime set WORKSPACE_ID --input '{"token_ttl": 900}'` (60-3600
+seconds, how long a minted embed viewer session lives).
+

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/mammoth_cli/commands/registry.py

@@ -376,6 +376,14 @@ HANDLERS: dict[str, Handler] = {
     "dashboard.assess-twb": dashboard_cmd.dashboard_assess_twb,
     "dashboard.assess-pbix": dashboard_cmd.dashboard_assess_pbix,
     "dashboard.import-workbook": dashboard_cmd.dashboard_import_workbook,
+    "dashboard.embed.config.get": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.config.set": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.key.rotate": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.usage.get": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.origin.revoke": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.preview-token.create": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.secret.rotate": dashboard_cmd.generated_dashboard,
+    "dashboard.embed.lifetime.set": dashboard_cmd.generated_dashboard,
     # workflow family
     "workflow.block.add": workflow_cmd.workflow_block_add,
     "workflow.block.auth": workflow_cmd.workflow_block_auth,

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/mammoth_cli/commands/schema.py

@@ -893,8 +893,14 @@ def runnable_example(
         # their manifests advertise; otherwise discovery emits a command that
         # deterministically fails before dispatch.
         tokens.append("--yes")
-    if record["command_id"] == "project.resource-dependencies.update":
-        # This command has a confirm_target policy.  Keep its generated
+    if record["command_id"] in {
+        "project.resource-dependencies.update",
+        "dashboard.embed.key.rotate",
+        "dashboard.embed.secret.rotate",
+        "dashboard.embed.config.set",
+        "dashboard.embed.origin.revoke",
+    }:
+        # These commands have a confirm_target policy.  Keep their generated
         # example executable in non-interactive mode instead of advertising a
         # request that the safety guard will reject.
         tokens.extend(["--yes", "--confirm", str(_sample_positional_value(positionals[0]))])

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/mammoth_cli/commands/view.py

@@ -24,6 +24,7 @@ import inspect
 from datetime import UTC, datetime
 from typing import Any
 
+from mammoth.models.exports import ExportStatus
 from mammoth.view import ViewExport
 
 from mammoth_cli.context import profiles
@@ -2300,9 +2301,35 @@ def view_export_specialized(invocation: Invocation) -> HandlerResult:
                 ),
                 details={"dataset_id": dataset_id, "target_ds_id": int(target_ds_id)},
             )
-        rows_before = None
-        if target_ds_id is not None and kwargs.get("save_as_mode") == "APPEND_TO_DS":
-            rows_before = _dataset_row_count(service, int(target_ds_id), result_project_id)
+        if target_ds_id is not None:
+            # Each `view export dataset` call creates its own PERSISTENT
+            # export trigger on this view, which re-runs on every pipeline
+            # run; REPLACE_IN_DS/APPEND_TO_DS only ever touch that trigger's
+            # OWN rows. A second export from this view into the same target
+            # is therefore a second writer, not a refresh of the first --
+            # the fix is to rerun the pipeline, not to export again.
+            existing_export = _existing_internal_dataset_export(
+                service, dataview_id, dataset_id, int(target_ds_id)
+            )
+            if existing_export is not None:
+                raise CliError(
+                    code="export_already_exists",
+                    message=(
+                        f"View {dataview_id} already exports into dataset "
+                        f"{int(target_ds_id)} (export {existing_export.id}). This export "
+                        "re-runs on every pipeline run, and REPLACE_IN_DS replaces only "
+                        "its own rows -- a second export into the same target duplicates "
+                        "rows instead of refreshing them."
+                    ),
+                    exit_status=EXIT_USAGE,
+                    hint="Refresh the target by rerunning the pipeline, not by exporting again.",
+                    recovery_commands=[f"mammoth view pipeline rerun {dataview_id}"],
+                    details={
+                        "dataview_id": dataview_id,
+                        "target_ds_id": int(target_ds_id),
+                        "export_id": existing_export.id,
+                    },
+                )
         data = service.call_view(dataview_id, method, dataset_id=dataset_id, **kwargs)
         if is_dataset_route and isinstance(data, int):
             # The SDK returns the bare id of the dataset written to; name it, and
@@ -2316,6 +2343,10 @@ def view_export_specialized(invocation: Invocation) -> HandlerResult:
                 "dataset_id": data,
                 "project_id": result_project_id,
                 "source_view_id": dataview_id,
+                # Every internal-dataset export is a pipeline trigger, not a
+                # one-shot copy: it re-runs (and re-writes its own rows) every
+                # time this view's pipeline runs.
+                "refreshes_on_pipeline_run": True,
             }
             view_info = _dataset_view_info(service, data["dataset_id"], result_project_id)
             if view_info is not None:
@@ -2325,30 +2356,52 @@ def view_export_specialized(invocation: Invocation) -> HandlerResult:
                 data["next"] = f"mammoth view list {data['dataset_id']}" + (
                     f" --project {result_project_id}" if target_project is not None else ""
                 )
-            rows_after = view_info["row_count"] if view_info is not None else None
-            if rows_after is not None:
-                data["rows_after"] = rows_after
-            if rows_before is not None:
-                data["rows_before"] = rows_before
+            # rows_after is only trustworthy for a brand-new dataset: nothing
+            # else could have written to it yet. Writing into an EXISTING
+            # target_ds_id races the target view's own metadata refresh --
+            # this same read has returned a stale row count right after a
+            # confirmed write -- so it is omitted rather than reported wrong.
+            if target_ds_id is None:
+                rows_after = view_info["row_count"] if view_info is not None else None
+                if rows_after is not None:
+                    data["rows_after"] = rows_after
     return data, _meta(invocation, auth.workspace_id, project_id)
 
 
-def _dataset_row_count(service: Any, dataset_id: int, project_id: int | None) -> int | None:
-    """Best-effort row count for a dataset, read from its first view.
+_EXPORTS_LIST_SYMBOL = "mammoth.api.exports.ExportsAPI.list"
+_INTERNAL_DATASET_HANDLER_TYPE = "internal_dataset"
+
 
-    Row counts are exposed per-view, not per-dataset; this reads the first
-    dataview's ``row_count`` (mirrors ``upload_preview``). ``None`` on any
-    failure rather than failing the export result.
+def _existing_internal_dataset_export(
+    service: Any, dataview_id: int, dataset_id: int | None, target_ds_id: int
+) -> Any | None:
+    """This dataview's ``internal_dataset`` export already writing into
+    ``target_ds_id``, if one exists (the most recent by id, when more than
+    one somehow matches). ``None`` on no match.
+
+    ``TARGET_DS_ID`` is compared as ``int``: the wire value can come back as
+    a string, which would otherwise never match (mirrors the same int/str
+    fix already applied to the SDK's own write-confirmation poll). A
+    soft-deleted export (``status == ExportStatus.DELETED``) is never a
+    match: the backend soft-deletes triggers rather than removing the row,
+    and the list endpoint does not filter on status, so a deleted export
+    would otherwise block every later export into that target forever.
     """
-    try:
-        listing = service.call(_DATAVIEW_LIST_SYMBOL, dataset_id=dataset_id, project_id=project_id)
-        views = listing.get("dataviews") if isinstance(listing, dict) else None
-        if not isinstance(views, list) or not views or not isinstance(views[0], dict):
-            return None
-        row_count = views[0].get("row_count")
-        return int(row_count) if row_count is not None else None
-    except Exception:  # noqa: BLE001 -- row count is advisory, never fails the export
-        return None
+    listing = service.call(
+        _EXPORTS_LIST_SYMBOL,
+        dataview_id=dataview_id,
+        dataset_id=dataset_id,
+        handler_type=_INTERNAL_DATASET_HANDLER_TYPE,
+    )
+    exports = getattr(listing, "exports", None) or []
+    matches = [
+        export
+        for export in exports
+        if export.status is not ExportStatus.DELETED
+        and (target := (export.target_properties or {}).get("TARGET_DS_ID")) is not None
+        and int(target) == target_ds_id
+    ]
+    return max(matches, key=lambda export: export.id or 0) if matches else None
 
 
 def _dataset_view_info(

{mammoth_cli-2.0.54 → mammoth_cli-2.0.56}/pyproject.toml

@@ -1,13 +1,13 @@
 [project]
 name = "mammoth-cli"
-version = "2.0.54"
+version = "2.0.56"
 description = "Command-line interface for the Mammoth Analytics platform"
 authors = [{name = "Mammoth Analytics", email = "support@mammoth.io"}]
 readme = "README.md"
 license = "LicenseRef-Proprietary"
 requires-python = ">=3.12,<3.15"
 dependencies = [
-    "mammoth-io (>=0.7.25,<0.8)",
+    "mammoth-io (>=0.7.26,<0.8)",
     "typer (>=0.27,<0.28)",
     "rich (>=15,<16)",
     "platformdirs (>=4.10,<5)",