mammoth-cli 2.0.7__tar.gz → 2.0.9__tar.gz

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mammoth-cli
-Version: 2.0.7
+Version: 2.0.9
 Summary: Command-line interface for the Mammoth Analytics platform
 Project-URL: homepage, https://mammoth.io
 Project-URL: repository, https://github.com/EdgeMetric/mammothsdk

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/__init__.py

@@ -6,7 +6,7 @@ not implement a second HTTP client and does not call private SDK members.
 
 from __future__ import annotations
 
-__version__ = "2.0.7"
+__version__ = "2.0.9"
 
 # The versioned machine output envelope contract.
 SCHEMA_VERSION = 1

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/bundled_skill/mammoth-cli/SKILL.md

@@ -39,7 +39,10 @@ the result.
 ## Working rules
 
 - Resolve workspace/project/dataset/view parents from reads; pass observed IDs
-  and `--project`. A dataset does not select a default view.
+  and `--project`. A dataset does not select a default view. Every `view`
+  command that changes, exports, or deletes data requires the exact parent
+  `DATASET_ID` (trailing positional or `dataset_id` input field); only reads
+  may omit it and discover the parent. Get it from `mammoth view get VIEW_ID`.
 - Use exact view-schema **display names** in expressions and column inputs,
   never backend aliases.
 - Inspect the result after a mutation. A timeout, exit 7, or interruption does

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/bundled_skill/mammoth-cli/references/auth.md

@@ -17,15 +17,19 @@ An agent never receives the key or secret. When `auth status` reports a
 missing profile or `has_credentials=false`, stop and hand the login to the
 human operator:
 
-1. Tell the operator the exact command to run in **their own** terminal, with
-   the profile name and the intended server prefix:
+1. Tell the operator the exact command to run in **their own** terminal. For
+   production it is just:
 
    ```bash
-   mammoth auth login --profile PROFILE --server-prefix app
+   mammoth auth login
    ```
 
-   The command prompts for the key and secret with hidden input, then the
-   workspace id, so no secret enters chat, argv, or history.
+   Add `--server-prefix release` only when the task names the release
+   environment, and `--profile NAME` only when the operator wants a profile
+   other than `default`. The command prompts for the key and secret with
+   hidden input, then the workspace id, so no secret enters chat, argv, or
+   history. Credentials are per environment: a release key never
+   authenticates on `app`.
 2. Wait for the operator to confirm, then re-run
    `mammoth auth status --profile PROFILE --output json --no-input` and
    `mammoth doctor --profile PROFILE --output json --no-input`.
@@ -53,8 +57,8 @@ If status reports a missing profile or `has_credentials=false`, run the secure
 login flow, then check status again:
 
 ```bash
-mammoth auth login --profile PROFILE --server-prefix app
-mammoth auth status --profile PROFILE --output json --no-input
+mammoth auth login                       # production; add --profile NAME if not 'default'
+mammoth auth status --output json --no-input
 ```
 
 `auth status` is a local profile/credential-presence check; it does not prove
@@ -76,7 +80,8 @@ targets release.
 
 ## Commands
 ```bash
-mammoth auth login --profile PROFILE --server-prefix app  # hidden prompts
+mammoth auth login                                        # hidden prompts; production
+mammoth auth login --server-prefix release                # release environment
 mammoth auth login --profile PROFILE --input creds.json --storage file --output json --no-input
 mammoth auth status --profile PROFILE --output json --no-input
 mammoth auth logout --profile default --output json --no-input --yes

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/bundled_skill/mammoth-cli/references/task-start.md

@@ -33,8 +33,8 @@ or secrets in an argument, prompt, transcript, or checkpoint.
    Compare the status response's `endpoint` with the intended environment. If
    the profile or credentials are missing, or the endpoint is for another
    environment, stop and follow [authentication](auth.md): tell the operator
-   the exact `mammoth auth login --profile PROFILE --server-prefix app`
-   command to run in their own terminal, wait for them, then re-check status.
+   to run `mammoth auth login` (production; `--server-prefix release` for
+   release) in their own terminal, wait for them, then re-check status.
    The CLI does not read credentials from environment variables; do not look
    for them there. Never silently reuse or rewrite a mismatched profile,
    invent a profile, ask for credentials in chat, or put secrets in argv.

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/commands/auth.py

@@ -243,7 +243,10 @@ def _run_login(
         server_prefix=effective_prefix,
         project_id=existing.project_id if existing is not None else None,
     )
-    profiles.save_profile(record)
+    # Persist the record and the selection pointer in one write, before the
+    # secret goes to its store: a stored secret with no readable record is the
+    # "credentials present / no profile" state that strands a later doctor run.
+    profiles.save_profile(record, select=True)
     storage_used = credentials.store_credentials(
         profile_name,
         api_key,
@@ -251,7 +254,6 @@ def _run_login(
         storage=cast(credentials.StorageMode, storage),
         interactive=not blockers,
     )
-    profiles.set_selected(profile_name)
 
     data = {
         "profile": profile_name,

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/commands/view.py

@@ -164,9 +164,41 @@ def _resolve_dataset_id(
     field = document.get(_DATASET_ID_FIELD)
     if field is not None:
         return int(field)
+    _require_discovery_allowed(invocation, view_id)
     return int(service.call(_FIND_DATASET_SYMBOL, dataview_id=view_id))
 
 
+def _require_discovery_allowed(invocation: Invocation, view_id: int) -> None:
+    """Refuse project-wide parent discovery before anything but a read.
+
+    Omitting the parent sends the resolver on a browse-and-probe walk over
+    every dataset in the project. For a read that is a convenience; before a
+    mutation, an export, or a delete it means the target is chosen by a
+    probe whose first denied dataset can end the search on the wrong parent.
+    Those commands therefore require the exact parent, and fail closed here
+    with the read that supplies it.
+    """
+    record = command_by_id(invocation.command_id) or {}
+    if record.get("mutation_class", "read") == "read":
+        return
+    project = f" --project {invocation.project}" if invocation.project else ""
+    lookup = f"mammoth view get {view_id}{project} --output json --no-input"
+    raise CliError(
+        code=CODE_MISSING_ARGUMENT,
+        message=(
+            "This command changes or exports data, so it requires the exact parent "
+            "DATASET_ID; project-wide parent discovery is only performed for reads."
+        ),
+        exit_status=EXIT_USAGE,
+        hint=(
+            "Read the parent first, then pass it as the trailing DATASET_ID positional "
+            "or the 'dataset_id' input field: " + lookup
+        ),
+        details={"view_id": view_id, "mutation_class": record.get("mutation_class")},
+        recovery_commands=[lookup],
+    )
+
+
 def _meta(invocation: Invocation, workspace_id: int, project_id: int | None) -> dict[str, Any]:
     """Build the common envelope metadata for a view command."""
     return {

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/commands/view_ops.py

@@ -301,18 +301,16 @@ def view_get(invocation: Invocation) -> HandlerResult:
 def view_delete(invocation: Invocation) -> HandlerResult:
     """Permanently delete one view by id. Prompt or ``--yes`` required.
 
-    ``dataset_id`` may be supplied as the trailing positional, in structured
-    input, or by a typed resource reference.  When present it is forwarded to
-    the SDK so deletion uses exactly that parent endpoint and never performs a
-    workspace-wide parent probe.
+    ``dataset_id`` is required: the trailing positional, the structured input
+    field, or a typed resource reference must name the exact parent. It is
+    forwarded to the SDK so deletion uses exactly that parent endpoint and
+    never performs a project-wide parent probe before a destructive call.
     """
     view_id = _view_id(invocation)
     enforce_confirmation(invocation, policy=POLICY_PROMPT_OR_YES, action=f"delete view {view_id}")
     document = invocation.load_input() or {}
-    dataset_id = _resolve_exact_dataset_id(invocation, view_id, document)
-    context: dict[str, Any] = {"view_id": view_id}
-    if dataset_id is not None:
-        context["dataset_id"] = dataset_id
+    dataset_id = _resolve_exact_dataset_id(invocation, view_id, document, required=True)
+    context: dict[str, Any] = {"view_id": view_id, "dataset_id": dataset_id}
     kwargs = bind_command_inputs(invocation.command_id, document, **context)
     with open_service(invocation) as (service, auth):
         data = service.call(_symbol(invocation), **kwargs)

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/context/profiles.py

@@ -237,15 +237,22 @@ def get_profile(name: str) -> ProfileRecord | None:
     return _parse_profile(name, table[name])
 
 
-def save_profile(record: ProfileRecord) -> None:
+def save_profile(record: ProfileRecord, *, select: bool = False) -> None:
     """Create or replace one profile's non-secret record.
 
     Args:
         record: The complete profile record to store. Replaces any existing
             record with the same name.
+        select: Also make this profile the selected one, in the same write.
+            Login uses this so the record and the selection pointer can never
+            be persisted separately: a pointer to a profile whose record is
+            missing is exactly the state ``doctor`` reports as
+            ``no profile``.
 
     Raises:
         CliError: ``invalid_profile_name`` for a malformed name.
+        CliError: ``profile_write_failed`` if the record cannot be read back
+            from the file just written.
     """
     validate_profile_name(record.name)
     document = _load_document()
@@ -260,7 +267,18 @@ def save_profile(record: ProfileRecord) -> None:
     if record.project_id is not None:
         entry["project_id"] = record.project_id
     table[record.name] = entry
+    if select:
+        document["selected"] = record.name
     _write_document(document)
+    stored = get_profile(record.name)
+    if stored is None or stored.workspace_id != record.workspace_id:
+        raise CliError(
+            code="profile_write_failed",
+            message=f"Profile '{record.name}' was not persisted to {profiles_path()}.",
+            exit_status=EXIT_USAGE,
+            hint="Check that no other process rewrites the configuration directory, then retry.",
+            details={"path": str(profiles_path())},
+        )
 
 
 def delete_profile(name: str) -> bool:
@@ -313,6 +331,14 @@ def set_selected(name: str) -> None:
     """
     validate_profile_name(name)
     document = _load_document()
+    table = document.get("profiles")
+    if table is None or name not in table:
+        raise CliError(
+            code="profile_not_found",
+            message=f"Profile '{name}' has no stored record, so it cannot be selected.",
+            exit_status=EXIT_USAGE,
+            hint=f"Run 'mammoth auth login --profile {name}' to create it first.",
+        )
     document["selected"] = name
     _write_document(document)
 

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/mammoth_cli/services/positionals.py

@@ -852,10 +852,46 @@ def positionals_for(command_id: str, sdk_symbol: str | None) -> tuple[Positional
         signature derivation, else an empty tuple).
     """
     if command_id in POSITIONAL_OVERRIDES:
-        return POSITIONAL_OVERRIDES[command_id]
+        return _with_exact_parent_help(command_id, POSITIONAL_OVERRIDES[command_id])
     if not sdk_symbol:
         return ()
-    return derive_positionals(command_id, sdk_symbol)
+    return _with_exact_parent_help(command_id, derive_positionals(command_id, sdk_symbol))
+
+
+EXACT_PARENT_HELP = (
+    "Exact parent dataset ID. Required for this command: pass it here or as the "
+    "'dataset_id' input field; only read commands may omit it and discover the parent."
+)
+
+
+def _with_exact_parent_help(
+    command_id: str, specs: tuple[PositionalSpec, ...]
+) -> tuple[PositionalSpec, ...]:
+    """Tell the truth about an optional ``dataset_id`` on a non-read command.
+
+    The parse shape stays optional (the field may also arrive via ``--input``),
+    but the handler refuses project-wide parent discovery before a mutation,
+    export, or delete, so the help must say the parent is required there.
+    """
+    record = command_by_id(command_id)
+    if record is None or record.get("mutation_class", "read") == "read":
+        return specs
+    return tuple(
+        (
+            PositionalSpec(
+                name=spec.name,
+                type=spec.type,
+                required=spec.required,
+                help=EXACT_PARENT_HELP,
+                falls_back_to_field=spec.falls_back_to_field,
+                fills_sdk_param=spec.fills_sdk_param,
+                example_value=spec.example_value,
+            )
+            if spec.name == "dataset_id" and not spec.required and spec.falls_back_to_field
+            else spec
+        )
+        for spec in specs
+    )
 
 
 def _symbol_for(command_id: str) -> str | None:

{mammoth_cli-2.0.7 → mammoth_cli-2.0.9}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "mammoth-cli"
-version = "2.0.7"
+version = "2.0.9"
 description = "Command-line interface for the Mammoth Analytics platform"
 authors = [{name = "Mammoth Analytics", email = "support@mammoth.io"}]
 readme = "README.md"