mammoth-cli 2.2.47__tar.gz → 2.2.49__tar.gz

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mammoth-cli
-Version: 2.2.47
+Version: 2.2.49
 Summary: Command-line interface for the Mammoth Analytics platform
 Project-URL: homepage, https://mammoth.io
 Project-URL: repository, https://github.com/EdgeMetric/mammothsdk
@@ -17,7 +17,7 @@ Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Requires-Python: <3.15,>=3.12
 Requires-Dist: jsonschema>=4.20
 Requires-Dist: keyring<26,>=25.7
-Requires-Dist: mammoth-io<0.9,>=0.8.25
+Requires-Dist: mammoth-io<0.9,>=0.8.27
 Requires-Dist: platformdirs<5,>=4.10
 Requires-Dist: pydantic<3,>=2.12.5
 Requires-Dist: pyyaml<7,>=6

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/__init__.py

@@ -6,7 +6,7 @@ not implement a second HTTP client and does not call private SDK members.
 
 from __future__ import annotations
 
-__version__ = "2.2.47"
+__version__ = "2.2.49"
 
 # The versioned machine output envelope contract.
 SCHEMA_VERSION = 1

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/bundled_skill/mammoth-cli/SKILL.md

@@ -49,7 +49,7 @@ MAMMOTH_OUTPUT=json MAMMOTH_NO_INPUT=1` once.
 Use the project you are given; never `project ensure`. No `doctor`, auth,
 profiles, `config set`, `upgrade`, `skill install`, env vars, local files,
 stdin, `--input FILE` or `output_path` (they fail `not_available_embedded`);
-downloads return `download_url`. On an auth error, ask the user to reload.
+downloads return `download_url`. Ask for a reload on `authentication_failed` only; on a 403 check ids and scope.
 
 ## Defaults you do not repeat
 

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/bundled_skill/mammoth-cli/references/auth.md

@@ -17,8 +17,11 @@ created without a project.
 `mammoth auth login --method oauth` signs the operator in through the browser (PKCE, loopback
 `127.0.0.1`). The CLI keeps a 1 h `mm_` token and refreshes it under a file lock. `auth status`
 reports `credential: oauth` and `expires_at`. A refresh that fails exits 4 with `login_expired`:
-tell the operator to run `mammoth auth login` again. `--no-browser` prints the URL. Browser sign-in
-is for the operator's own terminal; an agent never runs it. `auth logout` also revokes the
+tell the operator to run `mammoth auth login` again. `--no-browser` prints the URL. `--device` is the sign-in for a
+machine with no browser: it prints a short code and a URL for the operator to approve on another
+device, then polls. Browser and device sign-in are for the operator's own terminal; an agent never
+runs them. A key made with `token create` expires after 30 days: `cli_key_expired` means run
+`mammoth auth login` again. `auth logout` also revokes the
 connection on the server, and warns (still clearing local state) if it cannot.
 
 `mammoth token create NAME`, `token list`, `token revoke KEY` are aliases of `client-app create`,

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/bundled_skill/mammoth-cli/references/command-index.md

@@ -1,6 +1,6 @@
 # Published CLI command catalog
 
-This generated catalog is a lookup table for every command in the published CLI manifest, currently 656; each entry carries its release status line. It is a command-contract index, not an assertion that every backend/OpenAPI operation has a CLI binding. For an exact local CLI contract, run `mammoth schema get COMMAND_ID`; `mammoth capability list` is an API-binding inventory and can omit typed/local CLI routes. For focused workflows, read the [recipes index](recipes/index.md). Sensitive structured input must come from a private file or pipe; never put secrets in literal argv.
+This generated catalog is a lookup table for every command in the published CLI manifest, currently 660; each entry carries its release status line. It is a command-contract index, not an assertion that every backend/OpenAPI operation has a CLI binding. For an exact local CLI contract, run `mammoth schema get COMMAND_ID`; `mammoth capability list` is an API-binding inventory and can omit typed/local CLI routes. For focused workflows, read the [recipes index](recipes/index.md). Sensitive structured input must come from a private file or pipe; never put secrets in literal argv.
 
 Load only the applicable domain file:
 
@@ -24,7 +24,7 @@ Load only the applicable domain file:
 - [dashboard-qa](commands/dashboard-qa.md) — 14 published commands
 - [dashboard-template](commands/dashboard-template.md) — 12 published commands
 - [dashboard-style](commands/dashboard-style.md) — 10 published commands
-- [dashboard](commands/dashboard.md) — 98 published commands
+- [dashboard](commands/dashboard.md) — 99 published commands
 - [data-app](commands/data-app.md) — 12 published commands
 - [dataset](commands/dataset.md) — 22 published commands
 - [doctor](commands/doctor.md) — 1 published commands
@@ -51,7 +51,7 @@ Load only the applicable domain file:
 - [user](commands/user.md) — 8 published commands
 - [version](commands/version.md) — 1 published commands
 - [view-transform](commands/view-transform.md) — 32 published commands
-- [view](commands/view.md) — 94 published commands
+- [view](commands/view.md) — 97 published commands
 - [webhook](commands/webhook.md) — 7 published commands
 - [workflow](commands/workflow.md) — 16 published commands
 - [workspace](commands/workspace.md) — 26 published commands

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/bundled_skill/mammoth-cli/references/commands/dashboard.md

@@ -422,6 +422,16 @@ Result: `DashboardFigureIntentResult`; mutation `benign_mutation`, confirmation
 
 Status on release: ran once on CLI 2.0.14 — dashboard re-verification 2026-09-18: exit 0 on release with CLI 2.0.14. CLI defect fixed, confirmed: returned a full matched structured body ({"added":{...},"kind":"bar","spec":{...},"intentApplied":true,...}) instead of raising ValidationError on an unmatch…
 
+### `dashboard.figure.add`
+
+Run: `mammoth dashboard figure add`. Exact input fields: `mammoth schema get dashboard.figure.add`.
+
+Example: `mammoth dashboard figure add 123 --input '{"dataview_id": 1, "figure": {"kind": "hbar", "title": "Revenue by region", "dim": "Region", "measure": "Revenue", "agg": "sum"}}'`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `DashboardFigureAddResult`; mutation `benign_mutation`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
 ### `dashboard.filter.add`
 
 Run: `mammoth dashboard filter add`. Exact input fields: `mammoth schema get dashboard.filter.add`.

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/bundled_skill/mammoth-cli/references/commands/view.md

@@ -412,6 +412,26 @@ Result: `ViewDraftSubmitResult`; mutation `reversible_pipeline`, confirmation `n
 
 Status on release: untried; no live run recorded.
 
+### `view.explore-panel.get`
+
+Run: `mammoth view explore-panel get`. Exact input fields: `mammoth schema get view.explore-panel.get`.
+
+Example: `mammoth view explore-panel get 123`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `ViewExplorePanelGetResult`; mutation `read`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
+### `view.explore-panel.set`
+
+Run: `mammoth view explore-panel set`. Exact input fields: `mammoth schema get view.explore-panel.set`.
+
+Example: `mammoth view explore-panel set 123 --input '{"panel": {"open": true, "items": [{"column": "column_1", "renderType": "chart"}]}}'`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `ViewExplorePanelSetResult`; mutation `benign_mutation`, confirmation `none`, wait policy `not_async`.
+
+Status on release: untried; no live run recorded.
+
 ### `view.export.azure-blob`
 
 Run: `mammoth view export azure-blob`. Exact input fields: `mammoth schema get view.export.azure-blob`.
@@ -738,7 +758,7 @@ Status on release: ran once on CLI 2.0.21 — ergonomics sweep 2026-09-19: exit
 
 Run: `mammoth view optimize`. Exact input fields: `mammoth schema get view.optimize`.
 
-Example: `mammoth view optimize 123 123`. Illustrative only: append `--yes` after observing an owned target.
+Example: `mammoth view optimize 123`. Illustrative only: append `--yes` after observing an owned target.
 
 Result: `ViewOptimizeResult`; mutation `reversible_pipeline`, confirmation `prompt_or_yes`, wait policy `start_or_wait`.
 
@@ -914,6 +934,16 @@ Result: `ViewUpdateResult`; mutation `benign_mutation`, confirmation `none`, wai
 
 Status on release: untried; no live run recorded.
 
+### `view.variants.create`
+
+Run: `mammoth view variants create`. Exact input fields: `mammoth schema get view.variants.create`.
+
+Example: `mammoth view variants create 123 --input '{"from_view": 456, "column": "Region", "values": ["East", "West"]}'`. Placeholders are illustrative; resolve IDs and input from observed reads.
+
+Result: `ViewVariantsCreateResult`; mutation `benign_mutation`, confirmation `none`, wait policy `always_wait`.
+
+Status on release: untried; no live run recorded.
+
 ### `view.version.apply`
 
 Run: `mammoth view version apply`. Exact input fields: `mammoth schema get view.version.apply`.

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/bundled_skill/mammoth-cli/references/recipes/auth-scope.md

@@ -19,5 +19,6 @@ condition, not permission to retry mutations. The credential rule lives in
 Exit 4 is auth/authorization; preserve the structured error and stop safely.
 
 In the Mammoth app none of the above applies: there is no `auth status`,
-`doctor` or profile, and the app passes the login and project. On exit 4 ask
-the user to reload the page.
+`doctor` or profile, and the app passes the login and project. On `authentication_failed` or
+`not_authenticated` ask the user to reload the page; on `authorization_required` (403)
+check the ids and scope first, since a reload does not fix them.

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/bundled_skill/mammoth-cli/references/recovery.md

@@ -7,7 +7,8 @@ these commands are not blanket permission to replay a mutation.
 
 | exit | error.code (examples) | next step |
 |---|---|---|
-| 4 | not_authenticated, authentication_failed | `mammoth auth login`; in the Mammoth app, ask the user to reload the page |
+| 4 | not_authenticated, authentication_failed | `mammoth auth login`; in the Mammoth app, ask the user to reload the page (an expired or invalid sign-in only) |
+| 4 | authorization_required (403) | check the view, dataset and project ids and the scope first; a reload does not fix a wrong id |
 | 2 | keyring_unavailable, keyring_unresponsive | operator runs `mammoth auth login --storage file` (or unlocks the OS keychain); not seen in the app |
 | 5 | resource_not_found | re-list to find the correct id |
 | 2 | project_required | `mammoth context project use ID` or `--project` (in the app: `--project` only) |
@@ -48,7 +49,7 @@ the `run_id` when you report a backend fault.
 
 Do not run the next mutation on any of these; report the state (with
 `log_ref.run_id`) and either recover per the tables above or hand off:
-- `auth status` is missing or its `endpoint` does not match the intended environment (in the app there is no `auth status` or `doctor`: an auth error means ask the user to reload the page)
+- `auth status` is missing or its `endpoint` does not match the intended environment (in the app there is no `auth status` or `doctor`: a sign-in error (`authentication_failed`, `not_authenticated`) means ask the user to reload the page; `authorization_required` means check the ids and scope)
 - `mammoth doctor` fails (CLI only)
 - a dataset is still `need_action` after the settings update
 - a read-back after a value-changing step shows a uniform column (all 0 / all one value / all null) or a changed row the condition should not have touched

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/commands/auth.py

@@ -270,13 +270,13 @@ def _verify_login(invocation: Invocation, *, base_url: str, api_token: str) -> i
     return workspace_id
 
 
-_LOGIN_METHODS = ("oauth", "token")
+_LOGIN_METHODS = ("oauth", "device", "token")
 
 
 def _choose_method(
     method: str | None, invocation: Invocation, *, server_prefix: str | None, blockers: list[str]
 ) -> str:
-    """Pick ``oauth`` or ``token``: explicit, implied by ``--input``, or asked.
+    """Pick ``oauth``, ``device`` or ``token``: explicit, implied by ``--input``, or asked.
 
     A server with no CLI OAuth client, a non-interactive run, and ``--input``
     all keep the token login that existed before browser sign-in.
@@ -289,10 +289,10 @@ def _choose_method(
                 exit_status=EXIT_USAGE,
                 hint=f"Use one of: {', '.join(_LOGIN_METHODS)}.",
             )
-        if method == "oauth" and invocation.input_file is not None:
+        if method != "token" and invocation.input_file is not None:
             raise CliError(
                 code="invalid_argument_combination",
-                message="--input is for token logins; it cannot be used with --method oauth.",
+                message=f"--input is for token logins; it cannot be used with --method {method}.",
                 exit_status=EXIT_USAGE,
             )
         return method
@@ -302,16 +302,18 @@ def _choose_method(
         return "token"
     typer.echo("How do you want to sign in?", err=True)
     typer.echo("  1) Browser (OAuth)      recommended", err=True)
+    typer.echo("  2) Device code          no browser on this machine", err=True)
     typer.echo("  3) Paste an API token   for CI and scripts", err=True)
     choice = typer.prompt("Choose", default="1", show_default=False).strip()
-    if choice not in ("1", "3"):
+    methods = {"1": "oauth", "2": "device", "3": "token"}
+    if choice not in methods:
         raise CliError(
             code="invalid_login_method",
             message=f"'{choice}' is not one of the choices.",
             exit_status=EXIT_USAGE,
-            hint="Enter 1 for the browser or 3 to paste an API token.",
+            hint="Enter 1 for the browser, 2 for a device code or 3 to paste an API token.",
         )
-    return "oauth" if choice == "1" else "token"
+    return methods[choice]
 
 
 def _iso(epoch: int) -> str:
@@ -325,16 +327,18 @@ def _run_oauth_login(
     storage: str,
     open_browser: bool,
     interactive: bool,
+    device: bool = False,
 ) -> tuple[dict[str, Any], dict[str, Any]]:
-    """Sign in through the browser and persist the refreshable session."""
+    """Sign in through the browser (or a device code) and persist the refreshable session."""
     base_url = resolve_base_url(server_prefix)
     client_id = oauth.client_id_for(server_prefix)
-    session = oauth.browser_login(
-        base_url,
-        client_id=client_id,
-        open_browser=open_browser,
-        say=lambda line: typer.echo(line, err=True),
-    )
+    say = lambda line: typer.echo(line, err=True)  # noqa: E731
+    if device:
+        session = oauth.device_login(base_url, client_id=client_id, say=say)
+    else:
+        session = oauth.browser_login(
+            base_url, client_id=client_id, open_browser=open_browser, say=say
+        )
     workspace_id = _verify_login(invocation, base_url=base_url, api_token=session.access)
 
     profile_name = invocation.profile or profiles.DEFAULT_PROFILE_NAME
@@ -378,8 +382,18 @@ def _run_login(
     storage: str,
     method: str | None = None,
     no_browser: bool = False,
+    device: bool = False,
 ) -> tuple[dict[str, Any], dict[str, Any]]:
     """Validate, connection-check, and persist one `auth login` invocation."""
+    if device:
+        if method not in (None, "device"):
+            raise CliError(
+                code="invalid_argument_combination",
+                message=f"--device cannot be used with --method {method}.",
+                exit_status=EXIT_USAGE,
+                hint="Use --device alone, or --method device.",
+            )
+        method = "device"
     if storage not in _STORAGE_MODES:
         raise CliError(
             code="invalid_storage_mode",
@@ -390,16 +404,15 @@ def _run_login(
 
     blockers = _prompt_blockers(invocation)
 
-    if (
-        _choose_method(method, invocation, server_prefix=server_prefix, blockers=blockers)
-        == "oauth"
-    ):
+    chosen = _choose_method(method, invocation, server_prefix=server_prefix, blockers=blockers)
+    if chosen in ("oauth", "device"):
         return _run_oauth_login(
             invocation,
             server_prefix=server_prefix,
             storage=storage,
             open_browser=not no_browser,
             interactive=not blockers,
+            device=chosen == "device",
         )
 
     if invocation.input_file is not None:
@@ -488,19 +501,33 @@ def auth_login(
     method: str | None = typer.Option(
         None,
         "--method",
-        help="How to sign in: a browser (oauth) or a pasted API token (token).",
-        metavar="oauth|token",
+        help=(
+            "How to sign in: a browser (oauth), a code typed on another device (device) "
+            "or a pasted API token (token)."
+        ),
+        metavar="oauth|device|token",
     ),
     no_browser: bool = typer.Option(
         False, "--no-browser", help="Print the sign-in URL instead of opening a browser."
     ),
+    device: bool = typer.Option(
+        False,
+        "--device",
+        help=(
+            "Sign in with a device code, for a machine with no browser: the CLI prints "
+            "a short code and a URL, you approve on any other device, and the CLI "
+            "polls until you do. Same as --method device."
+        ),
+    ),
 ) -> None:
     """Log in and store one profile's credentials.
 
     In a terminal, choose a browser sign-in (OAuth; the CLI keeps a token that
-    refreshes itself) or paste an API token (mm_..., from Workspace settings ->
-    API Tokens). The token names its workspace. For non-interactive use
-    (agents, CI), pass ``--input FILE`` with {"api_token": ...} instead.
+    refreshes itself), a device code (``--device``: for a machine with no
+    browser, you type a short code on any other device) or paste an API token
+    (mm_..., from Workspace settings -> API Tokens). The token names its
+    workspace. For non-interactive use (agents, CI), pass ``--input FILE`` with
+    {"api_token": ...} instead.
     Performs a lightweight connection check before saving anything; a failed
     check leaves existing profile state unchanged.
     """
@@ -531,6 +558,7 @@ def auth_login(
             storage=storage,
             method=method,
             no_browser=no_browser,
+            device=device,
         )
 
     executor.run(

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/commands/dashboard.py

@@ -608,6 +608,40 @@ def dashboard_share(invocation: Invocation) -> HandlerResult:
     return data, _meta(invocation, auth.workspace_id)
 
 
+def _figure_page_kwargs(page: Any) -> dict[str, Any]:
+    """Map the endpoint's ``page`` ({"id"} or {"new_title"}) onto the SDK's page arguments."""
+    if not isinstance(page, dict) or set(page) not in ({"id"}, {"new_title"}):
+        raise CliError(
+            code=CODE_INVALID_ARGUMENT,
+            message='The \'page\' input field must be {"id": ...} or {"new_title": ...}.',
+            exit_status=EXIT_USAGE,
+        )
+    if "id" in page:
+        return {"page_id": page["id"]}
+    return {"page_new_title": page["new_title"]}
+
+
+def dashboard_figure_add(invocation: Invocation) -> HandlerResult:
+    """Add one figure to a dashboard. The input is the endpoint's own shape.
+
+    ``dataview_id`` and ``figure`` are required; ``banded`` and ``page`` (``{"id": ...}``
+    or ``{"new_title": ...}``) are optional. The result carries ``bake_job_id``.
+    """
+    dashboard_id = _require_int_positional(invocation, "dashboard id")
+    document = _bound_document(invocation)
+    kwargs: dict[str, Any] = {
+        "dashboard_id": dashboard_id,
+        "dataview_id": _require_field(document, "dataview_id"),
+        "figure": _require_field(document, "figure"),
+    }
+    _forward_optional(document, kwargs, ("banded",))
+    if document.get("page") is not None:
+        kwargs.update(_figure_page_kwargs(document["page"]))
+    with open_service(invocation) as (service, auth):
+        data = service.call(_symbol(invocation), **kwargs)
+    return data, _meta(invocation, auth.workspace_id)
+
+
 def dashboard_cancel_generation(invocation: Invocation) -> HandlerResult:
     """Cancel an in-progress dashboard generation."""
     dashboard_id = _require_int_positional(invocation, "dashboard id")

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/commands/job.py

@@ -199,7 +199,9 @@ def _with_outcome(service: Any, data: dict[str, Any]) -> dict[str, Any]:
     gets its copied counts and per-view runs (no read). The job succeeded either way, so
     a view that cannot be read is an ``outcome_error``, never a failed wait.
     """
-    copied = job_outcome.copy_outcome(data.get("result"))
+    result = job_outcome.with_derived_datasets(data.get("result"))
+    data = {**data, "result": result} if result is not data.get("result") else data
+    copied = job_outcome.copy_outcome(result)
     if copied is not None and data.get("operation") == job_outcome.COPY_PROJECT_OPERATION:
         return {**data, "outcome": copied}
     target = job_outcome.view_target(data)

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/commands/project.py

@@ -36,6 +36,7 @@ from mammoth_cli.runtime.confirm import (
 )
 from mammoth_cli.runtime.invocation import Invocation
 from mammoth_cli.runtime.session import open_service, resolved_project
+from mammoth_cli.services import job_outcome
 
 HandlerResult = tuple[Any, dict[str, Any]]
 
@@ -299,7 +300,7 @@ def project_copy(invocation: Invocation) -> HandlerResult:
     _forward_optional(document, kwargs, _COPY_OPTIONAL)
     with open_service(invocation) as (service, auth):
         queued = service.call(_symbol(invocation), **kwargs)
-        data = service.wait_if_job(queued)
+        data = job_outcome.with_derived_datasets(service.wait_if_job(queued))
     return data, _meta(invocation, auth.workspace_id, source_id)
 
 

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/commands/registry.py

@@ -483,6 +483,7 @@ HANDLERS: dict[str, Handler] = {
     "dashboard.tags.merge": dashboard_cmd.dashboard_tags_merge,
     "dashboard.published-data-by-url": dashboard_cmd.dashboard_published_data_by_url,
     "dashboard.restore": dashboard_cmd.dashboard_restore,
+    "dashboard.figure.add": dashboard_cmd.dashboard_figure_add,
     "dashboard.share": dashboard_cmd.dashboard_share,
     "dashboard.source.list": dashboard_cmd.dashboard_source_list,
     "dashboard.trash": dashboard_cmd.dashboard_trash,
@@ -777,6 +778,8 @@ HANDLERS: dict[str, Handler] = {
     "view.optimize": view_cmd.view_optimize,
     "view.compare": view_cmd.view_compare,
     "view.update": view_cmd.view_update,
+    "view.explore-panel.get": view_cmd.view_explore_panel_get,
+    "view.explore-panel.set": view_cmd.view_explore_panel_set,
     "view.data.get": view_cmd.view_data_get,
     "view.data.query": view_cmd.view_data_query,
     "view.data.aggregate": view_cmd.view_data_aggregate_rounded,
@@ -852,6 +855,7 @@ HANDLERS: dict[str, Handler] = {
     "view.export.tableau": view_cmd.view_export_specialized,
     # view family (View-object: create/get/delete, draft, transforms)
     "view.create": view_ops_cmd.view_create,
+    "view.variants.create": view_ops_cmd.view_variants_create,
     "view.get": view_ops_cmd.view_get,
     "view.delete": view_ops_cmd.view_delete,
     "view.draft.enter": view_ops_cmd.view_draft_enter,

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/commands/schema.py

@@ -45,8 +45,18 @@ _PROTECTED_INPUT_PATH = "/private/path/request.json"
 # Commands whose useful example the SDK signature cannot express: a distinct
 # second id, an optional-but-central input field, or two views to compare.
 _FIXED_EXAMPLES: dict[str, tuple[tuple[str, ...], dict[str, Any]]] = {
+    "view.optimize": (("123",), {}),
+    "view.explore-panel.get": (("123",), {}),
+    "view.explore-panel.set": (
+        ("123",),
+        {"panel": {"open": True, "items": [{"column": "column_1", "renderType": "chart"}]}},
+    ),
     "project.check": (("123", "456"), {}),
     "view.data.profile": (("123",), {"target": "Churn"}),
+    "view.variants.create": (
+        ("123",),
+        {"from_view": 456, "column": "Region", "values": ["East", "West"]},
+    ),
     "workflow.canvas": (
         ("12",),
         {
@@ -96,6 +106,11 @@ _GROUP_DISCOVERY_PURPOSES = {
 
 _COMMAND_DISCOVERY_PURPOSES = {
     "view.update": "rename change name to a new name title relabel",
+    "view.explore-panel.get": "explore cards saved panel the data editor explore side panel read",
+    "view.explore-panel.set": "save replace explore cards panel items chart a column in the editor",
+    "dashboard.figure.add": (
+        "append an explore card figure tile to a dashboard from a payload, no chat turn"
+    ),
     "file.upload": (
         "upload import CSV spreadsheet XLSX source data append add rows union stack "
         "a file into an existing dataset excel workbook tabs sheets drop in"

{mammoth_cli-2.2.47 → mammoth_cli-2.2.49}/mammoth_cli/commands/view.py

@@ -213,6 +213,48 @@ def _resolve_dataset_id(
     return dataset_id
 
 
+def _check_parent_matches(view_id: int, given: int, real: int) -> None:
+    """Refuse a DATASET_ID that is not the view's parent, before any write."""
+    if given == real:
+        return
+    raise CliError(
+        code=CODE_INVALID_ARGUMENT,
+        message=f"view {view_id} belongs to dataset {real}, not {given}",
+        exit_status=EXIT_USAGE,
+        hint=f"Run it again with dataset {real}, or leave DATASET_ID out: mammoth looks it up.",
+        details={"view_id": view_id, "given_dataset_id": given, "dataset_id": real},
+    )
+
+
+def _view_parent_dataset_id(service: Any, invocation: Invocation, view_id: int) -> int:
+    """The view's own dataset: the remembered parent, else one read of the view's row."""
+    profile_name = _profile_name(invocation)
+    workspace_id = getattr(service, "_workspace_id", None)
+    remembered = parents.lookup(profile_name, workspace_id, view_id)
+    if remembered is not None:
+        return remembered
+    dataset_id = int(service.call(_FIND_DATASET_SYMBOL, dataview_id=view_id))
+    parents.remember(profile_name, workspace_id, {view_id: dataset_id})
+    return dataset_id
+
+
+def _verified_dataset_id(
+    service: Any, invocation: Invocation, view_id: int, document: dict[str, Any]
+) -> int:
+    """The view's dataset for a write, so the caller never has to supply it.
+
+    A DATASET_ID (positional or ``dataset_id`` input field) is checked against the
+    view's real parent and refused when it differs; with none, the parent is looked up.
+    """
+    explicit = _int_positional_at(invocation, 1, "dataset id")
+    if explicit is None and document.get(_DATASET_ID_FIELD) is not None:
+        explicit = _int_field(document[_DATASET_ID_FIELD], _DATASET_ID_FIELD)
+    real = _view_parent_dataset_id(service, invocation, view_id)
+    if explicit is not None:
+        _check_parent_matches(view_id, explicit, real)
+    return real
+
+
 def _resolve_dataset_id_for_settle(
     service: Any,
     invocation: Invocation,
@@ -1030,7 +1072,7 @@ def view_optimize(invocation: Invocation) -> HandlerResult:
     kwargs: dict[str, Any] = {"dataview_id": dataview_id, "project_id": project_id}
     _forward_optional(document, kwargs, ("apply_rules",))
     with open_service(invocation) as (service, auth):
-        kwargs["dataset_id"] = _resolve_dataset_id(service, invocation, dataview_id, document)
+        kwargs["dataset_id"] = _verified_dataset_id(service, invocation, dataview_id, document)
         data = service.call(_symbol(invocation), **kwargs)
         if isinstance(data, dict) and data.get("job_id") is not None:
             settled = service.wait_if_job({"job_id": data["job_id"]})
@@ -1073,6 +1115,40 @@ def view_update(invocation: Invocation) -> HandlerResult:
     return data, _meta(invocation, auth.workspace_id, project_id)
 
 
+def view_explore_panel_get(invocation: Invocation) -> HandlerResult:
+    """Read the Explore panel the caller saved on a view (empty when none is saved)."""
+    project_id = require_project(invocation)
+    dataview_id = _require_int_positional_at(invocation, 0, "view id")
+    document = invocation.load_input() or {}
+    with open_service(invocation) as (service, auth):
+        dataset_id = _resolve_dataset_id(service, invocation, dataview_id, document)
+        data = service.call(
+            _symbol(invocation),
+            dataset_id=dataset_id,
+            dataview_id=dataview_id,
+            project_id=project_id,
+        )
+    return data, _meta(invocation, auth.workspace_id, project_id)
+
+
+def view_explore_panel_set(invocation: Invocation) -> HandlerResult:
+    """Replace the caller's saved Explore panel with the ``panel`` input field."""
+    project_id = require_project(invocation)
+    dataview_id = _require_int_positional_at(invocation, 0, "view id")
+    document = invocation.load_input() or {}
+    panel = _require_field(document, "panel")
+    with open_service(invocation) as (service, auth):
+        dataset_id = _verified_dataset_id(service, invocation, dataview_id, document)
+        data = service.call(
+            _symbol(invocation),
+            dataset_id=dataset_id,
+            dataview_id=dataview_id,
+            panel=panel,
+            project_id=project_id,
+        )
+    return data, _meta(invocation, auth.workspace_id, project_id)
+
+
 def _untyped_patch_error(invocation: Invocation) -> CliError:
     """The refusal for a view patch that is not the typed rename."""
     return CliError(