thoughtleaders-cli 0.9.3__tar.gz → 0.9.4__tar.gz

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "tl-cli",
-  "version": "0.9.2",
+  "version": "0.9.4",
   "description": "ThoughtLeaders CLI — query sponsorship deals, channels, brands, uploads, and intelligence from the terminal",
   "author": {
     "name": "ThoughtLeaders",

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/.github/workflows/ci.yml

@@ -26,8 +26,8 @@ jobs:
         # Matches `requires-python = ">=3.12"`.
         python-version: ["3.12", "3.13", "3.14"]
     steps:
-      - uses: actions/checkout@v6
-      - uses: astral-sh/setup-uv@v6
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
       - name: Sync locked dependencies

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/.github/workflows/cli-integration.yml

@@ -29,8 +29,8 @@ jobs:
     name: Live read-only CLI tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: astral-sh/setup-uv@v6
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
       - name: Sync locked dependencies (installs the `tl` CLI)

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/.github/workflows/python-publish.yml

@@ -11,7 +11,7 @@ jobs:
   release-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-python@v6
         with:
           python-version: "3.12"

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/API.md

@@ -142,6 +142,8 @@ Useful for verifying the API key resolves to the user you expect before kicking
 
 `GET /balance` — credit balance plus the last 10 metered calls for the org. Free.
 
+`balance` is the combined total of two pools: `topup_balance` (plan-granted credits, reset to the plan allowance each top-up period, spent first) and `purchased_balance` (bought credits — they survive top-up resets, are spent last, and keep working after the per-user session quota is exhausted).
+
 ```bash
 curl -sS "$TL_API_BASE/balance" \
   -H "Authorization: Bearer $TL_API_KEY" \
@@ -155,6 +157,8 @@ print(get('/balance'))
 ```json
 {
   "balance": 9995.88,
+  "topup_balance": 8995.88,
+  "purchased_balance": 1000.00,
   "allow_overage": false,
   "recent_usage": [
     {

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: thoughtleaders-cli
-Version: 0.9.3
+Version: 0.9.4
 Summary: ThoughtLeaders CLI — query sponsorship data, channels, brands, and intelligence
 Project-URL: Homepage, https://thoughtleaders.io
 Project-URL: Repository, https://github.com/ThoughtLeaders-io/thoughtleaders-cli
@@ -284,6 +284,21 @@ The plugin ships several focused skills (installed by all the `tl setup *` comma
 - **`tl-views-guarantee`** — sizes a multi-video sponsorship buy for a channel, returning the video bundle size, views guarantee, and likelihood to hit.
 - **`tl-top-partnerships`** — brand-user performance report. Ranks a brand's sold sponsorships by live eCPM vs the sold-date projection, aggregates per channel, and delivers a two-tab Google Sheet ("By Deal" / "By Channel") via `gws`. Uses only public CLI commands (`tl whoami`, `tl sponsorships list`).
 
+## Distributed skills
+
+Beyond the bundled set above, an organization can be granted additional skills that aren't part of a CLI release — `tl skill` fetches and installs them on demand into the same directories `tl setup` uses (Claude Code's standalone skills directory, OpenCode's skills directory, and the directory shared by Gemini and Codex), so every supported agent picks them up automatically.
+
+```bash
+tl skill list                 # skills available to your organization, with installed/latest versions
+tl skill list --all           # full catalog (full-access accounts only)
+tl skill download my-skill    # fetch and install into every AI-agent skill directory
+tl skill download my-skill --force   # overwrite a directory tl doesn't already manage
+tl skill update                # refresh every downloaded skill to its latest version
+tl skill remove my-skill        # uninstall a downloaded skill
+```
+
+A directory `tl skill download` doesn't already manage (no prior `tl`-managed install there) is left alone unless `--force` is passed — it never overwrites a skill you installed some other way. `tl` warns once a day, on any command, when a downloaded skill has a newer version available. `tl setup` and self-update re-syncs also respect these directories: a downloaded skill is never rmtree'd or overwritten, even if its name collides with a bundled skill.
+
 ## Output Formats
 
 By default, output is a styled table in the terminal and JSON when piped.

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/README.md

@@ -256,6 +256,21 @@ The plugin ships several focused skills (installed by all the `tl setup *` comma
 - **`tl-views-guarantee`** — sizes a multi-video sponsorship buy for a channel, returning the video bundle size, views guarantee, and likelihood to hit.
 - **`tl-top-partnerships`** — brand-user performance report. Ranks a brand's sold sponsorships by live eCPM vs the sold-date projection, aggregates per channel, and delivers a two-tab Google Sheet ("By Deal" / "By Channel") via `gws`. Uses only public CLI commands (`tl whoami`, `tl sponsorships list`).
 
+## Distributed skills
+
+Beyond the bundled set above, an organization can be granted additional skills that aren't part of a CLI release — `tl skill` fetches and installs them on demand into the same directories `tl setup` uses (Claude Code's standalone skills directory, OpenCode's skills directory, and the directory shared by Gemini and Codex), so every supported agent picks them up automatically.
+
+```bash
+tl skill list                 # skills available to your organization, with installed/latest versions
+tl skill list --all           # full catalog (full-access accounts only)
+tl skill download my-skill    # fetch and install into every AI-agent skill directory
+tl skill download my-skill --force   # overwrite a directory tl doesn't already manage
+tl skill update                # refresh every downloaded skill to its latest version
+tl skill remove my-skill        # uninstall a downloaded skill
+```
+
+A directory `tl skill download` doesn't already manage (no prior `tl`-managed install there) is left alone unless `--force` is passed — it never overwrites a skill you installed some other way. `tl` warns once a day, on any command, when a downloaded skill has a newer version available. `tl setup` and self-update re-syncs also respect these directories: a downloaded skill is never rmtree'd or overwritten, even if its name collides with a bundled skill.
+
 ## Output Formats
 
 By default, output is a styled table in the terminal and JSON when piped.

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "thoughtleaders-cli"
-version = "0.9.3"
+version = "0.9.4"
 description = "ThoughtLeaders CLI — query sponsorship data, channels, brands, and intelligence"
 readme = "README.md"
 license = "MIT"

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/skills/tl/SKILL.md

@@ -251,9 +251,8 @@ contact field:
 
 The channel's full email archive (`all_emails` — a JSON object keyed by email address,
 each value recording when and where the address was found) is **not editable here**;
-sending it returns a 400. It is append-only: new addresses are added with the
-internal CLI's `tl-internal channels add-email` command (superuser-only), which never
-modifies or removes existing entries.
+sending it returns a 400. It is append-only and managed through an internal-only
+process that never modifies or removes existing entries — not available via this CLI.
 
 **Profile notes.** `tl profiles update` (superuser only) edits a brand/publisher profile's
 **`superuser_notes`** — the internal free-text notes field on the customer record
@@ -503,6 +502,21 @@ tl changelog since v0.4.10             # Notes from v0.4.10 to latest
 tl changelog --md > CHANGELOG.md       # Capture for a doc
 ```
 
+#### Distributed skills — beyond the bundled set
+
+An organization can be granted additional skills that aren't part of a CLI release. `tl skill` fetches and installs them on demand into the same directories `tl setup` uses (Claude Code's standalone skills directory, OpenCode's skills directory, and the directory shared by Gemini and Codex), so every supported agent picks them up automatically — no restart or reconfiguration needed beyond re-reading the skill listing.
+
+```bash
+tl skill list                          # Skills available to your org, with installed/latest versions (free)
+tl skill list --all                    # Full catalog (full-access accounts only)
+tl skill download <name>                # Fetch and install into every AI-agent skill directory on this machine
+tl skill download <name> --force        # Overwrite a directory tl doesn't already manage
+tl skill update                         # Refresh every downloaded skill to its latest version
+tl skill remove <name>                  # Uninstall a downloaded skill
+```
+
+If a user asks to find, add, or refresh a skill by capability ("is there a skill for X", "get me the latest Y skill"), check `tl skill list` before saying no — the bundled set isn't the whole catalog. `tl skill download` never overwrites a directory it doesn't already manage unless `--force` is passed, so it's safe to run without clobbering a manually-installed skill of the same name. `tl` warns once a day, on any command, when a downloaded skill has a newer version available — surface that nag to the user rather than silently ignoring it, and offer to run `tl skill update`.
+
 #### Channel & video discovery — pick the path for the question shape
 
 Four first-class paths, each with a different signal. **Pick by the SHAPE of the user's question, not by habit.** "Recommender first" is the right default only for path 2 — for paths 1, 3, and 4 the recommender is the wrong tool.

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/src/tl_cli/__init__.py

@@ -1,3 +1,3 @@
 """ThoughtLeaders CLI — query sponsorship data, channels, brands, and intelligence."""
 
-__version__ = "0.9.3"
+__version__ = "0.9.4"

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/src/tl_cli/client/http.py

@@ -23,8 +23,8 @@ class TLClient:
             },
         )
 
-    def get(self, path: str, params: dict | None = None) -> dict:
-        return self._request("GET", path, params=params)
+    def get(self, path: str, params: dict | None = None, timeout: float | None = None) -> dict:
+        return self._request("GET", path, params=params, timeout=timeout)
 
     def post(self, path: str, json_body: dict | None = None) -> dict:
         return self._request("POST", path, json_body=json_body)
@@ -38,20 +38,24 @@ class TLClient:
         path: str,
         params: dict | None = None,
         json_body: dict | None = None,
+        timeout: float | None = None,
     ) -> dict:
         headers = self._auth_headers()
+        # Only overrides the client's default timeout when the caller asks
+        # for one — passing `timeout=None` through to httpx means "no
+        # timeout", not "use the default", so it's omitted entirely here.
+        request_kwargs = {"params": params, "json": json_body, "headers": headers}
+        if timeout is not None:
+            request_kwargs["timeout"] = timeout
 
-        response = self._client.request(
-            method, path, params=params, json=json_body, headers=headers
-        )
+        response = self._client.request(method, path, **request_kwargs)
 
         # On 401, try refreshing the token once
         if response.status_code == 401:
             headers = self._refresh_and_get_headers()
             if headers:
-                response = self._client.request(
-                    method, path, params=params, json=json_body, headers=headers
-                )
+                request_kwargs["headers"] = headers
+                response = self._client.request(method, path, **request_kwargs)
 
         if response.status_code >= 400:
             detail = self._extract_detail(response)

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/src/tl_cli/commands/balance.py

@@ -44,6 +44,12 @@ def balance(
         allow_overage = data.get("allow_overage", False)
 
         console.print(f"\n[bold]Credit Balance:[/bold] [cyan]{balance_val}[/cyan] credits")
+        # Older servers return only the combined balance; newer ones split it
+        # into the plan-granted (top-up) pool and the purchased pool.
+        topup_val = data.get("topup_balance")
+        purchased_val = data.get("purchased_balance")
+        if topup_val is not None and purchased_val is not None:
+            console.print(f"[dim]Plan (top-up) credits: {topup_val} · Purchased: {purchased_val}[/dim]")
         if allow_overage:
             console.print("[dim]Overage: enabled[/dim]")
 

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/src/tl_cli/commands/db.py

@@ -99,9 +99,11 @@ def pg_cmd(
     Common traps — check before writing SQL:
 
     - Column names follow the current schema: subscribers, projected_views,
-      scheduled_date, is_tpp, advertiser_profile_id, views_guarantee — NOT the
-      older reach / impression / send_date / is_tl_channel / creator_profile_id
-      / impressions_guarantee.
+      scheduled_date, is_tpp, advertiser_profile_id, views_guarantee, url (the
+      channel's own URL) — NOT the older reach / impression / send_date /
+      is_tl_channel / creator_profile_id / impressions_guarantee / channel_url.
+    - thoughtleaders_adlink has no bare `url` column — the live sponsored-video
+      URL is `media_url`.
     - The sponsorship table (thoughtleaders_adlink) hides its relations behind
       joins: no channel_id/channel_name (join thoughtleaders_adspot via
       ad_spot_id, then thoughtleaders_channel) and no brand_id (join

{thoughtleaders_cli-0.9.3 → thoughtleaders_cli-0.9.4}/src/tl_cli/commands/setup.py

@@ -21,6 +21,7 @@ from pytoon import encode as toon_encode
 from rich.console import Console
 
 from tl_cli import __version__
+from tl_cli.skill_registry import is_marked_for
 
 app = typer.Typer(cls=AlphaSortedTyperGroup, help="Set up integrations (Claude Code, OpenCode, Gemini, Codex)")
 console = Console(stderr=True)
@@ -201,6 +202,20 @@ def check_plugin_version() -> list[str]:
     return warnings
 
 
+def _warn_marker_skip(path: Path, name: str) -> None:
+    """Print the standard warning when setup leaves a tl-managed skill dir alone.
+
+    Shared by every place in this module that would otherwise rmtree/copytree
+    over a skill directory — a directory carrying a valid `.tl-skill.json`
+    marker was installed by `tl skill download` and must never be clobbered
+    by a bundled-skill sync, regardless of name collision or content match.
+    """
+    console.print(
+        f"  [yellow]![/yellow] skipping {path}: managed by 'tl skill' downloads — "
+        f"remove with [cyan]tl skill remove {name}[/cyan] if you want the bundled version"
+    )
+
+
 def _install_standalone_skills(plugin_root: Path) -> int:
     """Copy skills and commands to ~/.claude/ for non-namespaced invocation.
 
@@ -214,6 +229,9 @@ def _install_standalone_skills(plugin_root: Path) -> int:
         for skill_dir in skills_src.iterdir():
             if skill_dir.is_dir() and (skill_dir / "SKILL.md").is_file():
                 dst = CLAUDE_SKILLS_DIR / skill_dir.name
+                if dst.exists() and is_marked_for(dst, skill_dir.name):
+                    _warn_marker_skip(dst, skill_dir.name)
+                    continue
                 if dst.exists():
                     shutil.rmtree(dst)
                 shutil.copytree(skill_dir, dst)
@@ -279,6 +297,11 @@ def _remove_matching_standalone_skills(plugin_root: Path) -> tuple[int, int]:
         standalone = CLAUDE_SKILLS_DIR / skill_dir.name
         if not standalone.is_dir():
             continue
+        if is_marked_for(standalone, skill_dir.name):
+            # tl-managed download — excluded from deletion candidates entirely,
+            # regardless of whether its content happens to match the bundled skill.
+            _warn_marker_skip(standalone, skill_dir.name)
+            continue
         if _trees_identical(skill_dir, standalone):
             shutil.rmtree(standalone)
             removed += 1
@@ -537,7 +560,10 @@ def _install_skill_trees(plugin_root: Path, target_dir: Path) -> int:
     (OpenCode, Gemini, Codex) — each agent reads skills from a different
     base directory, so we just parameterise on that. A `.tl-version`
     stamp is written into the target so `check_plugin_version()` can
-    detect drift later. Returns the number of skills installed.
+    detect drift later. A destination carrying a `.tl-skill.json` marker
+    for this skill name is a `tl skill download` install — it's skipped
+    (with a warning) rather than clobbered, and isn't counted in the
+    returned total. Returns the number of skills installed.
     """
     count = 0
     skills_src = plugin_root / "skills"
@@ -545,6 +571,9 @@ def _install_skill_trees(plugin_root: Path, target_dir: Path) -> int:
         for skill_dir in skills_src.iterdir():
             if skill_dir.is_dir() and (skill_dir / "SKILL.md").is_file():
                 dst = target_dir / skill_dir.name
+                if dst.exists() and is_marked_for(dst, skill_dir.name):
+                    _warn_marker_skip(dst, skill_dir.name)
+                    continue
                 if dst.exists():
                     shutil.rmtree(dst)
                 shutil.copytree(skill_dir, dst)