@aiaiai-pt/martha-cli 0.48.0 → 0.51.1

package/CHANGELOG.md

@@ -4,6 +4,34 @@ All notable changes to `@aiaiai-pt/martha-cli`. Format: [Keep a Changelog](https
 
 ## [Unreleased]
 
+## [0.51.1] — 2026-07-17
+
+### Fixed — hosted embed cache migration (#955)
+
+- Hosted bundle URLs and generated HTML snippets now use the one-time `0.3.0`
+  cache key needed to escape the former immutable stable-file policy.
+- HTML snippets apply the same key to `stylesheet-url`, because the loader
+  query is not inherited by the sibling CSS request.
+
+## [0.51.0] — 2026-07-17
+
+### Added — customer-configurable agent display names (#951)
+
+- `martha agents create --display-name <name>` sets the customer-facing chat
+  identity without changing the stable technical agent key.
+- Agent YAML/JSON create and update files round-trip `display_name`; list and
+  detail output now show both the display name and technical key.
+
+## [0.49.0] — 2026-07-15
+
+### Added — UMS-gated second-party approval governance (#583 G1+G2)
+
+- `martha approvals` now surfaces the server-computed requester, required-group
+  snapshot, and whether the current viewer can resolve the case. Resolution
+  remains server-authoritative and reports typed group/self-approval failures.
+- `martha policy` and `martha approvals` consistently honor `--api-url`, including
+  machine-readable `--json` workflows against non-default Martha deployments.
+
 ## [0.48.0] — 2026-07-13
 
 ### Changed — BREAKING: `martha runner` means ONE thing (#714 runner-journey unification)

package/dist/index.js

@@ -11119,7 +11119,7 @@ init_config();
 init_errors();
 
 // src/version.ts
-var CLI_VERSION = "0.48.0";
+var CLI_VERSION = "0.51.1";
 
 // src/commands/sessions.ts
 function relativeTime(iso) {
@@ -11549,12 +11549,19 @@ var agentsConfig = {
   },
   normalizeBody: normalizeAgentBody,
   extraCreateOptions: (cmd) => {
-    cmd.option("--name <name>", "Agent name").option("--reasoning <mode>", "Where the agent reasons: 'martha' (Martha-hosted, default) or " + "'self-hosted' (your service; reached via webhook)").option("--enable-host-runner", "Enable a host runner + mint a runner key: attach `martha runner` as this " + "agent's host executor (channel tool.* only). Alias: --runner-key").option("--runner-key", "Alias for --enable-host-runner").option("--model <model>", "LLM model (e.g. anthropic/claude-sonnet-4-6)").option("--provider <provider>", "LLM provider (anthropic, openai)").option("--prompt <text>", "System prompt").option("--description <text>", "Agent description").option("--temperature <n>", "Temperature (0-1)").option("--max-tokens <n>", "Max output tokens").option("--tags <tags>", "Capability domains (comma-separated)").option("--local-tools <tools>", "Local tools (comma-separated)").option("--type <type>", "Deprecated: use --reasoning. cloud=Martha-hosted, external=self-hosted").option("--auth <method>", "Deprecated: use --enable-host-runner. service-account (self-hosted only) or api-key");
+    cmd.option("--name <name>", "Stable technical agent key").option("--display-name <name>", "Customer-facing name shown in chat").option("--reasoning <mode>", "Where the agent reasons: 'martha' (Martha-hosted, default) or " + "'self-hosted' (your service; reached via webhook)").option("--enable-host-runner", "Enable a host runner + mint a runner key: attach `martha runner` as this " + "agent's host executor (channel tool.* only). Alias: --runner-key").option("--runner-key", "Alias for --enable-host-runner").option("--model <model>", "LLM model (e.g. anthropic/claude-sonnet-4-6)").option("--provider <provider>", "LLM provider (anthropic, openai)").option("--prompt <text>", "System prompt").option("--description <text>", "Agent description").option("--temperature <n>", "Temperature (0-1)").option("--max-tokens <n>", "Max output tokens").option("--tags <tags>", "Capability domains (comma-separated)").option("--local-tools <tools>", "Local tools (comma-separated)").option("--type <type>", "Deprecated: use --reasoning. cloud=Martha-hosted, external=self-hosted").option("--auth <method>", "Deprecated: use --enable-host-runner. service-account (self-hosted only) or api-key");
   },
   buildInlineBody: (opts) => {
     if (!opts.name)
       return null;
     const body = { name: opts.name };
+    if (opts.displayName !== undefined) {
+      const displayName = String(opts.displayName).trim();
+      if (!displayName) {
+        throw new CLIError("--display-name must contain visible text", 4 /* Validation */);
+      }
+      body.display_name = displayName;
+    }
     if (opts.description)
       body.description = opts.description;
     if (opts.prompt)
@@ -11607,6 +11614,10 @@ var agentsConfig = {
   },
   listColumns: [
     { header: "NAME", accessor: (item) => String(item.name ?? "") },
+    {
+      header: "DISPLAY NAME",
+      accessor: (item) => String(item.display_name ?? "-")
+    },
     {
       header: "MODEL",
       accessor: (item) => {
@@ -11621,8 +11632,11 @@ var agentsConfig = {
     { header: "VER", accessor: (item) => String(item.version ?? 1) }
   ],
   renderDetail: (agent) => {
-    console.log(source_default.bold(`Agent: ${agent.name}
+    console.log(source_default.bold(`Agent: ${agent.display_name ?? agent.name}
 `));
+    console.log(`  Technical key: ${agent.name}`);
+    if (agent.display_name)
+      console.log(`  Display name:  ${agent.display_name}`);
     if (agent.description)
       console.log(`  ${agent.description}
 `);
@@ -16983,13 +16997,11 @@ init_errors();
 function registerApprovalCommands(program2) {
   const cmd = program2.command("approvals").description("Manage approval cases");
   function getCtx() {
-    const ctx = createContext({
+    return createContext({
       profileOverride: program2.opts().profile,
+      apiUrlOverride: program2.opts().apiUrl,
       verbose: program2.opts().verbose
     });
-    if (program2.opts().apiUrl)
-      ctx.profile.api_url = program2.opts().apiUrl;
-    return ctx;
   }
   function isJson() {
     return !!program2.opts().json;
@@ -18879,6 +18891,7 @@ init_errors();
 
 // src/lib/embed.ts
 init_errors();
+var HOSTED_EMBED_CACHE_KEY = "0.3.0";
 var EMBED_FEATURE_KEYS = [
   "uploads",
   "history",
@@ -18945,12 +18958,13 @@ function getEmbedAssetBaseUrl(apiUrl, override) {
 }
 function bundleUrls(assetBaseUrl) {
   const base = normalizeAssetBaseUrl(assetBaseUrl);
+  const asset = (filename) => `${base}${filename}?v=${HOSTED_EMBED_CACHE_KEY}`;
   return {
-    webComponent: `${base}martha-chat.ce.js`,
-    esm: `${base}martha-chat.es.js`,
-    react: `${base}martha-chat.react.js`,
-    svelte: `${base}martha-chat.svelte.js`,
-    css: `${base}martha-chat.css`
+    webComponent: asset("martha-chat.ce.js"),
+    esm: asset("martha-chat.es.js"),
+    react: asset("martha-chat.react.js"),
+    svelte: asset("martha-chat.svelte.js"),
+    css: asset("martha-chat.css")
   };
 }
 function normalizeOrigin(input) {
@@ -19132,7 +19146,8 @@ function renderHtmlSnippet(options) {
   const urls = bundleUrls(options.assetBaseUrl);
   const attrs = [
     `api-url=${jsString(options.apiUrl)}`,
-    `client-key=${jsString(options.clientKey)}`
+    `client-key=${jsString(options.clientKey)}`,
+    `stylesheet-url=${jsString(urls.css)}`
   ];
   if (options.mode === "launcher")
     attrs.push("launcher");
@@ -20916,13 +20931,11 @@ function assertOneOf(value, allowed, flag) {
 function registerPolicyCommands(program2) {
   const cmd = program2.command("policy").description("Manage the tenant's invoke-time capability policy");
   function getCtx() {
-    const ctx = createContext({
+    return createContext({
       profileOverride: program2.opts().profile,
+      apiUrlOverride: program2.opts().apiUrl,
       verbose: program2.opts().verbose
     });
-    if (program2.opts().apiUrl)
-      ctx.profile.api_url = program2.opts().apiUrl;
-    return ctx;
   }
   const isJson = () => !!program2.opts().json;
   cmd.command("show").description("Show the current policy: settings + rules").action(async () => {
@@ -21208,6 +21221,8 @@ ${typed.hint}
 // src/commands/authz.ts
 var DEFAULT_ENTITY = "document_collection";
 var DEFAULT_ACTION = "read";
+var APPROVAL_ENTITY = "approval";
+var RESOLVE_ACTION = "resolve";
 function registerAuthzCommands(program2) {
   function getCtx() {
     const ctx = createContext({
@@ -21222,6 +21237,7 @@ function registerAuthzCommands(program2) {
   registerCollections(program2, getCtx, isJson);
   registerAccess(program2, getCtx, isJson);
   registerGroups(program2, getCtx, isJson);
+  registerApprovers(program2, getCtx, isJson);
 }
 function renderGrantsTable(resp) {
   if (resp.grants.length === 0) {
@@ -21479,6 +21495,71 @@ function registerGroups(program2, getCtx, isJson) {
     }
   });
 }
+function registerApprovers(program2, getCtx, isJson) {
+  const cmd = program2.command("approvers").description("Manage who may resolve approval cases in the tenant (UMS approval/resolve). " + "Noun-first sugar over `access` on the approval entity.");
+  cmd.command("add <group>").description("Make a group a tenant approver (its members can resolve approvals)").option("--tenant <tenant>", "Target tenant (super-admin only)").action(async (group, opts) => {
+    const ctx = getCtx();
+    const json = isJson();
+    try {
+      await grant(ctx, {
+        granteeType: "group",
+        granteeId: group,
+        entityType: APPROVAL_ENTITY,
+        action: RESOLVE_ACTION,
+        objectId: null,
+        tenant: opts.tenant
+      });
+      emitOk(json, {
+        status: "approver_added",
+        entity_type: APPROVAL_ENTITY,
+        action: RESOLVE_ACTION,
+        grantee: `group:${group}`,
+        text: `Group ${group} can now resolve approvals in this tenant.`
+      });
+    } catch (err) {
+      emitAuthzError(err, json);
+    }
+  });
+  cmd.command("remove <group>").description("Remove a group's tenant approver binding").option("--tenant <tenant>", "Target tenant (super-admin only)").action(async (group, opts) => {
+    const ctx = getCtx();
+    const json = isJson();
+    try {
+      await revoke(ctx, {
+        granteeType: "group",
+        granteeId: group,
+        entityType: APPROVAL_ENTITY,
+        action: RESOLVE_ACTION,
+        objectId: null,
+        tenant: opts.tenant
+      });
+      emitOk(json, {
+        status: "approver_removed",
+        grantee: `group:${group}`,
+        text: `Group ${group} can no longer resolve approvals in this tenant.`
+      });
+    } catch (err) {
+      emitAuthzError(err, json);
+    }
+  });
+  cmd.command("list").description("Show which groups may resolve approvals in the tenant").option("--tenant <tenant>", "Target tenant (super-admin only)").action(async (opts) => {
+    const ctx = getCtx();
+    const json = isJson();
+    try {
+      const resp = await listGrants(ctx, {
+        entityType: APPROVAL_ENTITY,
+        action: RESOLVE_ACTION,
+        tenant: opts.tenant
+      });
+      if (json) {
+        console.log(JSON.stringify(resp, null, 2));
+      } else {
+        console.log(renderGrantsTable(resp));
+      }
+    } catch (err) {
+      emitAuthzError(err, json);
+    }
+  });
+}
 function emitOk(json, payload) {
   if (json) {
     const rest = { ...payload };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aiaiai-pt/martha-cli",
-  "version": "0.48.0",
+  "version": "0.51.1",
   "description": "Terminal-first client for the Martha AI platform",
   "homepage": "https://docs.martha.nomadriver.co",
   "repository": {