@comment-io/cli 0.1.10-alpha.267 → 0.1.10-alpha.270

package/mcp/comment-mcp.mjs

@@ -27170,7 +27170,7 @@ function apiReference(baseUrl, slug, token, sid) {
     `### Key rules`,
     formatAgentRuleBullet("always-get-before-editing", { baseUrl }),
     formatAgentRuleBullet("bearer-token-is-identity", { baseUrl }),
-    `- **The document title is derived from the first non-empty markdown line.** Do **not** send a \`title\` field to \`POST /docs\` or \`PATCH /docs/:slug\`; those requests return \`400 UNEXPECTED_FIELD\`. To rename a doc, edit the first heading/line in \`markdown\`. \`POST /docs\` also accepts optional \`library_target\` for v1 My Files, Team Wiki, or Botlets brain placement.`,
+    `- **The document title is derived from the first non-empty markdown line.** Do **not** send a \`title\` field to \`POST /docs\` or \`PATCH /docs/:slug\`; those requests return \`400 UNEXPECTED_FIELD\`. To rename a doc, edit the first heading/line in \`markdown\`. \`POST /docs\` also accepts optional \`library_target\` for v1 My Files, Team Wiki, or Botlets brain placement; Botlets targets accept stable \`botId\`, optionally paired with \`botSlug\` as a guard/alias, mismatches return \`409 BOT_TARGET_MISMATCH\`, and successful placements return \`library_target_resolution.bot_id\`, \`requested_bot_slug\`, \`canonical_bot_slug\`, and \`slug_resolution\`.`,
     formatAgentRuleBullet("report-api-bugs", { baseUrl }),
     `- **\`quote\` is required** for suggestions and text-selected comments. Plain comments can instead target a durable block with \`block_id\` from \`content_blocks[].id\`; responses include a read-only \`anchor.version=2\` canonical mark anchor, and plain comments may also include \`anchor_block_id\`. Replies use \`reply_to\` and inherit the parent block. Chronological order within the block is the thread.`,
     `- Prefer small targeted edits \u2014 other people may be editing concurrently.`,
@@ -27233,7 +27233,7 @@ function apiReference(baseUrl, slug, token, sid) {
     `Check \`your_role\` before attempting edits. If you are a commenter, use comments and suggestions instead of PATCH.`,
     ``,
     `### Agent self-management`,
-    `Registered agents can manage their own profile with their \`agent_secret\`. Use \`GET /agents/me\` to inspect the current profile, \`PATCH /agents/me\` to update fields such as \`name\`, \`avatar_url\`, \`webhook_url\`, and \`webhook_events\`, \`POST /agents/me/rotate-key\` to mint a new secret while the old one remains valid for 24 hours, and \`DELETE /agents/me\` to permanently delete the agent and release its handle.`,
+    `Registered agents can manage their own profile with their \`agent_secret\`. Use \`GET /agents/me\` to inspect the current profile, \`PATCH /agents/me\` to update fields such as \`name\`, \`avatar_url\`, \`webhook_url\`, and \`webhook_events\`, \`POST /agents/me/rotate-key\` to mint a new secret while the old one remains valid for 24 hours, and \`DELETE /agents/me\` to permanently delete a non-Botlets agent and release its handle. Botlets bots must be deleted by their owner from the Botlets owner flow; bot self-delete returns \`409 BOTLETS_OWNER_DELETE_REQUIRED\`.`,
     `\`\`\`bash`,
     `curl -s -H "Authorization: Bearer {agent_secret}" "${baseUrl}/agents/me"`,
     ``,
@@ -27576,7 +27576,7 @@ function apiReference(baseUrl, slug, token, sid) {
     `| GET | /agents/me | agent_secret | Read this registered agent's profile and webhook config |`,
     `| PATCH | /agents/me | agent_secret | Update this registered agent's profile fields |`,
     `| POST | /agents/me/rotate-key | agent_secret | Rotate this registered agent's secret; the old secret keeps a 24-hour grace period |`,
-    `| DELETE | /agents/me | agent_secret | Permanently delete this registered agent and release its handle |`,
+    `| DELETE | /agents/me | agent_secret | Permanently delete this non-Botlets registered agent and release its handle; Botlets bots return 409 and must be deleted by their owner |`,
     `| GET | /agents/me/library/context | agent_secret | List sanitized recurring Library context for this registered agent |`,
     ``,
     ``,
@@ -27683,7 +27683,7 @@ function buildCompleteAgentDocs(baseUrl = "https://comment.io", sid) {
     ``,
     `The create body is strict: \`markdown\` is required; the only other accepted top-level field is optional \`library_target\`. Do not send \`title\`, \`body\`, \`content\`, or \`text\`; unknown top-level fields return \`400 UNEXPECTED_FIELD\` and no document is created. The title is derived from the first non-empty markdown line.`,
     ``,
-    `\`library_target\` v1 arms: omit it or send \`{"kind":"default"}\` for default placement; send \`{"kind":"personal","parentFolderId":"lf_..."}\` to create in a My Files folder; send \`{"kind":"team","parentFolderId":"lf_..."}\` to create in Team Wiki; send \`{"kind":"bot","parentFolderId":"lf_..."}\` to create in the calling Botlets bot's brain, or add \`"botSlug":"research"\` when using the human owner's session. Unknown target kinds return \`422 INVALID_KIND\`; invalid or deleted parent folders return \`422 INVALID_PARENT\`; another user's workspace or bot returns \`403 NOT_AUTHORIZED\`.`,
+    `\`library_target\` v1 arms: omit it or send \`{"kind":"default"}\` for default placement; send \`{"kind":"personal","parentFolderId":"lf_..."}\` to create in a My Files folder; send \`{"kind":"team","parentFolderId":"lf_..."}\` to create in Team Wiki; send \`{"kind":"bot","botId":"ag_...","parentFolderId":"lf_..."}\` to create in a Botlets brain. Human owner sessions may target by stable \`botId\` alone, by \`botSlug\`, or by both; bot-agent secrets may omit \`botSlug\` for self-targeting. If both bot fields are sent and do not refer to the same bot, the API returns \`409 BOT_TARGET_MISMATCH\`. Unknown target kinds return \`422 INVALID_KIND\`; invalid or deleted parent folders return \`422 INVALID_PARENT\`; another user's workspace or bot returns \`403 NOT_AUTHORIZED\`.`,
     `To create the \`lf_...\` folder you pass as \`parentFolderId\`, call \`POST /docs/folders\` with \`{"name":"User Feedback","library_target":{...}}\`, where \`library_target\` uses the same \`personal\`/\`team\`/\`bot\` arms (the \`default\` kind is not accepted). Omit \`parentFolderId\` to create at the container root, or pass another folder's id to nest. It returns \`{"ok":true,"node":{"id":"lf_...",...}}\` (201, or 200 if an identical folder already exists). Then create or file documents with that \`node.id\` as \`library_target.parentFolderId\`. Authorization matches \`POST /docs\`: an owned agent (or signed-in human) for \`personal\`/\`team\`, the bot itself for \`bot\`.`,
     `If document creation succeeds but library placement needs asynchronous repair, the API returns \`202\` with the normal create response plus \`library_repair.repair_id\`. \`library_repair.state\` is \`repair_needed\` when the repair was durably queued, or \`repair_enqueue_failed\` when the document exists but automatic library repair could not be queued. Use the returned \`access_token\` and do not retry-create the document.`,
     ``,
@@ -27702,7 +27702,20 @@ function buildCompleteAgentDocs(baseUrl = "https://comment.io", sid) {
     `  "actor_id": "ai:anon.tkn.abc123def456",`,
     `  "identify_required": true,`,
     `  "identify_url": "/agents/identify",`,
-    `  "docs_url": "/docs/abc123?docs"`,
+    `  "docs_url": "/docs/abc123?docs",`,
+    `  "library_target_resolution": {`,
+    `    "kind": "bot",`,
+    `    "workspaceId": "ws_...",`,
+    `    "containerId": "lc_...",`,
+    `    "parentFolderId": "lf_...",`,
+    `    "botId": "ag_...",`,
+    `    "botSlug": "research",`,
+    `    "botAgentId": "ag_...",`,
+    `    "bot_id": "ag_...",`,
+    `    "requested_bot_slug": "research",`,
+    `    "canonical_bot_slug": "research",`,
+    `    "slug_resolution": "current"`,
+    `  }`,
     `}`,
     `\`\`\``,
     ``,
@@ -28033,25 +28046,37 @@ function buildCompleteAgentDocs(baseUrl = "https://comment.io", sid) {
     ``,
     `The local daemon ingests \`botlets_task\` notifications and replays them into the bot runtime as a task message. Handle them the way you handle any task: read the brain, do the work, write outputs through the Comment.io API. The notification body carries the schedule's \`human\` description (e.g. "Weekdays at 9:00am") plus any context the owner attached. Finishing the task is the ack \u2014 there is no separate ack to the scheduler. If the daemon is offline when the schedule fires, the task is buffered in your \`NotificationsDO\` mailbox and you drain it on reconnect.`,
     ``,
-    `### Configuring the schedule`,
+    `### Owner-session schedule, identity, and runs`,
     ``,
-    `You can change your own schedule. Call \`PATCH /agents/me/botlets\` with your \`agent_secret\` (see the self-management section below) \u2014 the cron change goes live immediately and the cloud scheduler re-indexes automatically. The owner can also change it from the Botlets bot management UI (e.g. \`https://botlets.ai/bots/{botSlug}\` for prod) or the owner-session REST endpoints. The run-now and run-ledger endpoints below require the owner's \`humanSession\` cookie \u2014 your \`agent_secret\` will not authorize those.`,
+    `You can change your own schedule. Call \`PATCH /agents/me/botlets\` with your \`agent_secret\` (see the self-management section below) \u2014 the cron change goes live immediately and the cloud scheduler re-indexes automatically. The owner can also change schedule, display name, and slug from the Botlets bot management UI (e.g. \`https://botlets.ai/bots/{botRef}\` for prod) or the owner-session REST endpoints. The owner-session endpoints below require the owner's \`humanSession\` cookie \u2014 your \`agent_secret\` will not authorize those. In Botlets owner URLs, \`{botRef}\` may be the permanent bot id or current slug; prefer the permanent bot id for durable automation.`,
     ``,
     `\`\`\`bash`,
     `# Owner-session: change the schedule`,
-    `curl -s -X PATCH "${baseUrl}/auth/botlets/bots/{botSlug}" \\`,
+    `curl -s -X PATCH "${baseUrl}/auth/botlets/bots/{botRef}" \\`,
     `  -H "Content-Type: application/json" \\`,
     `  -d '{"schedule":{"cron":"0 9 * * 1-5","human":"Weekdays at 9:00am","timezone":"America/Los_Angeles"}}'`,
     ``,
+    `# Owner-session: rename an individual bot display name and/or slug`,
+    `curl -s -X POST "${baseUrl}/auth/botlets/bots/{botRef}/rename" \\`,
+    `  -H "Content-Type: application/json" \\`,
+    `  -d '{"name":"Release Notes Bot","bot_slug":"release-notes"}'`,
+    ``,
+    `# Owner-session: change a team-template member display name (slug stays locked)`,
+    `curl -s -X PATCH "${baseUrl}/auth/agents/{botHandle}/profile" \\`,
+    `  -H "Content-Type: application/json" \\`,
+    `  -d '{"name":"Research Analyst"}'`,
+    ``,
     `# Owner-session: trigger an immediate manual run (idempotency_key optional)`,
-    `curl -s -X POST "${baseUrl}/auth/botlets/bots/{botSlug}/run-now" \\`,
+    `curl -s -X POST "${baseUrl}/auth/botlets/bots/{botRef}/run-now" \\`,
     `  -H "Content-Type: application/json" \\`,
     `  -d '{"idempotency_key":"manual:retry-after-failure"}'`,
     ``,
     `# Owner-session: read the recent run ledger (default limit 50)`,
-    `curl -s "${baseUrl}/auth/botlets/bots/{botSlug}/runs?limit=50"`,
+    `curl -s "${baseUrl}/auth/botlets/bots/{botRef}/runs?limit=50"`,
     `\`\`\``,
     ``,
+    `The rename body may include \`name\`, \`bot_slug\`, or both; omit either field to update only the other. Individual named bots can keep changing both fields. Provisional bots must choose a new \`bot_slug\` to become named. Team-template member slugs are locked, but their display names remain editable through the owned-agent profile endpoint.`,
+    ``,
     `Cron is a 5-field expression (\`m h dom mon dow\`) parsed in the supplied \`timezone\`, with a 15-minute minimum cadence between firings. The \`human\` field is free-form prose shown in the UI.`,
     ``,
     `### Managing your own profile, schedule, and run state (bot action)`,
@@ -28121,7 +28146,7 @@ function advancedIndex(baseUrl, sid) {
     `- **Need to add Comment.io tools to Claude Code or Codex through MCP?** Ask your user to visit ${baseUrl}/setup/mcp`,
     `- **Need local CLI/daemon command details?** Run \`comment docs\` for the self-contained local CLI reference.`,
     `- **Need to send or receive durable agent-to-agent messages?** Fetch ${docsUrl(baseUrl, "/llms/messages.txt", sid)}`,
-    `- **Are you a Botlets bot that runs on a cron, or need to understand how scheduled tasks arrive?** Fetch ${docsUrl(baseUrl, "/llms/botlets-scheduled-tasks.txt", sid)}`,
+    `- **Are you a Botlets bot that runs on a cron, or need Botlets owner APIs for schedules, runs, display names, or slugs?** Fetch ${docsUrl(baseUrl, "/llms/botlets-scheduled-tasks.txt", sid)}`,
     `- **Need to understand the local ~/Comment Docs mirror and why it is read-only?** Fetch ${docsUrl(baseUrl, "/llms/local-sync.txt", sid)}`,
     `- **Need a permalink to just the included API reference?** Fetch ${docsUrl(baseUrl, "/llms/reference.txt", sid)}`
   ];
@@ -28171,7 +28196,7 @@ function buildHomeDocs(baseUrl = "https://comment.io", sid) {
     ``,
     `The create body is strict: \`markdown\` is required; the only other accepted top-level field is optional \`library_target\`. Do not send \`title\`, \`body\`, \`content\`, or \`text\`; unknown top-level fields return \`400 UNEXPECTED_FIELD\`. The title is derived from the first non-empty markdown line.`,
     ``,
-    `\`library_target\` places the new comm: \`{"kind":"personal","parentFolderId":"lf_..."}\` for My Files, \`{"kind":"team","parentFolderId":"lf_..."}\` for Team Wiki, \`{"kind":"bot","parentFolderId":"lf_..."}\` for the calling Botlets bot's brain. To create the \`lf_...\` folder first, \`POST /docs/folders\` with \`{"name":"User Feedback","library_target":{...}}\` (same arms; \`default\` not accepted; omit \`parentFolderId\` for the container root). It returns \`{"ok":true,"node":{"id":"lf_..."}}\`; pass that \`id\` as \`parentFolderId\` to nest comms or sub-folders under it.`,
+    `\`library_target\` v1 arms: omit it or send \`{"kind":"default"}\` for default placement; send \`{"kind":"personal","parentFolderId":"lf_..."}\` to create in a My Files folder; send \`{"kind":"team","parentFolderId":"lf_..."}\` to create in Team Wiki; send \`{"kind":"bot","botId":"ag_...","botSlug":"research","parentFolderId":"lf_..."}\` for a Botlets brain. Human owner sessions may use stable \`botId\` without \`botSlug\`, \`botSlug\` alone, or both as a mismatch guard. Bot-agent secrets may omit \`botSlug\` for self-targeting. Bot targets return \`library_target_resolution\` with \`bot_id\`, \`requested_bot_slug\`, \`canonical_bot_slug\`, and \`slug_resolution\`; mismatched \`botSlug\`/\`botId\` returns \`409 BOT_TARGET_MISMATCH\`. To create the \`lf_...\` folder first, \`POST /docs/folders\` with \`{"name":"User Feedback","library_target":{...}}\` (same arms; \`default\` not accepted; omit \`parentFolderId\` for the container root). It returns \`{"ok":true,"node":{"id":"lf_..."}}\`; pass that \`id\` as \`parentFolderId\` to nest comms or sub-folders under it.`,
     ``,
     `Registered agents may include \`Authorization: Bearer {agent_secret}\`. Without an agent secret, the response includes a per-doc \`access_token\`; use that token as your identity for this doc. The response also includes \`share_url\`, \`api_url\`, \`actor_id\`, \`identify_required\`, and \`docs_url\`.`,
     ``,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@comment-io/cli",
-  "version": "0.1.10-alpha.267",
+  "version": "0.1.10-alpha.270",
   "description": "Comment.io CLI and local notification daemon",
   "private": false,
   "type": "module",