@melius-ai/cli 0.15.1 → 0.15.3

package/README.md

@@ -433,7 +433,7 @@ Every error includes a machine-readable `code`, a human-readable `message`, and
 
 ### Rate limiting
 
-The API is rate limited per plan tier. On a `429` the CLI prints a `Rate limited — waiting Ns…` notice to **stderr** and automatically backs off and retries — honoring the `Retry-After` header, otherwise exponential backoff — so polling commands like `mel run wait` ride through a limit instead of failing. stdout stays clean for parsing. After repeated `429`s it gives up with a structured `RATE_LIMITED` error (exit `1`).
+There is no monthly request quota on any plan, but a burst of requests can still be rate limited. On a `429` the CLI prints a `Rate limited — waiting Ns…` notice to **stderr** and automatically backs off and retries — honoring the `Retry-After` header, otherwise exponential backoff — so polling commands like `mel run wait` ride through a limit instead of failing. stdout stays clean for parsing. After repeated `429`s it gives up with a structured `RATE_LIMITED` error (exit `1`).
 
 ### Global flags
 

package/dist/bin/mel.js

@@ -7,7 +7,7 @@ import {
   printUpgradeNoticeIfNeeded,
   withDefaultHelp,
   writeError
-} from "../chunk-MY4PEUTT.js";
+} from "../chunk-SEXDTRY5.js";
 
 // bin/mel.ts
 var program = createProgram();

package/dist/{chunk-MY4PEUTT.js → chunk-SEXDTRY5.js}

@@ -12,7 +12,11 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
 var __commonJS = (cb, mod) => function __require2() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -7737,6 +7741,7 @@ var MAX_INPUT_DOCUMENTS = 5;
 var MAX_AGENT_MESSAGE_CONTENT_LENGTH = 5e4;
 var MAX_SEED = 2147483647;
 var MAX_VARIATIONS = 10;
+var MAX_PINNED_MODELS = 5;
 
 // ../api-contract/src/common.ts
 var MessageResponseSchema = external_exports.object({ message: external_exports.string() });
@@ -7857,6 +7862,7 @@ var TAG_COLOR_PALETTE = [
 ];
 var TagColorSchema = external_exports.enum(TAG_COLOR_PALETTE);
 var MAX_ASSET_TAG_NAME_LENGTH = 100;
+var MAX_ASSET_DISPLAY_NAME_LENGTH = 500;
 var FileTagSchema = external_exports.object({
   id: external_exports.string().uuid(),
   name: external_exports.string(),
@@ -7977,6 +7983,9 @@ var UpdateFileFolderBodySchema = external_exports.object({
 var MoveFileBodySchema = external_exports.object({
   folderId: external_exports.string().uuid().nullable()
 });
+var RenameFileBodySchema = external_exports.object({
+  displayName: external_exports.string().trim().min(1).max(MAX_ASSET_DISPLAY_NAME_LENGTH)
+});
 var MAX_BULK_FILE_ACTION_ASSET_IDS = 500;
 var BulkFileAssetIdsSchema = external_exports.array(external_exports.string().uuid()).min(1).max(MAX_BULK_FILE_ACTION_ASSET_IDS);
 var BulkMoveFilesBodySchema = external_exports.object({
@@ -7986,7 +7995,13 @@ var BulkMoveFilesBodySchema = external_exports.object({
 var BulkDownloadableIdsSchema = external_exports.array(external_exports.string().uuid()).max(MAX_BULK_FILE_ACTION_ASSET_IDS).default([]);
 var BulkDownloadFilesBodySchema = external_exports.object({
   assetIds: BulkDownloadableIdsSchema,
-  folderIds: BulkDownloadableIdsSchema
+  folderIds: BulkDownloadableIdsSchema,
+  assetVersions: external_exports.array(
+    external_exports.object({
+      assetId: external_exports.string().uuid(),
+      nodeVersionId: external_exports.string().uuid()
+    })
+  ).max(MAX_BULK_FILE_ACTION_ASSET_IDS).optional()
 }).refine((body) => body.assetIds.length + body.folderIds.length > 0, {
   message: "Select at least one file or folder to download"
 });
@@ -8306,6 +8321,14 @@ var AgentSessionResponseSchema = external_exports.object({
   source: AgentSessionSourceSchema.optional(),
   /** True when this transcript is view-only on the current surface. */
   readOnly: external_exports.boolean().optional(),
+  /**
+   * True when the chat belongs to another member and is visible only because
+   * they share their chats on this canvas. The server answers this rather
+   * than the client comparing ids, so ownership arrives with the row instead
+   * of depending on a second request that can lag or fail. Absent from a
+   * server that predates the field, which reads as "mine" — today's behavior.
+   */
+  shared: external_exports.boolean().optional(),
   /** True when the agent is actively generating a response. */
   isGenerating: external_exports.boolean(),
   /** Present when the session is waiting for the user to approve a tool call. */
@@ -8397,6 +8420,10 @@ var AgentToolApprovalResponseSchema = external_exports.object({
   createdAt: external_exports.string().datetime(),
   updatedAt: external_exports.string().datetime()
 });
+var AgentChatSharingResponseSchema = external_exports.object({
+  canvasId: external_exports.string().uuid(),
+  sharing: external_exports.boolean()
+});
 
 // ../api-contract/src/agent/routes.ts
 var c = initContract();
@@ -8721,14 +8748,48 @@ var agentContract = c.router({
       204: c.noBody()
     },
     summary: "Remove feedback from an agent message"
+  },
+  getChatSharing: {
+    method: "GET",
+    path: "/agent/canvases/:canvasId/chat-sharing",
+    pathParams: external_exports.object({ canvasId: external_exports.string().uuid() }),
+    responses: { 200: AgentChatSharingResponseSchema },
+    summary: "Whether the caller shares their agent chats on this canvas"
+  },
+  // PUT, not POST: opting in twice is the same standing decision, so the
+  // request has to be safe to repeat.
+  shareChats: {
+    method: "PUT",
+    path: "/agent/canvases/:canvasId/chat-sharing",
+    pathParams: external_exports.object({ canvasId: external_exports.string().uuid() }),
+    body: null,
+    responses: { 200: AgentChatSharingResponseSchema },
+    summary: "Share the caller's agent chats on this canvas"
+  },
+  unshareChats: {
+    method: "DELETE",
+    path: "/agent/canvases/:canvasId/chat-sharing",
+    pathParams: external_exports.object({ canvasId: external_exports.string().uuid() }),
+    body: null,
+    responses: { 204: c.noBody() },
+    summary: "Stop sharing the caller's agent chats on this canvas"
   }
 });
 
 // ../api-contract/src/api-key/schema.ts
+var MAX_API_KEY_NAME_LENGTH = 255;
 var CreateApiKeyBodySchema = external_exports.object({
-  name: external_exports.string().min(1).max(255).optional(),
+  // Omitted means "generate one" — the server derives a random name. A
+  // supplied one is trimmed and rule-checked server-side, so a whitespace-only
+  // name comes back as a 400 with prose rather than a raw validation error.
+  name: external_exports.string().min(1).max(MAX_API_KEY_NAME_LENGTH).optional(),
   expiresAt: external_exports.string().datetime().optional()
 });
+var RenameApiKeyBodySchema = external_exports.object({
+  name: external_exports.string().trim().min(1).max(MAX_API_KEY_NAME_LENGTH)
+});
+var AGENT_SESSION_KEY_NAME_PREFIX = "agent-session-";
+var API_KEY_NAME_RESERVED_MESSAGE = `"${AGENT_SESSION_KEY_NAME_PREFIX}" is a reserved name prefix`;
 var ApiKeyResponseSchema = external_exports.object({
   id: external_exports.string().uuid(),
   name: external_exports.string(),
@@ -8753,8 +8814,12 @@ var apiKeyContract = c2.router({
     method: "POST",
     path: "/api-keys",
     body: CreateApiKeyBodySchema,
-    responses: { 201: CreateApiKeyResponseSchema },
-    summary: "Create a new API key (raw key returned only once)"
+    responses: {
+      201: CreateApiKeyResponseSchema,
+      400: ApiErrorResponseSchema,
+      409: ApiErrorResponseSchema
+    },
+    summary: "Create a new API key (raw key returned only once). A supplied name follows the same rules as a rename."
   },
   listApiKeys: {
     method: "GET",
@@ -8762,6 +8827,18 @@ var apiKeyContract = c2.router({
     responses: { 200: external_exports.array(ApiKeyResponseSchema) },
     summary: "List API keys for the current user in the active team"
   },
+  renameApiKey: {
+    method: "PATCH",
+    path: "/api-keys/:keyId",
+    pathParams: external_exports.object({ keyId: external_exports.string().uuid() }),
+    body: RenameApiKeyBodySchema,
+    responses: {
+      200: ApiKeyResponseSchema,
+      404: ApiErrorResponseSchema,
+      409: ApiErrorResponseSchema
+    },
+    summary: "Rename an API key. Names are unique per member within a team (case-insensitive)."
+  },
   revokeApiKey: {
     method: "DELETE",
     path: "/api-keys/:keyId",
@@ -9070,6 +9147,23 @@ var audioContract = c3.router({
   }
 });
 
+// ../canvas-yjs/src/canvas-vocabulary.ts
+var CANVAS_NODE_TYPES = [
+  "text",
+  "image",
+  "video",
+  "audio",
+  "file",
+  "group",
+  "custom_text",
+  "pdf",
+  "composite",
+  "stitch",
+  "magic_resize"
+];
+var CANVAS_GROUP_TYPES = ["default", "unified", "template"];
+var CANVAS_MEDIA_TYPES = ["image", "video", "audio", "pdf"];
+
 // ../canvas-yjs/src/group-color.ts
 var GROUP_COLOR_KEYS = [
   "default",
@@ -9348,6 +9442,9 @@ function parseAspectRatio(ratio) {
 }
 var ASPECT_RATIO_WIDTHS = {
   "21:9": 560,
+  "20:9": 555,
+  "19.5:9": 550,
+  "2:1": 535,
   "16:9": 520,
   "3:2": 480,
   "4:3": 440,
@@ -9357,6 +9454,9 @@ var ASPECT_RATIO_WIDTHS = {
   "3:4": 340,
   "2:3": 320,
   "9:16": 300,
+  "1:2": 290,
+  "9:19.5": 275,
+  "9:20": 268,
   "9:21": 260
 };
 var TEXT_NODE_WIDTH = 380;
@@ -9371,6 +9471,9 @@ var PDF_NODE_DEFAULT_WIDTH = 440;
 var NODE_CARD_OVERHEAD = 252;
 var ASPECT_RATIOS = [
   "21:9",
+  "20:9",
+  "19.5:9",
+  "2:1",
   "16:9",
   "3:2",
   "4:3",
@@ -9380,6 +9483,9 @@ var ASPECT_RATIOS = [
   "3:4",
   "2:3",
   "9:16",
+  "1:2",
+  "9:19.5",
+  "9:20",
   "9:21"
 ];
 var MODALITIES = {
@@ -10679,12 +10785,7 @@ function findClearPosition(obstacles, newWidth, newHeight, idealX = 0, idealY =
 }
 
 // ../api-contract/src/direct-file-node-validation.ts
-var DirectFileNodeMediaTypeSchema = external_exports.enum([
-  "image",
-  "video",
-  "audio",
-  "pdf"
-]);
+var DirectFileNodeMediaTypeSchema = external_exports.enum(CANVAS_MEDIA_TYPES);
 function inferDirectFileNodeMediaTypeFromContentType(contentType) {
   const mimeType = contentType.split(";")[0]?.trim().toLowerCase();
   if (!mimeType) return null;
@@ -11049,7 +11150,16 @@ var CanvasResponseSchema = external_exports.object({
   createdByUserId: external_exports.string().uuid().nullable(),
   previewAssets: external_exports.array(PreviewAssetSchema),
   createdAt: external_exports.string().datetime(),
-  updatedAt: external_exports.string().datetime()
+  updatedAt: external_exports.string().datetime(),
+  /**
+   * Present and `true` only for a canvas the product owns rather than the
+   * member — Cast's generation canvases. Ordinary canvases omit it, so a
+   * client built before this field reads every canvas the way it always did.
+   *
+   * Only a Melius account is ever shown one at all; this is what lets the
+   * surface say so rather than passing it off as the member's own work.
+   */
+  isSystem: external_exports.boolean().optional()
 });
 var CanvasVersionFavoriteSchema = external_exports.object({
   nodeId: external_exports.string().uuid(),
@@ -11066,19 +11176,7 @@ var GeometrySchema = external_exports.object({
   h: external_exports.number(),
   zIndex: external_exports.number().optional()
 });
-var NodeTypeSchema = external_exports.enum([
-  "text",
-  "image",
-  "video",
-  "audio",
-  "file",
-  "group",
-  "custom_text",
-  "pdf",
-  "composite",
-  "stitch",
-  "magic_resize"
-]);
+var NodeTypeSchema = external_exports.enum(CANVAS_NODE_TYPES);
 var EdgeTypeSchema = external_exports.enum([
   "text",
   "image",
@@ -11086,7 +11184,7 @@ var EdgeTypeSchema = external_exports.enum([
   "audio",
   "file"
 ]);
-var GroupTypeSchema = external_exports.enum(["default", "unified", "template"]);
+var GroupTypeSchema = external_exports.enum(CANVAS_GROUP_TYPES);
 var GroupColorSchema = external_exports.enum(GROUP_COLOR_KEYS);
 var ModelConfigSchema = external_exports.object({
   model: external_exports.string(),
@@ -11143,7 +11241,8 @@ var OutputResolutionPresetSchema = external_exports.enum([
   "540p",
   "580p",
   "720p",
-  // Fal's MiniMax H3 resolution enum spells its low tier `768P`.
+  // Fal's MiniMax H3 resolution enum spells its tiers `480P` and `768P`.
+  "480P",
   "768P",
   "1080p",
   "1440p",
@@ -11194,6 +11293,11 @@ var AssetSummaryDetailsSchema = external_exports.object({
 var AssetResponseSchema = external_exports.object({
   /** Omitted from persisted snapshots created before this field existed. */
   assetId: external_exports.string().uuid().optional(),
+  /**
+   * The asset's stored name, then its producing node title, then its filename.
+   * Optional for persisted snapshots created before this field existed.
+   */
+  displayName: external_exports.string().nullable().optional(),
   url: external_exports.string().nullable(),
   originalUrl: external_exports.string().nullable(),
   previewUrl: external_exports.string().nullable(),
@@ -11379,10 +11483,16 @@ var EdgeResponseSchema = external_exports.object({
   dstHandle: external_exports.string().nullable(),
   createdAt: external_exports.string().datetime()
 });
+var PinnedModelSchema = external_exports.object({
+  model: external_exports.string(),
+  mode: external_exports.string().optional()
+});
+var pinnedModelsField = external_exports.array(PinnedModelSchema).max(MAX_PINNED_MODELS).optional();
 var CanvasMediaPresetSchema = external_exports.object({
   image: external_exports.object({
     model: external_exports.string().optional(),
     mode: external_exports.string().optional(),
+    pinnedModels: pinnedModelsField,
     aspectRatio: OutputAspectRatioSchema.optional(),
     resolution: OutputResolutionSchema.optional(),
     fast: external_exports.boolean().optional(),
@@ -11391,6 +11501,7 @@ var CanvasMediaPresetSchema = external_exports.object({
   video: external_exports.object({
     model: external_exports.string().optional(),
     mode: external_exports.string().optional(),
+    pinnedModels: pinnedModelsField,
     aspectRatio: OutputAspectRatioSchema.optional(),
     resolution: OutputResolutionSchema.optional(),
     duration: external_exports.number().int().positive().optional(),
@@ -11400,12 +11511,14 @@ var CanvasMediaPresetSchema = external_exports.object({
   text: external_exports.object({
     model: external_exports.string().optional(),
     mode: external_exports.string().optional(),
+    pinnedModels: pinnedModelsField,
     fast: external_exports.boolean().optional(),
     numVariations: external_exports.number().int().min(1).max(MAX_VARIATIONS).optional()
   }).optional(),
   audio: external_exports.object({
     model: external_exports.string().optional(),
     mode: external_exports.string().optional(),
+    pinnedModels: pinnedModelsField,
     /** Default ElevenLabs stock voice id (text-to-speech / voice changer). */
     voiceId: external_exports.string().optional(),
     /** Default team-owned custom voice id; wins over `voiceId` when set. */
@@ -11538,22 +11651,16 @@ var RunNodeBodySchema = external_exports.object({
   /** Explicit image URLs to include as inputs (merged with edge-resolved images). */
   imageUrls: external_exports.array(external_exports.string().url()).max(MAX_INPUT_IMAGES).optional(),
   /**
-   * ElevenLabs voice id for audio TTS. Superseded by `voiceId`, which works
-   * for every provider; kept so already-deployed clients keep running.
-   * Mode-specific validation lives in the run service because the schema
-   * can't see the resolved model→mode mapping.
-   */
-  elevenLabsVoiceId: external_exports.string().trim().min(1).optional(),
-  /**
-   * Provider-agnostic voice selection, validated against the resolved
-   * variant's voice capability. Takes precedence over `elevenLabsVoiceId`.
+   * Provider-agnostic voice selection for audio TTS, validated against the
+   * resolved variant's voice capability. Mode-specific validation lives in
+   * the run service because the schema can't see the resolved model→mode
+   * mapping.
    */
   voiceId: external_exports.string().trim().min(1).optional(),
   /**
    * Team-owned custom voice. When set the backend resolves the underlying
-   * provider voice id from the database and uses it in place of
-   * `elevenLabsVoiceId`. The voice must belong to the same team and not be
-   * soft-deleted.
+   * provider voice id from the database and uses it in place of `voiceId`.
+   * The voice must belong to the same team and not be soft-deleted.
    */
   customVoiceId: external_exports.string().uuid().optional(),
   /**
@@ -11606,6 +11713,68 @@ var RunSmartLayersResponseSchema = external_exports.object({
   nodeRunId: external_exports.string().uuid(),
   creditCost: external_exports.number().int()
 });
+var StudioToolDimensionSchema = external_exports.number().positive().finite();
+var StudioToolCoordinateSchema = external_exports.number().finite();
+var SmartLayerToolSourceSchema = external_exports.object({
+  imageUrl: external_exports.string().url(),
+  rect: external_exports.object({
+    x: StudioToolCoordinateSchema,
+    y: StudioToolCoordinateSchema,
+    width: StudioToolDimensionSchema,
+    height: StudioToolDimensionSchema
+  }).optional()
+});
+var SmartLayerEditAnnotationSchema = external_exports.discriminatedUnion("type", [
+  external_exports.object({
+    type: external_exports.literal("point"),
+    x: StudioToolCoordinateSchema,
+    y: StudioToolCoordinateSchema
+  }),
+  external_exports.object({
+    type: external_exports.literal("box"),
+    x: StudioToolCoordinateSchema,
+    y: StudioToolCoordinateSchema,
+    width: StudioToolDimensionSchema,
+    height: StudioToolDimensionSchema
+  })
+]);
+var GenerativeEditSmartLayerBodySchema = external_exports.object({
+  /** Natural-language edit instruction (what to change). */
+  instruction: external_exports.string().trim().min(1).max(2e3),
+  /**
+   * Point/box annotations in artboard coordinates, narrowing the edit to
+   * regions of the target. Optional: the target layer is already chosen by
+   * `source`, so an empty list is a whole-image edit.
+   */
+  annotations: external_exports.array(SmartLayerEditAnnotationSchema).max(20),
+  /**
+   * Studio artboard dimensions the annotations were placed in. The backend
+   * normalizes annotations from this space into the model's 0–999 relative
+   * coordinate space, so grounding stays aligned even when the artboard was
+   * resized off the source resolution.
+   */
+  artboardWidth: StudioToolDimensionSchema,
+  artboardHeight: StudioToolDimensionSchema,
+  /** Layer image to edit, when it isn't the node's own asset. */
+  source: SmartLayerToolSourceSchema.optional()
+});
+var GenerativeEditSmartLayerResponseSchema = external_exports.object({
+  /**
+   * The re-rendered image, in studio artboard coordinates. The edit replaces
+   * the whole source image, so this occupies exactly the source layer's rect
+   * (the full artboard when the tool ran on the node's own image).
+   */
+  layer: external_exports.object({
+    type: external_exports.literal("image"),
+    x: external_exports.number(),
+    y: external_exports.number(),
+    width: external_exports.number().positive(),
+    height: external_exports.number().positive(),
+    snapshotSrc: external_exports.string().url()
+  }),
+  /** Credits charged for this edit. */
+  creditCost: external_exports.number().int()
+});
 var MagicResizeDefaultRatioSchema = external_exports.enum([
   "21:9",
   "16:9",
@@ -11695,6 +11864,8 @@ var CanvasLibraryAssetResponseSchema = external_exports.object({
   previewUrl: external_exports.string().nullable(),
   mediaType: external_exports.enum(["image", "video", "audio", "pdf"]),
   filename: external_exports.string(),
+  /** Optional for clients deployed before asset display names. */
+  displayName: external_exports.string().nullable().optional(),
   fileSizeInKb: external_exports.number().int().nonnegative(),
   durationInMs: external_exports.number().int().nonnegative().nullable(),
   createdAt: external_exports.string().datetime(),
@@ -12326,7 +12497,10 @@ var canvasContract = c4.router({
     method: "PATCH",
     path: "/nodes/:nodeId/share-mode",
     pathParams: external_exports.object({ nodeId: external_exports.string().uuid() }),
-    body: external_exports.object({ shareMode: ShareVisibilitySchema }),
+    body: external_exports.object({
+      shareMode: ShareVisibilitySchema,
+      nodeVersionId: external_exports.string().uuid().nullable().optional()
+    }),
     responses: {
       200: external_exports.object({ shareMode: ShareVisibilitySchema }),
       403: MessageResponseSchema,
@@ -12544,6 +12718,18 @@ var canvasContract = c4.router({
       404: NodeRunErrorResponseSchema
     }
   },
+  generativeEditSmartLayer: {
+    method: "POST",
+    path: "/nodes/:nodeId/smart-layers-generative-edits",
+    pathParams: external_exports.object({ nodeId: external_exports.string().uuid() }),
+    body: GenerativeEditSmartLayerBodySchema,
+    responses: {
+      201: GenerativeEditSmartLayerResponseSchema,
+      400: NodeRunErrorResponseSchema,
+      403: NodeRunErrorResponseSchema,
+      404: NodeRunErrorResponseSchema
+    }
+  },
   runMagicResize: {
     method: "POST",
     path: "/nodes/:nodeId/magic-resize",
@@ -13209,6 +13395,32 @@ var customFontContract = c5.router({
   }
 });
 
+// ../api-contract/src/asset-engagement/schema.ts
+var ASSET_ENGAGEMENT_SOURCES = {
+  /** In-app (web) Mel chat acting for a member. */
+  Agent: "agent",
+  Canvas: "canvas",
+  /** API key with no MCP session header — CLI and direct API use. */
+  Cli: "cli",
+  Files: "files",
+  /** Hosted MCP server, identified by its session header. */
+  Mcp: "mcp",
+  Playground: "playground",
+  /** Anonymous visitor on a `/a/` or `/g/` share link. */
+  PublicLink: "public_link",
+  /** Mel acting inside Slack. */
+  Slack: "slack"
+};
+var ClientAssetEngagementSourceSchema = external_exports.enum([
+  ASSET_ENGAGEMENT_SOURCES.Canvas,
+  ASSET_ENGAGEMENT_SOURCES.Files,
+  ASSET_ENGAGEMENT_SOURCES.Playground
+]);
+var AssetDownloadResponseSchema = external_exports.object({
+  url: external_exports.string().url(),
+  filename: external_exports.string()
+});
+
 // ../api-contract/src/files/routes.ts
 var c6 = initContract();
 var filesContract = c6.router({
@@ -13370,6 +13582,18 @@ var filesContract = c6.router({
     },
     summary: "Move a file to a folder"
   },
+  renameFile: {
+    method: "PATCH",
+    path: "/files/:assetId/name",
+    pathParams: FileAssetIdParamsSchema,
+    body: RenameFileBodySchema,
+    responses: {
+      200: FileCardSchema,
+      403: ErrorBodySchema,
+      404: ErrorBodySchema
+    },
+    summary: "Rename a file"
+  },
   bulkDownloadFiles: {
     method: "POST",
     path: "/files/bulk/download",
@@ -13450,6 +13674,38 @@ var filesContract = c6.router({
     },
     summary: "Restore a file hidden from Files"
   },
+  /**
+   * Put a generation made on a canvas no member may view into Files. Cast's
+   * clips are the first caller: the canvas they were made on is the
+   * product's, so nothing on it is a file until somebody asks for one.
+   *
+   * Distinct from `unhideFile`, which restores a file the member removed.
+   * This one adds a file that was never there.
+   */
+  saveFileToFiles: {
+    method: "POST",
+    path: "/files/:assetId/save",
+    pathParams: FileAssetIdParamsSchema,
+    body: null,
+    responses: {
+      204: c6.noBody(),
+      403: ErrorBodySchema,
+      404: ErrorBodySchema
+    },
+    summary: "Save a generation into Files"
+  },
+  unsaveFileFromFiles: {
+    method: "POST",
+    path: "/files/:assetId/unsave",
+    pathParams: FileAssetIdParamsSchema,
+    body: null,
+    responses: {
+      204: c6.noBody(),
+      403: ErrorBodySchema,
+      404: ErrorBodySchema
+    },
+    summary: "Take a saved generation back out of Files"
+  },
   listFiles: {
     method: "GET",
     path: "/files",
@@ -13524,7 +13780,11 @@ var filesContract = c6.router({
     method: "PATCH",
     path: "/files/:assetId/share-mode",
     pathParams: FileAssetIdParamsSchema,
-    body: external_exports.object({ shareMode: AssetShareModeSchema }),
+    body: external_exports.object({
+      shareMode: AssetShareModeSchema,
+      nodeVersionId: external_exports.string().uuid().nullable().optional(),
+      engagementSource: ClientAssetEngagementSourceSchema.optional()
+    }),
     responses: {
       200: external_exports.object({ shareMode: AssetShareModeSchema }),
       403: ErrorBodySchema,
@@ -13837,7 +14097,40 @@ var InputImageAspectRatioConstraintsResponseSchema = external_exports.object({
 var PromoRateLimitSchema = external_exports.object({
   used: external_exports.number().int().nonnegative(),
   limit: external_exports.number().int().nonnegative(),
-  remaining: external_exports.number().int().nonnegative()
+  remaining: external_exports.number().int().nonnegative(),
+  /**
+   * Credits one unit of allowance is worth, for a campaign metered in
+   * something other than whole generations. Present makes the allowance
+   * divisible: a run costing more than what is left is part-covered rather
+   * than dropped to full price.
+   *
+   * Absent means the campaign meters generations, where `remaining > 0` is
+   * the whole answer. A client that does not understand this field must
+   * treat the run as fully priced rather than free — see `freeResolution`.
+   */
+  unitCredits: external_exports.number().positive().optional(),
+  /**
+   * The output resolution `unitCredits` prices. Absent means every resolution
+   * qualifies. Sent rather than assumed so the client never hardcodes which
+   * resolution the campaign is running on.
+   *
+   * A campaign spendable at several resolutions still sends this pair, naming
+   * the one a client that predates `unitCreditsByResolution` should treat as
+   * covered. Such a client quotes the rest at full price, which understates a
+   * discount rather than promising one that is not honoured.
+   */
+  freeResolution: external_exports.string().optional(),
+  /**
+   * Credits one unit is worth at each covered resolution, when the allowance
+   * is one pool spendable across several of them. A resolution absent from
+   * the map is not covered.
+   *
+   * Present, this supersedes `unitCredits` / `freeResolution` entirely — that
+   * pair stays on the wire only for clients that predate it. Read it through
+   * `resolvePromoUnitCredits` rather than indexing it directly, so the
+   * precedence lives in one place.
+   */
+  unitCreditsByResolution: external_exports.record(external_exports.string(), external_exports.number().positive()).optional()
 });
 var ModelVariantResponseSchema = external_exports.object({
   mode: external_exports.string(),
@@ -14288,7 +14581,20 @@ var ProfileUserSchema = external_exports.object({
   signupSource: external_exports.string().nullable(),
   completedProductTour: external_exports.string().datetime().nullable(),
   avatarUrl: external_exports.string().nullable(),
-  advancedSettings: UserAdvancedSettingsSchema
+  advancedSettings: UserAdvancedSettingsSchema,
+  /**
+   * Whether this session may open the staff tools panel — a Melius account,
+   * or somebody of ours behind a verified impersonation marker.
+   *
+   * Sent because the client cannot work it out. While impersonating, `email`
+   * above is the *customer's*, so a panel gated on the address it can see
+   * would disappear exactly when support needs it. Says nothing about what
+   * the tools do: the server re-decides that per request, so a client that
+   * forces this to true gets a panel whose switches change nothing.
+   *
+   * Optional, so a client built before this reads the payload unchanged.
+   */
+  canUseStaffTools: external_exports.boolean().optional()
 });
 var ProfileReferralInfoSchema = external_exports.object({
   code: external_exports.string()
@@ -14370,6 +14676,12 @@ var TEAM_PLAN_IDS = [
 ];
 var CUSTOM_PLAN_TYPE_IDS = ["enterprise", "creative_partner"];
 
+// ../pricing/src/credit-top-up.ts
+var MELIUS_CREDITS_PER_USD = 1e3;
+var CENTS_PER_USD = 100;
+var CREDITS_PER_USD_CENT = MELIUS_CREDITS_PER_USD / CENTS_PER_USD;
+var MAX_CREDIT_TOP_UP_DISCOUNT_PERCENTAGE = 90;
+
 // ../api-contract/src/team/schema.ts
 var TeamRoleSchema = external_exports.enum(["owner", "admin", "editor", "viewer"]);
 var TeamPlanSchema = external_exports.enum(TEAM_PLAN_IDS);
@@ -14382,13 +14694,27 @@ var EnterpriseOrderLineItemSchema = external_exports.object({
   total: external_exports.string().min(1)
 });
 var EnterpriseBillingIntervalSchema = external_exports.enum(["monthly", "annual"]);
+var EnterpriseAllowedPaymentMethodsSchema = external_exports.enum([
+  "card_and_bank",
+  "bank_only",
+  "card_only"
+]);
 var EnterpriseStripeBillingInputSchema = external_exports.object({
   unitAmount: external_exports.number().int().positive(),
   // Expose the transform output to OpenAPI generation.
   currency: external_exports.string().length(3).transform((value) => value.toLowerCase()).pipe(external_exports.string()),
   billingInterval: EnterpriseBillingIntervalSchema,
   creditsPerPeriod: external_exports.number().int().positive(),
-  contractEndAt: external_exports.string().datetime().optional()
+  allowedPaymentMethods: EnterpriseAllowedPaymentMethodsSchema.optional(),
+  contractEndAt: external_exports.string().datetime().optional(),
+  /**
+   * Whether the term rolls into another of the same length instead of
+   * ending. Only meaningful alongside a `contractEndAt`. Absent means off,
+   * which is what a plan created before this field gets; new plans send it
+   * explicitly rather than the resolver defaulting to on, so existing
+   * contracts keep their current behavior.
+   */
+  autoRenew: external_exports.boolean().optional()
 }).refine(
   (input) => input.billingInterval !== "annual" || input.contractEndAt != null,
   {
@@ -14417,6 +14743,13 @@ var EnterpriseOrderDetailsSchema = external_exports.object({
   creditPackageAmount: external_exports.number().int().nonnegative(),
   creditPackageUnit: external_exports.string().min(1),
   creditRolloverPolicy: CustomPlanCreditRolloverPolicySchema.optional(),
+  /**
+   * Whole percent off the standard per-credit rate for top-ups beyond the
+   * plan's allowance. Absent means the standard rate. Unlike the rest of the
+   * order details this is not presentational — checkout, the Stripe grant and
+   * the receipt all price against it (see `@repo/pricing/credit-top-up`).
+   */
+  creditTopUpDiscountPercentage: external_exports.number().int().min(1).max(MAX_CREDIT_TOP_UP_DISCOUNT_PERCENTAGE).optional(),
   orderDate: external_exports.string().date(),
   /** Omit for plans with no fixed contract term (e.g. monthly Stripe plans). */
   termCount: external_exports.number().int().positive().optional(),
@@ -14447,24 +14780,57 @@ var EnterprisePendingExpansionSchema = external_exports.object({
   preparedAt: external_exports.string().datetime(),
   preparedByEmail: external_exports.string().nullable()
 });
+var EnterprisePendingRenewalSchema = external_exports.object({
+  id: external_exports.string(),
+  newUnitAmount: external_exports.number().int().positive(),
+  newCreditsPerPeriod: external_exports.number().int().positive(),
+  newStripePriceId: external_exports.string().min(1),
+  /** Length of the renewal term in monthly billing periods. */
+  newTermMonths: external_exports.number().int().positive(),
+  newContractEndAt: external_exports.string().datetime(),
+  /** Operator-authored replacement order details. Purely presentational. */
+  newOrderDetails: EnterpriseOrderDetailsSchema.optional(),
+  preparedAt: external_exports.string().datetime(),
+  preparedByEmail: external_exports.string().nullable()
+});
 var EnterpriseStripeBillingSchema = external_exports.object({
   unitAmount: external_exports.number().int().positive(),
   // Expose the transform output to OpenAPI generation.
   currency: external_exports.string().length(3).transform((value) => value.toLowerCase()).pipe(external_exports.string()),
   billingInterval: EnterpriseBillingIntervalSchema,
   creditsPerPeriod: external_exports.number().int().positive(),
+  allowedPaymentMethods: EnterpriseAllowedPaymentMethodsSchema.optional(),
   contractEndAt: external_exports.string().datetime().optional(),
+  /**
+   * Whether the contract rolls into another term of the same length at
+   * `contractEndAt` instead of ending. Only meaningful alongside a
+   * `contractEndAt`; a plan with no fixed term already renews indefinitely.
+   * Absent means off, so a plan created before this field keeps ending at its
+   * contract end. Read it through `resolveEnterpriseAutoRenew`.
+   */
+  autoRenew: external_exports.boolean().optional(),
   stripePriceId: external_exports.string().min(1),
   activatedAt: external_exports.string().datetime().optional(),
   activatedByEmail: external_exports.string().nullable().optional(),
-  pendingExpansion: EnterprisePendingExpansionSchema.optional()
+  paymentMethodType: external_exports.enum(["card", "us_bank_account"]).optional(),
+  firstPaymentSettledAt: external_exports.string().datetime().optional(),
+  pendingExpansion: EnterprisePendingExpansionSchema.optional(),
+  pendingRenewal: EnterprisePendingRenewalSchema.optional(),
+  /** Stripe subscription schedule driving a prepared renewal, while attached. */
+  stripeScheduleId: external_exports.string().min(1).optional()
 });
 var CustomerEnterpriseStripeBillingSchema = EnterpriseStripeBillingSchema.omit({
   activatedAt: true,
   activatedByEmail: true,
+  allowedPaymentMethods: true,
+  paymentMethodType: true,
+  firstPaymentSettledAt: true,
   // Operator-only; the customer reads a pending expansion through the
   // dedicated preview endpoint, which excludes operator emails.
-  pendingExpansion: true
+  pendingExpansion: true,
+  // Same reason — it carries the preparing operator's email.
+  pendingRenewal: true,
+  stripeScheduleId: true
 });
 var EnterpriseStripeBillingAuditActionSchema = external_exports.enum([
   "created",
@@ -14610,6 +14976,11 @@ var SharedAssetResponseSchema = external_exports.object({
   height: external_exports.number().int().nullable(),
   durationInMs: external_exports.number().int().nullable()
 });
+var SharedDownloadResponseSchema = external_exports.object({
+  url: external_exports.string().url().nullable(),
+  text: external_exports.string().nullable(),
+  filename: external_exports.string()
+});
 var SharedGenerationMediaTypeSchema = external_exports.enum(["image", "video", "audio"]);
 var SharedGenerationTypeSchema = external_exports.enum(["text", "image", "video", "audio"]);
 var SharedGenerationReferenceSchema = external_exports.object({
@@ -14687,7 +15058,9 @@ var RecreateGenerationResponseSchema = external_exports.object({
   recreatedGeneration: external_exports.object({
     nodeId: external_exports.string().uuid(),
     projectId: external_exports.string().uuid(),
-    canvasId: external_exports.string().uuid()
+    canvasId: external_exports.string().uuid(),
+    nodeVersionId: external_exports.string().uuid().nullable().optional(),
+    assetId: external_exports.string().uuid().nullable().optional()
   }).optional()
 });
 var SharedGenerationHandoffSchema = RecreateGenerationResponseSchema.extend({
@@ -14748,7 +15121,9 @@ var ProjectResponseSchema = external_exports.object({
   previewAssets: external_exports.array(PreviewAssetSchema),
   createdAt: external_exports.string().datetime(),
   updatedAt: external_exports.string().datetime(),
-  lastEditAt: external_exports.string().datetime()
+  lastEditAt: external_exports.string().datetime(),
+  /** As on a canvas: the product's own project, shown only to a Melius account. */
+  isSystem: external_exports.boolean().optional()
 });
 var ProjectOptionSchema = ProjectResponseSchema.pick({
   id: true,
@@ -14780,6 +15155,9 @@ var ListAllProjectsQuerySchema = PaginationQuerySchema.extend({
   // regardless of folder (the historical behavior).
   folderId: external_exports.union([external_exports.string().uuid(), external_exports.literal("root")]).optional()
 });
+var RecentProjectsQuerySchema = external_exports.object({
+  teamId: external_exports.string().uuid().optional()
+});
 var PaginatedProjectsResponseSchema = external_exports.object({
   data: external_exports.array(ProjectResponseSchema),
   total: external_exports.number().int()
@@ -14899,11 +15277,13 @@ var projectContract = c10.router({
   listRecentProjects: {
     method: "GET",
     path: "/projects/recents",
+    query: RecentProjectsQuerySchema,
     responses: { 200: ProjectListResponseSchema }
   },
   listRecentProjectMetadata: {
     method: "GET",
     path: "/projects/recents/metadata",
+    query: RecentProjectsQuerySchema,
     responses: { 200: ProjectListResponseSchema }
   },
   listProjectThumbnails: {
@@ -15552,7 +15932,7 @@ function handleApiError(status, body, suggestion) {
         extractMessage(body) ?? "Rate limit exceeded",
         {
           status,
-          suggestion: suggestion ?? "Wait a moment and try again, or upgrade your plan for a higher limit"
+          suggestion: suggestion ?? "Wait a moment and try again, and send fewer requests in parallel"
         }
       ),
       EXIT_API_ERROR
@@ -15715,7 +16095,7 @@ function isMajorUpgrade(current, latest) {
   return l[0] > c14[0];
 }
 function shouldShowUpgradeNotice(ctx = {}) {
-  const current = ctx.current ?? "0.15.1";
+  const current = ctx.current ?? "0.15.3";
   const latest = ctx.latest ?? serverLatestVersion;
   const env = ctx.env ?? process.env;
   const isTty = ctx.isTty ?? Boolean(process.stderr.isTTY);
@@ -15736,7 +16116,7 @@ Upgrade: npm install -g @melius-ai/cli@latest  (or: brew update && brew upgrade
 function printUpgradeNoticeIfNeeded(ctx = {}) {
   try {
     if (!shouldShowUpgradeNotice(ctx)) return;
-    const current = ctx.current ?? "0.15.1";
+    const current = ctx.current ?? "0.15.3";
     const latest = ctx.latest ?? serverLatestVersion;
     process.stderr.write(formatUpgradeNotice(current, latest));
   } catch {
@@ -20068,7 +20448,7 @@ function withDefaultHelp(args) {
 }
 function createProgram() {
   const program2 = new Command();
-  program2.name("mel").description("Mel \u2014 Melius agent CLI").version("0.15.1").showSuggestionAfterError(true).option("--json", "Force JSON output (default)").option("--text", "Human-readable output").option(
+  program2.name("mel").description("Mel \u2014 Melius agent CLI").version("0.15.3").showSuggestionAfterError(true).option("--json", "Force JSON output (default)").option("--text", "Human-readable output").option(
     "--fields <fields>",
     "Select specific output fields (comma-separated)"
   ).option("--quiet", "Suppress output, exit code only").option("--verbose", "Log request/response metadata to stderr").addHelpText(

package/dist/src/index.js

@@ -2,7 +2,7 @@ import { createRequire } from 'node:module'; const require = createRequire(impor
 import {
   createProgram,
   withDefaultHelp
-} from "../chunk-MY4PEUTT.js";
+} from "../chunk-SEXDTRY5.js";
 export {
   createProgram,
   withDefaultHelp

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melius-ai/cli",
-  "version": "0.15.1",
+  "version": "0.15.3",
   "description": "The Melius command-line interface — create canvases and run AI image/video generations from your terminal",
   "keywords": [
     "ai",