@meltstudio/meltctl 5.28.0 → 5.29.0

package/dist/index.js

@@ -7499,7 +7499,7 @@ var CLI_VERSION;
 var init_version = __esm({
   "src/utils/version.ts"() {
     "use strict";
-    CLI_VERSION = "5.28.0";
+    CLI_VERSION = "5.29.0";
   }
 });
 
@@ -28047,6 +28047,35 @@ function createEndpointChecksResource(config2) {
       }
       return data.device;
     },
+    /**
+     * People exempt from the endpoint check (client-managed machines).
+     * Active ones only, unless `includeInactive`. Manager-gated.
+     */
+    async listExemptions(includeInactive = false) {
+      const query = includeInactive ? "?all=true" : "";
+      const { data, status } = await apiFetch(config2, `/endpoint-checks/exemptions${query}`);
+      if (status === 403) {
+        throw new Error("Access denied. Only Team Managers can list endpoint exemptions.");
+      }
+      if (status !== 200) {
+        throw new Error(data.error ?? `Failed to list endpoint exemptions (${status})`);
+      }
+      return data;
+    },
+    /**
+     * Set (`active: true`) or clear (`active: false`) a person's exemption.
+     * Clearing keeps the row. Manager-gated.
+     */
+    async setExemption(input) {
+      const { data, status } = await apiFetch(config2, "/endpoint-checks/exemptions", { method: "PUT", body: JSON.stringify(input) });
+      if (status === 403) {
+        throw new Error("Access denied. Only Team Managers can change endpoint exemptions.");
+      }
+      if (status !== 200) {
+        throw new Error(data.error ?? `Failed to set endpoint exemption (${status})`);
+      }
+      return data.exemption;
+    },
     /** Weekly Slack reminder settings (#651). Manager-gated. */
     async getReminderSettings() {
       const { data, status } = await apiFetch(config2, "/endpoint-reminders/settings");
@@ -55349,6 +55378,35 @@ function createEndpointChecksResource2(config2) {
       }
       return data.device;
     },
+    /**
+     * People exempt from the endpoint check (client-managed machines).
+     * Active ones only, unless `includeInactive`. Manager-gated.
+     */
+    async listExemptions(includeInactive = false) {
+      const query = includeInactive ? "?all=true" : "";
+      const { data, status } = await apiFetch2(config2, `/endpoint-checks/exemptions${query}`);
+      if (status === 403) {
+        throw new Error("Access denied. Only Team Managers can list endpoint exemptions.");
+      }
+      if (status !== 200) {
+        throw new Error(data.error ?? `Failed to list endpoint exemptions (${status})`);
+      }
+      return data;
+    },
+    /**
+     * Set (`active: true`) or clear (`active: false`) a person's exemption.
+     * Clearing keeps the row. Manager-gated.
+     */
+    async setExemption(input) {
+      const { data, status } = await apiFetch2(config2, "/endpoint-checks/exemptions", { method: "PUT", body: JSON.stringify(input) });
+      if (status === 403) {
+        throw new Error("Access denied. Only Team Managers can change endpoint exemptions.");
+      }
+      if (status !== 200) {
+        throw new Error(data.error ?? `Failed to set endpoint exemption (${status})`);
+      }
+      return data.exemption;
+    },
     /** Weekly Slack reminder settings (#651). Manager-gated. */
     async getReminderSettings() {
       const { data, status } = await apiFetch2(config2, "/endpoint-reminders/settings");
@@ -56942,6 +57000,26 @@ var setEndpointDeviceStatusInputSchema = external_exports.object(setStatusShape)
 async function setEndpointDeviceStatus(client, input) {
   return safe(() => client.endpointChecks.setDeviceStatus(input));
 }
+var listExemptionsShape = {
+  includeInactive: external_exports.boolean().optional().describe("Also list cleared exemptions (kept for history). Defaults to active only.")
+};
+var listEndpointExemptionsInputSchema = external_exports.object(listExemptionsShape);
+async function listEndpointExemptions(client, input) {
+  return safe(() => client.endpointChecks.listExemptions(input.includeInactive ?? false));
+}
+var setExemptionShape = {
+  email: external_exports.string().min(1).describe("The person's @meltstudio.co email."),
+  active: external_exports.boolean().describe("true sets the exemption; false clears it (the row is kept)."),
+  reason: external_exports.enum(["client_managed"]).optional().describe(
+    "client_managed = works on a machine the client provides and verifies itself. The default."
+  ),
+  clientName: external_exports.string().max(500).optional().describe('The client whose machine it is. Omit to keep the current one; "" clears it.'),
+  note: external_exports.string().max(500).optional().describe('Optional note, e.g. "client runs SOC 2 checks". Omit to keep the current one.')
+};
+var setEndpointExemptionInputSchema = external_exports.object(setExemptionShape);
+async function setEndpointExemption(client, input) {
+  return safe(() => client.endpointChecks.setExemption(input));
+}
 function registerEndpointCheckTools(server, getClient2) {
   server.registerTool(
     "submit_endpoint_check",
@@ -56988,6 +57066,24 @@ function registerEndpointCheckTools(server, getClient2) {
     },
     withClientArgs(getClient2, setEndpointDeviceStatus)
   );
+  server.registerTool(
+    "list_endpoint_exemptions",
+    {
+      title: "List endpoint check exemptions (manager)",
+      description: "Lists the people exempt from the endpoint check because they work on a client-managed machine the client verifies itself (SOC 2 and similar): email, reason, client name, note, and who set it and when. Active ones only unless includeInactive. Exempt people get no reminders and are left out of the overdue and coverage numbers. Manager-gated.",
+      inputSchema: listExemptionsShape
+    },
+    withClientArgs(getClient2, listEndpointExemptions)
+  );
+  server.registerTool(
+    "set_endpoint_exemption",
+    {
+      title: "Set or clear an endpoint check exemption (manager)",
+      description: "Exempts a person from Melt's endpoint check (active true) because they work on a client-managed machine, or clears the exemption (active false; the row is kept for history). While active they get no weekly reminder DM, are never escalated and don't count as overdue on the dashboard. Any checks they already submitted stay. Pass the client's name when known. Manager-gated.",
+      inputSchema: setExemptionShape
+    },
+    withClientArgs(getClient2, setEndpointExemption)
+  );
 }
 async function getSupportEffort(client, input) {
   return safe(async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meltstudio/meltctl",
-  "version": "5.28.0",
+  "version": "5.29.0",
   "description": "AI-first development tooling for Melt teams — companion CLI for the org-distributed Claude Code dev skills",
   "main": "dist/index.js",
   "type": "module",