@naturali/cli 0.156.1 → 0.157.0

package/dist/index.mjs

@@ -17,7 +17,7 @@ var __exportAll = (all, no_symbols) => {
 };
 //#endregion
 //#region package.json
-var version = "0.156.1";
+var version = "0.157.0";
 //#endregion
 //#region ../sdk/src/generated/core/bodySerializer.gen.ts
 const serializeFormDataPair = (data, key, value) => {
@@ -5790,19 +5790,19 @@ const renderCommandHelp = (args) => {
 	for (const group of [
 		{
 			label: "Path flags",
-			in: "path"
+			in: ["path"]
 		},
 		{
 			label: "Query flags",
-			in: "query"
+			in: ["query"]
 		},
 		{
 			label: "Body flags",
-			in: "body"
+			in: ["body", "body-root"]
 		}
 	]) {
 		const flags = route.flags.filter((flag) => {
-			return flag.in === group.in;
+			return group.in.includes(flag.in);
 		});
 		if (flags.length === 0) continue;
 		lines.push(`${group.label}:`);
@@ -5950,6 +5950,11 @@ const resolveFlagValue = (args) => {
 };
 //#endregion
 //#region src/routeCall.ts
+const findRootBodyFlag = (route) => {
+	return route.flags.find((flag) => {
+		return flag.in === "body-root";
+	});
+};
 const placeFlags = (args) => {
 	const { route, parsedFlags, call } = args;
 	const fileErrors = [];
@@ -5967,6 +5972,7 @@ const placeFlags = (args) => {
 		}
 		return resolved.fromFile ? resolved.value : coerce(resolved.value);
 	};
+	const rootBodyFlag = findRootBodyFlag(route);
 	const typeByCanonical = new Map(route.flags.map((flag) => {
 		return [toCanonical(flag.name), flag.type];
 	}));
@@ -5991,6 +5997,10 @@ const placeFlags = (args) => {
 			call.path[pathParam] = value;
 			continue;
 		}
+		if (rootBodyFlag && canonical === toCanonical(rootBodyFlag.name)) {
+			call.rootBody = { value };
+			continue;
+		}
 		const queryParam = route.queryParams.find((param) => {
 			return toCanonical(param) === canonical;
 		});
@@ -6042,6 +6052,13 @@ const buildRouteCall = (args) => {
 		kind: "file_errors",
 		fileErrors
 	};
+	const rootBodyFlag = findRootBodyFlag(route);
+	if (rootBodyFlag && call.rootBody && Object.keys(call.body).length > 0) return {
+		ok: false,
+		kind: "body_root_conflict",
+		rootFlag: toKebab(rootBodyFlag.name),
+		bodyFlags: Object.keys(call.body).map(toKebab)
+	};
 	applyProjectIdEnvDefault({
 		route,
 		call
@@ -6133,13 +6150,26 @@ const resolveServiceMethod = (route) => {
 	}
 	return method;
 };
+/** The stderr message for a call that could not be built. */
+const describeBuildFailure = (args) => {
+	const { commandName, failure } = args;
+	if (failure.kind === "file_errors") return failure.fileErrors.join("\n");
+	if (failure.kind === "body_root_conflict") return `${failure.bodyFlags.map((flag) => {
+		return `--${flag}`;
+	}).join(", ")}: '${commandName}' sends its whole body in --${failure.rootFlag}.`;
+	const flagsHint = failure.missingPathParams.map((param) => {
+		return `--${param.replace(/_/g, "-")} <value>`;
+	}).join(", ");
+	return `Missing required path parameter(s): ${failure.missingPathParams.join(", ")}.\nProvide with ${flagsHint}.`;
+};
 /** Builds the SDK call options from a resolved route call, omitting empty parts. */
 const buildCallOptions = (args) => {
 	const { client, call } = args;
 	const callOptions = { client };
 	if (Object.keys(call.path).length) callOptions["path"] = call.path;
 	if (Object.keys(call.query).length) callOptions["query"] = call.query;
-	if (Object.keys(call.body).length) callOptions["body"] = call.body;
+	if (call.rootBody) callOptions["body"] = call.rootBody.value;
+	else if (Object.keys(call.body).length) callOptions["body"] = call.body;
 	return callOptions;
 };
 /**
@@ -6196,15 +6226,11 @@ const dispatchCommand = async (args) => {
 		route,
 		parsedFlags
 	});
-	if (!built.ok && built.kind === "file_errors") {
-		console.error(built.fileErrors.join("\n"));
-		process.exit(1);
-	}
 	if (!built.ok) {
-		const flagsHint = built.missingPathParams.map((param) => {
-			return `--${param.replace(/_/g, "-")} <value>`;
-		}).join(", ");
-		console.error(`Missing required path parameter(s): ${built.missingPathParams.join(", ")}.\nProvide with ${flagsHint}.`);
+		console.error(describeBuildFailure({
+			commandName,
+			failure: built
+		}));
 		process.exit(1);
 	}
 	const result = await resolveServiceMethod(route)(buildCallOptions({
@@ -6660,19 +6686,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "actor_id",
-			"description": "Actor ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "actor_id",
+				"description": "Actor ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"merge-actor-tags": {
 		serviceClass: "Actors",
@@ -6684,19 +6720,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "actor_id",
-			"description": "Actor ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "actor_id",
+				"description": "Actor ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"list-addresses": {
 		serviceClass: "Channels",
@@ -6806,7 +6852,7 @@ const routes = {
 				"name": "repeat",
 				"description": "",
 				"required": false,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -7260,7 +7306,7 @@ const routes = {
 				"name": "tool_choice",
 				"description": "Tool choice strategy. Accepts a string (`\"auto\"`, `\"required\"`) or an object (`{ \"type\": \"tool\", \"tool_name\": \"my_tool\" }`). A forcing value (`\"required\"` or the object form) forbids a final assistant message on every step of every turn, including a resumed or continued one, so it requires a `has_tool_call` entry in `stop_conditions` — otherwise the write is refused with `FORCED_TOOL_CHOICE_CANNOT_STOP`.",
 				"required": false,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -7472,7 +7518,7 @@ const routes = {
 				"name": "tool_choice",
 				"description": "Tool choice strategy. Accepts a string (`\"auto\"`, `\"required\"`) or an object (`{ \"type\": \"tool\", \"tool_name\": \"my_tool\" }`). A forcing value (`\"required\"` or the object form) forbids a final assistant message on every step of every turn, including a resumed or continued one, so it requires a `has_tool_call` entry in `stop_conditions` — otherwise the write is refused with `FORCED_TOOL_CHOICE_CANNOT_STOP`.",
 				"required": false,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -7667,7 +7713,7 @@ const routes = {
 				"name": "tool_choice",
 				"description": "Tool choice strategy. Accepts a string (`\"auto\"`, `\"required\"`) or an object (`{ \"type\": \"tool\", \"tool_name\": \"my_tool\" }`). A forcing value (`\"required\"` or the object form) forbids a final assistant message on every step of every turn, including a resumed or continued one, so it requires a `has_tool_call` entry in `stop_conditions` — otherwise the write is refused with `FORCED_TOOL_CHOICE_CANNOT_STOP`.",
 				"required": false,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -9399,7 +9445,7 @@ const routes = {
 				"name": "repeat",
 				"description": "",
 				"required": false,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -9545,7 +9591,7 @@ const routes = {
 				"name": "repeat",
 				"description": "",
 				"required": false,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -10537,19 +10583,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "conversation_id",
-			"description": "Conversation ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "conversation_id",
+				"description": "Conversation ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"merge-conversation-tags": {
 		serviceClass: "Conversations",
@@ -10561,19 +10617,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "conversation_id",
-			"description": "Conversation ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "conversation_id",
+				"description": "Conversation ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"list-deciders": {
 		serviceClass: "Deciders",
@@ -10955,7 +11021,7 @@ const routes = {
 				"name": "state",
 				"description": "What is judged: any JSON value. A string reaches the agent verbatim; anything else is serialized as JSON. Not stored.",
 				"required": true,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -11816,19 +11882,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "document_id",
-			"description": "Document ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "document_id",
+				"description": "Document ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"merge-document-tags": {
 		serviceClass: "Documents",
@@ -11840,19 +11916,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "document_id",
-			"description": "Document ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "document_id",
+				"description": "Document ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"create-embeddings": {
 		serviceClass: "Embeddings",
@@ -13231,19 +13317,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "file_id",
-			"description": "File ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "file_id",
+				"description": "File ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"merge-file-tags": {
 		serviceClass: "Files",
@@ -13255,19 +13351,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "file_id",
-			"description": "File ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "file_id",
+				"description": "File ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"validate-formation": {
 		serviceClass: "Formations",
@@ -13291,7 +13397,7 @@ const routes = {
 				"name": "template",
 				"description": "A formation template supplied as either a JSON object or a YAML/JSON string. When a string is provided the server parses it with a YAML parser (JSON is valid YAML) before processing.\n",
 				"required": false,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -13332,7 +13438,7 @@ const routes = {
 				"name": "template",
 				"description": "A formation template supplied as either a JSON object or a YAML/JSON string. When a string is provided the server parses it with a YAML parser (JSON is valid YAML) before processing.\n",
 				"required": true,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -13407,7 +13513,7 @@ const routes = {
 				"name": "template",
 				"description": "A formation template supplied as either a JSON object or a YAML/JSON string. When a string is provided the server parses it with a YAML parser (JSON is valid YAML) before processing.\n",
 				"required": true,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -13479,7 +13585,7 @@ const routes = {
 				"name": "template",
 				"description": "A formation template supplied as either a JSON object or a YAML/JSON string. When a string is provided the server parses it with a YAML parser (JSON is valid YAML) before processing.\n",
 				"required": false,
-				"type": "string",
+				"type": "unknown",
 				"in": "body"
 			},
 			{
@@ -14934,19 +15040,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "memory_id",
-			"description": "Memory ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "memory_id",
+				"description": "Memory ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"merge-memory-tags": {
 		serviceClass: "Memories",
@@ -14958,19 +15074,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "memory_id",
-			"description": "Memory ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "memory_id",
+				"description": "Memory ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"list-memory-rules": {
 		serviceClass: "MemoryRules",
@@ -15620,19 +15746,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "memory_store_id",
-			"description": "Memory store ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "memory_store_id",
+				"description": "Memory store ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"merge-memory-store-tags": {
 		serviceClass: "MemoryStores",
@@ -15644,19 +15780,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "memory_store_id",
-			"description": "Memory store ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "memory_store_id",
+				"description": "Memory store ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"list-metadata-schemas": {
 		serviceClass: "MetadataSchemas",
@@ -18512,19 +18658,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "session_id",
-			"description": "Session public ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "session_id",
+				"description": "Session public ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"merge-session-tags": {
 		serviceClass: "Sessions",
@@ -18536,19 +18692,29 @@ const routes = {
 		queryParams: [],
 		headerParams: [],
 		cookieParams: [],
-		flags: [{
-			"name": "project_id",
-			"description": "Project public ID (proj_ prefix).",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}, {
-			"name": "session_id",
-			"description": "Session public ID",
-			"required": true,
-			"type": "string",
-			"in": "path"
-		}]
+		flags: [
+			{
+				"name": "project_id",
+				"description": "Project public ID (proj_ prefix).",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "session_id",
+				"description": "Session public ID",
+				"required": true,
+				"type": "string",
+				"in": "path"
+			},
+			{
+				"name": "tags",
+				"description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter and knowledge search.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+				"required": true,
+				"type": "object",
+				"in": "body-root"
+			}
+		]
 	},
 	"list-tasks": {
 		serviceClass: "Tasks",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naturali/cli",
-  "version": "0.156.1",
+  "version": "0.157.0",
   "description": "Command-line interface for the naturali.ai API, generated from its OpenAPI specs",
   "type": "module",
   "bin": {
@@ -25,8 +25,8 @@
     "yaml": "^2.9.1"
   },
   "devDependencies": {
-    "@naturali/sdk": "0.156.1",
-    "@ttoss/openapi-codegen": "^0.3.1",
+    "@naturali/sdk": "0.157.0",
+    "@ttoss/openapi-codegen": "^0.5.0",
     "@types/node": "^26.5.1",
     "tsdown": "^0.23.0",
     "tsx": "^4.23.13",