@naturali/cli 0.211.5 → 0.211.7

package/dist/index.mjs

@@ -17,7 +17,7 @@ var __exportAll = (all, no_symbols) => {
 };
 //#endregion
 //#region package.json
-var version = "0.211.5";
+var version = "0.211.7";
 //#endregion
 //#region ../sdk/src/generated/core/bodySerializer.gen.ts
 const serializeFormDataPair = (data, key, value) => {
@@ -942,7 +942,10 @@ var Channels = class {
 	* **Discord** (`channel: discord`) — supply `application_id` and `bot_token`, plus the `modes` selecting which Gateway flows to serve (direct messages, and/or @mention-opens-a-thread). The token is checked with Discord first: `400 invalid_bot_token` when Discord rejects it, `400 application_mismatch` when it belongs to another application. Returns `501` when this deployment does not enable Discord channels.
 	* **WhatsApp** (default) — one of two credential paths, both filling the same write-only secret:
 	* * **BYOT** (`credential_source: byot`, default) — supply
-	* `phone_number_id` and `access_token` from your own Meta app.
+	* `phone_number_id` and `access_token` from your own Meta app. The
+	* number is read with the token first: `400 invalid_access_token` when
+	* Meta rejects the token, `400 phone_number_not_accessible` when it
+	* cannot reach that number, `502 meta_unavailable` when Meta fails.
 	*
 	* * **Embedded signup** (`credential_source: embedded_signup`) — supply
 	* `code` and `waba_id` from the Meta popup; naturali exchanges the
@@ -968,11 +971,11 @@ var Channels = class {
 	/**
 	* Create a WhatsApp signup link
 	*
-	* A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta, pick or create the business account and number, and the number is linked to the project as a channel with `credential_source: embedded_signup` when they finish. No popup or naturali session is needed to follow it.
+	* A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta and pick or create the business account and number; no popup is needed. The dialog ends on naturali's app, where a signed-in member of this project confirms the number, and it is linked as a channel with `credential_source: embedded_signup` (`POST /v1/channels/whatsapp/signup/complete`).
 	*
 	* The link only links the number: the channel starts with `default: { action: silence }`, so it answers nothing until an agent is bound to it with `PATCH /v1/projects/{project_id}/channels/{channel_id}` or a route.
 	*
-	* The link is good for 30 minutes and acts for whoever created it: it stops working if they leave the project. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
+	* The link is good for 30 minutes. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
 	*
 	*/
 	static createWhatsappSignupLink(options) {
@@ -984,7 +987,7 @@ var Channels = class {
 	/**
 	* Complete a WhatsApp signup
 	*
-	* Finish a signup link whose Meta dialog granted more than one number: the app's result page receives `pending` and the numbers to choose from, and sends back the one chosen. `pending` is the authorization, so no bearer token is needed; it expires 10 minutes after the dialog returns (`400 link_expired`).
+	* Finish a signup link: the app's result page receives `pending` and the numbers Meta granted, and sends back the one to connect. The caller must be a member of the project the link was created for (`404` otherwise), so a link opened by anyone else connects nothing. `pending` expires 10 minutes after the dialog returns (`400 link_expired`).
 	*
 	*/
 	static completeWhatsappSignup(options) {
@@ -5025,7 +5028,7 @@ var Projects = class {
 	*
 	* An `owner` may grant `admin` or `member`; an `admin` may grant `member` only, so administration cannot hand out its own authority. `role: owner` is refused — that is the billing owner, and ownership moves only through a transfer the new owner accepts (`PUT /v1/projects/{project_id}/transfer`).
 	*
-	* The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential — a project-scoped key cannot grant access that would outlive its own revocation.
+	* The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential and is refused to a connected app: neither may grant access that would outlive its own revocation.
 	*
 	*/
 	static addProjectMember(options) {
@@ -5061,6 +5064,8 @@ var Projects = class {
 	*
 	* The owner's own row is refused in either direction — it names who pays, so changing it is a transfer (`PUT /v1/projects/{project_id}/transfer`) rather than a role change.
 	*
+	* Requires an account-wide credential and is refused to a connected app.
+	*
 	*/
 	static updateProjectMember(options) {
 		return (options.client ?? client).patch({
@@ -11147,7 +11152,7 @@ const routes = {
 	"create-channel": {
 		serviceClass: "Channels",
 		operationId: "createChannel",
-		description: "Connect a channel. The required fields depend on `channel`; no credential is ever returned. **Discord** (`channel: discord`) — supply `application_id` and `bot_token`, plus the `modes` selecting which Gateway flows to serve (direct messages, and/or @mention-opens-a-thread). The token is checked with Discord first: `400 invalid_bot_token` when Discord rejects it, `400 application_mismatch` when it belongs to another application. Returns `501` when this deployment does not enable Discord channels. **WhatsApp** (default) — one of two credential paths, both filling the same write-only secret: * **BYOT** (`credential_source: byot`, default) — supply `phone_number_id` and `access_token` from your own Meta app. * **Embedded signup** (`credential_source: embedded_signup`) — supply `code` and `waba_id` from the Meta popup; naturali exchanges the `code` for the token, subscribes its app to the WABA and registers the number for sending when it is not yet, so the customer never hands over a token. Returns `501` on deployments where Meta App credentials are not configured. The project's plan limits how many channels it may hold. At the limit this responds `403` with `plan_limit_reached`, whose `details` carry the `plan` and the `limit`, before any credential is acquired. Only `active` channels count, so disabling one frees allowance without deleting it.",
+		description: "Connect a channel. The required fields depend on `channel`; no credential is ever returned. **Discord** (`channel: discord`) — supply `application_id` and `bot_token`, plus the `modes` selecting which Gateway flows to serve (direct messages, and/or @mention-opens-a-thread). The token is checked with Discord first: `400 invalid_bot_token` when Discord rejects it, `400 application_mismatch` when it belongs to another application. Returns `501` when this deployment does not enable Discord channels. **WhatsApp** (default) — one of two credential paths, both filling the same write-only secret: * **BYOT** (`credential_source: byot`, default) — supply `phone_number_id` and `access_token` from your own Meta app. The number is read with the token first: `400 invalid_access_token` when Meta rejects the token, `400 phone_number_not_accessible` when it cannot reach that number, `502 meta_unavailable` when Meta fails. * **Embedded signup** (`credential_source: embedded_signup`) — supply `code` and `waba_id` from the Meta popup; naturali exchanges the `code` for the token, subscribes its app to the WABA and registers the number for sending when it is not yet, so the customer never hands over a token. Returns `501` on deployments where Meta App credentials are not configured. The project's plan limits how many channels it may hold. At the limit this responds `403` with `plan_limit_reached`, whose `details` carry the `plan` and the `limit`, before any credential is acquired. Only `active` channels count, so disabling one frees allowance without deleting it.",
 		moduleDocsUrl: "https://naturali.ai/docs/modules/channels",
 		httpMethod: "post",
 		pathParams: ["project_id"],
@@ -11258,7 +11263,7 @@ const routes = {
 	"create-whatsapp-signup-link": {
 		serviceClass: "Channels",
 		operationId: "createWhatsappSignupLink",
-		description: "A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta, pick or create the business account and number, and the number is linked to the project as a channel with `credential_source: embedded_signup` when they finish. No popup or naturali session is needed to follow it. The link only links the number: the channel starts with `default: { action: silence }`, so it answers nothing until an agent is bound to it with `PATCH /v1/projects/{project_id}/channels/{channel_id}` or a route. The link is good for 30 minutes and acts for whoever created it: it stops working if they leave the project. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.",
+		description: "A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta and pick or create the business account and number; no popup is needed. The dialog ends on naturali's app, where a signed-in member of this project confirms the number, and it is linked as a channel with `credential_source: embedded_signup` (`POST /v1/channels/whatsapp/signup/complete`). The link only links the number: the channel starts with `default: { action: silence }`, so it answers nothing until an agent is bound to it with `PATCH /v1/projects/{project_id}/channels/{channel_id}` or a route. The link is good for 30 minutes. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.",
 		moduleDocsUrl: "https://naturali.ai/docs/modules/channels",
 		httpMethod: "post",
 		pathParams: ["project_id"],
@@ -11276,7 +11281,7 @@ const routes = {
 	"complete-whatsapp-signup": {
 		serviceClass: "Channels",
 		operationId: "completeWhatsappSignup",
-		description: "Finish a signup link whose Meta dialog granted more than one number: the app's result page receives `pending` and the numbers to choose from, and sends back the one chosen. `pending` is the authorization, so no bearer token is needed; it expires 10 minutes after the dialog returns (`400 link_expired`).",
+		description: "Finish a signup link: the app's result page receives `pending` and the numbers Meta granted, and sends back the one to connect. The caller must be a member of the project the link was created for (`404` otherwise), so a link opened by anyone else connects nothing. `pending` expires 10 minutes after the dialog returns (`400 link_expired`).",
 		moduleDocsUrl: "https://naturali.ai/docs/modules/channels",
 		httpMethod: "post",
 		pathParams: [],
@@ -20727,7 +20732,7 @@ const routes = {
 	"add-project-member": {
 		serviceClass: "Projects",
 		operationId: "addProjectMember",
-		description: "Adds a colleague to the project by email address. Free and uncapped on every plan: a member adds no run, no channel, no trigger and no byte, so every cost they cause is already billed through the project's owner. Members are counted nowhere. **The address does not need an account.** Inviting one that has none creates it unverified and records the membership beside it, so the invitee is already a member with status `pending`. Their first sign-in code — which they request themselves, from the link in the invitation — is what makes them `active`. There is no separate acceptance step and no invitation to expire: the address is the credential, and the invitation reached it. An `owner` may grant `admin` or `member`; an `admin` may grant `member` only, so administration cannot hand out its own authority. `role: owner` is refused — that is the billing owner, and ownership moves only through a transfer the new owner accepts (`PUT /v1/projects/{project_id}/transfer`). The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential — a project-scoped key cannot grant access that would outlive its own revocation.",
+		description: "Adds a colleague to the project by email address. Free and uncapped on every plan: a member adds no run, no channel, no trigger and no byte, so every cost they cause is already billed through the project's owner. Members are counted nowhere. **The address does not need an account.** Inviting one that has none creates it unverified and records the membership beside it, so the invitee is already a member with status `pending`. Their first sign-in code — which they request themselves, from the link in the invitation — is what makes them `active`. There is no separate acceptance step and no invitation to expire: the address is the credential, and the invitation reached it. An `owner` may grant `admin` or `member`; an `admin` may grant `member` only, so administration cannot hand out its own authority. `role: owner` is refused — that is the billing owner, and ownership moves only through a transfer the new owner accepts (`PUT /v1/projects/{project_id}/transfer`). The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential and is refused to a connected app: neither may grant access that would outlive its own revocation.",
 		moduleDocsUrl: "https://naturali.ai/docs/modules/projects",
 		httpMethod: "post",
 		pathParams: ["project_id"],
@@ -20761,7 +20766,7 @@ const routes = {
 	"update-project-member": {
 		serviceClass: "Projects",
 		operationId: "updateProjectMember",
-		description: "Moves a member between `admin` and `member`. The project `owner` only: promoting somebody to `admin` hands them every write in the project, and an `admin` who could do that could erase the difference between the two roles for themselves. The owner's own row is refused in either direction — it names who pays, so changing it is a transfer (`PUT /v1/projects/{project_id}/transfer`) rather than a role change.",
+		description: "Moves a member between `admin` and `member`. The project `owner` only: promoting somebody to `admin` hands them every write in the project, and an `admin` who could do that could erase the difference between the two roles for themselves. The owner's own row is refused in either direction — it names who pays, so changing it is a transfer (`PUT /v1/projects/{project_id}/transfer`) rather than a role change. Requires an account-wide credential and is refused to a connected app.",
 		moduleDocsUrl: "https://naturali.ai/docs/modules/projects",
 		httpMethod: "patch",
 		pathParams: ["project_id", "member_id"],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naturali/cli",
-  "version": "0.211.5",
+  "version": "0.211.7",
   "description": "Command-line interface for the naturali.ai API, generated from its OpenAPI specs",
   "keywords": [
     "naturali",
@@ -31,7 +31,7 @@
     "yaml": "^2.9.1"
   },
   "devDependencies": {
-    "@naturali/sdk": "0.211.5",
+    "@naturali/sdk": "0.211.7",
     "@ttoss/openapi-codegen": "^0.10.0",
     "@types/node": "^26.5.1",
     "tsdown": "^0.23.0",