@naturali/cli 0.42.1 → 0.43.0

package/dist/index.mjs

@@ -14,7 +14,7 @@ var __exportAll = (all, no_symbols) => {
 };
 //#endregion
 //#region package.json
-var version = "0.42.1";
+var version = "0.43.0";
 //#endregion
 //#region ../sdk/src/generated/core/bodySerializer.gen.ts
 const jsonBodySerializer = { bodySerializer: (body) => JSON.stringify(body, (_key, value) => typeof value === "bigint" ? value.toString() : value) };
@@ -765,6 +765,62 @@ var ApiKeys = class {
 		});
 	}
 };
+var Assistant = class {
+	/**
+	* List linked identities
+	*
+	* Lists the caller's assistant grants — one per channel identity that may operate their account. Grants belong to the account, so this is the caller's own set regardless of which projects they own.
+	*
+	*/
+	static listAssistantGrants(options) {
+		return (options?.client ?? client).get({
+			url: "/v1/assistant/grants",
+			...options
+		});
+	}
+	/**
+	* Revoke a linked identity
+	*
+	* Revokes the grant, disabling the Assistant for that identity. The grant is resolved on every inbound message, so the next one from that identity is refused before the agent is invoked — revocation is immediate, not eventual. The identity is free to link again afterwards.
+	*
+	*/
+	static revokeAssistantGrant(options) {
+		return (options.client ?? client).delete({
+			url: "/v1/assistant/grants/{grant_id}",
+			...options
+		});
+	}
+	/**
+	* Resolve a pending link
+	*
+	* Resolves a link token **without consuming it**, so the confirmation screen can name the identity being linked ("@user on Discord") before anyone commits to it. Naming it is what makes a link pasted into the wrong hands fail the human check as well as the server-side binding.
+	* Reading is deliberately separate from redeeming: a single-use nonce must not be burned by a link preview, a URL scanner or a browser prefetch.
+	*
+	*/
+	static previewAssistantLink(options) {
+		return (options.client ?? client).get({
+			url: "/v1/assistant/link",
+			...options
+		});
+	}
+	/**
+	* Redeem a link token
+	*
+	* Redeems a link token and creates the grant, binding the channel identity the token carries to the authenticated account. The identity is read from the token server-side — nothing in this request can point the link at a different one.
+	* The token is the idempotency key: it is single-use, so a replay of this request fails rather than creating a second grant.
+	*
+	*/
+	static redeemAssistantLink(options) {
+		return (options.client ?? client).post({
+			url: "/v1/assistant/link",
+			...options,
+			headers: {
+				"Content-Type": "application/json",
+				...options.headers
+			}
+		});
+	}
+};
 var Auth = class {
 	/**
 	* Email a sign-in code
@@ -2103,6 +2159,7 @@ const API_BASE_URL$1 = "https://api.naturali.ai";
 var NaturaliClient = class {
 	agents;
 	apiKeys;
+	assistant;
 	auth;
 	boards;
 	channels;
@@ -2129,6 +2186,7 @@ var NaturaliClient = class {
 		}));
 		this.agents = bindResource(Agents, this.http);
 		this.apiKeys = bindResource(ApiKeys, this.http);
+		this.assistant = bindResource(Assistant, this.http);
 		this.auth = bindResource(Auth, this.http);
 		this.boards = bindResource(Boards, this.http);
 		this.channels = bindResource(Channels, this.http);
@@ -2150,6 +2208,7 @@ var NaturaliClient = class {
 var src_exports = /* @__PURE__ */ __exportAll({
 	Agents: () => Agents,
 	ApiKeys: () => ApiKeys,
+	Assistant: () => Assistant,
 	Auth: () => Auth,
 	Boards: () => Boards,
 	Channels: () => Channels,
@@ -2940,6 +2999,76 @@ const routes = {
 			"in": "path"
 		}]
 	},
+	"list-assistant-grants": {
+		serviceClass: "Assistant",
+		operationId: "listAssistantGrants",
+		description: "Lists the caller's assistant grants — one per channel identity that may operate their account. Grants belong to the account, so this is the caller's own set regardless of which projects they own.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/assistant",
+		httpMethod: "get",
+		pathParams: [],
+		queryParams: ["limit", "cursor"],
+		flags: [{
+			"name": "limit",
+			"description": "Maximum items per page.",
+			"required": false,
+			"type": "integer",
+			"in": "query"
+		}, {
+			"name": "cursor",
+			"description": "Opaque pagination cursor from a previous response's next_cursor.",
+			"required": false,
+			"type": "string",
+			"in": "query"
+		}]
+	},
+	"revoke-assistant-grant": {
+		serviceClass: "Assistant",
+		operationId: "revokeAssistantGrant",
+		description: "Revokes the grant, disabling the Assistant for that identity. The grant is resolved on every inbound message, so the next one from that identity is refused before the agent is invoked — revocation is immediate, not eventual. The identity is free to link again afterwards.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/assistant",
+		httpMethod: "delete",
+		pathParams: ["grant_id"],
+		queryParams: [],
+		flags: [{
+			"name": "grant_id",
+			"description": "Grant public ID (agr_ prefix).",
+			"required": true,
+			"type": "string",
+			"in": "path"
+		}]
+	},
+	"preview-assistant-link": {
+		serviceClass: "Assistant",
+		operationId: "previewAssistantLink",
+		description: "Resolves a link token **without consuming it**, so the confirmation screen can name the identity being linked (\"@user on Discord\") before anyone commits to it. Naming it is what makes a link pasted into the wrong hands fail the human check as well as the server-side binding. Reading is deliberately separate from redeeming: a single-use nonce must not be burned by a link preview, a URL scanner or a browser prefetch.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/assistant",
+		httpMethod: "get",
+		pathParams: [],
+		queryParams: ["token"],
+		flags: [{
+			"name": "token",
+			"description": "The single-use token from the link the Assistant sent on the channel.",
+			"required": true,
+			"type": "string",
+			"in": "query"
+		}]
+	},
+	"redeem-assistant-link": {
+		serviceClass: "Assistant",
+		operationId: "redeemAssistantLink",
+		description: "Redeems a link token and creates the grant, binding the channel identity the token carries to the authenticated account. The identity is read from the token server-side — nothing in this request can point the link at a different one. The token is the idempotency key: it is single-use, so a replay of this request fails rather than creating a second grant.",
+		moduleDocsUrl: "https://docs.naturali.ai/docs/modules/assistant",
+		httpMethod: "post",
+		pathParams: [],
+		queryParams: [],
+		flags: [{
+			"name": "token",
+			"description": "The single-use token from the link the Assistant sent on the channel.",
+			"required": true,
+			"type": "string",
+			"in": "body"
+		}]
+	},
 	"request-sign-in-code": {
 		serviceClass: "Auth",
 		operationId: "requestSignInCode",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naturali/cli",
-  "version": "0.42.1",
+  "version": "0.43.0",
   "description": "Command-line interface for the naturali.ai API, generated from its OpenAPI specs",
   "type": "module",
   "bin": {
@@ -30,7 +30,7 @@
     "tsx": "^4.23.1",
     "typescript": "~6.0.3",
     "vitest": "^4.1.10",
-    "@naturali/sdk": "0.42.1"
+    "@naturali/sdk": "0.43.0"
   },
   "scripts": {
     "generate": "tsx scripts/generate.ts",