@norbix.ai/cli 0.2.0 → 1.0.0

package/README.md

@@ -40,6 +40,7 @@ norbix scheduler list
 | `norbix config list/get/set/unset` | Manage the local config file |
 | `norbix db find/get/count/insert/update/delete/aggregate` | Work with database collections |
 | `norbix files list/info/upload/download/sign/delete/publish/unpublish` | Upload, download, manage and publish files |
+| `norbix files integrations test <id>` | Check that a files integration really works (live upload/read/list/delete probe) |
 | `norbix users list/get/invite/block/unblock/delete` | Manage project users (membership) |
 | `norbix env list/use/delete` | Manage project environments |
 | `norbix logs list/trail` | Read project logs, follow one correlation ID |
@@ -124,6 +125,29 @@ pipe into `jq`:
 norbix db find orders --json | jq '.list.items[] | ._id'
 ```
 
+## Errors
+
+A failed call prints one line: the error code, the message, and the HTTP
+status.
+
+```sh
+$ norbix files info nbin_1 a/b.txt
+ ›   Error: CM-ERRORS-FILES-016: File not found: "a/b.txt" does not exist in
+ ›   Local (nbin_1). (HTTP 404)
+```
+
+The code and the message are the gateway's own — they come out of
+`responseStatus.errors[]`, where the gateway puts them. Before this, every
+failure read "Request failed with status 404" with no code.
+
+Exit codes do not change: `1` for a failed call, `2` for a check that ran and
+came back negative (`norbix files integrations test`).
+
+**A refusal the gateway answers with HTTP 200** and
+`responseStatus.isSuccess = false` now exits non-zero as well, wherever it did
+not before — `norbix files publish` / `unpublish` were the two commands that
+used to treat it as a success.
+
 ## Development
 
 ```sh
@@ -148,7 +172,7 @@ norbix files download invoices/2026/invoice.pdf
 
 Or pass `--integration <id>` (env var: `NORBIX_FILES_INTEGRATION_ID`).
 
-### The eight file commands
+### The file commands
 
 | Command | What it does |
 | --- | --- |
@@ -160,6 +184,7 @@ Or pass `--integration <id>` (env var: `NORBIX_FILES_INTEGRATION_ID`).
 | `norbix files delete <path> [--yes]` | Delete one file. Asks first unless you pass `--yes`. |
 | `norbix files publish <path> [--folder]` | Give the file — or the whole folder — a link anyone can open, and print it. |
 | `norbix files unpublish <path> [--folder]` | Take that link away again. |
+| `norbix files integrations test <id>` | Check that the storage behind an integration really works. See below. |
 
 Upload and download take more than one step, so the file bytes never pass
 through Norbix:
@@ -212,6 +237,27 @@ Four rules worth knowing:
 * Every dead link answers the same plain `404`: unknown, renamed, unpublished,
   deleted. A more precise answer would tell a stranger that the file is there.
 
+### Testing an integration
+
+`norbix files integrations test <id>` runs a live probe against the storage
+behind the integration: it uploads a small file, reads it, lists its folder and
+deletes it again. One line per step:
+
+```sh
+norbix files integrations test 55555555-5555-5555-5555-555555555555
+# UploadFile   OK
+# GetFile      FAILED
+#                - NoSuchKey: the object was not found
+# GetAllFiles  NOT_TESTED
+# DeleteFile   NOT_TESTED
+#  ›   Error: The files integration test failed: GetFile FAILED (2 later steps not tested).
+```
+
+`NOT_TESTED` means the step was skipped because an earlier one failed. The
+command exits `0` only when every step is `OK`, so it works in a script or a
+CI job. `--json` prints the steps as data and keeps the same exit code. The
+probe writes to the storage, so the key needs the `files:create` permission.
+
 ## Tests
 
 ```sh

package/dist/base.js

@@ -157,12 +157,23 @@ export class BaseCommand extends Command {
             this.log(typeof data === 'string' ? data : JSON.stringify(data, null, 2));
         }
     }
+    /**
+     * One line for a failed call: `<errorCode>: <message> (HTTP <status>)`.
+     *
+     * The code comes first because it is the part a reader can search for and a
+     * script can match on. It is the gateway's own code — the SDK reads it out
+     * of `responseStatus.errors[]`, where the gateway puts it (10b-files slice
+     * ERRORS, issue #66). The exit codes do not change.
+     */
     async catch(error) {
         if (error instanceof NorbixError) {
-            const status = error.status;
-            const suffix = status ? ` (HTTP ${status})` : '';
+            const { code, status } = error;
+            const prefix = code ? `${code}: ` : '';
+            // The SDK's last-resort message already ends in "(HTTP <status>)" —
+            // do not say it twice.
+            const suffix = status && !error.message.includes(`(HTTP ${status})`) ? ` (HTTP ${status})` : '';
             const hint = status === 401 ? '\nYour session may have expired. Run `norbix login` again.' : '';
-            return this.error(`${error.message}${suffix}${hint}`);
+            return this.error(`${prefix}${error.message}${suffix}${hint}`);
         }
         return super.catch(error);
     }

package/dist/commands/files/integrations/test.js

@@ -0,0 +1,85 @@
+import { Args } from '@oclif/core';
+import { BaseCommand } from '../../../base.js';
+import { callTestFilesIntegration, normaliseResult, } from '../../../lib/filesIntegrationTest.js';
+export default class FilesIntegrationsTest extends BaseCommand {
+    static description = `Check that a files integration really works
+
+Runs a live probe against the storage: uploads a small file, reads it, lists
+its folder and deletes it again. Prints one line per step — OK, FAILED or
+NOT_TESTED (skipped because an earlier step failed) — with the errors of a
+failed step. Exits non-zero unless every step is OK.
+
+Needs the files:create permission, because the probe writes to the storage.`;
+    static examples = [
+        '<%= config.bin %> files integrations test 55555555-5555-5555-5555-555555555555',
+        '<%= config.bin %> files integrations test 55555555-5555-5555-5555-555555555555 --json',
+    ];
+    static args = {
+        id: Args.string({ required: true, description: 'Files integration ID' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(FilesIntegrationsTest);
+        const ctx = this.resolveContext(flags);
+        // Builds nothing itself, but it is what refuses early and with a useful
+        // sentence when there is no project, region or credentials.
+        this.client(flags);
+        // TODO(10b-API-TEST): switch to `client.api.files.testFilesIntegration`
+        // once @norbix.ai/ts releases it (sdk-ts PR #44) — see the lib file.
+        const res = await callTestFilesIntegration(ctx, args.id);
+        const output = summarise(args.id, res);
+        if (this.jsonEnabled()) {
+            // oclif prints the returned value; the exit code still tells a script
+            // whether the integration works.
+            if (!output.ok)
+                process.exitCode = 2;
+            return output;
+        }
+        for (const line of render(output.steps))
+            this.log(line);
+        if (!output.ok) {
+            this.error(failureMessage(output));
+        }
+        this.log(`\nAll ${output.steps.length} steps passed.`);
+        return output;
+    }
+}
+function summarise(id, res) {
+    const steps = (res.items ?? []).map((item) => ({
+        operation: item.operation,
+        result: normaliseResult(item.result),
+        errors: item.errors ?? [],
+    }));
+    const errors = (res.responseStatus?.errors ?? [])
+        .map((e) => e.message ?? e.errorCode ?? '')
+        .filter(Boolean);
+    const gatewayOk = res.responseStatus?.isSuccess !== false;
+    if (!gatewayOk && errors.length === 0) {
+        errors.push('the gateway answered isSuccess: false without an error message');
+    }
+    const ok = gatewayOk && steps.length > 0 && steps.every((s) => s.result === 'OK');
+    return { filesIntegrationId: id, ok, steps, errors };
+}
+function render(steps) {
+    const width = Math.max(0, ...steps.map((s) => s.operation.length));
+    const lines = [];
+    for (const step of steps) {
+        lines.push(`${step.operation.padEnd(width)}  ${step.result}`);
+        for (const error of step.errors)
+            lines.push(`${' '.repeat(width)}    - ${error}`);
+    }
+    return lines;
+}
+function failureMessage(output) {
+    if (output.errors.length > 0) {
+        return `The files integration test was refused: ${output.errors.join('; ')}`;
+    }
+    if (output.steps.length === 0) {
+        return 'The gateway returned no test steps, so nothing was proven.';
+    }
+    const notOk = output.steps.filter((s) => s.result !== 'OK');
+    const failed = notOk.filter((s) => s.result !== 'NOT_TESTED');
+    const skipped = notOk.length - failed.length;
+    const named = (failed.length > 0 ? failed : notOk).map((s) => `${s.operation} ${s.result}`).join(', ');
+    const tail = failed.length > 0 && skipped > 0 ? ` (${skipped} later step${skipped === 1 ? '' : 's'} not tested)` : '';
+    return `The files integration test failed: ${named}${tail}.`;
+}

package/dist/lib/filesIntegrationTest.js

@@ -0,0 +1,43 @@
+import { gatewayError } from './gatewayError.js';
+/** The API version the SDK talks by default. Kept in one place. */
+const API_VERSION = 'v2';
+export async function callTestFilesIntegration(ctx, filesIntegrationId) {
+    const token = ctx.bearerToken ?? ctx.apiKey;
+    const headers = new Headers({ Accept: 'application/json' });
+    if (token)
+        headers.set('Authorization', `Bearer ${token}`);
+    if (ctx.projectId) {
+        headers.set('norbix-project-id', ctx.projectId);
+        headers.set('X-CM-ProjectId', ctx.projectId);
+    }
+    if (ctx.accountId) {
+        headers.set('norbix-account-id', ctx.accountId);
+        headers.set('X-CM-AccountId', ctx.accountId);
+    }
+    if (ctx.env && ctx.env !== 'PROD')
+        headers.set('norbix-env', ctx.env);
+    if (ctx.region)
+        headers.set('nb-region', ctx.region);
+    const base = ctx.apiUrl.endsWith('/') ? ctx.apiUrl.slice(0, -1) : ctx.apiUrl;
+    const url = `${base}/${API_VERSION}/files/${encodeURIComponent(filesIntegrationId)}/test`;
+    const response = await fetch(url, { headers, method: 'POST' });
+    const text = await response.text();
+    let raw;
+    if (text) {
+        try {
+            raw = JSON.parse(text);
+        }
+        catch {
+            raw = text;
+        }
+    }
+    if (!response.ok)
+        throw gatewayError(response.status, raw, url);
+    return (raw && typeof raw === 'object' ? raw : {});
+}
+/** `Failed` / `NotTested` / `NOT_TESTED` → `FAILED` / `NOT_TESTED`. */
+export function normaliseResult(result) {
+    if (!result)
+        return 'UNKNOWN';
+    return result.replaceAll(/([a-z])([A-Z])/g, '$1_$2').replaceAll(/[\s-]+/g, '_').toUpperCase();
+}

package/dist/lib/gatewayError.js

@@ -0,0 +1,58 @@
+import { NorbixAuthError, NorbixError, NorbixValidationError } from '@norbix.ai/ts';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** The `responseStatus` block of a body, whatever the casing of the key. */
+function responseStatusOf(raw) {
+    if (!isRecord(raw))
+        return undefined;
+    for (const key of Object.keys(raw)) {
+        if (key.toLowerCase() === 'responsestatus') {
+            const value = raw[key];
+            return isRecord(value) ? value : undefined;
+        }
+    }
+    return undefined;
+}
+function text(value) {
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function itemsOf(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.filter((entry) => isRecord(entry)).map((entry) => entry);
+}
+/**
+ * True when the gateway said the call failed inside the body.
+ *
+ * A business refusal — an unknown id, a rule that says no — comes back as HTTP
+ * 200 with `responseStatus.isSuccess = false` (10b-files, issue #67).
+ */
+export function saysItFailed(raw) {
+    const status = responseStatusOf(raw);
+    return isRecord(status) && status.isSuccess === false;
+}
+/** The message and the error code a gateway answer carries. */
+export function readGatewayError(raw, status) {
+    const responseStatus = responseStatusOf(raw);
+    // `source` is responseStatus when the body has one, the body itself when it
+    // has none — so the top-level fields are read only in the second case.
+    const source = responseStatus ?? (isRecord(raw) ? raw : undefined);
+    const errors = itemsOf(source?.errors);
+    const first = errors.find((e) => e.message !== undefined || e.errorCode !== undefined);
+    return {
+        code: first?.errorCode ?? text(source?.errorCode),
+        errors,
+        message: first?.message ?? text(source?.message) ?? `Request failed (HTTP ${status})`,
+    };
+}
+/** Build the right NorbixError for a status and an already-parsed body. */
+export function gatewayError(status, raw, url) {
+    const { code, message } = readGatewayError(raw, status);
+    const opts = { code, message, raw, status, url };
+    if (status === 401 || status === 403)
+        return new NorbixAuthError(opts);
+    if (status === 400)
+        return new NorbixValidationError(opts);
+    return new NorbixError(opts);
+}

package/dist/lib/publicFiles.js

@@ -1,4 +1,4 @@
-import { NorbixError } from '@norbix.ai/ts';
+import { gatewayError, saysItFailed } from './gatewayError.js';
 const ROUTES = {
     makeFilePrivate: 'files/item/private',
     makeFilePublic: 'files/item/public',
@@ -27,23 +27,23 @@ export async function callPublicFiles(ctx, operation, body) {
     const url = `${base}/${HUB_VERSION}/${ROUTES[operation]}`;
     const response = await fetch(url, { body: JSON.stringify(body), headers, method: 'POST' });
     const text = await response.text();
-    let payload = {};
+    let raw;
     if (text) {
         try {
-            payload = JSON.parse(text);
+            raw = JSON.parse(text);
         }
         catch {
-            payload = {};
+            raw = text;
         }
     }
-    if (!response.ok) {
-        throw new NorbixError({
-            code: payload.status,
-            message: payload.message ?? text ?? 'Request failed',
-            status: response.status,
-        });
-    }
-    return payload;
+    if (!response.ok)
+        throw gatewayError(response.status, raw, url);
+    // A 2xx does not mean the call worked: the gateway answers a business
+    // refusal with HTTP 200 and responseStatus.isSuccess = false, and the
+    // command must exit non-zero for it (10b-files, issue #67).
+    if (saysItFailed(raw))
+        throw gatewayError(response.status, raw, url);
+    return (raw && typeof raw === 'object' ? raw : {});
 }
 /**
  * The address anyone can open. The gateway builds the same one and puts it on

package/oclif.manifest.json

@@ -9084,18 +9084,18 @@
         "unarchive.js"
       ]
     },
-    "users:block": {
+    "webhooks:disable": {
       "aliases": [],
       "args": {
-        "id": {
-          "description": "User ID",
-          "name": "id",
+        "destinationId": {
+          "description": "Destination ID",
+          "name": "destinationId",
           "required": true
         }
       },
-      "description": "Block a user (they can no longer log in)",
+      "description": "Disable a webhook destination",
       "examples": [
-        "<%= config.bin %> users block 66b2f0a1..."
+        "<%= config.bin %> webhooks disable 66b2f0a1..."
       ],
       "flags": {
         "json": {
@@ -9162,7 +9162,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "users:block",
+      "id": "webhooks:disable",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9172,22 +9172,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "users",
-        "block.js"
+        "webhooks",
+        "disable.js"
       ]
     },
-    "users:delete": {
+    "webhooks:enable": {
       "aliases": [],
       "args": {
-        "id": {
-          "description": "User ID",
-          "name": "id",
+        "destinationId": {
+          "description": "Destination ID",
+          "name": "destinationId",
           "required": true
         }
       },
-      "description": "Delete a user",
+      "description": "Enable a webhook destination",
       "examples": [
-        "<%= config.bin %> users delete 66b2f0a1... --yes"
+        "<%= config.bin %> webhooks enable 66b2f0a1..."
       ],
       "flags": {
         "json": {
@@ -9250,18 +9250,11 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "yes": {
-          "char": "y",
-          "description": "Skip the confirmation prompt",
-          "name": "yes",
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "users:delete",
+      "id": "webhooks:enable",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9271,22 +9264,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "users",
-        "delete.js"
+        "webhooks",
+        "enable.js"
       ]
     },
-    "users:get": {
+    "webhooks:remove": {
       "aliases": [],
       "args": {
-        "id": {
-          "description": "User ID",
-          "name": "id",
+        "destinationId": {
+          "description": "Destination ID",
+          "name": "destinationId",
           "required": true
         }
       },
-      "description": "Show one user",
+      "description": "Remove a webhook destination",
       "examples": [
-        "<%= config.bin %> users get 66b2f0a1..."
+        "<%= config.bin %> webhooks remove 66b2f0a1... --yes"
       ],
       "flags": {
         "json": {
@@ -9349,11 +9342,18 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "yes": {
+          "char": "y",
+          "description": "Skip the confirmation prompt",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "users:get",
+      "id": "webhooks:remove",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9363,22 +9363,17 @@
       "relativePath": [
         "dist",
         "commands",
-        "users",
-        "get.js"
+        "webhooks",
+        "remove.js"
       ]
     },
-    "users:invite": {
+    "webhooks:secret": {
       "aliases": [],
-      "args": {
-        "email": {
-          "description": "Email address to invite",
-          "name": "email",
-          "required": true
-        }
-      },
-      "description": "Invite a user by email",
+      "args": {},
+      "description": "Reveal the webhook signing secret, or rotate it with --rotate",
       "examples": [
-        "<%= config.bin %> users invite alice@example.com"
+        "<%= config.bin %> webhooks secret",
+        "<%= config.bin %> webhooks secret --rotate --yes"
       ],
       "flags": {
         "json": {
@@ -9441,11 +9436,24 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "rotate": {
+          "description": "Rotate the secret (old secret stops working)",
+          "name": "rotate",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "yes": {
+          "char": "y",
+          "description": "Skip the confirmation prompt",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "users:invite",
+      "id": "webhooks:secret",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9455,17 +9463,16 @@
       "relativePath": [
         "dist",
         "commands",
-        "users",
-        "invite.js"
+        "webhooks",
+        "secret.js"
       ]
     },
-    "users:list": {
+    "webhooks:show": {
       "aliases": [],
       "args": {},
-      "description": "List project users",
+      "description": "Show the project's webhook integration (destinations, settings)",
       "examples": [
-        "<%= config.bin %> users list",
-        "<%= config.bin %> users list --role admin --page-size 100"
+        "<%= config.bin %> webhooks show"
       ],
       "flags": {
         "json": {
@@ -9528,30 +9535,95 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "webhooks:show",
+      "pluginAlias": "@norbix.ai/cli",
+      "pluginName": "@norbix.ai/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "webhooks",
+        "show.js"
+      ]
+    },
+    "users:block": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "User ID",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Block a user (they can no longer log in)",
+      "examples": [
+        "<%= config.bin %> users block 66b2f0a1..."
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
         },
-        "role": {
-          "description": "Only users with this role (repeatable)",
-          "name": "role",
+        "project": {
+          "description": "Project ID",
+          "env": "NORBIX_PROJECT_ID",
+          "helpGroup": "GLOBAL",
+          "name": "project",
           "hasDynamicHelp": false,
-          "multiple": true,
+          "multiple": false,
           "type": "option"
         },
-        "permissions": {
-          "description": "Include permissions in the output",
-          "name": "permissions",
-          "allowNo": false,
-          "type": "boolean"
+        "env": {
+          "description": "Project environment (e.g. PROD, TEST)",
+          "env": "NORBIX_ENV",
+          "helpGroup": "GLOBAL",
+          "name": "env",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         },
-        "page-size": {
-          "description": "Records per page",
-          "name": "page-size",
+        "region": {
+          "description": "Region code (e.g. nb-eu-germany)",
+          "env": "NORBIX_REGION",
+          "helpGroup": "GLOBAL",
+          "name": "region",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "after": {
-          "description": "Cursor: fetch the page after this item",
-          "name": "after",
+        "api-key": {
+          "description": "API key (overrides profile and session)",
+          "env": "NORBIX_API_KEY",
+          "helpGroup": "GLOBAL",
+          "name": "api-key",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "account": {
+          "description": "Account ID (needed for account-scoped hub endpoints)",
+          "env": "NORBIX_ACCOUNT_ID",
+          "helpGroup": "GLOBAL",
+          "name": "account",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "profile": {
+          "description": "Use this profile from ~/.norbix/config (ignores the login session)",
+          "env": "NORBIX_PROFILE",
+          "helpGroup": "GLOBAL",
+          "name": "profile",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -9559,7 +9631,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "users:list",
+      "id": "users:block",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9570,15 +9642,21 @@
         "dist",
         "commands",
         "users",
-        "list.js"
+        "block.js"
       ]
     },
-    "users:policies": {
+    "users:delete": {
       "aliases": [],
-      "args": {},
-      "description": "List membership policies",
+      "args": {
+        "id": {
+          "description": "User ID",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Delete a user",
       "examples": [
-        "<%= config.bin %> users policies"
+        "<%= config.bin %> users delete 66b2f0a1... --yes"
       ],
       "flags": {
         "json": {
@@ -9641,11 +9719,18 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "yes": {
+          "char": "y",
+          "description": "Skip the confirmation prompt",
+          "name": "yes",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "users:policies",
+      "id": "users:delete",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9656,15 +9741,21 @@
         "dist",
         "commands",
         "users",
-        "policies.js"
+        "delete.js"
       ]
     },
-    "users:roles": {
+    "users:get": {
       "aliases": [],
-      "args": {},
-      "description": "List membership roles",
+      "args": {
+        "id": {
+          "description": "User ID",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Show one user",
       "examples": [
-        "<%= config.bin %> users roles"
+        "<%= config.bin %> users get 66b2f0a1..."
       ],
       "flags": {
         "json": {
@@ -9731,7 +9822,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "users:roles",
+      "id": "users:get",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9742,21 +9833,21 @@
         "dist",
         "commands",
         "users",
-        "roles.js"
+        "get.js"
       ]
     },
-    "users:unblock": {
+    "users:invite": {
       "aliases": [],
       "args": {
-        "id": {
-          "description": "User ID",
-          "name": "id",
+        "email": {
+          "description": "Email address to invite",
+          "name": "email",
           "required": true
         }
       },
-      "description": "Unblock a user",
+      "description": "Invite a user by email",
       "examples": [
-        "<%= config.bin %> users unblock 66b2f0a1..."
+        "<%= config.bin %> users invite alice@example.com"
       ],
       "flags": {
         "json": {
@@ -9823,7 +9914,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "users:unblock",
+      "id": "users:invite",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9834,21 +9925,16 @@
         "dist",
         "commands",
         "users",
-        "unblock.js"
+        "invite.js"
       ]
     },
-    "webhooks:disable": {
+    "users:list": {
       "aliases": [],
-      "args": {
-        "destinationId": {
-          "description": "Destination ID",
-          "name": "destinationId",
-          "required": true
-        }
-      },
-      "description": "Disable a webhook destination",
+      "args": {},
+      "description": "List project users",
       "examples": [
-        "<%= config.bin %> webhooks disable 66b2f0a1..."
+        "<%= config.bin %> users list",
+        "<%= config.bin %> users list --role admin --page-size 100"
       ],
       "flags": {
         "json": {
@@ -9911,11 +9997,38 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "role": {
+          "description": "Only users with this role (repeatable)",
+          "name": "role",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "permissions": {
+          "description": "Include permissions in the output",
+          "name": "permissions",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "page-size": {
+          "description": "Records per page",
+          "name": "page-size",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "after": {
+          "description": "Cursor: fetch the page after this item",
+          "name": "after",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "webhooks:disable",
+      "id": "users:list",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -9925,22 +10038,16 @@
       "relativePath": [
         "dist",
         "commands",
-        "webhooks",
-        "disable.js"
+        "users",
+        "list.js"
       ]
     },
-    "webhooks:enable": {
+    "users:policies": {
       "aliases": [],
-      "args": {
-        "destinationId": {
-          "description": "Destination ID",
-          "name": "destinationId",
-          "required": true
-        }
-      },
-      "description": "Enable a webhook destination",
+      "args": {},
+      "description": "List membership policies",
       "examples": [
-        "<%= config.bin %> webhooks enable 66b2f0a1..."
+        "<%= config.bin %> users policies"
       ],
       "flags": {
         "json": {
@@ -10007,7 +10114,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "webhooks:enable",
+      "id": "users:policies",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -10017,22 +10124,16 @@
       "relativePath": [
         "dist",
         "commands",
-        "webhooks",
-        "enable.js"
+        "users",
+        "policies.js"
       ]
     },
-    "webhooks:remove": {
+    "users:roles": {
       "aliases": [],
-      "args": {
-        "destinationId": {
-          "description": "Destination ID",
-          "name": "destinationId",
-          "required": true
-        }
-      },
-      "description": "Remove a webhook destination",
+      "args": {},
+      "description": "List membership roles",
       "examples": [
-        "<%= config.bin %> webhooks remove 66b2f0a1... --yes"
+        "<%= config.bin %> users roles"
       ],
       "flags": {
         "json": {
@@ -10095,18 +10196,11 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "yes": {
-          "char": "y",
-          "description": "Skip the confirmation prompt",
-          "name": "yes",
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "webhooks:remove",
+      "id": "users:roles",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -10116,17 +10210,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "webhooks",
-        "remove.js"
+        "users",
+        "roles.js"
       ]
     },
-    "webhooks:secret": {
+    "users:unblock": {
       "aliases": [],
-      "args": {},
-      "description": "Reveal the webhook signing secret, or rotate it with --rotate",
+      "args": {
+        "id": {
+          "description": "User ID",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Unblock a user",
       "examples": [
-        "<%= config.bin %> webhooks secret",
-        "<%= config.bin %> webhooks secret --rotate --yes"
+        "<%= config.bin %> users unblock 66b2f0a1..."
       ],
       "flags": {
         "json": {
@@ -10189,24 +10288,11 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "rotate": {
-          "description": "Rotate the secret (old secret stops working)",
-          "name": "rotate",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "yes": {
-          "char": "y",
-          "description": "Skip the confirmation prompt",
-          "name": "yes",
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "webhooks:secret",
+      "id": "users:unblock",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -10216,16 +10302,23 @@
       "relativePath": [
         "dist",
         "commands",
-        "webhooks",
-        "secret.js"
+        "users",
+        "unblock.js"
       ]
     },
-    "webhooks:show": {
+    "files:integrations:test": {
       "aliases": [],
-      "args": {},
-      "description": "Show the project's webhook integration (destinations, settings)",
+      "args": {
+        "id": {
+          "description": "Files integration ID",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Check that a files integration really works\n\nRuns a live probe against the storage: uploads a small file, reads it, lists\nits folder and deletes it again. Prints one line per step — OK, FAILED or\nNOT_TESTED (skipped because an earlier step failed) — with the errors of a\nfailed step. Exits non-zero unless every step is OK.\n\nNeeds the files:create permission, because the probe writes to the storage.",
       "examples": [
-        "<%= config.bin %> webhooks show"
+        "<%= config.bin %> files integrations test 55555555-5555-5555-5555-555555555555",
+        "<%= config.bin %> files integrations test 55555555-5555-5555-5555-555555555555 --json"
       ],
       "flags": {
         "json": {
@@ -10292,7 +10385,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "webhooks:show",
+      "id": "files:integrations:test",
       "pluginAlias": "@norbix.ai/cli",
       "pluginName": "@norbix.ai/cli",
       "pluginType": "core",
@@ -10302,8 +10395,9 @@
       "relativePath": [
         "dist",
         "commands",
-        "webhooks",
-        "show.js"
+        "files",
+        "integrations",
+        "test.js"
       ]
     },
     "push:device:register": {
@@ -10934,5 +11028,5 @@
       ]
     }
   },
-  "version": "0.2.0"
+  "version": "1.0.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@norbix.ai/cli",
-  "version": "0.2.0",
+  "version": "1.0.0",
   "description": "Norbix CLI — manage your Norbix projects from the terminal. Built on the official TypeScript SDK.",
   "author": "UAB Isidos",
   "license": "MIT",
@@ -47,7 +47,7 @@
   },
   "dependencies": {
     "@inquirer/prompts": "^8.7.2",
-    "@norbix.ai/ts": "^1.3.0",
+    "@norbix.ai/ts": "^2.0.0",
     "@oclif/core": "^5.0.0",
     "@oclif/plugin-autocomplete": "^4.0.0",
     "@oclif/plugin-help": "^7.0.0"
@@ -92,7 +92,12 @@
         "description": "Work with database collections (find, insert, update, delete)"
       },
       "files": {
-        "description": "Upload, download and manage files"
+        "description": "Upload, download and manage files",
+        "subtopics": {
+          "integrations": {
+            "description": "Check the storage behind a files integration"
+          }
+        }
       },
       "env": {
         "description": "Manage project environments (PROD, TEST, ...)"