@pachca/cli 2026.3.8 → 2026.3.10

package/dist/commands/reactions/list.js

@@ -33,7 +33,6 @@ export default class ReactionsList extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(ReactionsList);
         this.parsedFlags = flags;
-        this.checkScope("reactions:read");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/reactions/remove.js

@@ -70,7 +70,6 @@ export default class ReactionsRemove extends BaseCommand {
                 this.exit(0);
             }
         }
-        this.checkScope("reactions:write");
         const { data } = await this.apiRequest({
             method: 'DELETE',
             path: `/messages/${args.id}/reactions`,

package/dist/commands/read-member/list-readers.js

@@ -31,7 +31,6 @@ export default class ReadMemberListReaders extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(ReadMemberListReaders);
         this.parsedFlags = flags;
-        this.checkScope("messages:read");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/search/list-chats.js

@@ -53,7 +53,6 @@ export default class SearchListChats extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(SearchListChats);
         this.parsedFlags = flags;
-        this.checkScope("search:chats");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/search/list-messages.js

@@ -50,7 +50,6 @@ export default class SearchListMessages extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(SearchListMessages);
         this.parsedFlags = flags;
-        this.checkScope("search:messages");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/search/list-users.js

@@ -49,7 +49,6 @@ export default class SearchListUsers extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(SearchListUsers);
         this.parsedFlags = flags;
-        this.checkScope("search:users");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/security/list.js

@@ -1,7 +1,6 @@
 // Auto-generated from openapi.yaml — DO NOT EDIT
 import { Flags } from '@oclif/core';
 import { BaseCommand } from '../../base-command.js';
-import * as clack from '@clack/prompts';
 export default class SecurityList extends BaseCommand {
     static description = "Журнал аудита событий";
     static examples = [
@@ -14,7 +13,6 @@ export default class SecurityList extends BaseCommand {
     static apiMethod = "GET";
     static apiPath = "/audit_events";
     static defaultColumns = ["id", "created_at", "event_key", "entity_id", "entity_type"];
-    static requiredFlags = ["start-time", "end-time"];
     static args = {};
     static flags = {
         ...BaseCommand.baseFlags,
@@ -54,34 +52,6 @@ export default class SecurityList extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(SecurityList);
         this.parsedFlags = flags;
-        const missingRequired = [
-            { flag: 'start-time', label: "Начальная метка времени (включительно)", type: 'string' },
-            { flag: 'end-time', label: "Конечная метка времени (исключительно)", type: 'string' },
-        ].filter((f) => flags[f.flag] === undefined || flags[f.flag] === null);
-        if (missingRequired.length > 0) {
-            if (this.isInteractive()) {
-                for (const field of missingRequired) {
-                    const value = await clack.text({ message: field.label, validate: (v) => v.length === 0 ? 'Обязательное поле' : undefined });
-                    if (clack.isCancel(value)) {
-                        process.stderr.write('Отменено.\n');
-                        this.exit(0);
-                    }
-                    if (field.type === 'integer') {
-                        flags[field.flag] = Number.parseInt(value, 10);
-                    }
-                    else if (field.type === 'boolean') {
-                        flags[field.flag] = value === 'true';
-                    }
-                    else {
-                        flags[field.flag] = value;
-                    }
-                }
-            }
-            else {
-                this.validationError(missingRequired.map((f) => ({ message: `Обязательный флаг --${f.flag} не передан`, flag: f.flag })), { hint: "Обязательные: --start-time <string>, --end-time <string>. pachca introspect security list" });
-            }
-        }
-        this.checkScope("audit_events:read");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/tasks/create.js

@@ -80,7 +80,6 @@ export default class TasksCreate extends BaseCommand {
                 this.validationError(missingRequired.map((f) => ({ message: `Обязательный флаг --${f.flag} не передан`, flag: f.flag })), { hint: "Обязательные: --kind <string>. pachca introspect tasks create" });
             }
         }
-        this.checkScope("tasks:create");
         const body = { task: {
                 kind: flags['kind'],
                 content: flags['content'],

package/dist/commands/tasks/delete.js

@@ -38,7 +38,6 @@ export default class TasksDelete extends BaseCommand {
                 this.exit(0);
             }
         }
-        this.checkScope("tasks:delete");
         const { data } = await this.apiRequest({
             method: 'DELETE',
             path: `/tasks/${args.id}`,

package/dist/commands/tasks/get.js

@@ -24,7 +24,6 @@ export default class TasksGet extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(TasksGet);
         this.parsedFlags = flags;
-        this.checkScope("tasks:read");
         const { data } = await this.apiRequest({
             method: 'GET',
             path: `/tasks/${args.id}`,

package/dist/commands/tasks/list.js

@@ -29,7 +29,6 @@ export default class TasksList extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(TasksList);
         this.parsedFlags = flags;
-        this.checkScope("tasks:read");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/tasks/update.js

@@ -60,7 +60,6 @@ export default class TasksUpdate extends BaseCommand {
             }
             flags['content'] = Buffer.concat(chunks).toString('utf-8').trimEnd();
         }
-        this.checkScope("tasks:update");
         const body = { task: {
                 kind: flags['kind'],
                 content: flags['content'],

package/dist/commands/threads/add.js

@@ -23,7 +23,6 @@ export default class ThreadsAdd extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(ThreadsAdd);
         this.parsedFlags = flags;
-        this.checkScope("threads:create");
         const { data } = await this.apiRequest({
             method: 'POST',
             path: `/messages/${args.id}/thread`,

package/dist/commands/threads/get.js

@@ -19,7 +19,6 @@ export default class ThreadsGet extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(ThreadsGet);
         this.parsedFlags = flags;
-        this.checkScope("threads:read");
         const { data } = await this.apiRequest({
             method: 'GET',
             path: `/threads/${args.id}`,

package/dist/commands/upload.js

@@ -21,7 +21,6 @@ export default class Upload extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(Upload);
         this.parsedFlags = flags;
-        this.checkScope('uploads:write');
         // Step 1: Get upload params
         const { data: uploadData } = await this.apiRequest({
             method: 'POST',

package/dist/commands/users/create.js

@@ -85,7 +85,6 @@ export default class UsersCreate extends BaseCommand {
                 this.validationError(missingRequired.map((f) => ({ message: `Обязательный флаг --${f.flag} не передан`, flag: f.flag })), { hint: "Обязательные: --email <string>. pachca introspect users create" });
             }
         }
-        this.checkScope("users:create");
         const body = {
             user: {
                 first_name: flags['first-name'],

package/dist/commands/users/delete.js

@@ -38,7 +38,6 @@ export default class UsersDelete extends BaseCommand {
                 this.exit(0);
             }
         }
-        this.checkScope("users:delete");
         const { data } = await this.apiRequest({
             method: 'DELETE',
             path: `/users/${args.id}`,

package/dist/commands/users/get-status.js

@@ -24,7 +24,6 @@ export default class UsersGetStatus extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(UsersGetStatus);
         this.parsedFlags = flags;
-        this.checkScope("user_status:read");
         const { data } = await this.apiRequest({
             method: 'GET',
             path: `/users/${args.user_id}/status`,

package/dist/commands/users/get.js

@@ -24,7 +24,6 @@ export default class UsersGet extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(UsersGet);
         this.parsedFlags = flags;
-        this.checkScope("users:read");
         const { data } = await this.apiRequest({
             method: 'GET',
             path: `/users/${args.id}`,

package/dist/commands/users/list.js

@@ -32,7 +32,6 @@ export default class UsersList extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(UsersList);
         this.parsedFlags = flags;
-        this.checkScope("users:read");
         if (flags.all) {
             // Auto-pagination
             const allData = [];

package/dist/commands/users/remove-status.js

@@ -38,7 +38,6 @@ export default class UsersRemoveStatus extends BaseCommand {
                 this.exit(0);
             }
         }
-        this.checkScope("user_status:write");
         const { data } = await this.apiRequest({
             method: 'DELETE',
             path: `/users/${args.user_id}/status`,

package/dist/commands/users/update-status.js

@@ -76,7 +76,6 @@ export default class UsersUpdateStatus extends BaseCommand {
         if (validationErrors.length > 0) {
             this.validationError(validationErrors);
         }
-        this.checkScope("user_status:write");
         const body = { status: {
                 emoji: flags['emoji'],
                 title: flags['title'],

package/dist/commands/users/update.js

@@ -58,7 +58,6 @@ export default class UsersUpdate extends BaseCommand {
     async run() {
         const { args, flags } = await this.parse(UsersUpdate);
         this.parsedFlags = flags;
-        this.checkScope("users:update");
         const body = { user: {
                 first_name: flags['first-name'],
                 last_name: flags['last-name'],

package/dist/commands/views/open.js

@@ -96,7 +96,6 @@ export default class ViewsOpen extends BaseCommand {
         if (validationErrors.length > 0) {
             this.validationError(validationErrors);
         }
-        this.checkScope("views:write");
         const body = {
             view: {
                 title: flags['title'],

package/dist/data/changelog.json

@@ -1,4 +1,46 @@
 [
+    {
+        "version": "2026.3.10",
+        "date": "21 марта 2026",
+        "changes": [
+            {
+                "type": "~",
+                "command": "messages create",
+                "description": "Поле link_preview перемещено на верхний уровень тела запроса (раньше было внутри message)"
+            },
+            {
+                "type": "~",
+                "command": "security list",
+                "description": "Параметры start-time и end-time стали необязательными"
+            },
+            {
+                "type": "~",
+                "command": "chats list, messages list",
+                "description": "Сортировка через --sort и --order вместо --sort-id и --sort-last-message-at"
+            }
+        ]
+    },
+    {
+        "version": "2026.3.9",
+        "date": "19 марта 2026",
+        "changes": [
+            {
+                "type": "~",
+                "command": "all",
+                "description": "Убрана клиентская валидация скоупов — проверка разрешений теперь только на стороне API (403)"
+            },
+            {
+                "type": "~",
+                "command": "auth login",
+                "description": "Профиль больше не сохраняет список скоупов — только тип, имя и email"
+            },
+            {
+                "type": "-",
+                "command": "auth refresh",
+                "description": "Команда удалена — кеширование скоупов больше не используется"
+            }
+        ]
+    },
     {
         "version": "2026.3.8",
         "date": "17 марта 2026",

package/dist/hooks/init.js

@@ -4,8 +4,7 @@ import { fileURLToPath } from 'node:url';
 import { spawn } from 'node:child_process';
 import semver from 'semver';
 import ansis from 'ansis';
-import { setProfile, getDefaults, resolveToken, TokenNotFoundError, ProfileNotFoundError, } from '../profiles.js';
-import { request } from '../client.js';
+import { getDefaults, resolveToken, TokenNotFoundError, ProfileNotFoundError, } from '../profiles.js';
 import { outputError } from '../output.js';
 import { defaultOutputFormat, isInteractive } from '../utils.js';
 /**
@@ -131,24 +130,6 @@ const hook = async function (opts) {
     // Verify auth exists
     try {
         const { profileName, profile } = resolveToken({ token: argvToken, profile: argvProfile });
-        // Refresh bot scopes if stale (>24h)
-        if (profileName && profile?.type === 'bot' && profile.scopes_refreshed_at) {
-            const refreshedAt = new Date(profile.scopes_refreshed_at).getTime();
-            const now = Date.now();
-            const twentyFourHours = 24 * 60 * 60 * 1000;
-            if (now - refreshedAt > twentyFourHours) {
-                try {
-                    const response = await request({ method: 'GET', path: '/oauth/token/info', token: profile.token }, { quiet: true });
-                    const wrapper = response.data;
-                    profile.scopes = wrapper.data.scopes || [];
-                    profile.scopes_refreshed_at = new Date().toISOString();
-                    setProfile(profileName, profile);
-                }
-                catch {
-                    // Silently ignore refresh errors — use cached scopes
-                }
-            }
-        }
     }
     catch (error) {
         if (error instanceof TokenNotFoundError) {

package/dist/profiles.js

@@ -171,14 +171,6 @@ export function getConfigFilePermissions() {
     const stat = fs.statSync(configPath);
     return (stat.mode & 0o777).toString(8);
 }
-export function invalidateScopes(profileName) {
-    const config = readConfig();
-    if (config.profiles?.[profileName]) {
-        config.profiles[profileName].scopes = [];
-        config.profiles[profileName].scopes_refreshed_at = undefined;
-        writeConfig(config);
-    }
-}
 export class TokenNotFoundError extends Error {
     constructor() {
         super('Token not found');