@parall/cli 1.15.1 → 1.17.0

package/dist/commands/dm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dm.d.ts","sourceRoot":"","sources":["../../src/commands/dm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4BpC,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,QA6BlD"}
+{"version":3,"file":"dm.d.ts","sourceRoot":"","sources":["../../src/commands/dm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA6BpC,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,QAkDlD"}

package/dist/commands/dm.js

@@ -1,5 +1,6 @@
 import { resolveCredentials, resolveRuntimeContext } from '../lib/client.js';
 import { printJson, printError, printRefHint, stripPrllScheme } from '../lib/output.js';
+import { uploadFile } from '../lib/upload.js';
 /**
  * Resolve a name-or-id argument to a user ID.
  * If it starts with "usr_", treat as ID. Otherwise, search org members by display_name.
@@ -24,22 +25,41 @@ export function registerDMCommands(program) {
         .command('dm')
         .description('Send a direct message to a user by name or ID (auto-creates chat if needed)')
         .argument('<nameOrId>', 'Target user display name or ID (usr_...)')
-        .requiredOption('--text <text>', 'Message text')
+        .option('--text <text>', 'Message text')
+        .option('--file <path>', 'Upload and attach a local file')
+        .option('--attachment <id>', 'Attach an existing attachment (att_xxx or prll://att_xxx)')
         .option('--no-reply', 'Hint that the recipient should not reply')
         .action(async (nameOrId, opts) => {
         try {
             const { client, orgId } = resolveCredentials();
             const ctx = resolveRuntimeContext();
             const userId = await resolveUserId(client, orgId, nameOrId);
+            if (opts.file && opts.attachment) {
+                printError(new Error('--file and --attachment are mutually exclusive'));
+                return;
+            }
+            const text = opts.text || '';
+            let attachmentIds;
+            if (opts.file) {
+                const result = await uploadFile(client, orgId, opts.file);
+                attachmentIds = [result.attachmentId];
+            }
+            else if (opts.attachment) {
+                attachmentIds = [stripPrllScheme(opts.attachment)];
+            }
+            if (!text && !attachmentIds) {
+                printError(new Error('Provide --text, --file, or --attachment'));
+                return;
+            }
             const req = {
                 user_id: userId,
                 message_type: 'text',
-                content: { text: opts.text },
+                content: { text },
             };
-            // Commander parses --no-reply as opts.reply = false
-            if (opts.reply === false) {
+            if (attachmentIds)
+                req.attachment_ids = attachmentIds;
+            if (opts.reply === false)
                 req.hints = { no_reply: true };
-            }
             if (ctx.stepId)
                 req.agent_step_id = ctx.stepId;
             const result = await client.sendDirectMessage(orgId, req);

package/dist/commands/files.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function registerFileCommands(program: Command): void;
+//# sourceMappingURL=files.d.ts.map

package/dist/commands/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/commands/files.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QAoEpD"}

package/dist/commands/files.js

@@ -0,0 +1,66 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { resolveCredentials } from '../lib/client.js';
+import { printJson, printError, stripPrllScheme } from '../lib/output.js';
+import { uploadFile } from '../lib/upload.js';
+export function registerFileCommands(program) {
+    const files = program.command('files').description('Upload and download files');
+    files
+        .command('upload')
+        .description('Upload a file and return attachment metadata')
+        .argument('<path>', 'Local file path to upload')
+        .action(async (filePath) => {
+        try {
+            const { client, orgId } = resolveCredentials();
+            const result = await uploadFile(client, orgId, filePath);
+            printJson({
+                attachment_id: result.attachmentId,
+                file_name: result.fileName,
+                file_size: result.fileSize,
+                mime_type: result.mimeType,
+            });
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
+    files
+        .command('download')
+        .description('Download a file by attachment ID')
+        .argument('<attachmentId>', 'Attachment ID (att_xxx or prll://att_xxx)')
+        .option('-o, --output <path>', 'Output file path (default: ./{original_filename})')
+        .action(async (attachmentId, opts) => {
+        try {
+            const { client } = resolveCredentials();
+            const id = stripPrllScheme(attachmentId);
+            const fileInfo = await client.getFileUrl(id);
+            // Download the file
+            const res = await fetch(fileInfo.url);
+            if (!res.ok) {
+                throw new Error(`Download failed: ${res.status} ${res.statusText}`);
+            }
+            const buffer = Buffer.from(await res.arrayBuffer());
+            // Sanitize server-provided filename to prevent path traversal
+            const safeName = path.basename(fileInfo.file_name || id);
+            // Determine output path
+            const outputPath = opts.output
+                ? path.resolve(opts.output)
+                : path.resolve(safeName);
+            // If output is a directory, write file inside it
+            let finalPath = outputPath;
+            if (fs.existsSync(outputPath) && fs.statSync(outputPath).isDirectory()) {
+                finalPath = path.join(outputPath, safeName);
+            }
+            fs.writeFileSync(finalPath, buffer);
+            printJson({
+                path: finalPath,
+                file_name: fileInfo.file_name,
+                file_size: fileInfo.file_size,
+                mime_type: fileInfo.mime_type,
+            });
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
+}

package/dist/commands/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/commands/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAkGvD"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/commands/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAyHvD"}

package/dist/commands/messages.js

@@ -1,5 +1,6 @@
 import { resolveCredentials, resolveRuntimeContext } from '../lib/client.js';
 import { printJson, printError, printRefHint, stripPrllScheme } from '../lib/output.js';
+import { uploadFile } from '../lib/upload.js';
 export function registerMessageCommands(program) {
     const messages = program.command('messages').description('Manage messages');
     messages
@@ -46,9 +47,11 @@ export function registerMessageCommands(program) {
     });
     messages
         .command('send')
-        .description('Send a text message to a chat')
+        .description('Send a message to a chat (text, file, or both)')
         .argument('[chatId]', 'Chat ID (defaults to PRLL_CHAT_ID if set)')
-        .requiredOption('--text <text>', 'Message text')
+        .option('--text <text>', 'Message text')
+        .option('--file <path>', 'Upload and attach a local file')
+        .option('--attachment <id>', 'Attach an existing attachment (att_xxx or prll://att_xxx)')
         .option('--thread-root-id <id>', 'Reply to a thread')
         .option('--no-reply', 'Hint that the recipient should not reply')
         .action(async (chatIdArg, opts) => {
@@ -60,10 +63,29 @@ export function registerMessageCommands(program) {
                 printError(new Error('Chat ID required — provide as argument or set PRLL_CHAT_ID'));
                 return;
             }
+            if (opts.file && opts.attachment) {
+                printError(new Error('--file and --attachment are mutually exclusive'));
+                return;
+            }
+            const text = opts.text || '';
+            let attachmentIds;
+            if (opts.file) {
+                const result = await uploadFile(client, orgId, opts.file);
+                attachmentIds = [result.attachmentId];
+            }
+            else if (opts.attachment) {
+                attachmentIds = [stripPrllScheme(opts.attachment)];
+            }
+            if (!text && !attachmentIds) {
+                printError(new Error('Provide --text, --file, or --attachment'));
+                return;
+            }
             const req = {
                 message_type: 'text',
-                content: { text: opts.text },
+                content: { text },
             };
+            if (attachmentIds)
+                req.attachment_ids = attachmentIds;
             if (opts.threadRootId !== undefined)
                 req.thread_root_id = stripPrllScheme(opts.threadRootId);
             if (opts.reply === false)

package/dist/commands/no-reply.d.ts

@@ -0,0 +1,17 @@
+import { Command } from 'commander';
+/**
+ * `parall no-reply` — explicit "I am not replying this turn" audit signal.
+ *
+ * Runs entirely client-side: no API call, no server state. Under the unified
+ * runtime output contract (see `docs/engineering-design/agent-dm-loop-prevention.md`
+ * § Layer 0), plain text is never auto-projected as a chat message — agents
+ * produce visible messages only by explicitly invoking `parall messages send`
+ * / `dm`. So silence is the default when the agent simply does nothing.
+ *
+ * What this command adds: a deterministic, auditable marker in the agent's
+ * session tool-call log saying "this turn was intentionally silent, here's
+ * the optional reason," which helps operators distinguish deliberate silence
+ * from a crashed or timed-out dispatch.
+ */
+export declare function registerNoReplyCommands(program: Command): void;
+//# sourceMappingURL=no-reply.d.ts.map

package/dist/commands/no-reply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-reply.d.ts","sourceRoot":"","sources":["../../src/commands/no-reply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAevD"}

package/dist/commands/no-reply.js

@@ -0,0 +1,29 @@
+/**
+ * `parall no-reply` — explicit "I am not replying this turn" audit signal.
+ *
+ * Runs entirely client-side: no API call, no server state. Under the unified
+ * runtime output contract (see `docs/engineering-design/agent-dm-loop-prevention.md`
+ * § Layer 0), plain text is never auto-projected as a chat message — agents
+ * produce visible messages only by explicitly invoking `parall messages send`
+ * / `dm`. So silence is the default when the agent simply does nothing.
+ *
+ * What this command adds: a deterministic, auditable marker in the agent's
+ * session tool-call log saying "this turn was intentionally silent, here's
+ * the optional reason," which helps operators distinguish deliberate silence
+ * from a crashed or timed-out dispatch.
+ */
+export function registerNoReplyCommands(program) {
+    program
+        .command('no-reply')
+        .description('Record an explicit "no visible reply this turn" marker in the session log. ' +
+        'Purely informational — silence is already the default when no `messages send` runs.')
+        .option('--reason <reason>', 'Optional human-readable reason, logged for debugging')
+        .action((opts) => {
+        // Print a deterministic marker so operators reading tool_use logs can
+        // confirm the agent deliberately declared silence this turn.
+        const payload = { ack: 'no-reply' };
+        if (opts.reason)
+            payload.reason = opts.reason;
+        process.stdout.write(JSON.stringify(payload) + '\n');
+    });
+}

package/dist/commands/tasks.js

@@ -165,7 +165,8 @@ export function registerTaskCommands(program) {
                 cursor: opts.cursor,
                 order: opts.order,
             });
-            const result = await client.getTaskComments(orgId, stripPrllScheme(taskId), params);
+            const { COMMENT_TARGET } = await import('@parall/sdk');
+            const result = await client.getComments(orgId, { target_uri: COMMENT_TARGET.task(stripPrllScheme(taskId)), ...params });
             printJson(result);
         }
         catch (err) {
@@ -180,7 +181,8 @@ export function registerTaskCommands(program) {
         .action(async (taskId, opts) => {
         try {
             const { client, orgId } = resolveCredentials();
-            const result = await client.createTaskComment(orgId, stripPrllScheme(taskId), { body: opts.body });
+            const { COMMENT_TARGET } = await import('@parall/sdk');
+            const result = await client.createComment(orgId, { target_uri: COMMENT_TARGET.task(stripPrllScheme(taskId)), body: opts.body });
             printJson(result);
             printRefHint(result.id);
         }
@@ -191,13 +193,12 @@ export function registerTaskCommands(program) {
     comments
         .command('update')
         .description('Update a task comment')
-        .argument('<taskId>', 'Task ID')
         .argument('<commentId>', 'Comment ID')
         .requiredOption('--body <text>', 'New comment body')
-        .action(async (taskId, commentId, opts) => {
+        .action(async (commentId, opts) => {
         try {
             const { client, orgId } = resolveCredentials();
-            const result = await client.updateTaskComment(orgId, stripPrllScheme(taskId), stripPrllScheme(commentId), { body: opts.body });
+            const result = await client.updateComment(orgId, stripPrllScheme(commentId), { body: opts.body });
             printJson(result);
         }
         catch (err) {
@@ -207,12 +208,11 @@ export function registerTaskCommands(program) {
     comments
         .command('delete')
         .description('Delete a task comment')
-        .argument('<taskId>', 'Task ID')
         .argument('<commentId>', 'Comment ID')
-        .action(async (taskId, commentId) => {
+        .action(async (commentId) => {
         try {
             const { client, orgId } = resolveCredentials();
-            await client.deleteTaskComment(orgId, stripPrllScheme(taskId), stripPrllScheme(commentId));
+            await client.deleteComment(orgId, stripPrllScheme(commentId));
             printJson({ ok: true });
         }
         catch (err) {

package/dist/commands/wiki.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wiki.d.ts","sourceRoot":"","sources":["../../src/commands/wiki.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QAyqBpD"}
+{"version":3,"file":"wiki.d.ts","sourceRoot":"","sources":["../../src/commands/wiki.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QAwwBpD"}

package/dist/commands/wiki.js

@@ -630,6 +630,99 @@ export function registerWikiCommands(program) {
             printError(error);
         }
     });
+    // ---- Comments ----
+    const comment = wiki.command('comment').description('Manage wiki comments');
+    comment
+        .command('list')
+        .description('List comments on a wiki target')
+        .argument('[wiki]', 'Wiki ID or slug')
+        .requiredOption('--target-type <type>', 'Target type (changeset or page)')
+        .requiredOption('--target-id <id>', 'Target ID (changeset ID or page path)')
+        .option('--limit <n>', 'Maximum number of comments to return', '50')
+        .option('--cursor <cursor>', 'Pagination cursor')
+        .option('--order <order>', 'Sort order (asc or desc)')
+        .action(async (wikiRef, opts) => {
+        try {
+            const ctx = resolveCredentials();
+            const { resolveWikiRefOrDefault } = await import('../lib/wiki.js');
+            const { COMMENT_TARGET } = await import('@parall/sdk');
+            const w = await resolveWikiRefOrDefault(ctx, wikiRef);
+            if (opts.targetType !== 'changeset' && opts.targetType !== 'page') {
+                throw new Error('--target-type must be "changeset" or "page"');
+            }
+            const targetUri = opts.targetType === 'changeset'
+                ? COMMENT_TARGET.changeset(opts.targetId, w.id)
+                : COMMENT_TARGET.wikiPage(w.id, opts.targetId);
+            const result = await ctx.client.getComments(ctx.orgId, {
+                target_uri: targetUri,
+                limit: Number(opts.limit),
+                cursor: opts.cursor,
+                order: opts.order,
+            });
+            printJson(result);
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
+    comment
+        .command('add')
+        .description('Add a comment to a wiki target')
+        .argument('[wiki]', 'Wiki ID or slug')
+        .requiredOption('--target-type <type>', 'Target type (changeset or page)')
+        .requiredOption('--target-id <id>', 'Target ID (changeset ID or page path)')
+        .requiredOption('--body <text>', 'Comment body')
+        .action(async (wikiRef, opts) => {
+        try {
+            const ctx = resolveCredentials();
+            const { resolveWikiRefOrDefault } = await import('../lib/wiki.js');
+            const { COMMENT_TARGET } = await import('@parall/sdk');
+            const w = await resolveWikiRefOrDefault(ctx, wikiRef);
+            if (opts.targetType !== 'changeset' && opts.targetType !== 'page') {
+                throw new Error('--target-type must be "changeset" or "page"');
+            }
+            const targetUri = opts.targetType === 'changeset'
+                ? COMMENT_TARGET.changeset(opts.targetId, w.id)
+                : COMMENT_TARGET.wikiPage(w.id, opts.targetId);
+            const result = await ctx.client.createComment(ctx.orgId, {
+                target_uri: targetUri,
+                body: opts.body,
+            });
+            printJson(result);
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
+    comment
+        .command('update')
+        .description('Update a wiki comment')
+        .argument('<commentId>', 'Comment ID')
+        .requiredOption('--body <text>', 'New comment body')
+        .action(async (commentId, opts) => {
+        try {
+            const ctx = resolveCredentials();
+            const result = await ctx.client.updateComment(ctx.orgId, commentId, { body: opts.body });
+            printJson(result);
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
+    comment
+        .command('delete')
+        .description('Delete a wiki comment')
+        .argument('<commentId>', 'Comment ID')
+        .action(async (commentId) => {
+        try {
+            const ctx = resolveCredentials();
+            await ctx.client.deleteComment(ctx.orgId, commentId);
+            printJson({ ok: true });
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
     // ---- Utility (not for direct agent use) ----
     wiki
         .command('list')

package/dist/index.js

@@ -10,7 +10,9 @@ import { registerProjectCommands } from './commands/projects.js';
 import { registerUserCommands } from './commands/users.js';
 import { registerWikiCommands } from './commands/wiki.js';
 import { registerMcpCommands } from './commands/mcp.js';
+import { registerNoReplyCommands } from './commands/no-reply.js';
 import { registerRefCommands } from './commands/refs.js';
+import { registerFileCommands } from './commands/files.js';
 const require = createRequire(import.meta.url);
 const pkg = require('../package.json');
 const program = new Command();
@@ -27,5 +29,7 @@ registerProjectCommands(program);
 registerUserCommands(program);
 registerWikiCommands(program);
 registerMcpCommands(program);
+registerNoReplyCommands(program);
 registerRefCommands(program);
+registerFileCommands(program);
 program.parse();

package/dist/lib/upload.d.ts

@@ -0,0 +1,9 @@
+import type { ParallClient } from '@parall/sdk';
+export declare function inferMimeType(filePath: string): string;
+export declare function uploadFile(client: ParallClient, orgId: string, filePath: string): Promise<{
+    attachmentId: string;
+    fileName: string;
+    fileSize: number;
+    mimeType: string;
+}>;
+//# sourceMappingURL=upload.d.ts.map

package/dist/lib/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../src/lib/upload.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAahD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGtD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/K"}

package/dist/lib/upload.js

@@ -0,0 +1,38 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+const MIME_MAP = {
+    '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.gif': 'image/gif',
+    '.webp': 'image/webp', '.svg': 'image/svg+xml', '.pdf': 'application/pdf',
+    '.json': 'application/json', '.txt': 'text/plain', '.md': 'text/markdown',
+    '.csv': 'text/csv', '.zip': 'application/zip', '.tar': 'application/x-tar',
+    '.gz': 'application/gzip', '.mp4': 'video/mp4', '.webm': 'video/webm',
+    '.mp3': 'audio/mpeg', '.wav': 'audio/wav', '.html': 'text/html',
+    '.js': 'text/javascript', '.ts': 'text/typescript', '.go': 'text/x-go',
+    '.py': 'text/x-python', '.rs': 'text/x-rust',
+};
+export function inferMimeType(filePath) {
+    const ext = path.extname(filePath).toLowerCase();
+    return MIME_MAP[ext] || 'application/octet-stream';
+}
+export async function uploadFile(client, orgId, filePath) {
+    const resolved = path.resolve(filePath);
+    const stat = fs.statSync(resolved);
+    const fileName = path.basename(resolved);
+    const mimeType = inferMimeType(fileName);
+    const presign = await client.getUploadPresignUrl(orgId, {
+        file_name: fileName,
+        file_size: stat.size,
+        mime_type: mimeType,
+    });
+    const fileBuffer = fs.readFileSync(resolved);
+    const uploadRes = await fetch(presign.upload_url, {
+        method: 'PUT',
+        body: fileBuffer,
+        headers: { 'Content-Type': mimeType },
+    });
+    if (!uploadRes.ok) {
+        throw new Error(`Upload failed: ${uploadRes.status} ${uploadRes.statusText}`);
+    }
+    await client.completeUpload(orgId, presign.attachment_id);
+    return { attachmentId: presign.attachment_id, fileName, fileSize: stat.size, mimeType };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/cli",
-  "version": "1.15.1",
+  "version": "1.17.0",
   "description": "CLI client for Parall — universal agent & human access to Parall API",
   "license": "MIT",
   "repository": {
@@ -30,7 +30,7 @@
     "@modelcontextprotocol/sdk": "1.27.1",
     "commander": "^13.0.0",
     "zod": "^4.3.6",
-    "@parall/sdk": "1.15.1"
+    "@parall/sdk": "1.17.0"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",