@parall/cli 1.32.0 → 1.32.1

package/dist/commands/messages.d.ts

@@ -1,3 +1,3 @@
-import { Command } from 'commander';
+import type { Command } from 'commander';
 export declare function registerMessageCommands(program: Command): void;
 //# sourceMappingURL=messages.d.ts.map

package/dist/commands/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/commands/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAyIvD"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/commands/messages.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKzC,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAqJvD"}

package/dist/commands/messages.js

@@ -1,5 +1,6 @@
+import { ApiError } from '@parall/sdk';
 import { resolveCredentials, resolveRuntimeContext } from '../lib/client.js';
-import { printJson, printError, printRefHint, stripPrllScheme } from '../lib/output.js';
+import { printError, printJson, printRefHint, stripPrllScheme } from '../lib/output.js';
 import { uploadFile } from '../lib/upload.js';
 export function registerMessageCommands(program) {
     const messages = program.command('messages').description('Manage messages');
@@ -63,6 +64,12 @@ export function registerMessageCommands(program) {
                 printError(new Error('Chat ID required — provide as argument or set PRLL_CHAT_ID'));
                 return;
             }
+            // `messages send` targets a chat. A user id here is an addressing
+            // mistake — point at `dm` instead of letting the server reject it.
+            if (chatId.startsWith('usr_')) {
+                printError(new ApiError(400, `prll://${chatId} is a user, not a chat. To message a user use: parall dm prll://${chatId} --text "..."`, 'INVALID_TARGET'));
+                return;
+            }
             if (opts.file && opts.attachment) {
                 printError(new Error('--file and --attachment are mutually exclusive'));
                 return;

package/dist/lib/output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAEA,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE7C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAY,GAAG,IAAI,CAEvE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAmC9C"}
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAEA,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE7C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAY,GAAG,IAAI,CAEvE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,KAAK,CAwC9C"}

package/dist/lib/output.js

@@ -17,36 +17,41 @@ export function stripPrllScheme(idOrUri) {
     return idOrUri.startsWith('prll://') ? idOrUri.slice(7) : idOrUri;
 }
 export function printError(err) {
-    let msg;
     if (err instanceof ApiError) {
-        msg = { error: err.message, status: err.status, ...(err.code ? { code: err.code } : {}) };
-        console.error(JSON.stringify(msg));
-        if (err.code === 'PERMISSION_DENIED' && err.extras) {
-            const { action, resource_uri } = err.extras;
-            // Subset of authz.Service.RegisteredActions() — only actions agents commonly encounter.
-            // Verify the full list via GET /approvals/actions.
-            const approvable = new Set([
-                'chat.delete',
-                'chat.archive',
-                'chat.restore',
-                'task.delete',
-                'task.archive',
-                'task.restore',
-            ]);
-            if (typeof action === 'string' &&
-                typeof resource_uri === 'string' &&
-                approvable.has(action)) {
-                console.error(`Tip: parall approvals request --action ${action} --resource ${resource_uri} --chat <chat_id> --title "..." --reason "..."`);
+        // Faithful, parseable line: the server's real message + machine anchors.
+        console.error(JSON.stringify({
+            error: err.message,
+            status: err.status,
+            ...(err.code ? { code: err.code } : {}),
+            ...(err.action ? { action: err.action } : {}),
+            ...(err.resourceUri ? { resource_uri: err.resourceUri } : {}),
+            ...(err.approvable !== undefined ? { approvable: err.approvable } : {}),
+            ...(err.extras ? { extras: err.extras } : {}),
+        }));
+        // Authorization denial: tell the agent how to escalate, driven entirely by
+        // the server's `approvable` flag (no hardcoded allowlist that can drift).
+        // See docs/engineering-design/error-contract-design.md
+        if (err.code === 'PERMISSION_DENIED' && err.action) {
+            // Only an explicit `false` means "not approvable". A missing flag (older
+            // server, or a service that doesn't emit it) is unknown — offer the
+            // approval path rather than suppressing a possibly-valid request.
+            if (err.approvable === false) {
+                console.error('This action is not approvable. Ask a human with permission to perform it.');
+            }
+            else {
+                const lead = err.approvable === true
+                    ? 'This action can be approved.'
+                    : 'This action may be approvable.';
+                const chat = err.resourceUri?.startsWith('prll://cht_') ? err.resourceUri : '<chat_id>';
+                console.error(`${lead} Request approval:\n  parall approvals request --action ${err.action} --resource ${err.resourceUri ?? '<resource>'} --chat ${chat} --title "..." --reason "..."`);
             }
         }
     }
     else if (err instanceof Error) {
-        msg = { error: err.message };
-        console.error(JSON.stringify(msg));
+        console.error(JSON.stringify({ error: err.message }));
     }
     else {
-        msg = { error: String(err) };
-        console.error(JSON.stringify(msg));
+        console.error(JSON.stringify({ error: String(err) }));
     }
     return process.exit(1);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/cli",
-  "version": "1.32.0",
+  "version": "1.32.1",
   "description": "CLI client for Parall — universal agent & human access to Parall API",
   "license": "MIT",
   "repository": {
@@ -30,7 +30,7 @@
     "@modelcontextprotocol/sdk": "1.27.1",
     "commander": "^13.0.0",
     "zod": "^4.3.6",
-    "@parall/sdk": "1.32.0"
+    "@parall/sdk": "1.32.1"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",