@parall/cli 1.55.5 → 1.56.0

package/dist/commands/clip.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"clip.d.ts","sourceRoot":"","sources":["../../src/commands/clip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmFpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QA+fpD"}
+{"version":3,"file":"clip.d.ts","sourceRoot":"","sources":["../../src/commands/clip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwLpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QA2jBpD"}

package/dist/commands/clip.js

@@ -52,6 +52,87 @@ async function loadDeviceIndex(client, orgId) {
         return null;
     }
 }
+const CLIP_REF_HELP = 'Registry clip id (crg_...), an exact clip name (your org first, then a unique public match), or org_<id>/<name> to pin the publisher (discover ids with `parall clip search`)';
+/**
+ * The clip-ref grammar shared with the standalone Solo CLI
+ * (desktop/edge/cli/parall-clip.mjs, parseClipRef) — the two install surfaces
+ * must read the same ref the same way. Any slash makes a namespaced ref, and
+ * only org ids are authoritative namespaces; throws on a malformed ref.
+ */
+function parseClipRef(ref) {
+    if (ref.startsWith('crg_'))
+        return { id: ref };
+    const slash = ref.indexOf('/');
+    if (slash === -1)
+        return { name: ref };
+    const namespace = ref.slice(0, slash);
+    const name = ref.slice(slash + 1);
+    if (!namespace || !name || name.includes('/')) {
+        throw new Error(`Invalid clip reference "${ref}". ${CLIP_REF_HELP}.`);
+    }
+    if (!namespace.startsWith('org_')) {
+        throw new Error(`Publisher namespace "${namespace}" is not authoritative yet. Use an immutable crg_ id or org_<id>/${name}.`);
+    }
+    return { namespace, name };
+}
+/**
+ * Resolve an install/info argument to a registry entry with per-name queries
+ * only — never by listing the catalog, which spans every public clip on the
+ * platform. Bare names resolve in the CALLER'S org first (an authoritative
+ * point read immune to a third party publishing the same name), then fall
+ * back to a unique exact match among visible public clips; several publishers
+ * sharing the name is an explicit ambiguity error, never "first match wins".
+ * Returns null on a clean not-found; non-404 errors (e.g. 403
+ * CLIP_NOT_APPROVED) propagate untouched.
+ */
+async function resolveRegistryRef(client, orgId, ref) {
+    const notFoundToNull = (err) => {
+        if (err.status === 404)
+            return null;
+        throw err;
+    };
+    const parsed = parseClipRef(ref);
+    if ('id' in parsed) {
+        return client.getRegistryClip(orgId, parsed.id).catch(notFoundToNull);
+    }
+    if ('namespace' in parsed) {
+        return client.resolveRegistryClip(orgId, parsed.namespace, parsed.name).catch(notFoundToNull);
+    }
+    const own = await client.resolveRegistryClip(orgId, orgId, parsed.name).catch(notFoundToNull);
+    if (own)
+        return own;
+    // Bare name, not published by the caller's org: accept a UNIQUE exact match
+    // among visible clips. Search is fuzzy (name+description substrings), so
+    // exact-filter its max-size page; a page-sized crowd of lookalikes could
+    // still hide an exact match — the crg_ id and org_<id>/<name> forms stay
+    // the always-sound addresses. A 404 here is a server without the search
+    // route, not a lookup miss — degrade to "no matches" so the caller gets
+    // the guidance error instead of a bare route error.
+    const page = await client
+        .searchOrgRegistryClips(orgId, parsed.name, { limit: 100 })
+        .catch((err) => {
+        if (err.status === 404)
+            return [];
+        throw err;
+    });
+    const matches = page.filter((c) => c.name === parsed.name);
+    if (matches.length > 1) {
+        const candidates = matches.map((c) => `${c.org_id}/${c.name} (${c.id})`).join(', ');
+        throw new Error(`Clip name "${parsed.name}" is ambiguous across publishers: ${candidates}. Use the crg_ id or the org_<id>/<name> form.`);
+    }
+    // A FULL page proves nothing about uniqueness or absence: rows order by
+    // (name, id), so the exact-name block can straddle the page boundary and a
+    // single visible match — or none — may be a truncation artifact. Two exact
+    // matches on the page prove ambiguity outright (handled above); otherwise
+    // abstain rather than risk installing the wrong publisher's clip.
+    if (page.length >= 100) {
+        throw new Error(`Too many clips have names or descriptions similar to "${parsed.name}" for a bare name to resolve safely. Pass the crg_ id or the org_<id>/<name> form (find them with \`parall clip search <text>\`).`);
+    }
+    return matches[0] ?? null;
+}
+function clipNotFoundError(ref) {
+    return new Error(`No registry clip matching "${ref}". Pass a crg_ id, the exact name of a visible clip, or org_<id>/<name> to pin its publisher — discover ids with \`parall clip search <text>\`.`);
+}
 export function registerClipCommands(program) {
     const clip = program
         .command('clip')
@@ -101,22 +182,70 @@ export function registerClipCommands(program) {
             printError(err);
         }
     });
+    clip
+        .command('search')
+        .description('Search the visible clip registry server-side (your org + cross-org public clips) — rows carry the crg_ id that `clip install` takes')
+        .argument('<query>', 'Text matched against clip names and descriptions (substring, case-insensitive)')
+        .option('--limit <n>', 'Rows per page, up to 100 (server default 50)')
+        .option('--offset <n>', 'Rows to skip — page through large result sets')
+        .action(async (query, opts) => {
+        try {
+            const { client, orgId } = resolveCredentials();
+            // Strict grammar BEFORE the wire (same rationale as exec --timeout):
+            // the server silently clamps malformed or out-of-range values, which
+            // would page differently than the caller asked.
+            const limit = parsePositiveInt(opts?.limit);
+            if (opts?.limit !== undefined && (limit === undefined || limit > 100)) {
+                printError(new Error('--limit must be an integer between 1 and 100'));
+                return;
+            }
+            // Unlike limit, 0 is a valid offset (the explicit first page), so
+            // parsePositiveInt alone would reject a legal boundary value.
+            let offset;
+            if (opts?.offset !== undefined) {
+                offset = opts.offset.trim() === '0' ? 0 : parsePositiveInt(opts.offset);
+                if (offset === undefined) {
+                    printError(new Error('--offset must be a non-negative integer'));
+                    return;
+                }
+            }
+            const entries = await client.searchOrgRegistryClips(orgId, query, { limit, offset });
+            if (entries.length === 0) {
+                printJson({ data: [], message: `No registry clips matched "${query}"` });
+                return;
+            }
+            // publisher tells the caller which install form works: rows from your
+            // own org install by bare name; cross-org rows need org_<id>/<name>
+            // (publisher IS that org id) or the crg_ id.
+            printJson(entries.map((c) => ({
+                id: c.id,
+                name: c.name,
+                publisher: c.org_id === orgId ? 'your org' : c.org_id,
+                ...(c.description ? { description: c.description } : {}),
+                version: c.version ?? '-',
+                visibility: c.visibility,
+            })));
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
     clip
         .command('install')
         .description('Install a registry clip into the organization')
-        .argument('<clip>', 'Registry clip id (crg_...) or name')
+        .argument('<clip>', CLIP_REF_HELP)
         .action(async (clip) => {
         try {
             const { client, orgId } = resolveCredentials();
             // v3 installs a REFERENCE into clip_installs, keyed by the registry id.
             // There is no machine to pick: a v3 clip runs wherever the connection
             // it is bound to points, which is why the old --machine-id is gone.
-            // listOrgRegistryClips is the surface carrying `crg_` ids — the Pinix
-            // catalog proxy does not.
-            const registry = await client.listOrgRegistryClips(orgId);
-            const found = registry.find((c) => c.id === clip || c.name === clip);
+            // Resolution is a point query — the visible catalog spans every
+            // public clip on the platform, so it must never be listed to find one
+            // (the old list+find lost every clip past the first page).
+            const found = await resolveRegistryRef(client, orgId, clip);
             if (!found) {
-                printError(new Error(`No registry clip matching "${clip}". Pass a crg_ id or the exact registry name; a private clip from another org is not installable.`));
+                printError(clipNotFoundError(clip));
                 return;
             }
             // Idempotent server-side: installing an already-installed clip is a no-op.
@@ -130,48 +259,52 @@ export function registerClipCommands(program) {
     clip
         .command('info')
         .description("Show detailed clip information, including its manifest commands and params. For your org's OWN clips this includes review_status/review_note (the platform-review state of a public publish)")
-        .argument('<clip>', 'Registry clip id (crg_...) or name')
+        .argument('<clip>', `Installed clip id or name, or — for uninstalled clips — ${CLIP_REF_HELP}`)
         .action(async (clip) => {
         try {
             const { client, orgId } = resolveCredentials();
-            // Resolve installed-first (the historical semantic), then fall back to
-            // the org registry: an author checking a clip they published but never
+            // Resolve installed-first (the historical semantic; the installed list
+            // is org-local and uncapped), then fall back to point-querying the
+            // registry: an author checking a clip they published but never
             // installed — the publish→review→revise loop — must not dead-end here.
+            // The installed shortcut obeys the SAME bare-name contract as
+            // resolveRegistryRef: an org can install same-name clips from several
+            // publishers (installs are keyed by id), so a plain first-match would
+            // show an arbitrary one — own org wins, and a foreign tie is the same
+            // explicit ambiguity error, never a silent pick.
             const installed = await client.listInstalledRegistryClips(orgId);
-            let found = installed.find((c) => c.id === clip || c.name === clip);
-            if (!found) {
-                const registry = await client.listOrgRegistryClips(orgId);
-                found = registry.find((c) => c.id === clip || c.name === clip);
-            }
-            let entry = found;
-            if (found) {
-                // The detail read is what carries review_status/review_note (server
-                // attaches them only for the owning org). A cross-org entry can lose
-                // detail visibility between the list and this read — the list entry
-                // is still correct data, so fall back to it rather than failing info.
-                try {
-                    entry = await client.getRegistryClip(orgId, found.id);
-                }
-                catch {
-                    entry = found;
-                }
+            const byId = installed.find((c) => c.id === clip);
+            const byName = byId ? [] : installed.filter((c) => c.name === clip);
+            let found = byId ?? byName.find((c) => c.org_id === orgId);
+            if (!found && byName.length > 1) {
+                const candidates = byName.map((c) => `${c.org_id}/${c.name} (${c.id})`).join(', ');
+                printError(new Error(`Several installed clips are named "${clip}": ${candidates}. Use the crg_ id or the org_<id>/<name> form.`));
+                return;
             }
-            else if (clip.startsWith('crg_')) {
-                // Both lists are single pages (registry capped at 100 entries), so a
-                // valid id can sit beyond them — an exact crg_ id needs no list
-                // resolution at all; go straight to the detail endpoint before
-                // concluding not-found.
+            found ??= byName[0];
+            let entry = found ?? (await resolveRegistryRef(client, orgId, clip));
+            // The detail read is what carries review_status/review_note (server
+            // attaches them only for the owning org; the resolve read does not).
+            // resolveRegistryRef's crg_ branch IS that detail read already. A
+            // cross-org entry can lose detail visibility between the lookup and
+            // this read (a 404) — the lookup entry is still correct data, so fall
+            // back to it rather than failing info. Any OTHER failure (auth, 5xx,
+            // network) must surface: silently printing partial data would report
+            // a broken read as success.
+            const alreadyDetail = !found && clip.startsWith('crg_');
+            if (entry && !alreadyDetail) {
                 try {
-                    entry = await client.getRegistryClip(orgId, clip);
+                    entry = await client.getRegistryClip(orgId, entry.id);
                 }
-                catch {
-                    // fall through to the not-found error below
+                catch (err) {
+                    if (err.status !== 404)
+                        throw err;
                 }
             }
             if (!entry) {
                 // `return` matters: without it the lookup falls through and dies
                 // with a TypeError instead of the message just printed.
-                printError(new Error(`No clip matching "${clip}" (see \`parall clip list\`)`));
+                printError(clipNotFoundError(clip));
                 return;
             }
             const info = {

package/dist/commands/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/commands/messages.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmBzC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5C,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GACtD;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CASzC;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAoPvD"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/commands/messages.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmBzC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5C,OAAO,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GACtD;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CASzC;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,QAkSvD"}

package/dist/commands/messages.js

@@ -245,4 +245,47 @@ export function registerMessageCommands(program) {
             printError(err);
         }
     });
+    // ---- Thread watchers ----
+    messages
+        .command('watch')
+        .description('Watch a thread (subscribe to its replies)')
+        .argument('<threadRootId>', 'Thread root message ID')
+        .action(async (threadRootId) => {
+        try {
+            const { client } = resolveCredentials();
+            await client.watchThread(stripPrllScheme(threadRootId));
+            printJson({ ok: true });
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
+    messages
+        .command('unwatch')
+        .description('Unwatch a thread (stop receiving its replies; sticky — only replying or watch re-subscribes)')
+        .argument('<threadRootId>', 'Thread root message ID')
+        .action(async (threadRootId) => {
+        try {
+            const { client } = resolveCredentials();
+            await client.unwatchThread(stripPrllScheme(threadRootId));
+            printJson({ ok: true });
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
+    messages
+        .command('watchers')
+        .description('List watchers of a thread')
+        .argument('<threadRootId>', 'Thread root message ID')
+        .action(async (threadRootId) => {
+        try {
+            const { client } = resolveCredentials();
+            const result = await client.getThreadWatchers(stripPrllScheme(threadRootId));
+            printJson(result);
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
 }

package/dist/commands/tasks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/commands/tasks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAqB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiEpC,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;;;;;;;;;;;GAaA;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;;YAS0B,iBAAiB,CAAC,QAAQ,CAAC;cACvB,iBAAiB,CAAC,UAAU,CAAC;;;;;;;;GAS3D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QAkXpD"}
+{"version":3,"file":"tasks.d.ts","sourceRoot":"","sources":["../../src/commands/tasks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAqB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiEpC,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;;;;;;;;;;;GAaA;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;;YAS0B,iBAAiB,CAAC,QAAQ,CAAC;cACvB,iBAAiB,CAAC,UAAU,CAAC;;;;;;;;GAS3D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,QA0YpD"}

package/dist/commands/tasks.js

@@ -170,6 +170,25 @@ export function registerTaskCommands(program) {
             printError(err);
         }
     });
+    tasks
+        .command('move')
+        .description('Move a task (and its whole subtree) to another project. The subtree is renumbered from the target project, old KEY-N identifiers stay resolvable as aliases, and subscribers who cannot read the target project lose their subscription. Requires update access on the task (source project membership) and read access to the target project.')
+        .argument('<taskId>', 'Task ID')
+        .requiredOption('--project <projectId>', 'Target project ID')
+        .option('--parent <taskId>', 'Attach under this parent task in the target project (omit to land top-level)')
+        .action(async (taskId, opts) => {
+        try {
+            const { client, orgId } = resolveCredentials();
+            const result = await client.moveTask(orgId, stripPrllScheme(taskId), {
+                project_id: stripPrllScheme(opts.project),
+                ...(opts.parent ? { parent_id: stripPrllScheme(opts.parent) } : {}),
+            });
+            printJson(result);
+        }
+        catch (err) {
+            printError(err);
+        }
+    });
     tasks
         .command('update')
         .description('Update a task')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parall/cli",
-  "version": "1.55.5",
+  "version": "1.56.0",
   "description": "CLI client for Parall — universal agent & human access to Parall API",
   "license": "MIT",
   "repository": {
@@ -36,14 +36,14 @@
     "diff": "^8.0.3",
     "js-yaml": "^4.1.0",
     "zod": "^4.3.6",
-    "@parall/agent-core": "1.55.5",
-    "@parall/sdk": "1.55.5"
+    "@parall/agent-core": "1.56.0",
+    "@parall/sdk": "1.56.0"
   },
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.0.0",
     "typescript": "^5.7.0",
-    "@parall/agent-core": "1.55.5"
+    "@parall/agent-core": "1.56.0"
   },
   "scripts": {
     "build": "tsc",