@soat/cli 0.63.0 → 0.65.0

package/dist/index.mjs

@@ -13,7 +13,7 @@ import * as os from "node:os";
 import { createHmac, timingSafeEqual } from "node:crypto";
 
 //#region package.json
-var version = "0.63.0";
+var version = "0.65.0";
 
 //#endregion
 //#region src/cli-wrappers/wrappers/formations.ts
@@ -780,6 +780,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "merge-actor-tags": {
@@ -798,6 +804,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "list-agents": {
@@ -1364,7 +1376,7 @@ var routes = {
       "in": "path"
     }, {
       "name": "wait",
-      "description": "When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately with a `generation_id` to poll. Pass `true` to block until the generation settles and receive the result. Mutually exclusive with `stream: true`. A `builtin` tool call always waits.",
+      "description": "When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately with a `generation_id` to poll. Pass `true` to block until the generation settles and receive the result. Mutually exclusive with `stream: true`. A tool call, `builtin` or MCP, always waits.",
       "required": false,
       "type": "boolean",
       "in": "query"
@@ -2762,7 +2774,7 @@ var routes = {
       "in": "path"
     }, {
       "name": "wait",
-      "description": "When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately. Pass `true` to block until the generation settles and receive the result. A `builtin` tool call always waits.",
+      "description": "When omitted or `false` (default), the generation runs in the background and `202 Accepted` is returned immediately. Pass `true` to block until the generation settles and receive the result. A tool call, `builtin` or MCP, always waits.",
       "required": false,
       "type": "boolean",
       "in": "query"
@@ -2850,6 +2862,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "merge-conversation-tags": {
@@ -2868,6 +2886,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "list-deciders": {
@@ -3170,7 +3194,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "wait",
-      "description": "True evaluates before answering and returns the settled decision. False — the default — returns the `queued` decision at once.",
+      "description": "True evaluates before answering and returns the settled decision. False — the default — returns the `queued` decision at once. A tool call, `builtin` or MCP, always waits.",
       "required": false,
       "type": "boolean",
       "in": "body"
@@ -3870,6 +3894,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "merge-document-tags": {
@@ -3888,6 +3918,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "create-embeddings": {
@@ -5028,6 +5064,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "merge-file-tags": {
@@ -5046,6 +5088,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "validate-formation": {
@@ -6354,6 +6402,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "merge-memory-tags": {
@@ -6372,6 +6426,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "list-memory-rules": {
@@ -6888,6 +6948,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "merge-memory-store-tags": {
@@ -6906,6 +6972,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "list-metadata-schemas": {
@@ -8726,7 +8798,7 @@ var routes = {
       "in": "path"
     }, {
       "name": "wait",
-      "description": "When omitted or `false` (default), generation runs in the background and `202 Accepted` is returned immediately. Pass `true` to block until the generation settles and receive the result.",
+      "description": "When omitted or `false` (default), generation runs in the background and `202 Accepted` is returned immediately. Pass `true` to block until the generation settles and receive the result. A tool call, `builtin` or MCP, always waits.",
       "required": false,
       "type": "boolean",
       "in": "query"
@@ -8886,6 +8958,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "merge-session-tags": {
@@ -8904,6 +8982,12 @@ var routes = {
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "tags",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
+      "required": true,
+      "type": "object",
+      "in": "body-root"
     }]
   },
   "list-tasks": {
@@ -11437,6 +11521,10 @@ program.argument("[command]", "API command in kebab-case (e.g. list-actors)").ar
   const pathArgs = {};
   const queryArgs = {};
   const bodyArgs = {};
+  const rootBodyFlag = route.flags.find(f => {
+    return f.in === "body-root";
+  });
+  let rootBody;
   for (const [flagKey, val] of Object.entries(flags)) {
     if (flagKey === "profile" || flagKey === "id") continue;
     const canonical = toCanonical(flagKey);
@@ -11448,7 +11536,9 @@ program.argument("[command]", "API command in kebab-case (e.g. list-actors)").ar
     const queryParam = route.queryParams.find(p => {
       return toCanonical(p) === canonical;
     });
-    if (pathParam) pathArgs[pathParam] = parsedValue;else if (queryParam) queryArgs[queryParam] = parsedValue;else if (route.httpMethod === "get") queryArgs[kebabToSnake(flagKey)] = parsedValue;else bodyArgs[kebabToSnake(flagKey)] = parsedValue;
+    if (pathParam) pathArgs[pathParam] = parsedValue;else if (rootBodyFlag && canonical === toCanonical(rootBodyFlag.name)) rootBody = {
+      value: parsedValue
+    };else if (queryParam) queryArgs[queryParam] = parsedValue;else if (route.httpMethod === "get") queryArgs[kebabToSnake(flagKey)] = parsedValue;else bodyArgs[kebabToSnake(flagKey)] = parsedValue;
   }
   const positionalArgs = extractPositionalArgs({
     cliArgs: rawArgs
@@ -11482,6 +11572,15 @@ program.argument("[command]", "API command in kebab-case (e.g. list-actors)").ar
   if (Object.keys(pathArgs).length) callOpts["path"] = pathArgs;
   if (Object.keys(queryArgs).length) callOpts["query"] = queryArgs;
   if (Object.keys(bodyArgs).length) callOpts["body"] = bodyArgs;
+  if (rootBody) {
+    if (Object.keys(bodyArgs).length) {
+      console.error(`Unknown flag(s) ${Object.keys(bodyArgs).map(key => {
+        return `--${toKebab(key)}`;
+      }).join(", ")}: '${commandName}' sends its whole body in --${toKebab(rootBodyFlag?.name ?? "")}.`);
+      process.exit(1);
+    }
+    callOpts["body"] = rootBody.value;
+  }
   const result = await method(callOpts);
   if (result.error) {
     const status = result.response && "status" in result.response ? result.response.status : void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/cli",
-  "version": "0.63.0",
+  "version": "0.65.0",
   "description": "CLI for SOAT — open-source infrastructure for production-ready AI agents.",
   "keywords": [
     "ai-agents",
@@ -22,14 +22,14 @@
   "dependencies": {
     "@inquirer/input": "^5.1.6",
     "@inquirer/password": "^5.2.2",
-    "@soat/sdk": "0.63.0",
+    "@soat/sdk": "0.65.0",
     "@ttoss/logger": "^0.8.20",
     "commander": "^15.0.0",
     "js-yaml": "^5.4.2"
   },
   "devDependencies": {
     "@ttoss/config": "^1.38.0",
-    "@ttoss/openapi-codegen": "^0.4.0",
+    "@ttoss/openapi-codegen": "^0.5.0",
     "@ttoss/test-utils": "^4.2.19",
     "@types/jest": "^30.0.0",
     "@types/node": "^26.5.1",