@uru-intelligence/cli 0.4.12 → 0.4.14

package/CHANGELOG.md

@@ -52,6 +52,8 @@
   - Action: No action is required. Agents and scripts can read `suggestedCommand` from JSON errors instead of guessing the confirmation flag.
 - Keep the CLI login when you switch workspace. A leftover workspace from a previous switch no longer poisons the next login. `uru switch` marks the current workspace in the list. — surfaces: cli; reference: apps/cli/src/oauth-credential.ts
   - Action: No action is required. After you switch workspace, the next command keeps the same login. A new login writes only the workspace the login response selected.
+- Pin URU_API_BASE and URU_PROXY_URL in generated MCP client config from the CLI API host, and send the MCP 2026-07-28 request envelope from CLI staging smoke. — surfaces: cli; reference: apps/cli/src/mcp-commands.ts
+  - Action: After `uru mcp config` against development or staging, set URU_API_KEY and use the emitted URU_PROXY_URL so clients do not fall through to production MCP. Prefer published CLI >= 0.4.14.
 - Recover from a revoked CLI session without reusing the dead JWT. When the API returns `session_revoked`, the CLI now rotates the stored OAuth login once or clears it instead of sending the revoked token until local expiry. — surfaces: cli; reference: apps/cli/src/cli.ts
   - Action: No action is required. Failures of this class now carry the `session_revoked` error code so they can be distinguished from a generic `auth_required` response.
 - Report a non-JSON API response as what it is. A proxy or firewall that answers with an HTML page now produces the HTTP status and content type instead of `Unexpected token '<', "<!DOCTYPE "... is not valid JSON`. — surfaces: cli; reference: apps/cli/src/client.ts

package/dist/library.mjs

@@ -8110,7 +8110,8 @@ var zGraphEdgeType = _enum([
   "backlink",
   "gem_sdk",
   "workspace_default",
-  "team"
+  "team",
+  "folder"
 ]).default("manual");
 var zGraphEdge = object({
   edgeType: zGraphEdgeType.optional(),
@@ -8135,7 +8136,8 @@ var zGraphNodeType = _enum([
   "persona",
   "dataset",
   "file",
-  "collection"
+  "collection",
+  "folder"
 ]);
 var zGraphNode = object({
   id: string2(),
@@ -8303,7 +8305,8 @@ var zHomePinKind = _enum([
   "page",
   "agent",
   "prompt",
-  "context"
+  "context",
+  "folder"
 ]);
 var zHomePin = object({
   createdAt: string2(),
@@ -9526,7 +9529,7 @@ var zNotificationItem = strictObject({
   status: zNotificationStatus,
   targetUrl: string2().nullish(),
   updatedAt: exports_iso.datetime({ offset: true }),
-  workspaceId: string2()
+  workspaceId: string2().nullable()
 });
 var zNotificationType = _enum([
   "content_shared",
@@ -10836,6 +10839,7 @@ var zThreadFileView = object({
 });
 var zThreadFileListResponse = object({
   files: array(zThreadFileView),
+  outputsNotDelivered: array(string2()),
   outputsSettled: boolean2(),
   protocol: _enum(["uru.thread.v1"])
 });
@@ -11167,6 +11171,33 @@ var zThreadCreateRequest = strictObject({
   title: string2().max(400).nullable(),
   workspaceId: uuid2()
 });
+var zThreadShareLink = object({
+  messageCount: int(),
+  mintedAt: string2(),
+  mintedByUserId: string2(),
+  revokedAt: string2().nullable(),
+  shareId: string2(),
+  snapshotLeafMessageId: string2().nullable(),
+  threadId: string2()
+});
+var zThreadShareListResponse = object({
+  links: array(zThreadShareLink)
+});
+var zThreadShareMintResponse = object({
+  link: zThreadShareLink,
+  token: string2(),
+  url: string2().nullable()
+});
+var zThreadShareRevokeResponse = object({
+  link: zThreadShareLink
+});
+var zThreadShareThread = object({
+  activeLeafMessageId: string2().nullable(),
+  createdAt: string2(),
+  model: zThreadModelSelector.nullable(),
+  threadId: string2(),
+  title: string2().nullable()
+});
 var zThreadSubagentInput = object({
   agentId: uuid2(),
   attemptCount: int().gte(0),
@@ -11384,6 +11415,7 @@ var zThreadMessagePart = union([
       "context_window_exceeded",
       "compaction_loop_exceeded",
       "automation_turn_budget_exceeded",
+      "output_length_limit_reached",
       "out_of_usage",
       "run_orphaned",
       "tool_policy_denied",
@@ -11492,6 +11524,13 @@ var zThreadMessagesListResponse = object({
   protocol: _enum(["uru.thread.v1"]),
   siblings: record(string2(), array(string2()))
 });
+var zThreadShareSnapshot = object({
+  messages: array(zThreadExportMessage),
+  schema: _enum(["uru.thread-share"]),
+  sharedAt: string2(),
+  thread: zThreadShareThread,
+  version: literal(1)
+});
 var zThreadUpdateRequest = strictObject({
   settings: zThreadSettingsPatch,
   title: object({
@@ -13880,6 +13919,19 @@ var zListAppLogsApiPlatformArtifactsArtifactSlugAppLogsGetQuery = object({
   requestId: string2().nullish()
 });
 var zListAppLogsApiPlatformArtifactsArtifactSlugAppLogsGetResponse = array(zAppLogRecord);
+var zStreamAppLogsApiPlatformArtifactsArtifactSlugAppLogsStreamGetPath = object({
+  artifactSlug: string2()
+});
+var zStreamAppLogsApiPlatformArtifactsArtifactSlugAppLogsStreamGetQuery = object({
+  cursor: string2().nullish(),
+  limit: int().gte(1).lte(500).optional().default(100),
+  deploymentId: string2().nullish(),
+  releaseId: string2().nullish(),
+  runtimeRunId: string2().nullish(),
+  level: string2().nullish(),
+  requestId: string2().nullish()
+});
+var zStreamAppLogsApiPlatformArtifactsArtifactSlugAppLogsStreamGetResponse = string2();
 var zGetAppReleaseOverviewApiPlatformArtifactsArtifactSlugAppReleaseOverviewGetPath = object({
   artifactSlug: string2()
 });
@@ -16369,6 +16421,9 @@ var zProviderInvokeAppQueryApiRuntimeProviderAppsDeploymentIdQueryCapabilityName
 var zGetCspNonceApiSecurityCspNonceGetResponse = record(string2(), string2());
 var zCspReportStatsApiSecurityCspReportStatsGetResponse = record(string2(), unknown());
 var zCspViolationReportApiSecurityCspViolationReportPostBody = string2().default("");
+var zThreadShareReadPath = object({
+  shareId: string2().min(1).max(128)
+});
 var zBackfillSharedContentMetadataApiSharingBackfillMetadataPostResponse = record(string2(), string2());
 var zDeleteNotificationsApiSharingNotificationsDeleteResponse = record(string2(), unknown());
 var zGetNotificationsApiSharingNotificationsGetQuery = object({
@@ -16639,6 +16694,16 @@ var zThreadSandboxListPath = object({
 var zThreadSandboxListQuery = object({
   path: string2().max(512).optional()
 });
+var zThreadShareListPath = object({
+  threadId: uuid2()
+});
+var zThreadShareMintPath = object({
+  threadId: uuid2()
+});
+var zThreadShareRevokePath = object({
+  threadId: uuid2(),
+  shareId: uuid2()
+});
 var zListAvailableToolDefinitionsApiToolControlPlaneAvailableGetQuery = object({
   enabledOnly: _enum(["true", "false"]).optional().default("true")
 });
@@ -16838,7 +16903,7 @@ function pickString(record2, keys) {
 // package.json
 var package_default = {
   name: "@uru-intelligence/cli",
-  version: "0.4.12",
+  version: "0.4.14",
   private: false,
   description: "Uru full-platform command line interface",
   repository: {

package/dist/uru.mjs

@@ -21,7 +21,7 @@ import { homedir as homedir3 } from "node:os";
 // package.json
 var package_default = {
   name: "@uru-intelligence/cli",
-  version: "0.4.12",
+  version: "0.4.14",
   private: false,
   description: "Uru full-platform command line interface",
   repository: {
@@ -1112,6 +1112,9 @@ function getPlatformOperationForToolCall(backendToolName, parameters) {
   return platformOperations.find((operation) => operation.backendToolName.toLowerCase() === toolName && (operation.backendOp === undefined ? backendOp === undefined : operation.backendOp.toLowerCase() === backendOp));
 }
 function operationRequiresExplicitConfirmation(operation, parameters) {
+  if (parameters["preview_only"] === true) {
+    return false;
+  }
   return operation.safety === "destructive" || operation.id === "library.rm" && parameters["permanent"] === true;
 }
 function platformOperationsForSurface(surface) {
@@ -10806,7 +10809,8 @@ var zGraphEdgeType = _enum([
   "backlink",
   "gem_sdk",
   "workspace_default",
-  "team"
+  "team",
+  "folder"
 ]).default("manual");
 var zGraphEdge = object({
   edgeType: zGraphEdgeType.optional(),
@@ -10831,7 +10835,8 @@ var zGraphNodeType = _enum([
   "persona",
   "dataset",
   "file",
-  "collection"
+  "collection",
+  "folder"
 ]);
 var zGraphNode = object({
   id: string2(),
@@ -10999,7 +11004,8 @@ var zHomePinKind = _enum([
   "page",
   "agent",
   "prompt",
-  "context"
+  "context",
+  "folder"
 ]);
 var zHomePin = object({
   createdAt: string2(),
@@ -12222,7 +12228,7 @@ var zNotificationItem = strictObject({
   status: zNotificationStatus,
   targetUrl: string2().nullish(),
   updatedAt: exports_iso.datetime({ offset: true }),
-  workspaceId: string2()
+  workspaceId: string2().nullable()
 });
 var zNotificationType = _enum([
   "content_shared",
@@ -13532,6 +13538,7 @@ var zThreadFileView = object({
 });
 var zThreadFileListResponse = object({
   files: array(zThreadFileView),
+  outputsNotDelivered: array(string2()),
   outputsSettled: boolean2(),
   protocol: _enum(["uru.thread.v1"])
 });
@@ -13863,6 +13870,33 @@ var zThreadCreateRequest = strictObject({
   title: string2().max(400).nullable(),
   workspaceId: uuid2()
 });
+var zThreadShareLink = object({
+  messageCount: int(),
+  mintedAt: string2(),
+  mintedByUserId: string2(),
+  revokedAt: string2().nullable(),
+  shareId: string2(),
+  snapshotLeafMessageId: string2().nullable(),
+  threadId: string2()
+});
+var zThreadShareListResponse = object({
+  links: array(zThreadShareLink)
+});
+var zThreadShareMintResponse = object({
+  link: zThreadShareLink,
+  token: string2(),
+  url: string2().nullable()
+});
+var zThreadShareRevokeResponse = object({
+  link: zThreadShareLink
+});
+var zThreadShareThread = object({
+  activeLeafMessageId: string2().nullable(),
+  createdAt: string2(),
+  model: zThreadModelSelector.nullable(),
+  threadId: string2(),
+  title: string2().nullable()
+});
 var zThreadSubagentInput = object({
   agentId: uuid2(),
   attemptCount: int().gte(0),
@@ -14080,6 +14114,7 @@ var zThreadMessagePart = union([
       "context_window_exceeded",
       "compaction_loop_exceeded",
       "automation_turn_budget_exceeded",
+      "output_length_limit_reached",
       "out_of_usage",
       "run_orphaned",
       "tool_policy_denied",
@@ -14188,6 +14223,13 @@ var zThreadMessagesListResponse = object({
   protocol: _enum(["uru.thread.v1"]),
   siblings: record(string2(), array(string2()))
 });
+var zThreadShareSnapshot = object({
+  messages: array(zThreadExportMessage),
+  schema: _enum(["uru.thread-share"]),
+  sharedAt: string2(),
+  thread: zThreadShareThread,
+  version: literal(1)
+});
 var zThreadUpdateRequest = strictObject({
   settings: zThreadSettingsPatch,
   title: object({
@@ -16576,6 +16618,19 @@ var zListAppLogsApiPlatformArtifactsArtifactSlugAppLogsGetQuery = object({
   requestId: string2().nullish()
 });
 var zListAppLogsApiPlatformArtifactsArtifactSlugAppLogsGetResponse = array(zAppLogRecord);
+var zStreamAppLogsApiPlatformArtifactsArtifactSlugAppLogsStreamGetPath = object({
+  artifactSlug: string2()
+});
+var zStreamAppLogsApiPlatformArtifactsArtifactSlugAppLogsStreamGetQuery = object({
+  cursor: string2().nullish(),
+  limit: int().gte(1).lte(500).optional().default(100),
+  deploymentId: string2().nullish(),
+  releaseId: string2().nullish(),
+  runtimeRunId: string2().nullish(),
+  level: string2().nullish(),
+  requestId: string2().nullish()
+});
+var zStreamAppLogsApiPlatformArtifactsArtifactSlugAppLogsStreamGetResponse = string2();
 var zGetAppReleaseOverviewApiPlatformArtifactsArtifactSlugAppReleaseOverviewGetPath = object({
   artifactSlug: string2()
 });
@@ -19065,6 +19120,9 @@ var zProviderInvokeAppQueryApiRuntimeProviderAppsDeploymentIdQueryCapabilityName
 var zGetCspNonceApiSecurityCspNonceGetResponse = record(string2(), string2());
 var zCspReportStatsApiSecurityCspReportStatsGetResponse = record(string2(), unknown());
 var zCspViolationReportApiSecurityCspViolationReportPostBody = string2().default("");
+var zThreadShareReadPath = object({
+  shareId: string2().min(1).max(128)
+});
 var zBackfillSharedContentMetadataApiSharingBackfillMetadataPostResponse = record(string2(), string2());
 var zDeleteNotificationsApiSharingNotificationsDeleteResponse = record(string2(), unknown());
 var zGetNotificationsApiSharingNotificationsGetQuery = object({
@@ -19335,6 +19393,16 @@ var zThreadSandboxListPath = object({
 var zThreadSandboxListQuery = object({
   path: string2().max(512).optional()
 });
+var zThreadShareListPath = object({
+  threadId: uuid2()
+});
+var zThreadShareMintPath = object({
+  threadId: uuid2()
+});
+var zThreadShareRevokePath = object({
+  threadId: uuid2(),
+  shareId: uuid2()
+});
 var zListAvailableToolDefinitionsApiToolControlPlaneAvailableGetQuery = object({
   enabledOnly: _enum(["true", "false"]).optional().default("true")
 });
@@ -20969,7 +21037,7 @@ Destructive verbs require --yes.
        uru automations triggers list <automation-id>
        uru automations triggers discover [--source platform|app] [--app-name <name>]
        uru automations connections list [--app-name <name>]
-       uru automations runs ls [automation-id] [--scope personal|workspace] [--limit 100]
+       uru automations runs ls <automation-id> [--scope personal|workspace] [--limit 100]
        uru automations runs tail <run-id> [--limit 1000] [--level debug|info|warn|error]
        uru automations runs debug|timeline <run-id>
        uru automations runs cancel <run-id> --yes
@@ -23711,6 +23779,7 @@ async function removeMcpConfig(ctx, args) {
 }
 function buildMcpServerConfig(ctx, flags) {
   return mcpServerConfig({
+    apiUrl: ctx.apiUrl,
     workspaceId: ctx.workspace,
     serverName: flags.values["--server-name"] ?? DEFAULT_SERVER_NAME,
     packageName: flags.values["--package"] ?? DEFAULT_MCP_PACKAGE
@@ -23721,7 +23790,27 @@ function writeMcpConfigJson(ctx, config2) {
 `);
 }
 var MCP_API_KEY_PLACEHOLDER = "${URU_API_KEY}";
+function mcpProxyUrlFromApiUrl(apiUrl) {
+  let host;
+  try {
+    host = new URL(apiUrl).hostname.toLowerCase();
+  } catch {
+    return;
+  }
+  if (host === "api.uruintelligence.com") {
+    return "https://mcp.uruintelligence.com/mcp";
+  }
+  const match = /^api-(development|staging|uat)\.uruintelligence\.com$/u.exec(host);
+  if (match !== null) {
+    return `https://mcp-${match[1]}.uruintelligence.com/mcp`;
+  }
+  if (host === "localhost" || host === "127.0.0.1") {
+    return "http://localhost:3001";
+  }
+  return;
+}
 function mcpServerConfig(args) {
+  const proxyUrl = mcpProxyUrlFromApiUrl(args.apiUrl);
   return {
     mcpServers: {
       [args.serverName]: {
@@ -23729,6 +23818,8 @@ function mcpServerConfig(args) {
         args: ["-y", args.packageName],
         env: {
           URU_API_KEY: MCP_API_KEY_PLACEHOLDER,
+          URU_API_BASE: args.apiUrl,
+          ...proxyUrl === undefined ? {} : { URU_PROXY_URL: proxyUrl },
           ...args.workspaceId === undefined ? {} : { URU_WORKSPACE_ID: args.workspaceId }
         }
       }
@@ -25826,7 +25917,7 @@ async function enqueueGemHostedJob(ctx, flags, linkedProject, options) {
     await emitGemHostedJob(ctx, ack, options.outdir);
     return;
   }
-  const hostedJobId = stringField(ack, ["hosted_job_id"]);
+  const hostedJobId = stringField(ack, ["hosted_job_id", "hostedJobId"]);
   const initialStatus = typeof ack["status"] === "string" ? ack["status"].trim() : "";
   if (hostedJobId === undefined) {
     if (GEM_BUILD_TERMINAL_STATUSES.has(initialStatus)) {
@@ -25882,7 +25973,7 @@ async function enqueueGemHostedJob(ctx, flags, linkedProject, options) {
 async function emitSettledGemHostedJob(ctx, job, status, outdir) {
   await emitGemHostedJob(ctx, job, outdir);
   if (GEM_BUILD_FAILED_STATUSES.has(status)) {
-    const hostedJobId = stringField(job, ["hosted_job_id"]) ?? "unknown";
+    const hostedJobId = stringField(job, ["hosted_job_id", "hostedJobId"]) ?? "unknown";
     throw new CliError(`Gem compile ${hostedJobId} ${status}.`, {
       errorCode: `gem_build_${status}`
     });
@@ -25906,7 +25997,7 @@ function emitGemHostedJobSync(ctx, job) {
     writeJson(ctx.io, job);
     return;
   }
-  const hostedJobId = stringField(job, ["hosted_job_id"]);
+  const hostedJobId = stringField(job, ["hosted_job_id", "hostedJobId"]);
   const status = typeof job["status"] === "string" ? job["status"] : "";
   if (hostedJobId === undefined) {
     writeText(ctx.io, JSON.stringify(job, null, 2));
@@ -27097,7 +27188,16 @@ function adaptRegistryFamilyParams(params) {
   }
   return adapted;
 }
+var REGISTRY_FAMILY_SNAKE_CASE_ALIASES = new Set([
+  "automation_id",
+  "dataset_ids",
+  "item_id",
+  "max_results"
+]);
 function canonicalCliFieldToToolProtocol(key) {
+  if (REGISTRY_FAMILY_SNAKE_CASE_ALIASES.has(key)) {
+    return key;
+  }
   if (!/^[a-z][A-Za-z0-9]*$/u.test(key)) {
     throw new CliError(`--params-json field ${JSON.stringify(key)} is not canonical camelCase. Registry-family commands accept canonical CLI fields and adapt them at the tool-protocol boundary.`);
   }
@@ -27766,6 +27866,9 @@ async function dispatchAutomationRuns(ctx, sub, args) {
     if (params["automation_id"] === undefined && flags.positionals[0] !== undefined) {
       params["automation_id"] = flags.positionals[0];
     }
+    if (params["automation_id"] === undefined) {
+      throw new CliError("Usage: uru automations runs ls <automation-id> [--scope personal|workspace] [--limit 100]. automation_id is required.");
+    }
     await emitTool(ctx, "automation.runs_list", params, {
       textExtractor: formatAutomationRunList
     });
@@ -28059,7 +28162,8 @@ async function dispatchTokens(ctx, sub, args, linkedProject) {
       params["scopes"] = scopes;
     }
     await emitTool(ctx, "token.create", params, {
-      textExtractor: extractCreatedToken
+      textExtractor: extractCreatedToken,
+      ...ctx.json ? { transform: formatCreatedTokenJson } : {}
     });
     return;
   }
@@ -28393,6 +28497,39 @@ function extractCreatedToken(value) {
   const payload = delegatedPayload(value);
   return isJsonObject2(payload) && typeof payload["token"] === "string" ? payload["token"] : undefined;
 }
+function formatCreatedTokenJson(value) {
+  const payload = delegatedPayload(value);
+  if (!isJsonObject2(payload)) {
+    return value;
+  }
+  const metadata = isJsonObject2(payload["token_metadata"]) ? payload["token_metadata"] : isJsonObject2(payload["tokenMetadata"]) ? payload["tokenMetadata"] : undefined;
+  const token = typeof payload["token"] === "string" ? payload["token"] : undefined;
+  const formatted = {};
+  const id = metadata === undefined ? undefined : stringField(metadata, ["id"]);
+  if (id !== undefined) {
+    formatted["id"] = id;
+  }
+  if (token !== undefined) {
+    formatted["token"] = token;
+  }
+  const keyPrefix = metadata === undefined ? undefined : stringField(metadata, ["key_prefix", "keyPrefix"]);
+  if (keyPrefix !== undefined) {
+    formatted["key_prefix"] = keyPrefix;
+  }
+  const expiresAt = metadata === undefined ? undefined : stringField(metadata, ["expires_at", "expiresAt"]);
+  if (expiresAt !== undefined) {
+    formatted["expires_at"] = expiresAt;
+  }
+  const gemId = metadata === undefined ? undefined : stringField(metadata, ["gem_id", "artifact_id", "gemId", "artifactId"]);
+  if (gemId !== undefined) {
+    formatted["gem_id"] = gemId;
+  }
+  const name = metadata === undefined ? undefined : stringField(metadata, ["name"]);
+  if (name !== undefined) {
+    formatted["name"] = name;
+  }
+  return Object.keys(formatted).length > 0 ? formatted : payload;
+}
 function formatTokenList(value) {
   const payload = delegatedPayload(value);
   if (!isJsonObject2(payload) || !Array.isArray(payload["tokens"])) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uru-intelligence/cli",
-  "version": "0.4.12",
+  "version": "0.4.14",
   "private": false,
   "description": "Uru full-platform command line interface",
   "repository": {