@uru-intelligence/cli 0.4.13 → 0.4.15

package/CHANGELOG.md

@@ -48,10 +48,14 @@
 
 ### Fixed
 
+- Clear automation runs-list usage when automation_id is missing, skip confirm on delete --preview, accept snake_case registry aliases, emit structured token create JSON, and register sharing.labels_list / sharing.label_create ops. — surfaces: cli, docs; reference: apps/cli/src/local-commands.ts
+  - Action: uru automations runs ls now requires <automation-id> and prints usage instead of an opaque schema error. Preview deletes no longer need --yes. Prefer published CLI >= 0.4.15 for labels aliases, snake_case registry params, and token create JSON id.
 - JSON output for destructive CLI operations refused without `--yes` now includes `confirmationRequired: true` and a copy-paste `suggestedCommand` with `--yes` appended. — surfaces: cli; reference: apps/cli/src/cli-runtime.ts
   - Action: No action is required. Agents and scripts can read `suggestedCommand` from JSON errors instead of guessing the confirmation flag.
 - Keep the CLI login when you switch workspace. A leftover workspace from a previous switch no longer poisons the next login. `uru switch` marks the current workspace in the list. — surfaces: cli; reference: apps/cli/src/oauth-credential.ts
   - Action: No action is required. After you switch workspace, the next command keeps the same login. A new login writes only the workspace the login response selected.
+- Pin URU_API_BASE and URU_PROXY_URL in generated MCP client config from the CLI API host, and send the MCP 2026-07-28 request envelope from CLI staging smoke. — surfaces: cli; reference: apps/cli/src/mcp-commands.ts
+  - Action: After `uru mcp config` against development or staging, set URU_API_KEY and use the emitted URU_PROXY_URL so clients do not fall through to production MCP. Prefer published CLI >= 0.4.14.
 - Recover from a revoked CLI session without reusing the dead JWT. When the API returns `session_revoked`, the CLI now rotates the stored OAuth login once or clears it instead of sending the revoked token until local expiry. — surfaces: cli; reference: apps/cli/src/cli.ts
   - Action: No action is required. Failures of this class now carry the `session_revoked` error code so they can be distinguished from a generic `auth_required` response.
 - Report a non-JSON API response as what it is. A proxy or firewall that answers with an HTML page now produces the HTTP status and content type instead of `Unexpected token '<', "<!DOCTYPE "... is not valid JSON`. — surfaces: cli; reference: apps/cli/src/client.ts
@@ -60,6 +64,8 @@
   - Action: No action is required. `uru doctor` gains a `data access` check and fails when a credential validates but cannot execute tools; a token supplied through `--token` or `URU_TOKEN` is no longer told to run `uru login`.
 - Send scope on uru automations create, honor --output/--json on uru tools run, and keep errorId plus httpStatus on JSON errors. — surfaces: cli; reference: apps/cli/src/local-commands.ts
   - Action: uru automations create now sends scope=workspace by default. Pass --scope personal when creating a personal automation. JSON errors include errorId and httpStatus when the API provides them.
+- Tip library_fs read refusals toward library_query, and ship labels/list aliases that need a live catalog with list_labels/create_label. — surfaces: cli, docs; reference: PR #5379 CF001; PR #5381 staging labels catalog
+  - Action: Prefer published CLI >= 0.4.15. Use uru sharing labels_list / label_create (or operations sharing.labels_list / sharing.label_create). library_fs read ops should point callers at library_query instead of an opaque safety refusal.
 - Use the shared SemVer contract when deciding whether to show a CLI update notice. — surfaces: cli, release; reference: docs/plans/cli-sdk-native-release-modernization/PLAN.md
   - Action: No action is required; prerelease and malformed registry versions now follow the same validation and ordering rules as release publication.
 

package/dist/library.mjs

@@ -16903,7 +16903,7 @@ function pickString(record2, keys) {
 // package.json
 var package_default = {
   name: "@uru-intelligence/cli",
-  version: "0.4.13",
+  version: "0.4.15",
   private: false,
   description: "Uru full-platform command line interface",
   repository: {
@@ -16928,8 +16928,8 @@ var package_default = {
     access: "public"
   },
   scripts: {
-    lint: "node ../../scripts/run-with-repo-node.mjs oxlint --type-aware --deny-warnings -c ../../oxlint.inventory.config.mts .",
-    "lint:fix": "node ../../scripts/run-with-repo-node.mjs oxlint --type-aware --deny-warnings -c ../../oxlint.inventory.config.mts --fix .",
+    lint: "node ../../scripts/run-with-repo-node.mjs oxlint --type-aware --deny-warnings -c ../../oxlint.config.mts .",
+    "lint:fix": "node ../../scripts/run-with-repo-node.mjs oxlint --type-aware --deny-warnings -c ../../oxlint.config.mts --fix .",
     "type-check": "tsc --noEmit",
     test: "bun test",
     "test:unit": "bun test",
@@ -17019,8 +17019,16 @@ function defaultCliErrorCode(exitCode) {
   }
 }
 
-// src/oauth-credential.ts
-var SESSION_REFRESH_LEEWAY_MS = 5 * 60 * 1000;
+// src/gem-panel-client.ts
+function stripTerminalControl(value) {
+  let out = "";
+  for (const ch of value) {
+    const code = ch.codePointAt(0) ?? 0;
+    const isControl = code < 32 && code !== 10 && code !== 9 || code === 127 || code >= 128 && code <= 159;
+    out += isControl ? "�" : ch;
+  }
+  return out;
+}
 
 // ../../packages/types/src/mcp/gemResult.ts
 var GEM_RESULT_SCHEMA_V1 = "uru.gem.result.v1";
@@ -17086,16 +17094,8 @@ function requiredString(record2, key, label) {
   return value;
 }
 
-// src/gem-panel-client.ts
-function stripTerminalControl(value) {
-  let out = "";
-  for (const ch of value) {
-    const code = ch.codePointAt(0) ?? 0;
-    const isControl = code < 32 && code !== 10 && code !== 9 || code === 127 || code >= 128 && code <= 159;
-    out += isControl ? "�" : ch;
-  }
-  return out;
-}
+// src/oauth-credential.ts
+var SESSION_REFRESH_LEEWAY_MS = 5 * 60 * 1000;
 
 // src/client.ts
 class UruApiClient {