current-cli 0.1.27__tar.gz → 0.1.29__tar.gz

{current_cli-0.1.27 → current_cli-0.1.29}/PKG-INFO

@@ -1,6 +1,6 @@
-Metadata-Version: 2.4
+Metadata-Version: 2.5
 Name: current-cli
-Version: 0.1.27
+Version: 0.1.29
 Summary: Command line interface for the Current API, generated from its OpenAPI schema at runtime
 Author-email: Orin <your-email@example.com>
 License-Expression: MIT

{current_cli-0.1.27 → current_cli-0.1.29}/current_cli/schema.yml

@@ -63,10 +63,170 @@ paths:
               schema:
                 $ref: '#/components/schemas/Me'
           description: ''
+  /api/accounts/auth/mfa/admin-reset/:
+    post:
+      operationId: accounts_auth_mfa_admin_reset_create
+      description: |-
+        Superadmin-only: clear a user's TOTP enrollment so they can enroll a
+        new device, for when they've lost their authenticator app. There are no
+        recovery codes, so this is the only way back in for such a user.
+      tags:
+      - accounts
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/MFAAdminResetRequestRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/MFAAdminResetRequestRequest'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/MFAAdminResetRequestRequest'
+        required: true
+      security:
+      - MessagingJobTokenAuth: []
+      - tokenAuth: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/DetailResponse'
+          description: ''
+  /api/accounts/auth/mfa/confirm/:
+    post:
+      operationId: accounts_auth_mfa_confirm_create
+      description: |-
+        Confirm enrollment with a code from the authenticator app. Mid-login,
+        this also finishes sign-in (a confirmed device is proof of the second
+        factor); from Account Settings, it just turns MFA on.
+      tags:
+      - accounts
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/MFAConfirmRequestRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/MFAConfirmRequestRequest'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/MFAConfirmRequestRequest'
+        required: true
+      security:
+      - MessagingJobTokenAuth: []
+      - tokenAuth: []
+      - {}
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/VerifyMagicLinkResponse'
+          description: ''
+  /api/accounts/auth/mfa/disable/:
+    post:
+      operationId: accounts_auth_mfa_disable_create
+      description: |-
+        Turn off TOTP for the current user. Refused when MFA is still
+        required for this account (platform superadmin, a workspace admin
+        anywhere, or a workspace that requires it of members) — the setting
+        would just be silently re-enforced at the next sign-in otherwise.
+      tags:
+      - accounts
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/MFADisableRequestRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/MFADisableRequestRequest'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/MFADisableRequestRequest'
+        required: true
+      security:
+      - MessagingJobTokenAuth: []
+      - tokenAuth: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/DetailResponse'
+          description: ''
+  /api/accounts/auth/mfa/setup/:
+    post:
+      operationId: accounts_auth_mfa_setup_create
+      description: |-
+        Start (or restart) TOTP enrollment: mints a new secret and returns
+        the otpauth:// URI for the authenticator app's QR scanner. Callable
+        mid-login (with the pending ticket) or from Account Settings (while
+        authenticated) — the secret isn't active until ``confirm`` succeeds.
+      tags:
+      - accounts
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/MFATicketRequestRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/MFATicketRequestRequest'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/MFATicketRequestRequest'
+      security:
+      - MessagingJobTokenAuth: []
+      - tokenAuth: []
+      - {}
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/MFASetupResponse'
+          description: ''
+  /api/accounts/auth/mfa/verify/:
+    post:
+      operationId: accounts_auth_mfa_verify_create
+      description: |-
+        Complete sign-in with a code from an already-enrolled authenticator
+        app, exchanging the pending-login ticket for a real auth token.
+      tags:
+      - accounts
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/MFAVerifyRequestRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/MFAVerifyRequestRequest'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/MFAVerifyRequestRequest'
+        required: true
+      security:
+      - {}
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/VerifyMagicLinkResponse'
+          description: ''
   /api/accounts/auth/verify/:
     post:
       operationId: accounts_auth_verify_create
-      description: Exchange a magic-link token for an auth token.
+      description: |-
+        Exchange a magic-link token for an auth token — or, when the account
+        needs a second factor, a short-lived ticket for the MFA challenge/setup
+        step instead. A real auth token is never issued before that second
+        factor is satisfied.
       tags:
       - accounts
       requestBody:
@@ -305,11 +465,8 @@ paths:
     delete:
       operationId: contacts_contacts_addresses_destroy
       description: |-
-        Remove an address. Editing a member contact is admin-only (same
-        as ``add_address``); removing a *verified* address is admin-only
-        regardless of contact, since verification is what makes an address
-        approval-capable — a member must not be able to unilaterally strip
-        that off their own directory entry.
+        Remove an address. Admin-only regardless of contact type or
+        verification state — a member can neither see nor mutate addresses.
       parameters:
       - in: path
         name: address_id
@@ -744,6 +901,45 @@ paths:
               schema:
                 $ref: '#/components/schemas/ManifestResponse'
           description: ''
+  /api/integrations/messaging/history/:
+    post:
+      operationId: integrations_messaging_history
+      description: |-
+        What was already said in this conversation, oldest last.
+
+        The agent is dispatched with one message and no memory of the last
+        one, so without this every turn answers out of context — "send it to
+        the same person" has no referent. Neither provider will give the
+        history back (see ``integrations.transcript``), so this reads current's
+        own ledger: the messages people sent the bot, and the replies the bot
+        sent them.
+
+        Unlike the send paths this needs no anti-spoofing guard. It only ever
+        reads the calling workspace's own observations, so a forged
+        conversation id reads nothing rather than reaching another tenant.
+      tags:
+      - integrations
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/MessagingHistoryRequestRequest'
+          application/x-www-form-urlencoded:
+            schema:
+              $ref: '#/components/schemas/MessagingHistoryRequestRequest'
+          multipart/form-data:
+            schema:
+              $ref: '#/components/schemas/MessagingHistoryRequestRequest'
+        required: true
+      security:
+      - MessagingJobTokenAuth: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/MessagingHistoryResponse'
+          description: ''
   /api/integrations/messaging/react/:
     post:
       operationId: integrations_messaging_react
@@ -1224,8 +1420,10 @@ paths:
   /api/projects/projects/:
     get:
       operationId: projects_projects_list
-      description: Projects across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Projects across the caller's workspaces. Any member can create a
+        project (including its initial field values); editing the fields of an
+        existing project is admin-only.
       parameters:
       - in: query
         name: workspace
@@ -1248,8 +1446,10 @@ paths:
           description: ''
     post:
       operationId: projects_projects_create
-      description: Projects across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Projects across the caller's workspaces. Any member can create a
+        project (including its initial field values); editing the fields of an
+        existing project is admin-only.
       tags:
       - projects
       requestBody:
@@ -1277,8 +1477,10 @@ paths:
   /api/projects/projects/{id}/:
     get:
       operationId: projects_projects_retrieve
-      description: Projects across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Projects across the caller's workspaces. Any member can create a
+        project (including its initial field values); editing the fields of an
+        existing project is admin-only.
       parameters:
       - in: path
         name: id
@@ -1301,8 +1503,10 @@ paths:
           description: ''
     put:
       operationId: projects_projects_update
-      description: Projects across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Projects across the caller's workspaces. Any member can create a
+        project (including its initial field values); editing the fields of an
+        existing project is admin-only.
       parameters:
       - in: path
         name: id
@@ -1337,8 +1541,10 @@ paths:
           description: ''
     patch:
       operationId: projects_projects_partial_update
-      description: Projects across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Projects across the caller's workspaces. Any member can create a
+        project (including its initial field values); editing the fields of an
+        existing project is admin-only.
       parameters:
       - in: path
         name: id
@@ -1372,8 +1578,10 @@ paths:
           description: ''
     delete:
       operationId: projects_projects_destroy
-      description: Projects across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Projects across the caller's workspaces. Any member can create a
+        project (including its initial field values); editing the fields of an
+        existing project is admin-only.
       parameters:
       - in: path
         name: id
@@ -1460,6 +1668,41 @@ paths:
               schema:
                 $ref: '#/components/schemas/Project'
           description: ''
+  /api/projects/projects/search/:
+    get:
+      operationId: projects_projects_search_retrieve
+      description: |-
+        Find projects by their current field values (see state.search_projects).
+
+        Compact on purpose: the full project list serializes every field
+        value of every project — megabytes at production scale — which no
+        chat agent or picker can consume. A hit carries just enough to
+        choose a project and fetch its detail.
+      parameters:
+      - in: query
+        name: q
+        schema:
+          type: string
+        description: Case-insensitive regular expression; a plain word searches as
+          a keyword
+        required: true
+      - in: query
+        name: workspace
+        schema:
+          type: string
+        description: Filter by workspace UUID
+      tags:
+      - projects
+      security:
+      - MessagingJobTokenAuth: []
+      - tokenAuth: []
+      responses:
+        '200':
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ProjectSearchResponse'
+          description: ''
   /api/tasks/tasks/:
     get:
       operationId: tasks_tasks_list
@@ -2237,8 +2480,10 @@ paths:
   /api/workflows/workflows/:
     get:
       operationId: workflows_workflows_list
-      description: Workflows across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Workflows (actions) across the caller's workspaces. Any member can
+        read; only admins can create, edit (including enable/disable), or
+        delete a binding.
       parameters:
       - in: query
         name: workspace
@@ -2261,8 +2506,10 @@ paths:
           description: ''
     post:
       operationId: workflows_workflows_create
-      description: Workflows across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Workflows (actions) across the caller's workspaces. Any member can
+        read; only admins can create, edit (including enable/disable), or
+        delete a binding.
       tags:
       - workflows
       requestBody:
@@ -2290,8 +2537,10 @@ paths:
   /api/workflows/workflows/{id}/:
     get:
       operationId: workflows_workflows_retrieve
-      description: Workflows across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Workflows (actions) across the caller's workspaces. Any member can
+        read; only admins can create, edit (including enable/disable), or
+        delete a binding.
       parameters:
       - in: path
         name: id
@@ -2314,8 +2563,10 @@ paths:
           description: ''
     put:
       operationId: workflows_workflows_update
-      description: Workflows across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Workflows (actions) across the caller's workspaces. Any member can
+        read; only admins can create, edit (including enable/disable), or
+        delete a binding.
       parameters:
       - in: path
         name: id
@@ -2350,8 +2601,10 @@ paths:
           description: ''
     patch:
       operationId: workflows_workflows_partial_update
-      description: Workflows across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Workflows (actions) across the caller's workspaces. Any member can
+        read; only admins can create, edit (including enable/disable), or
+        delete a binding.
       parameters:
       - in: path
         name: id
@@ -2385,8 +2638,10 @@ paths:
           description: ''
     delete:
       operationId: workflows_workflows_destroy
-      description: Workflows across the caller's workspaces. Any member can create
-        and edit.
+      description: |-
+        Workflows (actions) across the caller's workspaces. Any member can
+        read; only admins can create, edit (including enable/disable), or
+        delete a binding.
       parameters:
       - in: path
         name: id
@@ -3029,6 +3284,7 @@ components:
           type: array
           items:
             $ref: '#/components/schemas/ContactAddress'
+          nullable: true
           readOnly: true
         created_at:
           type: string
@@ -3092,18 +3348,6 @@ components:
       required:
       - kind
       - value
-    ContactAddressRequest:
-      type: object
-      properties:
-        kind:
-          $ref: '#/components/schemas/KindEnum'
-        value:
-          type: string
-          minLength: 1
-          maxLength: 255
-      required:
-      - kind
-      - value
     ContactListResponse:
       type: object
       description: |-
@@ -3172,6 +3416,13 @@ components:
           format: uuid
       required:
       - workspace
+    DetailResponse:
+      type: object
+      properties:
+        detail:
+          type: string
+      required:
+      - detail
     EmojiEnum:
       enum:
       - eyes
@@ -3514,6 +3765,67 @@ components:
           type: string
       required:
       - detail
+    MFAAdminResetRequestRequest:
+      type: object
+      properties:
+        email:
+          type: string
+          format: email
+          minLength: 1
+      required:
+      - email
+    MFAConfirmRequestRequest:
+      type: object
+      properties:
+        ticket:
+          type: string
+        code:
+          type: string
+          minLength: 1
+          maxLength: 8
+      required:
+      - code
+    MFADisableRequestRequest:
+      type: object
+      properties:
+        code:
+          type: string
+          minLength: 1
+          maxLength: 8
+      required:
+      - code
+    MFASetupResponse:
+      type: object
+      properties:
+        secret:
+          type: string
+        otpauth_url:
+          type: string
+      required:
+      - otpauth_url
+      - secret
+    MFATicketRequestRequest:
+      type: object
+      description: |-
+        A setup/confirm call during login carries the pending ticket instead
+        of an auth token, since issuing a real token before the second factor is
+        verified would defeat the point.
+      properties:
+        ticket:
+          type: string
+    MFAVerifyRequestRequest:
+      type: object
+      properties:
+        ticket:
+          type: string
+          minLength: 1
+        code:
+          type: string
+          minLength: 1
+          maxLength: 8
+      required:
+      - code
+      - ticket
     ManifestEntry:
       type: object
       properties:
@@ -3561,6 +3873,12 @@ components:
         is_superadmin:
           type: boolean
           readOnly: true
+        mfa_enabled:
+          type: boolean
+          readOnly: true
+        mfa_required:
+          type: boolean
+          readOnly: true
       required:
       - email
       - first_name
@@ -3568,6 +3886,8 @@ components:
       - is_superadmin
       - last_name
       - memberships
+      - mfa_enabled
+      - mfa_required
     MeMembership:
       type: object
       description: Inline workspace + role for the /auth/me/ payload.
@@ -3583,6 +3903,24 @@ components:
       - role
       - workspace_id
       - workspace_name
+    MessagingHistoryRequestRequest:
+      type: object
+      properties:
+        workspace:
+          type: string
+          format: uuid
+        reply_ref: {}
+        limit:
+          type: integer
+      required:
+      - reply_ref
+      - workspace
+    MessagingHistoryResponse:
+      type: object
+      properties:
+        messages: {}
+      required:
+      - messages
     MessagingOk:
       type: object
       properties:
@@ -3961,6 +4299,8 @@ components:
           type: string
           minLength: 1
           maxLength: 64
+        require_mfa_for_members:
+          type: boolean
     Project:
       type: object
       properties:
@@ -4137,6 +4477,56 @@ components:
         fields: {}
       required:
       - workspace
+    ProjectSearchMatch:
+      type: object
+      description: One field whose current value matched the search pattern.
+      properties:
+        field:
+          type: string
+        value:
+          type: string
+      required:
+      - field
+      - value
+    ProjectSearchResponse:
+      type: object
+      description: |-
+        ``count`` is the total number of matching projects; ``results`` is
+        capped (see ``state.SEARCH_RESULT_LIMIT``), name-field hits first.
+      properties:
+        count:
+          type: integer
+        results:
+          type: array
+          items:
+            $ref: '#/components/schemas/ProjectSearchResult'
+      required:
+      - count
+      - results
+    ProjectSearchResult:
+      type: object
+      description: 'One project hit: identity plus the fields that matched.'
+      properties:
+        id:
+          type: string
+          format: uuid
+        workspace:
+          type: string
+          format: uuid
+        name:
+          type: string
+        status:
+          type: string
+        matched:
+          type: array
+          items:
+            $ref: '#/components/schemas/ProjectSearchMatch'
+      required:
+      - id
+      - matched
+      - name
+      - status
+      - workspace
     PromoteRequestRequest:
       type: object
       properties:
@@ -4752,14 +5142,25 @@ components:
       - token
     VerifyMagicLinkResponse:
       type: object
+      description: |-
+        Either a completed sign-in (``token`` + ``user``) or an MFA challenge
+        (``mfa_required`` true, with a ``ticket`` to carry into the next call).
       properties:
+        mfa_required:
+          type: boolean
+        mfa_enrolled:
+          type: boolean
+        ticket:
+          type: string
         token:
           type: string
+          nullable: true
         user:
-          $ref: '#/components/schemas/User'
+          allOf:
+          - $ref: '#/components/schemas/User'
+          nullable: true
       required:
-      - token
-      - user
+      - mfa_required
     Workflow:
       type: object
       properties:
@@ -5117,6 +5518,8 @@ components:
         timezone:
           type: string
           maxLength: 64
+        require_mfa_for_members:
+          type: boolean
       required:
       - created_at
       - id
@@ -5246,6 +5649,8 @@ components:
           type: string
           minLength: 1
           maxLength: 64
+        require_mfa_for_members:
+          type: boolean
       required:
       - name
   securitySchemes:

{current_cli-0.1.27 → current_cli-0.1.29}/llms.txt

@@ -52,9 +52,68 @@ Current user with workspace memberships.
 
 GET /api/accounts/auth/me/
 
+### current accounts auth mfa admin-reset create
+
+Superadmin-only: clear a user's TOTP enrollment so they can enroll a
+new device, for when they've lost their authenticator app. There are no
+recovery codes, so this is the only way back in for such a user.
+
+POST /api/accounts/auth/mfa/admin-reset/
+
+Options:
+- `--data` (required) - Request body as JSON: inline, @file.json, or - for stdin.
+
+### current accounts auth mfa confirm create
+
+Confirm enrollment with a code from the authenticator app. Mid-login,
+this also finishes sign-in (a confirmed device is proof of the second
+factor); from Account Settings, it just turns MFA on.
+
+POST /api/accounts/auth/mfa/confirm/
+
+Options:
+- `--data` (required) - Request body as JSON: inline, @file.json, or - for stdin.
+
+### current accounts auth mfa disable create
+
+Turn off TOTP for the current user. Refused when MFA is still
+required for this account (platform superadmin, a workspace admin
+anywhere, or a workspace that requires it of members) — the setting
+would just be silently re-enforced at the next sign-in otherwise.
+
+POST /api/accounts/auth/mfa/disable/
+
+Options:
+- `--data` (required) - Request body as JSON: inline, @file.json, or - for stdin.
+
+### current accounts auth mfa setup create
+
+Start (or restart) TOTP enrollment: mints a new secret and returns
+the otpauth:// URI for the authenticator app's QR scanner. Callable
+mid-login (with the pending ticket) or from Account Settings (while
+authenticated) — the secret isn't active until ``confirm`` succeeds.
+
+POST /api/accounts/auth/mfa/setup/
+
+Options:
+- `--data` (required) - Request body as JSON: inline, @file.json, or - for stdin.
+
+### current accounts auth mfa verify create
+
+Complete sign-in with a code from an already-enrolled authenticator
+app, exchanging the pending-login ticket for a real auth token.
+
+POST /api/accounts/auth/mfa/verify/
+
+Options:
+- `--data` (required) - Request body as JSON: inline, @file.json, or - for stdin.
+
 ### current accounts auth verify create
 
-Exchange a magic-link token for an auth token.
+Exchange a magic-link token for an auth token — or, when the account
+needs a second factor, a short-lived ticket for the MFA challenge/setup
+step instead. A real auth token is never issued before that second
+factor is satisfied.
 
 POST /api/accounts/auth/verify/
 
@@ -86,11 +145,8 @@ Options:
 
 ### current contacts addresses destroy <id> <address_id>
 
-Remove an address. Editing a member contact is admin-only (same
-as ``add_address``); removing a *verified* address is admin-only
-regardless of contact, since verification is what makes an address
-approval-capable — a member must not be able to unilaterally strip
-that off their own directory entry.
+Remove an address. Admin-only regardless of contact type or
+verification state — a member can neither see nor mutate addresses.
 
 DELETE /api/contacts/contacts/{id}/addresses/{address_id}/
 
@@ -284,6 +340,26 @@ messaging-job endpoint uses.
 
 POST /api/integrations/messaging/files/manifest/
 
+### current integrations messaging history post
+
+What was already said in this conversation, oldest last.
+
+The agent is dispatched with one message and no memory of the last
+one, so without this every turn answers out of context — "send it to
+the same person" has no referent. Neither provider will give the
+history back (see ``integrations.transcript``), so this reads current's
+own ledger: the messages people sent the bot, and the replies the bot
+sent them.
+
+Unlike the send paths this needs no anti-spoofing guard. It only ever
+reads the calling workspace's own observations, so a forged
+conversation id reads nothing rather than reaching another tenant.
+
+POST /api/integrations/messaging/history/
+
+Options:
+- `--data` (required) - Request body as JSON: inline, @file.json, or - for stdin.
+
 ### current integrations messaging react post
 
 Add an emoji reaction to the message a reply_ref points at.
@@ -407,7 +483,9 @@ GET /api/observations/observations/{id}/
 
 ### current projects create
 
-Projects across the caller's workspaces. Any member can create and edit.
+Projects across the caller's workspaces. Any member can create a
+project (including its initial field values); editing the fields of an
+existing project is admin-only.
 
 POST /api/projects/projects/
 
@@ -416,7 +494,9 @@ Options:
 
 ### current projects destroy <id>
 
-Projects across the caller's workspaces. Any member can create and edit.
+Projects across the caller's workspaces. Any member can create a
+project (including its initial field values); editing the fields of an
+existing project is admin-only.
 
 DELETE /api/projects/projects/{id}/
 
@@ -486,7 +566,9 @@ Options:
 
 ### current projects list
 
-Projects across the caller's workspaces. Any member can create and edit.
+Projects across the caller's workspaces. Any member can create a
+project (including its initial field values); editing the fields of an
+existing project is admin-only.
 
 GET /api/projects/projects/
 
@@ -495,7 +577,9 @@ Options:
 
 ### current projects partial-update <id>
 
-Projects across the caller's workspaces. Any member can create and edit.
+Projects across the caller's workspaces. Any member can create a
+project (including its initial field values); editing the fields of an
+existing project is admin-only.
 
 PATCH /api/projects/projects/{id}/
 
@@ -504,7 +588,9 @@ Options:
 
 ### current projects retrieve <id>
 
-Projects across the caller's workspaces. Any member can create and edit.
+Projects across the caller's workspaces. Any member can create a
+project (including its initial field values); editing the fields of an
+existing project is admin-only.
 
 GET /api/projects/projects/{id}/
 
@@ -517,9 +603,26 @@ POST /api/projects/projects/{id}/revert/
 Options:
 - `--data` (required) - Request body as JSON: inline, @file.json, or - for stdin.
 
+### current projects search retrieve
+
+Find projects by their current field values (see state.search_projects).
+
+Compact on purpose: the full project list serializes every field
+value of every project — megabytes at production scale — which no
+chat agent or picker can consume. A hit carries just enough to
+choose a project and fetch its detail.
+
+GET /api/projects/projects/search/
+
+Options:
+- `--q` - Case-insensitive regular expression; a plain word searches as a keyword
+- `--workspace` - Filter by workspace UUID
+
 ### current projects update <id>
 
-Projects across the caller's workspaces. Any member can create and edit.
+Projects across the caller's workspaces. Any member can create a
+project (including its initial field values); editing the fields of an
+existing project is admin-only.
 
 PUT /api/projects/projects/{id}/
 
@@ -626,7 +729,9 @@ Show the current user and workspace memberships.
 
 ### current workflows create
 
-Workflows across the caller's workspaces. Any member can create and edit.
+Workflows (actions) across the caller's workspaces. Any member can
+read; only admins can create, edit (including enable/disable), or
+delete a binding.
 
 POST /api/workflows/workflows/
 
@@ -667,13 +772,17 @@ GET /api/workflows/definitions/{id}/
 
 ### current workflows destroy <id>
 
-Workflows across the caller's workspaces. Any member can create and edit.
+Workflows (actions) across the caller's workspaces. Any member can
+read; only admins can create, edit (including enable/disable), or
+delete a binding.
 
 DELETE /api/workflows/workflows/{id}/
 
 ### current workflows list
 
-Workflows across the caller's workspaces. Any member can create and edit.
+Workflows (actions) across the caller's workspaces. Any member can
+read; only admins can create, edit (including enable/disable), or
+delete a binding.
 
 GET /api/workflows/workflows/
 
@@ -682,7 +791,9 @@ Options:
 
 ### current workflows partial-update <id>
 
-Workflows across the caller's workspaces. Any member can create and edit.
+Workflows (actions) across the caller's workspaces. Any member can
+read; only admins can create, edit (including enable/disable), or
+delete a binding.
 
 PATCH /api/workflows/workflows/{id}/
 
@@ -691,7 +802,9 @@ Options:
 
 ### current workflows retrieve <id>
 
-Workflows across the caller's workspaces. Any member can create and edit.
+Workflows (actions) across the caller's workspaces. Any member can
+read; only admins can create, edit (including enable/disable), or
+delete a binding.
 
 GET /api/workflows/workflows/{id}/
 
@@ -792,7 +905,9 @@ POST /api/workflows/runs/{id}/unarchive/
 
 ### current workflows update <id>
 
-Workflows across the caller's workspaces. Any member can create and edit.
+Workflows (actions) across the caller's workspaces. Any member can
+read; only admins can create, edit (including enable/disable), or
+delete a binding.
 
 PUT /api/workflows/workflows/{id}/
 

{current_cli-0.1.27 → current_cli-0.1.29}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "current-cli"
-version = "0.1.27"
+version = "0.1.29"
 description = "Command line interface for the Current API, generated from its OpenAPI schema at runtime"
 readme = "README.md"
 requires-python = ">=3.10"