@bussolabs/closeyourit-cli 0.0.5 → 0.0.7

package/dist/commands/tickets/attachment-download.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../base';
+export default class TicketsAttachmentDownload extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        attachment: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        out: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        filename: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/tickets/attachment-download.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+class TicketsAttachmentDownload extends base_1.BaseCommand {
+    static args = {
+        id: core_1.Args.string({ description: 'Ticket id', required: true }),
+        attachment: core_1.Args.string({ description: 'Attachment id', required: true }),
+    };
+    static description = 'Download a ticket attachment to disk';
+    static examples = [
+        '<%= config.bin %> tickets attachment-download <ticket-id> <attachment-id> --project acme-api',
+        '<%= config.bin %> tickets attachment-download <ticket-id> <attachment-id> -p acme-api --out ./downloads',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        out: core_1.Flags.string({ default: '.', description: 'Output directory' }),
+        filename: core_1.Flags.string({ description: 'Override the output filename' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(TicketsAttachmentDownload);
+        const projectId = await this.resolveProjectId(flags.project);
+        const { data, filename } = await this.api.download(`/cli/v1/projects/${encodeURIComponent(projectId)}/tickets/${encodeURIComponent(args.id)}/attachments/${encodeURIComponent(args.attachment)}/download`);
+        const name = flags.filename ?? filename ?? args.attachment;
+        const dest = (0, node_path_1.join)(flags.out, name);
+        await (0, promises_1.writeFile)(dest, data);
+        if (!this.jsonEnabled()) {
+            this.log(`Saved ${data.byteLength} bytes → ${dest}`);
+        }
+        return { bytes: data.byteLength, filename: name, path: dest };
+    }
+}
+exports.default = TicketsAttachmentDownload;

package/dist/commands/tickets/attachments.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../base';
+export default class TicketsAttachments extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/tickets/attachments.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+class TicketsAttachments extends base_1.BaseCommand {
+    static args = {
+        id: core_1.Args.string({ description: 'Ticket id', required: true }),
+    };
+    static description = "List a ticket's attachments";
+    static examples = [
+        '<%= config.bin %> tickets attachments <ticket-id> --project acme-api',
+        '<%= config.bin %> tickets attachments <ticket-id> -p acme-api --json',
+    ];
+    static flags = { ...base_1.projectFlag };
+    async run() {
+        const { args, flags } = await this.parse(TicketsAttachments);
+        const projectId = await this.resolveProjectId(flags.project);
+        const res = await this.api.get(`/cli/v1/projects/${encodeURIComponent(projectId)}/tickets/${encodeURIComponent(args.id)}/attachments?per=100`);
+        const attachments = res.data ?? [];
+        if (!this.jsonEnabled()) {
+            this.log((0, output_1.renderTable)(['ID', 'FILENAME', 'CONTENT_TYPE', 'BYTE_SIZE', 'CREATED_AT'], attachments.map((attachment) => [
+                String(attachment.id ?? ''),
+                String(attachment.filename ?? ''),
+                String(attachment.content_type ?? ''),
+                String(attachment.byte_size ?? ''),
+                String(attachment.created_at ?? ''),
+            ])));
+        }
+        return res;
+    }
+}
+exports.default = TicketsAttachments;

package/dist/commands/tickets/comments.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../base';
+export default class TicketsComments extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/tickets/comments.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+class TicketsComments extends base_1.BaseCommand {
+    static args = {
+        id: core_1.Args.string({ description: 'Ticket id', required: true }),
+    };
+    static description = 'List all comments of a ticket (oldest first)';
+    static examples = [
+        '<%= config.bin %> tickets comments <ticket-id> --project acme-api',
+        '<%= config.bin %> tickets comments <ticket-id> -p acme-api --json',
+    ];
+    static flags = { ...base_1.projectFlag };
+    async run() {
+        const { args, flags } = await this.parse(TicketsComments);
+        const projectId = await this.resolveProjectId(flags.project);
+        const base = `/cli/v1/projects/${encodeURIComponent(projectId)}/tickets/${encodeURIComponent(args.id)}/comments`;
+        // Read every page so `comments` returns the full discussion, not just the first page.
+        const all = [];
+        let page = 1;
+        let totalPages = 1;
+        do {
+            // eslint-disable-next-line no-await-in-loop
+            const res = await this.api.get(`${base}?page=${page}&per=100`);
+            all.push(...(res.data ?? []));
+            totalPages = Number(res.meta?.total_pages ?? 1);
+            page += 1;
+        } while (page <= totalPages);
+        if (!this.jsonEnabled()) {
+            if (all.length === 0) {
+                this.log('(nessun commento)');
+            }
+            else {
+                for (const comment of all) {
+                    this.log(`\n── ${String(comment.author ?? '?')} · ${String(comment.created_at ?? '')} · ${String(comment.id ?? '')}`);
+                    this.log(String(comment.body ?? ''));
+                }
+            }
+        }
+        return { data: all };
+    }
+}
+exports.default = TicketsComments;

package/dist/lib/api.d.ts

@@ -41,5 +41,16 @@ export declare class CliApi {
     post<T = unknown>(path: string, body?: unknown, opts?: RequestOptions): Promise<Envelope<T>>;
     put<T = unknown>(path: string, body?: unknown, opts?: RequestOptions): Promise<Envelope<T>>;
     delete<T = unknown>(path: string, opts?: RequestOptions): Promise<Envelope<T>>;
+    /**
+     * Download a binary payload (e.g. a ticket attachment). The endpoint redirects to a signed
+     * ActiveStorage blob URL; fetch follows the redirect (and drops the Authorization header on the
+     * cross-origin hop to storage, as intended). Returns the bytes plus the filename parsed from
+     * Content-Disposition when present. Error responses are JSON envelopes → mapped like every call.
+     */
+    download(path: string): Promise<{
+        contentType?: string;
+        data: Uint8Array;
+        filename?: string;
+    }>;
 }
 export {};

package/dist/lib/api.js

@@ -105,5 +105,32 @@ class CliApi {
     delete(path, opts) {
         return this.request('DELETE', path, opts);
     }
+    /**
+     * Download a binary payload (e.g. a ticket attachment). The endpoint redirects to a signed
+     * ActiveStorage blob URL; fetch follows the redirect (and drops the Authorization header on the
+     * cross-origin hop to storage, as intended). Returns the bytes plus the filename parsed from
+     * Content-Disposition when present. Error responses are JSON envelopes → mapped like every call.
+     */
+    async download(path) {
+        const headers = this.authHeaders(true);
+        headers.Accept = '*/*';
+        const url = this.resolveUrl(path);
+        let res;
+        try {
+            res = await fetch(url, { method: 'GET', headers, redirect: 'follow' });
+        }
+        catch (err) {
+            throw new ApiRequestError(0, error_codes_1.ErrorCodes.Network.requestFailed, `Request to ${url} failed: ${err.message}`);
+        }
+        if (!res.ok) {
+            await this.handleResponse(res); // always throws: maps the JSON error envelope
+            throw new ApiRequestError(res.status, `C${res.status}-API-000`, `Download failed (${res.status})`);
+        }
+        const data = new Uint8Array(await res.arrayBuffer());
+        const disposition = res.headers.get('content-disposition') ?? '';
+        const match = /filename\*?=(?:UTF-8''|")?([^";]+)/i.exec(disposition);
+        const filename = match ? decodeURIComponent(match[1].replace(/"$/, '')) : undefined;
+        return { contentType: res.headers.get('content-type') ?? undefined, data, filename };
+    }
 }
 exports.CliApi = CliApi;

package/dist/lib/output.js

@@ -2,20 +2,36 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderTable = renderTable;
 exports.renderRecord = renderRecord;
+/**
+ * Neutralize terminal control sequences (CWE-150) in server-supplied strings.
+ * Log/error/ticket text is attacker-influenceable; printing raw ESC (0x1B) & co.
+ * to a TTY allows cursor/color/title injection. Replace every C0/C1 control char
+ * (0x00–0x1F, 0x7F–0x9F) with a space — ANSI is defused, width is preserved.
+ */
+function sanitize(value) {
+    let out = '';
+    for (const ch of String(value ?? '')) {
+        const code = ch.codePointAt(0) ?? 0;
+        out += code <= 0x1f || (code >= 0x7f && code <= 0x9f) ? ' ' : ch;
+    }
+    return out;
+}
 /** Minimal dependency-free table renderer for human output. */
 function renderTable(headers, rows) {
-    if (rows.length === 0) {
-        return `${headers.join('  ')}\n(no results)`;
+    const safeHeaders = headers.map(sanitize);
+    const safeRows = rows.map((row) => row.map(sanitize));
+    if (safeRows.length === 0) {
+        return `${safeHeaders.join('  ')}\n(no results)`;
     }
-    const widths = headers.map((header, col) => Math.max(header.length, ...rows.map((row) => String(row[col] ?? '').length)));
-    const line = (cols) => cols.map((cell, col) => String(cell ?? '').padEnd(widths[col])).join('  ').trimEnd();
+    const widths = safeHeaders.map((header, col) => Math.max(header.length, ...safeRows.map((row) => (row[col] ?? '').length)));
+    const line = (cols) => cols.map((cell, col) => (cell ?? '').padEnd(widths[col])).join('  ').trimEnd();
     const separator = widths.map((width) => '-'.repeat(width));
-    return [line(headers), line(separator), ...rows.map(line)].join('\n');
+    return [line(safeHeaders), line(separator), ...safeRows.map(line)].join('\n');
 }
 /** Pretty-print the scalar fields of a record as `key: value` lines. */
 function renderRecord(obj) {
     const lines = Object.entries(obj)
         .filter(([, value]) => value === null || ['string', 'number', 'boolean'].includes(typeof value))
-        .map(([key, value]) => `${key}: ${value === null ? '-' : value}`);
+        .map(([key, value]) => `${sanitize(key)}: ${value === null ? '-' : sanitize(value)}`);
     return lines.length > 0 ? lines.join('\n') : JSON.stringify(obj, null, 2);
 }

package/oclif.manifest.json

@@ -2434,98 +2434,6 @@
         "update.js"
       ]
     },
-    "org:show": {
-      "aliases": [],
-      "args": {},
-      "description": "Show your organization settings",
-      "examples": [
-        "<%= config.bin %> org show",
-        "<%= config.bin %> org show --json"
-      ],
-      "flags": {
-        "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "org:show",
-      "pluginAlias": "@bussolabs/closeyourit-cli",
-      "pluginName": "@bussolabs/closeyourit-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "org",
-        "show.js"
-      ]
-    },
-    "org:update": {
-      "aliases": [],
-      "args": {},
-      "description": "Update your organization settings (requires organization.manage)",
-      "examples": [
-        "<%= config.bin %> org update --name \"Acme Inc\"",
-        "<%= config.bin %> org update --slug acme-inc",
-        "<%= config.bin %> org update --projects-view table"
-      ],
-      "flags": {
-        "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "name": {
-          "description": "New organization name",
-          "name": "name",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "slug": {
-          "description": "New organization slug (lowercase, a-z 0-9 and hyphens)",
-          "name": "slug",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "projects-view": {
-          "description": "Default projects list view",
-          "name": "projects-view",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "cards",
-            "table"
-          ],
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "org:update",
-      "pluginAlias": "@bussolabs/closeyourit-cli",
-      "pluginName": "@bussolabs/closeyourit-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "org",
-        "update.js"
-      ]
-    },
     "platforms:create": {
       "aliases": [],
       "args": {
@@ -3444,6 +3352,98 @@
         "update.js"
       ]
     },
+    "org:show": {
+      "aliases": [],
+      "args": {},
+      "description": "Show your organization settings",
+      "examples": [
+        "<%= config.bin %> org show",
+        "<%= config.bin %> org show --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "org:show",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "org",
+        "show.js"
+      ]
+    },
+    "org:update": {
+      "aliases": [],
+      "args": {},
+      "description": "Update your organization settings (requires organization.manage)",
+      "examples": [
+        "<%= config.bin %> org update --name \"Acme Inc\"",
+        "<%= config.bin %> org update --slug acme-inc",
+        "<%= config.bin %> org update --projects-view table"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "name": {
+          "description": "New organization name",
+          "name": "name",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "slug": {
+          "description": "New organization slug (lowercase, a-z 0-9 and hyphens)",
+          "name": "slug",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "projects-view": {
+          "description": "Default projects list view",
+          "name": "projects-view",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "cards",
+            "table"
+          ],
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "org:update",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "org",
+        "update.js"
+      ]
+    },
     "roles:create": {
       "aliases": [],
       "args": {
@@ -3673,19 +3673,12 @@
         "update.js"
       ]
     },
-    "tickets:assign": {
+    "tokens:create": {
       "aliases": [],
-      "args": {
-        "id": {
-          "description": "Ticket id",
-          "name": "id",
-          "required": true
-        }
-      },
-      "description": "Assign a ticket to an account, or unassign it (--unassign)",
+      "args": {},
+      "description": "Create an ingest token (the secret is shown only once)",
       "examples": [
-        "<%= config.bin %> tickets assign <ticket-id> --project acme-api --assignee-id <account-id>",
-        "<%= config.bin %> tickets assign <ticket-id> --project acme-api --unassign"
+        "<%= config.bin %> tokens create --project acme-api --name \"CI prod\" --environment-id <env-id>"
       ],
       "flags": {
         "json": {
@@ -3704,29 +3697,26 @@
           "multiple": false,
           "type": "option"
         },
-        "assignee-id": {
-          "description": "Account id to assign",
-          "exclusive": [
-            "unassign"
-          ],
-          "name": "assignee-id",
+        "name": {
+          "description": "Human-readable token name",
+          "name": "name",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "unassign": {
-          "description": "Remove the current assignee (DELETE)",
-          "exclusive": [
-            "assignee-id"
-          ],
-          "name": "unassign",
-          "allowNo": false,
-          "type": "boolean"
+        "environment-id": {
+          "description": "Environment id the token is scoped to",
+          "name": "environment-id",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "tickets:assign",
+      "id": "tokens:create",
       "pluginAlias": "@bussolabs/closeyourit-cli",
       "pluginName": "@bussolabs/closeyourit-cli",
       "pluginType": "core",
@@ -3736,23 +3726,17 @@
       "relativePath": [
         "dist",
         "commands",
-        "tickets",
-        "assign.js"
+        "tokens",
+        "create.js"
       ]
     },
-    "tickets:attach": {
+    "tokens:list": {
       "aliases": [],
-      "args": {
-        "id": {
-          "description": "Ticket id",
-          "name": "id",
-          "required": true
-        }
-      },
-      "description": "Attach one or more local files to a ticket",
+      "args": {},
+      "description": "List ingest tokens for a project",
       "examples": [
-        "<%= config.bin %> tickets attach <ticket-id> --project acme-api --file ./screenshot.png",
-        "<%= config.bin %> tickets attach <ticket-id> -p acme-api --file ./log.txt --file ./trace.json"
+        "<%= config.bin %> tokens list --project acme-api",
+        "<%= config.bin %> tokens list -p acme-api --json"
       ],
       "flags": {
         "json": {
@@ -3770,19 +3754,344 @@
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "file": {
-          "description": "Path to a local file to upload (repeatable)",
-          "name": "file",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": true,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "tickets:attach",
+      "id": "tokens:list",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tokens",
+        "list.js"
+      ]
+    },
+    "tokens:revoke": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Token id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Revoke an ingest token",
+      "examples": [
+        "<%= config.bin %> tokens revoke <token-id> --project acme-api"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "project": {
+          "char": "p",
+          "description": "Project id (UUID) or key",
+          "name": "project",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tokens:revoke",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tokens",
+        "revoke.js"
+      ]
+    },
+    "tokens:rotate": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Token id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Rotate an ingest token (the new secret is shown only once)",
+      "examples": [
+        "<%= config.bin %> tokens rotate <token-id> --project acme-api"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "project": {
+          "char": "p",
+          "description": "Project id (UUID) or key",
+          "name": "project",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tokens:rotate",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tokens",
+        "rotate.js"
+      ]
+    },
+    "tickets:assign": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Ticket id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Assign a ticket to an account, or unassign it (--unassign)",
+      "examples": [
+        "<%= config.bin %> tickets assign <ticket-id> --project acme-api --assignee-id <account-id>",
+        "<%= config.bin %> tickets assign <ticket-id> --project acme-api --unassign"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "project": {
+          "char": "p",
+          "description": "Project id (UUID) or key",
+          "name": "project",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "assignee-id": {
+          "description": "Account id to assign",
+          "exclusive": [
+            "unassign"
+          ],
+          "name": "assignee-id",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "unassign": {
+          "description": "Remove the current assignee (DELETE)",
+          "exclusive": [
+            "assignee-id"
+          ],
+          "name": "unassign",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tickets:assign",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tickets",
+        "assign.js"
+      ]
+    },
+    "tickets:attach": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Ticket id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Attach one or more local files to a ticket",
+      "examples": [
+        "<%= config.bin %> tickets attach <ticket-id> --project acme-api --file ./screenshot.png",
+        "<%= config.bin %> tickets attach <ticket-id> -p acme-api --file ./log.txt --file ./trace.json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "project": {
+          "char": "p",
+          "description": "Project id (UUID) or key",
+          "name": "project",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "file": {
+          "description": "Path to a local file to upload (repeatable)",
+          "name": "file",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tickets:attach",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tickets",
+        "attach.js"
+      ]
+    },
+    "tickets:attachment-download": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Ticket id",
+          "name": "id",
+          "required": true
+        },
+        "attachment": {
+          "description": "Attachment id",
+          "name": "attachment",
+          "required": true
+        }
+      },
+      "description": "Download a ticket attachment to disk",
+      "examples": [
+        "<%= config.bin %> tickets attachment-download <ticket-id> <attachment-id> --project acme-api",
+        "<%= config.bin %> tickets attachment-download <ticket-id> <attachment-id> -p acme-api --out ./downloads"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "project": {
+          "char": "p",
+          "description": "Project id (UUID) or key",
+          "name": "project",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "out": {
+          "description": "Output directory",
+          "name": "out",
+          "default": ".",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "filename": {
+          "description": "Override the output filename",
+          "name": "filename",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tickets:attachment-download",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tickets",
+        "attachment-download.js"
+      ]
+    },
+    "tickets:attachments": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Ticket id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "List a ticket's attachments",
+      "examples": [
+        "<%= config.bin %> tickets attachments <ticket-id> --project acme-api",
+        "<%= config.bin %> tickets attachments <ticket-id> -p acme-api --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "project": {
+          "char": "p",
+          "description": "Project id (UUID) or key",
+          "name": "project",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tickets:attachments",
       "pluginAlias": "@bussolabs/closeyourit-cli",
       "pluginName": "@bussolabs/closeyourit-cli",
       "pluginType": "core",
@@ -3793,7 +4102,7 @@
         "dist",
         "commands",
         "tickets",
-        "attach.js"
+        "attachments.js"
       ]
     },
     "tickets:comment-delete": {
@@ -3912,6 +4221,54 @@
         "comment.js"
       ]
     },
+    "tickets:comments": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "Ticket id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "List all comments of a ticket (oldest first)",
+      "examples": [
+        "<%= config.bin %> tickets comments <ticket-id> --project acme-api",
+        "<%= config.bin %> tickets comments <ticket-id> -p acme-api --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "project": {
+          "char": "p",
+          "description": "Project id (UUID) or key",
+          "name": "project",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "tickets:comments",
+      "pluginAlias": "@bussolabs/closeyourit-cli",
+      "pluginName": "@bussolabs/closeyourit-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": false,
+      "relativePath": [
+        "dist",
+        "commands",
+        "tickets",
+        "comments.js"
+      ]
+    },
     "tickets:create": {
       "aliases": [],
       "args": {},
@@ -4584,200 +4941,7 @@
         "tickets",
         "vote.js"
       ]
-    },
-    "tokens:create": {
-      "aliases": [],
-      "args": {},
-      "description": "Create an ingest token (the secret is shown only once)",
-      "examples": [
-        "<%= config.bin %> tokens create --project acme-api --name \"CI prod\" --environment-id <env-id>"
-      ],
-      "flags": {
-        "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "project": {
-          "char": "p",
-          "description": "Project id (UUID) or key",
-          "name": "project",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "name": {
-          "description": "Human-readable token name",
-          "name": "name",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "environment-id": {
-          "description": "Environment id the token is scoped to",
-          "name": "environment-id",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "tokens:create",
-      "pluginAlias": "@bussolabs/closeyourit-cli",
-      "pluginName": "@bussolabs/closeyourit-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "tokens",
-        "create.js"
-      ]
-    },
-    "tokens:list": {
-      "aliases": [],
-      "args": {},
-      "description": "List ingest tokens for a project",
-      "examples": [
-        "<%= config.bin %> tokens list --project acme-api",
-        "<%= config.bin %> tokens list -p acme-api --json"
-      ],
-      "flags": {
-        "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "project": {
-          "char": "p",
-          "description": "Project id (UUID) or key",
-          "name": "project",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "tokens:list",
-      "pluginAlias": "@bussolabs/closeyourit-cli",
-      "pluginName": "@bussolabs/closeyourit-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "tokens",
-        "list.js"
-      ]
-    },
-    "tokens:revoke": {
-      "aliases": [],
-      "args": {
-        "id": {
-          "description": "Token id",
-          "name": "id",
-          "required": true
-        }
-      },
-      "description": "Revoke an ingest token",
-      "examples": [
-        "<%= config.bin %> tokens revoke <token-id> --project acme-api"
-      ],
-      "flags": {
-        "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "project": {
-          "char": "p",
-          "description": "Project id (UUID) or key",
-          "name": "project",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "tokens:revoke",
-      "pluginAlias": "@bussolabs/closeyourit-cli",
-      "pluginName": "@bussolabs/closeyourit-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "tokens",
-        "revoke.js"
-      ]
-    },
-    "tokens:rotate": {
-      "aliases": [],
-      "args": {
-        "id": {
-          "description": "Token id",
-          "name": "id",
-          "required": true
-        }
-      },
-      "description": "Rotate an ingest token (the new secret is shown only once)",
-      "examples": [
-        "<%= config.bin %> tokens rotate <token-id> --project acme-api"
-      ],
-      "flags": {
-        "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
-          "name": "json",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "project": {
-          "char": "p",
-          "description": "Project id (UUID) or key",
-          "name": "project",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "tokens:rotate",
-      "pluginAlias": "@bussolabs/closeyourit-cli",
-      "pluginName": "@bussolabs/closeyourit-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": false,
-      "relativePath": [
-        "dist",
-        "commands",
-        "tokens",
-        "rotate.js"
-      ]
     }
   },
-  "version": "0.0.5"
+  "version": "0.0.7"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bussolabs/closeyourit-cli",
-  "version": "0.0.5",
+  "version": "0.0.7",
   "description": "CLI for CloseYourIt — manage org, errors, tokens and tickets with your user token",
   "publishConfig": {
     "access": "public"
@@ -29,6 +29,7 @@
   },
   "devDependencies": {
     "@types/node": "^22",
+    "@vitest/coverage-v8": "^2.1.9",
     "oclif": "^4",
     "typescript": "^5",
     "vitest": "^2"
@@ -66,7 +67,7 @@
     "build": "tsc -b",
     "prepack": "pnpm build && oclif manifest",
     "postpack": "rm -f oclif.manifest.json",
-    "test": "vitest run",
+    "test": "vitest run --coverage",
     "lint": "tsc --noEmit"
   }
 }