@bussolabs/closeyourit-cli 0.22.0 → 0.24.1

package/dist/commands/tickets/work-context.js

@@ -0,0 +1,130 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const api_1 = require("../../lib/api");
+const guidance_1 = require("../../lib/guidance");
+const output_1 = require("../../lib/output");
+class TicketsWorkContext extends base_1.BaseCommand {
+    static args = {
+        id: core_1.Args.string({ description: 'Ticket id or code (e.g. DRFL-3)', required: true }),
+    };
+    static description = "Show the work context frozen when an automation host claimed the ticket: the references and procedures actually delivered back then, never the project's current guidance";
+    static examples = [
+        '<%= config.bin %> tickets work-context <ticket-id> --project acme-api',
+        '<%= config.bin %> tickets work-context DRFL-3 -p driverone-flutter',
+        '<%= config.bin %> tickets work-context DRFL-3 -p driverone-flutter --full',
+        '<%= config.bin %> tickets work-context DRFL-3 -p driverone-flutter --json',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        full: core_1.Flags.boolean({
+            description: 'Also print the frozen text of every reference and procedure, not just the table',
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(TicketsWorkContext);
+        const projectId = await this.resolveProjectId(flags.project);
+        const path = `/cli/v1/projects/${encodeURIComponent(projectId)}/tickets/${encodeURIComponent(args.id)}/work_context`;
+        // Una sola lettura, e sull'endpoint dello snapshot: mai un ripiego su /guidance. La guidance del
+        // progetto può essere cambiata dopo la presa in carico, e mostrarla al posto della fotografia
+        // significherebbe rispondere a un audit con la configurazione di oggi (CYCL-47, scenario 1).
+        let res;
+        try {
+            res = await this.api.get(path);
+        }
+        catch (error) {
+            throw describeWorkContextError(error, args.id);
+        }
+        if (!this.jsonEnabled()) {
+            const snapshot = res.data ?? {};
+            this.log(`Work context frozen when ${(0, output_1.sanitize)(args.id)} was claimed from the agent queue — not the project's current guidance (that is \`guidance show\`).`);
+            this.log((0, output_1.renderRecord)(snapshotSummary(snapshot)));
+            this.renderPayload(snapshot.payload, flags.full);
+        }
+        return res;
+    }
+    /** Le due liste congelate: stessa tabella di `guidance show`, così il confronto con l'oggi è immediato. */
+    renderPayload(payload, full) {
+        const rendered = (0, guidance_1.renderGuidance)(payload);
+        if (!rendered) {
+            this.log('\nThis snapshot froze no references and no procedures.');
+            return;
+        }
+        this.log(rendered);
+        if (!full) {
+            this.log('\nPass --full to read the frozen text of each reference and procedure.');
+            return;
+        }
+        // Il testo integrale è il cuore dell'audit (le istruzioni consegnate, non solo le loro chiavi),
+        // ma su una guidance ricca sono migliaia di caratteri: sta dietro --full per non trasformare
+        // ogni lettura rapida in un muro di testo. In --json c'è sempre tutto, comunque.
+        const body = renderFrozenText(payload);
+        if (body)
+            this.log(body);
+    }
+}
+exports.default = TicketsWorkContext;
+/** Intestazione della fotografia: chi l'ha ricevuta, quando, con quale versione di schema e digest. */
+function snapshotSummary(snapshot) {
+    return {
+        snapshot_id: snapshot.id ?? null,
+        captured_at: snapshot.generated_at ?? null,
+        captured_by: snapshot.actor_name ?? null,
+        payload_version: snapshot.payload_version ?? null,
+        digest: snapshot.digest ?? null,
+    };
+}
+/** Le entry di una lista del payload, o [] se il backend non l'ha mandata. */
+function entries(value) {
+    return Array.isArray(value) ? value : [];
+}
+/**
+ * Il testo congelato di ogni entry che ne ha uno: le `instructions` di una reference, il `content`
+ * di una procedure. Ritorna '' quando nessuna entry porta testo, così `--full` su uno snapshot di
+ * sole chiavi non stampa un titolo su una sezione vuota.
+ */
+function renderFrozenText(payload) {
+    if (!payload || typeof payload !== 'object')
+        return '';
+    const value = payload;
+    const blocks = [
+        ...entries(value.references).map((entry) => frozenBlock(entry, entry.instructions)),
+        ...entries(value.procedures).map((entry) => frozenBlock(entry, entry.content)),
+    ].filter((block) => block.length > 0);
+    if (blocks.length === 0)
+        return '';
+    return `${(0, output_1.section)('Frozen text', '🧊')}\n${blocks.join('\n')}`;
+}
+/** Una entry col suo testo: riga di intestazione (chiave · livello · posizione) e testo per intero. */
+function frozenBlock(entry, text) {
+    const body = String(text ?? '');
+    if (body.trim() === '')
+        return '';
+    const head = [entry.key, entry.level, entry.location].filter((part) => part !== undefined && part !== null && part !== '');
+    return `\n── ${head.map((part) => (0, output_1.sanitize)(part)).join(' · ')}\n${(0, output_1.sanitizeMultiline)(body)}`;
+}
+/**
+ * Riscrive i due rifiuti che un lettore fraintenderebbe, lasciando intatto tutto il resto (codice
+ * del server compreso, così uno script continua a distinguerli):
+ *
+ * - `R404-TICKET-004` non è «ticket non trovato»: il ticket c'è, è la fotografia a mancare. Dire
+ *   «mai preso in carico» sarebbe però una bugia comoda: lo snapshot lo scatta SOLO la presa in
+ *   carico dalla coda degli host automatici (Agents::TicketQueues::Claim), quindi un ticket preso a
+ *   mano — con `tickets lease claim` o assegnandolo — non ne ha uno, e nemmeno i ticket presi in
+ *   carico prima che la fotografia esistesse. Il messaggio dice cosa manca e perché può mancare,
+ *   così chi legge non conclude che nessuno ci abbia mai lavorato.
+ * - il 403 arriva come «Permesso negato» e basta: qui la chiave che manca è `tickets.audit.view`,
+ *   che è dedicata al materiale d'audit — vedere il ticket, o la sua guidance, non basta.
+ */
+function describeWorkContextError(error, ticketRef) {
+    if (!(error instanceof api_1.ApiRequestError))
+        return error;
+    if (error.status === 404 && error.code === 'R404-TICKET-004') {
+        return new api_1.ApiRequestError(error.status, error.code, `No work context was captured for ticket ${ticketRef}: the snapshot is taken only when an automation host claims the ticket from the queue, so a manual claim — or one older than the snapshot itself — leaves none behind.`, error.details);
+    }
+    if (error.status === 403) {
+        return new api_1.ApiRequestError(error.status, error.code, `${error.message}. Reading a work context needs the tickets.audit.view permission: it is audit material, seeing the ticket is not enough.`, error.details);
+    }
+    return error;
+}

package/dist/commands/usage/list.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../base';
+export default class UsageList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        kind: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        environment: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        page: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/usage/list.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../../base");
+const core_1 = require("@oclif/core");
+// CYSK-29 — i simboli VISTI in esecuzione (l'insieme positivo). Il verdetto «inutilizzato» lo
+// calcola lo scanner con l'inventario statico del repo, mai questo comando.
+class UsageList extends base_1.BaseCommand {
+    static description = 'List the usage symbols the product reported as actually executed (routes as Controller#action, jobs, custom keys)';
+    static examples = [
+        '<%= config.bin %> usage list --project CYRA',
+        '<%= config.bin %> usage list -p CYRA --kind route --environment production',
+        '<%= config.bin %> usage list -p CYRA --json',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        kind: core_1.Flags.string({ description: 'Only this kind (route, job, custom)' }),
+        environment: core_1.Flags.string({ description: 'Only this environment' }),
+        page: core_1.Flags.integer({ description: 'Page number', default: 1 }),
+    };
+    async run() {
+        const { flags } = await this.parse(UsageList);
+        const projectId = await this.resolveProjectId(flags.project);
+        const query = new URLSearchParams({ page: String(flags.page) });
+        if (flags.kind)
+            query.set('kind', flags.kind);
+        if (flags.environment)
+            query.set('environment', flags.environment);
+        const res = await this.api.get(`/cli/v1/projects/${projectId}/usage?${query.toString()}`);
+        if (!this.jsonEnabled()) {
+            const rows = res.data ?? [];
+            if (rows.length === 0) {
+                this.log('No usage reported yet: the SDK flushes every ~5 minutes once deployed.');
+            }
+            else {
+                for (const row of rows) {
+                    this.log(`${row.kind ?? '?'}  ${row.symbol ?? '?'}  last_seen ${row.last_seen_at ?? '-'}  hits ~${row.hits_count ?? '-'}  (${row.environment ?? '-'})`);
+                }
+            }
+        }
+        return res;
+    }
+}
+exports.default = UsageList;

package/dist/commands/usage/reporters.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from '../../base';
+export default class UsageReporters extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        kind: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/usage/reporters.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../../base");
+const core_1 = require("@oclif/core");
+// CYSK-29 — chi sta mandando usage e da quando: la risposta a «rotta mai chiamata o SDK mai
+// deployato?». Lo scanner la legge PRIMA di giudicare qualunque kind; `truncated_last_window`
+// squalifica il kind.
+class UsageReporters extends base_1.BaseCommand {
+    static description = 'List the usage reporters: which SDK is sending usage of each kind, and since when';
+    static examples = [
+        '<%= config.bin %> usage reporters --project CYRA',
+        '<%= config.bin %> usage reporters -p CYRA --kind route',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        kind: core_1.Flags.string({ description: 'Only this kind (route, job, custom)' }),
+    };
+    async run() {
+        const { flags } = await this.parse(UsageReporters);
+        const projectId = await this.resolveProjectId(flags.project);
+        const query = flags.kind ? `?kind=${encodeURIComponent(flags.kind)}` : '';
+        const res = await this.api.get(`/cli/v1/projects/${projectId}/usage/reporters${query}`);
+        if (!this.jsonEnabled()) {
+            const rows = res.data ?? [];
+            if (rows.length === 0) {
+                this.log('No usage reporter yet: without one, "never seen" only means "SDK not deployed".');
+            }
+            else {
+                for (const row of rows) {
+                    this.log(`${row.kind ?? '?'}  ${row.sdk_name ?? '?'}@${row.sdk_version ?? '-'}  since ${row.first_reported_at ?? '-'}  last ${row.last_reported_at ?? '-'}  truncated ${row.truncated_last_window ? 'YES' : 'no'}  (${row.environment ?? '-'})`);
+                }
+            }
+        }
+        return res;
+    }
+}
+exports.default = UsageReporters;

package/dist/commands/vault/requests/approve.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../../base';
+export default class VaultRequestsApprove extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/vault/requests/approve.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../../base");
+const output_1 = require("../../../lib/output");
+const vault_requests_1 = require("../../../lib/vault-requests");
+class VaultRequestsApprove extends base_1.BaseCommand {
+    // No --confirm here, unlike the destructive deletions of this CLI: "approve" IS the confirmation —
+    // the command exists to say yes, and asking twice would only push the reviewer back to the website
+    // this command replaces. The success line names what was applied and where, so an approval on the
+    // wrong id is visible at once.
+    static description = 'Approve a pending secret change request: the change it carries is applied to the vault. Whoever asked for it cannot approve it (four-eyes), and a service account never can.';
+    static examples = [
+        '<%= config.bin %> vault requests approve <id>',
+        '<%= config.bin %> vault requests approve <id> --json',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Change request id (from "vault requests list")', required: true }),
+    };
+    async run() {
+        const { args } = await this.parse(VaultRequestsApprove);
+        let res;
+        try {
+            res = await this.api.post(`${vault_requests_1.CHANGE_REQUESTS_PATH}/${encodeURIComponent(args.id)}/approve`);
+        }
+        catch (error) {
+            throw (0, vault_requests_1.describeDecisionError)(error);
+        }
+        const decided = (0, vault_requests_1.withoutValue)(res.data ?? {});
+        if (!this.jsonEnabled()) {
+            const label = (0, vault_requests_1.changeRequestLabel)(decided);
+            this.log(label ? `Change request approved: ${label} is applied.` : 'Change request approved.');
+            const summary = (0, vault_requests_1.changeRequestSummary)(decided);
+            if (Object.keys(summary).length > 0)
+                this.log((0, output_1.renderRecord)(summary));
+        }
+        return { ...res, data: decided };
+    }
+}
+exports.default = VaultRequestsApprove;

package/dist/commands/vault/requests/list.d.ts

@@ -0,0 +1,6 @@
+import { BaseCommand } from '../../../base';
+export default class VaultRequestsList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    run(): Promise<unknown>;
+}

package/dist/commands/vault/requests/list.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../../../base");
+const output_1 = require("../../../lib/output");
+const paginate_1 = require("../../../lib/paginate");
+const vault_requests_1 = require("../../../lib/vault-requests");
+class VaultRequestsList extends base_1.BaseCommand {
+    // No --project on purpose: the queue is org-level, exactly like the web vault page — the backend
+    // collects the pending requests across every visible project, and asking for one project would
+    // hide the review you were about to do on another.
+    static description = 'List the secret changes waiting for a second approval, across every visible project. Shows the name and the intent, never the proposed value.';
+    static examples = ['<%= config.bin %> vault requests list', '<%= config.bin %> vault requests list --json'];
+    async run() {
+        await this.parse(VaultRequestsList);
+        const data = (await (0, paginate_1.fetchAllPages)(this.api, vault_requests_1.CHANGE_REQUESTS_PATH)).map((row) => (0, vault_requests_1.withoutValue)(row));
+        if (!this.jsonEnabled()) {
+            // An empty queue is good news, not an empty result set: renderTable's "(no results)" under a
+            // header row reads like a failed search, and the reviewer needs the opposite reading.
+            if (data.length === 0) {
+                this.log('No secret change request is waiting for a decision.');
+            }
+            else {
+                this.log((0, output_1.renderTable)(vault_requests_1.CHANGE_REQUEST_HEADERS, data.map((row) => (0, vault_requests_1.changeRequestRow)(row))));
+            }
+        }
+        return { data, meta: (0, paginate_1.aggregatedMeta)(data.length) };
+    }
+}
+exports.default = VaultRequestsList;

package/dist/commands/vault/requests/reject.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../../base';
+export default class VaultRequestsReject extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        reason: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/vault/requests/reject.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../../base");
+const output_1 = require("../../../lib/output");
+const vault_requests_1 = require("../../../lib/vault-requests");
+class VaultRequestsReject extends base_1.BaseCommand {
+    static description = 'Reject a pending secret change request with a reason. Nothing changes in the vault: the request freezes as rejected and the reason reaches whoever asked.';
+    static examples = [
+        '<%= config.bin %> vault requests reject <id> --reason "rotate it on staging first"',
+        '<%= config.bin %> vault requests reject <id> -r "wrong key" --json',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Change request id (from "vault requests list")', required: true }),
+    };
+    static flags = {
+        reason: core_1.Flags.string({
+            char: 'r',
+            description: 'Why the change is refused — recorded for the audit and sent to whoever asked',
+            required: true,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(VaultRequestsReject);
+        // A rejection freezes the request for good: it cannot be decided again, and the only thing left
+        // to the person who asked is the reason. Whitespace would satisfy the required flag and be
+        // refused by the server anyway (R422-CHANGEREQUEST-001), so it is refused here, before the call.
+        const reason = flags.reason.trim();
+        if (reason === '') {
+            this.error('Refusing to reject with an empty --reason: say why, so whoever asked can fix it and ask again.', {
+                exit: 2,
+            });
+        }
+        let res;
+        try {
+            res = await this.api.post(`${vault_requests_1.CHANGE_REQUESTS_PATH}/${encodeURIComponent(args.id)}/reject`, { reason });
+        }
+        catch (error) {
+            throw (0, vault_requests_1.describeDecisionError)(error);
+        }
+        const decided = (0, vault_requests_1.withoutValue)(res.data ?? {});
+        if (!this.jsonEnabled()) {
+            const label = (0, vault_requests_1.changeRequestLabel)(decided);
+            this.log(label ? `Change request rejected: ${label} is unchanged.` : 'Change request rejected: nothing changed.');
+            const summary = (0, vault_requests_1.changeRequestSummary)(decided);
+            if (Object.keys(summary).length > 0)
+                this.log((0, output_1.renderRecord)(summary));
+        }
+        return { ...res, data: decided };
+    }
+}
+exports.default = VaultRequestsReject;

package/dist/commands/workload/create.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadCreate extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        status: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'scheduled-at': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'due-at': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        ticket: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        team: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        title: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/create.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+const workload_1 = require("../../lib/workload");
+class WorkloadCreate extends base_1.BaseCommand {
+    static description = 'Create a workload action (non-dev activity: fair, meeting, call…) on one of your teams. Add the people with `workload participant add`.';
+    static examples = [
+        '<%= config.bin %> workload create --team Marketing --title "Fiera di Rimini"',
+        '<%= config.bin %> workload create --team Marketing --title "Riunione firma accordo" --scheduled-at 2026-09-01T09:00:00Z --due-at 2026-09-10T18:00:00Z',
+        '<%= config.bin %> workload create --team Marketing --title "Materiale stand" --status in_progress --ticket DRFL-3',
+    ];
+    static flags = {
+        team: core_1.Flags.string({
+            description: 'Team id (UUID) or name — the action belongs to it and cannot be moved later',
+            required: true,
+        }),
+        title: core_1.Flags.string({ description: 'What the activity is', required: true }),
+        ...workload_1.actionFieldFlags,
+    };
+    async run() {
+        const { flags } = await this.parse(WorkloadCreate);
+        const teamId = await this.resolveTeamId(flags.team);
+        const body = { team_id: teamId, title: flags.title };
+        (0, workload_1.applyActionBody)(body, flags);
+        // Il code umano ("DRFL-3") si risolve qui: il server accetta solo l'id, e uno che non può
+        // vedere lo scarta in silenzio invece di rifiutarlo.
+        const ticketId = flags.ticket ? await this.resolveTicketId(flags.ticket) : undefined;
+        if (flags.ticket !== undefined)
+            body.ticket_id = ticketId ?? null;
+        const res = await this.api.post(workload_1.WORKLOAD_ACTIONS_PATH, body);
+        const data = res.data ?? {};
+        if ((0, workload_1.ticketLinkMissing)(flags.ticket, ticketId, data)) {
+            this.warn(`Ticket ${flags.ticket} is not visible to you: the action was created without it.`);
+        }
+        if (!this.jsonEnabled()) {
+            this.log('Workload action created:');
+            this.log((0, output_1.renderRecord)(data));
+            this.log((0, workload_1.participantsLine)(data));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadCreate;

package/dist/commands/workload/delete.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadDelete extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        confirm: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/delete.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const workload_1 = require("../../lib/workload");
+class WorkloadDelete extends base_1.BaseCommand {
+    static args = {
+        id: core_1.Args.string({ description: 'Workload action id', required: true }),
+    };
+    static description = 'Delete a workload action (irreversible; a linked ticket survives and only loses the link)';
+    static examples = ['<%= config.bin %> workload delete <action-id> --confirm'];
+    static flags = {
+        confirm: core_1.Flags.boolean({ description: 'Required: confirm the irreversible deletion' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(WorkloadDelete);
+        if (!flags.confirm) {
+            this.error('Refusing to delete without --confirm (the action is irreversible).', { exit: 2 });
+        }
+        await this.api.delete(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.id)}`);
+        if (!this.jsonEnabled())
+            this.log(`Deleted workload action ${args.id}`);
+        return { deleted: args.id };
+    }
+}
+exports.default = WorkloadDelete;

package/dist/commands/workload/list.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        page: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/list.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+const workload_1 = require("../../lib/workload");
+class WorkloadList extends base_1.BaseCommand {
+    static description = 'List the workload actions of the teams you belong to (newest first)';
+    static examples = ['<%= config.bin %> workload list', '<%= config.bin %> workload list --page 2 --json'];
+    static flags = { ...base_1.pageFlag };
+    async run() {
+        const { flags } = await this.parse(WorkloadList);
+        const res = await this.api.get(`${workload_1.WORKLOAD_ACTIONS_PATH}?page=${flags.page}`);
+        const actions = res.data ?? [];
+        if (!this.jsonEnabled()) {
+            this.log((0, output_1.renderTable)(['TITLE', 'STATUS', 'TEAM', 'PEOPLE', 'SCHEDULED', 'DUE', 'TICKET', 'ID'], actions.map((action) => [
+                String(action.title ?? ''),
+                (0, output_1.statusCell)(action.status),
+                String(action.team ?? ''),
+                String((Array.isArray(action.participants) ? action.participants : []).length),
+                String(action.scheduled_at ?? '-'),
+                String(action.due_at ?? '-'),
+                String(action.ticket_code ?? '-'),
+                String(action.id ?? ''),
+            ])));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadList;

package/dist/commands/workload/participant/add.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from '../../../base';
+export default class WorkloadParticipantAdd extends BaseCommand {
+    static args: {
+        action: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        member: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/participant/add.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../../base");
+const output_1 = require("../../../lib/output");
+const workload_1 = require("../../../lib/workload");
+class WorkloadParticipantAdd extends base_1.BaseCommand {
+    static args = {
+        action: core_1.Args.string({ description: 'Workload action id', required: true }),
+        member: core_1.Args.string({ description: 'Participant account id or email (must be on the action team)', required: true }),
+    };
+    static description = 'Add someone to a workload action (they must belong to the team that owns it)';
+    static examples = ['<%= config.bin %> workload participant add <action-id> ada@acme.com'];
+    async run() {
+        const { args } = await this.parse(WorkloadParticipantAdd);
+        const accountId = await this.resolveMemberId(args.member);
+        const res = await this.api.post(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.action)}/participants`, { account_id: accountId });
+        const data = res.data ?? {};
+        if (!this.jsonEnabled()) {
+            this.log(`Added ${args.member} to workload action ${args.action}:`);
+            this.log((0, output_1.renderRecord)(data));
+            this.log((0, workload_1.participantsLine)(data));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadParticipantAdd;

package/dist/commands/workload/participant/remove.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from '../../../base';
+export default class WorkloadParticipantRemove extends BaseCommand {
+    static args: {
+        action: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        member: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/participant/remove.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../../base");
+const workload_1 = require("../../../lib/workload");
+class WorkloadParticipantRemove extends base_1.BaseCommand {
+    static args = {
+        action: core_1.Args.string({ description: 'Workload action id', required: true }),
+        member: core_1.Args.string({ description: 'Participant account id or email', required: true }),
+    };
+    static description = 'Remove someone from a workload action (idempotent: removing who is not there succeeds)';
+    static examples = ['<%= config.bin %> workload participant remove <action-id> ada@acme.com'];
+    async run() {
+        const { args } = await this.parse(WorkloadParticipantRemove);
+        const accountId = await this.resolveMemberId(args.member);
+        await this.api.delete(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.action)}/participants/${encodeURIComponent(accountId)}`);
+        if (!this.jsonEnabled()) {
+            this.log(`Removed ${args.member} from workload action ${args.action}`);
+        }
+        return { removed: accountId };
+    }
+}
+exports.default = WorkloadParticipantRemove;

package/dist/commands/workload/promote.d.ts

@@ -0,0 +1,17 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadPromote extends BaseCommand {
+    static args: {
+        action: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        status: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        priority: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        title: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        kind: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}