@bussolabs/closeyourit-cli 0.9.0 → 0.11.0

package/README.md

@@ -43,17 +43,17 @@ CLOSEYOURIT_TOKEN=cyi_u_… CLOSEYOURIT_API_URL=https://www.closeyour.it \
 | `logout` | Clear the locally stored token and identity. |
 | `whoami` | Show account, organization, token prefix and permissions. |
 | `projects list [--page]` | List visible projects. |
-| `projects show <id\|key>` | Show one project. |
+| `projects show <id\|key>` | Show one project, plus its declared environments and per-environment capabilities. |
 | `projects create <name> --key <key> [--group <id\|name>] [--color] [--description] [--roadmap-enabled] [--quick-bug-report-enabled]` | Create a project (optionally inside a group). |
 | `projects update --project <id\|key> [--name] [--key] [--color] [--description] [--group] [--roadmap-enabled] [--quick-bug-report-enabled]` | Update a project (only the passed fields change). |
 | `projects link-server --project <id\|key> --host-id <id> --environment-id <id>` | Link a server host to a declared project environment (uptime). |
 | `projects unlink-server <link-id> --project <id\|key> --confirm` | Unlink a server host from the project. |
 | `projects settings show --project <id\|key>` | Show a project's settings (log/analytics retention + feature flags). |
 | `projects settings update --project <id\|key> [--logs-retention-days] [--analytics-retention-days] [--roadmap-enabled] [--quick-bug-report-enabled] [--analytics-enabled]` | Update a project's settings (only the passed fields change). |
-| `projects github --project <id\|key>` | Show a project's GitHub integration (repo link + tag→release binding rules). |
+| `projects github --project <id\|key>` | Show a project's GitHub integration (repo link + secrets-sync state + tag→release binding rules). |
 | `projects github-connect --project <id\|key> --repository <owner/name>` | Connect a project to a repository visible to the organization's GitHub App. |
 | `projects github-map [--connected-only]` | List every visible CloseYourIt project and its connected GitHub repository; automatically fetches all pages. |
-| `projects github-update --project <id\|key> [--default-branch] [--production-environment-id] [--staging-environment-id] [--sync-enabled] [--tag-binding-enabled] [--autoclose-on-merge]` | Update a project's GitHub binding rules (only the passed fields change). |
+| `projects github-update --project <id\|key> [--default-branch] [--production-environment-id] [--staging-environment-id] [--sync-enabled] [--sync-secrets] [--tag-binding-enabled] [--autoclose-on-merge]` | Update a project's GitHub binding rules (only the passed fields change; `--sync-secrets`/`--no-sync-secrets` toggles pushing vault secrets to GitHub). |
 | `groups list [--page]` | List groups (macro-projects) in your org. |
 | `groups create <name> [--color] [--roadmap-enabled]` | Create a group (container of related projects, e.g. "DriverOne"). |
 | `groups update <id\|name> [--name] [--color] [--roadmap-enabled]` | Update a group (rename, recolor, toggle roadmap). |
@@ -117,10 +117,10 @@ CLOSEYOURIT_TOKEN=cyi_u_… CLOSEYOURIT_API_URL=https://www.closeyour.it \
 | `logs unlink <id> <link-id> --confirm` | Remove a manual log link. |
 | `kb list [--project <id\|key>] [--kind] [--per] [--page]` | List knowledge pages. Cross-project: omit `--project` for every visible project. |
 | `kb search <query…> [--project <id\|key>] [--kind] [--per] [--page] [--with-related]` | Search knowledge pages (semantic when available, title ILIKE fallback). |
-| `kb show <id> [--related] [--question <q>]` | Show one knowledge page: metadata header + raw markdown body. |
+| `kb show <id> [--related] [--question <q>]` | Show one knowledge page: metadata header, raw markdown body, then the technical section. |
 | `kb related <id> [--question <q>] [--links-only]` | Pages to read next: linked with `[[wiki links]]` plus close matches by meaning. |
-| `kb create --project <id\|key> --title <t> [--kind note\|decision\|guide] (--body <md> \| --body-file <path>)` | Create a knowledge page. |
-| `kb update <id> [--title] [--kind] [--body \| --body-file]` | Update a page (unpassed fields keep their current value). |
+| `kb create --project <id\|key> --title <t> [--kind note\|decision\|guide] (--body <md> \| --body-file <path>) [--tech-spec <md> \| --tech-spec-file <path>]` | Create a knowledge page (optional technical section, kept separate from the body). |
+| `kb update <id> [--title] [--kind] [--body \| --body-file] [--tech-spec \| --tech-spec-file]` | Update a page (unpassed fields keep their current value). |
 | `kb delete <id> --confirm` | Delete a knowledge page (irreversible). |
 | `kb ask <question…>` | Ask a question; the AI answers from the knowledge base and cites the pages it used. |
 | `servers list [--status] [--page]` | List the monitored servers (fleet snapshot: status, cpu/mem/disk, last seen). |
@@ -133,14 +133,6 @@ CLOSEYOURIT_TOKEN=cyi_u_… CLOSEYOURIT_API_URL=https://www.closeyour.it \
 | `servers tokens list` | List the fleet enrollment tokens. |
 | `servers tokens create <name>` | Create an enrollment token (secret shown once). |
 | `servers tokens revoke <id> --confirm` | Revoke an enrollment token. |
-| `agents list [--kind claude\|shell] [--page]` | List the automation agents in your org. |
-| `agents show <id>` | Show one automation agent. |
-| `agents create --name --slug --run --schedule [--kind] [--timeout] [--model] [--permission-mode] [--allowed-tool…] [--on-failure] [--project <id\|key>…] [--group <id\|name>…] [--catch-up] [--no-enabled]` | Create an agent (executed by closeyourit-automator). |
-| `agents update <id> [--name] [--slug] [--kind] [--run] [--schedule] [--timeout] [--model] [--permission-mode] [--allowed-tool…] [--on-failure] [--enabled\|--no-enabled] [--catch-up\|--no-catch-up]` | Update an agent (only the passed fields change). |
-| `agents assign <id> [--project <id\|key>…] [--group <id\|name>…]` | Assign the agent to projects/groups (replaces targets). |
-| `agents delete <id> --confirm` | Delete an agent and its run history. |
-| `agents runs list <agent-id> [--page]` | List an agent's run history. |
-| `agents runs show <agent-id> <run-id>` | Show a single run (with output). |
 | `agents tokens list [--page]` | List the org automator tokens (cyi_a_). |
 | `agents tokens create <name>` | Create an org automator token (secret shown only once). |
 | `agents tokens revoke <id> --confirm` | Revoke an org automator token. |

package/dist/commands/guidance/show.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../base';
+export default class GuidanceShow extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/guidance/show.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../../base");
+const guidance_1 = require("../../lib/guidance");
+class GuidanceShow extends base_1.BaseCommand {
+    static description = "Show a project's effective guidance: the references and procedures resolved by the backend (the CLI never recomposes inheritance)";
+    static examples = [
+        '<%= config.bin %> guidance show --project legalbloom-rails',
+        '<%= config.bin %> guidance show -p LBRA',
+        '<%= config.bin %> guidance show -p LBRA --json',
+    ];
+    static flags = { ...base_1.projectFlag };
+    async run() {
+        const { flags } = await this.parse(GuidanceShow);
+        const projectId = await this.resolveProjectId(flags.project);
+        // The backend hands back the already-resolved guidance ({references, procedures}); the CLI only
+        // renders it. JSON stays the raw backend payload, so machine consumers get the full contract.
+        const res = await this.api.get(`/cli/v1/projects/${projectId}/guidance`);
+        if (!this.jsonEnabled()) {
+            const rendered = (0, guidance_1.renderGuidance)(res.data ?? {});
+            this.log(rendered || 'No guidance configured for this project.');
+        }
+        return res;
+    }
+}
+exports.default = GuidanceShow;

package/dist/commands/kb/show.js

@@ -46,6 +46,12 @@ class KbShow extends base_1.BaseCommand {
                 this.log('');
                 this.log((0, output_1.sanitizeMultiline)(body));
             }
+            // Technical section (kept separate from the simple body), shown after it under its own heading.
+            const techSpec = page.tech_spec;
+            if (techSpec !== null && techSpec !== undefined && String(techSpec).trim() !== '') {
+                this.log('\n🔧 Technical:');
+                this.log((0, output_1.sanitizeMultiline)(techSpec));
+            }
             const related = (res.meta?.related ?? []);
             if (related.length > 0)
                 this.log((0, knowledge_1.renderRelated)(related));

package/dist/commands/projects/github.js

@@ -26,6 +26,7 @@ class ProjectsGithub extends base_1.BaseCommand {
                 full_name: repo.full_name,
                 default_branch: repo.default_branch,
                 sync_enabled: repo.sync_enabled,
+                sync_secrets: repo.sync_secrets,
                 tag_binding_enabled: repo.tag_binding_enabled,
                 autoclose_on_merge: repo.autoclose_on_merge,
                 production_environment_id: repo.production_environment_id,

package/dist/commands/projects/show.d.ts

@@ -6,4 +6,11 @@ export default class ProjectsShow extends BaseCommand {
         id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
     };
     run(): Promise<unknown>;
+    /**
+     * The declared environments and the capabilities (servers/uptime/secrets) active on each, so the
+     * current set can be read before `set-environments` replaces it wholesale (CYCL-4). An absent
+     * `environments` field (older backend that doesn't ship it) prints nothing, leaving `projects
+     * show` output unchanged; an empty array prints the explicit "none declared" line.
+     */
+    private renderEnvironments;
 }

package/dist/commands/projects/show.js

@@ -4,7 +4,7 @@ const core_1 = require("@oclif/core");
 const base_1 = require("../../base");
 const output_1 = require("../../lib/output");
 class ProjectsShow extends base_1.BaseCommand {
-    static description = 'Show a single project by id or key';
+    static description = 'Show a single project by id or key, with its declared environments and their capabilities';
     static examples = ['<%= config.bin %> projects show acme-api', '<%= config.bin %> projects show <uuid> --json'];
     static args = {
         id: core_1.Args.string({ description: 'Project id (UUID) or key', required: true }),
@@ -14,9 +14,44 @@ class ProjectsShow extends base_1.BaseCommand {
         const projectId = await this.resolveProjectId(args.id);
         const res = await this.api.get(`/cli/v1/projects/${projectId}`);
         if (!this.jsonEnabled()) {
-            this.log((0, output_1.renderRecord)(res.data ?? {}));
+            const data = res.data ?? {};
+            // renderRecord prints only scalar fields, so the `environments` array is skipped here and
+            // rendered as its own table below — the project record stays exactly as before.
+            this.log((0, output_1.renderRecord)(data));
+            this.renderEnvironments(data.environments);
         }
         return res;
     }
+    /**
+     * The declared environments and the capabilities (servers/uptime/secrets) active on each, so the
+     * current set can be read before `set-environments` replaces it wholesale (CYCL-4). An absent
+     * `environments` field (older backend that doesn't ship it) prints nothing, leaving `projects
+     * show` output unchanged; an empty array prints the explicit "none declared" line.
+     */
+    renderEnvironments(value) {
+        if (!Array.isArray(value))
+            return;
+        this.log('');
+        if (value.length === 0) {
+            this.log('Environments: none declared');
+            return;
+        }
+        this.log('Environments:');
+        this.log((0, output_1.renderTable)(['CODE', 'LABEL', 'SERVERS', 'UPTIME', 'SECRETS'], value.map((env) => [
+            String(env.code ?? ''),
+            String(env.label ?? ''),
+            capability(env.servers_enabled),
+            capability(env.uptime_enabled),
+            capability(env.secrets_enabled),
+        ])));
+    }
 }
 exports.default = ProjectsShow;
+/** A capability cell: `on`/`off` for a known boolean, `-` when the backend omits the flag. */
+function capability(enabled) {
+    if (enabled === true)
+        return 'on';
+    if (enabled === false)
+        return 'off';
+    return '-';
+}

package/dist/commands/secrets/list.d.ts

@@ -4,6 +4,7 @@ export default class SecretsList extends BaseCommand {
     static examples: string[];
     static flags: {
         environment: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        all: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
         project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
     };
     run(): Promise<unknown>;

package/dist/commands/secrets/list.js

@@ -5,14 +5,18 @@ const base_1 = require("../../base");
 const output_1 = require("../../lib/output");
 const paginate_1 = require("../../lib/paginate");
 class SecretsList extends base_1.BaseCommand {
-    static description = 'List secret names for a project (optionally filtered by environment). Never prints values.';
+    static description = 'List secret names for a project (optionally filtered by environment). Lists every secret — never truncated to a page — and never prints values.';
     static examples = [
         '<%= config.bin %> secrets list -p acme-api',
         '<%= config.bin %> secrets list -p acme-api -e production',
+        '<%= config.bin %> secrets list -p acme-api --all',
     ];
     static flags = {
         ...base_1.projectFlag,
         environment: core_1.Flags.string({ char: 'e', description: 'Filter by environment code or id' }),
+        // La lista aggrega già tutte le pagine: --all è l'affordance esplicita chiesta dal ticket
+        // (CYCL-5) per "vedere tutti i secret oltre i primi 10" senza dubbi che l'elenco sia completo.
+        all: core_1.Flags.boolean({ char: 'a', description: 'List every secret across all pages (already the default; makes the intent explicit)' }),
     };
     async run() {
         const { flags } = await this.parse(SecretsList);

package/dist/commands/tickets/show.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 const core_1 = require("@oclif/core");
 const base_1 = require("../../base");
+const guidance_1 = require("../../lib/guidance");
 const output_1 = require("../../lib/output");
 class TicketsShow extends base_1.BaseCommand {
     static description = 'Show a single ticket in full: body (description + Given/When/Then/Expected), comments (with their files) and attachments';
@@ -101,6 +102,11 @@ class TicketsShow extends base_1.BaseCommand {
         }
         this.renderScenarios(Array.isArray(ticket.scenarios) ? ticket.scenarios : []);
         this.renderConditions(Array.isArray(ticket.conditions) ? ticket.conditions : []);
+        // Effective guidance (references/procedures) when the backend ships it. Absent on older servers:
+        // renderGuidance returns '' and nothing prints, so no misleading empty section (CYCL-2).
+        const guidance = (0, guidance_1.renderGuidance)(ticket.guidance);
+        if (guidance)
+            this.log(guidance);
     }
     // BDD scenarios: one block per scenario, only the steps present.
     renderScenarios(scenarios) {

package/dist/lib/guidance.d.ts

@@ -0,0 +1,25 @@
+/**
+ * One effective guidance entry (a reference or a procedure) as resolved and returned by the
+ * backend. The CLI never recomposes inheritance (CYCL-2): the hierarchy is computed server-side
+ * and every attribute below is rendered as-is — `key`, `origin`, `level`, `required` and
+ * `application_mode` are preserved verbatim.
+ */
+export interface GuidanceEntry extends Record<string, unknown> {
+    key?: string;
+    origin?: string;
+    level?: string;
+    required?: boolean;
+    application_mode?: string;
+}
+/** The effective guidance of a project: two independent, already-resolved lists. */
+export interface Guidance extends Record<string, unknown> {
+    references?: GuidanceEntry[];
+    procedures?: GuidanceEntry[];
+}
+/**
+ * Render the effective project guidance shared by `tickets show` and `guidance show`: references
+ * first, then procedures, each skipped when empty. Returns '' when there is nothing to show, so
+ * callers can print it unconditionally without a misleading section on servers where guidance is
+ * absent (CYCL-2).
+ */
+export declare function renderGuidance(guidance: unknown): string;

package/dist/lib/guidance.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderGuidance = renderGuidance;
+const output_1 = require("./output");
+const HEADERS = ['KEY', 'ORIGIN', 'LEVEL', 'REQUIRED', 'APPLICATION_MODE'];
+/** A `required` flag → a human yes/no; a missing value stays '-' so the column never collapses. */
+function requiredCell(value) {
+    if (value === undefined || value === null)
+        return '-';
+    return value ? 'yes' : 'no';
+}
+/** One entry → a table row, in the fixed order of `HEADERS` (renderTable sanitizes each cell). */
+function entryRow(entry) {
+    return [
+        String(entry.key ?? ''),
+        String(entry.origin ?? ''),
+        String(entry.level ?? ''),
+        requiredCell(entry.required),
+        String(entry.application_mode ?? ''),
+    ];
+}
+/** Coerce whatever the backend sent for a list into a clean array of entries. */
+function entries(value) {
+    return Array.isArray(value) ? value : [];
+}
+/**
+ * Render one titled block (References/Procedures) as a table, or '' when the list is empty — so an
+ * absent section prints nothing instead of a misleading empty header (CYCL-2, scenario 3).
+ */
+function renderList(title, icon, list) {
+    if (list.length === 0)
+        return '';
+    return `${(0, output_1.section)(`${title} (${list.length})`, icon)}\n${(0, output_1.renderTable)(HEADERS, list.map(entryRow))}`;
+}
+/**
+ * Render the effective project guidance shared by `tickets show` and `guidance show`: references
+ * first, then procedures, each skipped when empty. Returns '' when there is nothing to show, so
+ * callers can print it unconditionally without a misleading section on servers where guidance is
+ * absent (CYCL-2).
+ */
+function renderGuidance(guidance) {
+    if (!guidance || typeof guidance !== 'object')
+        return '';
+    const value = guidance;
+    return [
+        renderList('References', '📚', entries(value.references)),
+        renderList('Procedures', '🧭', entries(value.procedures)),
+    ]
+        .filter((block) => block.length > 0)
+        .join('\n');
+}