@computesdk/cli 1.0.9 → 1.0.11

package/dist/index.js

@@ -587,7 +587,7 @@ import "dotenv/config";
 import { Command } from "commander";
 import * as p4 from "@clack/prompts";
 import pc6 from "picocolors";
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync5 } from "fs";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { dirname as dirname2, join as join5 } from "path";
 import { compute as compute4 } from "computesdk";
@@ -694,7 +694,7 @@ function buildProviderConfig(provider) {
 // src/actions.ts
 init_esm_shims();
 import pc from "picocolors";
-import { mkdirSync, writeFileSync } from "fs";
+import { mkdirSync, readFileSync, writeFileSync } from "fs";
 import { basename, join } from "path";
 
 // src/actions-client.ts
@@ -739,6 +739,29 @@ var ActionsClient = class {
     });
     return this.parse(res);
   }
+  async put(path5, body = {}) {
+    const res = await this.fetchImpl(`${this.auth.baseUrl}${path5}`, {
+      method: "PUT",
+      headers: { ...this.headers(), "content-type": "application/json" },
+      body: JSON.stringify(body)
+    });
+    return this.parse(res);
+  }
+  async patch(path5, body = {}) {
+    const res = await this.fetchImpl(`${this.auth.baseUrl}${path5}`, {
+      method: "PATCH",
+      headers: { ...this.headers(), "content-type": "application/json" },
+      body: JSON.stringify(body)
+    });
+    return this.parse(res);
+  }
+  async del(path5) {
+    const res = await this.fetchImpl(`${this.auth.baseUrl}${path5}`, {
+      method: "DELETE",
+      headers: this.headers()
+    });
+    return this.parse(res);
+  }
   /**
    * One `data:` JSON payload per SSE event. `next()` resolves to the payload,
    * or null when the stream ends. Call `close()` to abort.
@@ -877,6 +900,18 @@ async function listRunJobs(c, runId) {
     steps: []
   }));
 }
+async function fetchRunSummary(c, runId) {
+  try {
+    return await c.get(`/api/v1/actions/runs/${runId}/summary`);
+  } catch (e) {
+    if (!(e instanceof ActionsApiError && e.status === 404)) {
+      console.error(
+        pc.dim(`summary unavailable: ${e instanceof Error ? e.message : String(e)}`)
+      );
+    }
+    return null;
+  }
+}
 function fail(error) {
   if (error instanceof ActionsApiError) {
     console.error(pc.red(`Error (${error.status}): ${error.message}`));
@@ -935,6 +970,7 @@ function formatRunDetail(run, runUrl) {
   lines.push(`title: ${run.title}`);
   lines.push(`started: ${run.startedAt}  duration: ${formatDuration(run.durationMs)}`);
   if (run.cancellationReason) lines.push(`cancelled: ${run.cancellationReason}`);
+  if (run.providerOverride) lines.push(`dispatched to: ${run.providerOverride}`);
   if (run.supersededByRunId) lines.push(`superseded by: ${run.supersededByRunId}`);
   if (runUrl) lines.push(`url: ${runUrl}`);
   if (run.jobs.length > 0) {
@@ -954,6 +990,96 @@ function formatRunDetail(run, runUrl) {
   }
   return lines.join("\n");
 }
+function formatRunInspection(run) {
+  const lines = [];
+  lines.push(`${pc.bold("run")}  ${conclusionLabel(run.conclusion)}${run.runNumber === null ? "" : `  #${run.runNumber}`}`);
+  lines.push(pc.dim(run.id));
+  lines.push(`${safeTerm(run.ref)}  ${shortSha(run.headSha)}  ${safeTerm(run.event)}`);
+  lines.push(`queued: ${run.queuedAt}  started: ${run.startedAt}  finished: ${run.finishedAt}`);
+  if (run.cancellationReason) lines.push(`cancelled: ${run.cancellationReason}`);
+  if (run.supersededByRunId) lines.push(`superseded by: ${run.supersededByRunId}`);
+  if (run.blockedReason) lines.push(pc.red(`blocked: ${safeTerm(run.blockedReason)}`));
+  if (run.concurrencyGroup) lines.push(`concurrency: ${safeTerm(run.concurrencyGroup)}`);
+  if (run.providerOverride) lines.push(`dispatched to: ${safeTerm(run.providerOverride)}`);
+  if (run.definitionStale) {
+    const parsed = run.workflowParsedFromSha ? shortSha(run.workflowParsedFromSha) : "unknown";
+    lines.push(pc.yellow(`definition: stored parse is from ${parsed}, not this head \u2014 context may be newer than the run`));
+  }
+  if (run.dispatchInputs && Object.keys(run.dispatchInputs).length > 0) {
+    lines.push(`inputs: ${Object.entries(run.dispatchInputs).map(([k, v]) => `${safeTerm(k)}=${safeTerm(v)}`).join("  ")}`);
+  }
+  if (run.secrets) {
+    const names = run.secrets.names.length > 0 ? run.secrets.names.map(safeTerm).join(", ") : "none";
+    lines.push(`secrets (${run.secrets.access}${run.secrets.env ? ", exported to env" : ""}): ${names}`);
+  }
+  if (run.caches.length > 0) {
+    lines.push("");
+    lines.push(pc.bold("caches"));
+    for (const cache of run.caches) {
+      const action = [cache.restoredAt ? "restored" : null, cache.savedAt ? "saved" : null].filter(Boolean).join("+");
+      lines.push(`  ${safeTerm(cache.key)}  ${pc.dim(`${action}  ${safeTerm(cache.scopeRef)}  ${cache.sizeBytes}B`)}`);
+    }
+  }
+  if (run.jobs.length > 0) {
+    lines.push("");
+    lines.push(pc.bold("jobs"));
+    for (const job of run.jobs) {
+      const placement = job.provider ? `${safeTerm(job.provider)}${job.region ? `:${safeTerm(job.region)}` : ""}` : "-";
+      lines.push(`  ${safeTerm(job.name)}  ${conclusionLabel(job.state)}  ${placement}`);
+      lines.push(pc.dim(`    ${job.id}`));
+      if (job.runsOn.length > 0 || job.resolvedRunsOn !== null) {
+        const resolved = job.resolvedRunsOn !== null && job.resolvedRunsOn.join(",") !== job.runsOn.join(",") ? ` \u2192 ${job.resolvedRunsOn.map(safeTerm).join(", ")}` : "";
+        lines.push(`    runs-on: ${job.runsOn.map(safeTerm).join(", ") || "(none)"}${resolved}`);
+      }
+      if (job.runsOnHasExpression) lines.push(pc.dim("    runs-on resolves at runtime (expression)"));
+      if (job.container) lines.push(`    container: ${safeTerm(job.container)}`);
+      if (job.runnerImage) lines.push(`    image: ${safeTerm(job.runnerImage)}`);
+      if (job.placementHint) {
+        lines.push(`    pinned: ${safeTerm(job.placementHint.label)}`);
+      }
+      if (job.concurrencyGroup) {
+        lines.push(`    concurrency: ${safeTerm(job.concurrencyGroup)}${job.concurrencyCancelInProgress ? " (cancel-in-progress)" : ""}`);
+      }
+      const overrides = [
+        job.timeoutMinutes !== null ? `timeout ${job.timeoutMinutes}m` : null,
+        job.fetchDepth !== null ? `fetch-depth ${job.fetchDepth}` : null
+      ].filter(Boolean);
+      if (overrides.length > 0) lines.push(`    ${overrides.join("  ")}`);
+      if (job.matrix) {
+        lines.push(`    matrix: ${Object.entries(job.matrix).map(([k, v]) => `${safeTerm(k)}=${safeTerm(v)}`).join(" ")}`);
+      }
+      if (job.failureReason) lines.push(pc.red(`    failed: ${safeTerm(job.failureReason)}`));
+      for (const attempt of job.placementAttempts) {
+        lines.push(pc.dim(`    placement failed on ${safeTerm(attempt.provider)}${attempt.region ? `:${safeTerm(attempt.region)}` : ""}: ${safeTerm(attempt.error)}`));
+      }
+    }
+  }
+  return lines.join("\n");
+}
+function formatRunSummary(summary) {
+  const lines = [];
+  lines.push(pc.bold(`failures \u2014 run ${summary.runId} ${conclusionLabel(summary.conclusion)}`));
+  if (summary.failures.length === 0) {
+    lines.push("  no failed jobs");
+    return lines.join("\n");
+  }
+  for (const job of summary.failures) {
+    const placement = job.provider ? `${safeTerm(job.provider)}${job.region ? `:${safeTerm(job.region)}` : ""}` : "-";
+    lines.push(`  ${job.id}  ${safeTerm(job.name)}  ${conclusionLabel(job.conclusion)}  ${placement}`);
+    if (job.failureReason) lines.push(pc.dim(`    ${safeTerm(job.failureReason)}`));
+    for (const step of job.failedSteps) {
+      const exit = step.exitCode === null ? "" : ` (exit ${step.exitCode})`;
+      lines.push(`    step ${step.ordinal}  ${safeTerm(step.name)}${exit}`);
+    }
+    if (job.excerpt) {
+      const scope = job.excerpt.stepOrdinal === null ? "job log" : `step ${job.excerpt.stepOrdinal}`;
+      const cut = job.excerpt.truncated ? ", truncated" : "";
+      lines.push(pc.dim(`    \u2500\u2500 ${scope} tail${cut} \u2500\u2500`));
+      for (const line of job.excerpt.text.split("\n")) lines.push(`    ${safeTerm(line)}`);
+    }
+  }
+  return lines.join("\n");
+}
 function parseInputs(pairs) {
   const inputs = {};
   for (const pair of pairs ?? []) {
@@ -1041,11 +1167,77 @@ async function* followRunLogs(client2, runId, jobs, step) {
     await new Promise((r) => setTimeout(r, 1e3));
   }
 }
+function safeTerm(s) {
+  return s.replace(/[\u0000-\u001F\u007F-\u009F]/g, "\uFFFD");
+}
+function formatRunHistory(history) {
+  const lines = [];
+  const parts = Object.entries(history.conclusions).map(([c, n]) => `${n} ${c}`).join(", ");
+  lines.push(`last ${history.runCount} runs: ${parts || "none"}`);
+  if (history.jobs.length > 0) {
+    lines.push("");
+    lines.push(pc.bold("jobs"));
+    for (const job of history.jobs) {
+      const rate = job.runs > 0 ? Math.round(job.failedRuns / job.runs * 100) : 0;
+      const platform = job.failedBeforeSteps > 0 ? pc.dim(`  (${job.failedBeforeSteps} failed before steps)`) : "";
+      const count = `${job.failedRuns}/${job.runs} runs failed`;
+      const label = job.failedRuns > 0 ? pc.red(count) : pc.green(count);
+      lines.push(`  ${safeTerm(job.job)}  ${label}  ${rate}%${platform}`);
+      for (const step of job.steps) {
+        lines.push(pc.dim(`    step "${safeTerm(step.step)}" failed in ${step.failedRuns} run${step.failedRuns === 1 ? "" : "s"}`));
+      }
+    }
+  }
+  const failed = history.runs.filter(
+    (r) => r.conclusion === "failed" || r.failedJobs.length > 0
+  );
+  if (failed.length > 0) {
+    lines.push("");
+    lines.push(pc.bold("failed runs"));
+    for (const run of failed) {
+      const blame = run.failedJobs.length > 0 ? run.failedJobs.map((j) => safeTerm(j.step === null ? j.job : `${j.job}:${j.step}`)).join(", ") : pc.dim("(no failed job recorded)");
+      lines.push(`  ${shortSha(run.headSha)}  ${pc.dim(run.startedAt)}  ${blame}`);
+    }
+  }
+  return lines.join("\n");
+}
+function formatProviderRow(p5) {
+  const icon = p5.usable ? pc.green("\u25CF") : pc.gray("\u25CB");
+  const name = p5.usable ? pc.white(p5.provider) : pc.gray(p5.provider);
+  const flags = [
+    p5.credential,
+    p5.actCapable ? pc.green("act") : pc.gray("no-act"),
+    p5.regions.length > 0 ? `regions: ${p5.regions.join(",")}` : "no region choice",
+    p5.position === null ? pc.gray("not in provider order") : `order #${p5.position}`
+  ].join("  ");
+  return `  ${icon} ${name}  ${flags}`;
+}
+function formatVerifyResult(r) {
+  const ok = r.verified === true;
+  const head = ok ? pc.green("verified") : pc.red("not verified");
+  const detail = r.key.statusDetail ? pc.dim(`  ${r.key.statusDetail}`) : "";
+  const act = r.key.actCapable ? pc.green("  act-capable") : "";
+  return `${head}  ${r.key.provider}${act}${detail}`;
+}
+function formatRepoRow(r) {
+  const head = r.enabled ? pc.green("enabled") : pc.dim("disabled");
+  const via = r.authType === "github_app" ? "github-app" : r.authType;
+  const workflows = r.workflowPaths.length > 0 ? `${r.workflowPaths.length} workflow${r.workflowPaths.length === 1 ? "" : "s"}` : "no workflows yet";
+  const error = r.lastPollError ? pc.red(`  poll error: ${safeTerm(r.lastPollError)}`) : "";
+  return `${head}  ${safeTerm(r.fullName)}  ${pc.dim(`${safeTerm(via)} \xB7 ${safeTerm(r.defaultBranch)} \xB7 ${workflows}`)}${error}`;
+}
+function printDiscovery(d) {
+  if (d.error) {
+    console.log(pc.yellow(`discovery: ${safeTerm(d.error)} (the poll cron retries)`));
+    return;
+  }
+  console.log(pc.dim(`discovery: ${d.workflowsFound ? "workflows found" : "no workflows yet"}${d.seeded ? ", cursors seeded" : ""}`));
+}
 function registerActionsCommands(program2) {
   const actions = program2.command("actions").alias("ci").description("Drive the benchmarks-platform Actions API");
   const common = (cmd) => cmd.option("--api-key <key>", "API key (default: $COMPUTE_API_KEY)").option("--base-url <url>", "API base URL (default: https://platform.computesdk.com)").option("--allow-untrusted-host", "send the API key to a non-computesdk, non-localhost --base-url").option("--json", "print machine-readable JSON");
   common(
-    actions.command("dispatch").description("Dispatch a workflow_dispatch run").argument("<repo>", "repository in owner/repo format").requiredOption("--workflow <path|name>", "workflow path or name").option("--ref <ref>", "git ref to run (default: the workflow's first watched ref)").option("--inputs <pairs...>", "workflow inputs as key=value")
+    actions.command("dispatch").description("Dispatch a workflow_dispatch run").argument("<repo>", "repository in owner/repo format").requiredOption("--workflow <path|name>", "workflow path or name").option("--ref <ref>", "git ref to run (default: the workflow's first watched ref)").option("--inputs <pairs...>", "workflow inputs as key=value").option("--provider <id>", "place the run on one provider (e.g. namespace, vercel:sfo1) instead of the org provider order").option("--provider-region <region>", "region for --provider (same as --provider <id>:<region>)")
   ).action(async (repo, opts) => {
     try {
       const c = client(opts);
@@ -1062,9 +1254,20 @@ function registerActionsCommands(program2) {
       }
       const ref = opts.ref ?? workflow.refs[0];
       if (!ref) throw new Error("No --ref given and the workflow has no watched refs.");
+      if (opts.providerRegion !== void 0 && opts.provider === void 0) {
+        throw new Error("--provider-region requires --provider.");
+      }
       const result = await c.post(
         "/api/v1/actions/dispatch",
-        { workflowId: workflow.id, ref, inputs: parseInputs(opts.inputs) }
+        {
+          workflowId: workflow.id,
+          ref,
+          inputs: parseInputs(opts.inputs),
+          ...opts.provider !== void 0 && {
+            provider: opts.provider,
+            ...opts.providerRegion !== void 0 && { providerRegion: opts.providerRegion }
+          }
+        }
       );
       const org = await c.org();
       const url = `${c.baseUrl}/${org.slug}/actions/runs/${result.runId}`;
@@ -1096,6 +1299,29 @@ function registerActionsCommands(program2) {
       fail(e);
     }
   });
+  common(
+    actions.command("history").description("Recent run history for a workflow \u2014 per-job/step failure rates (is this failure flaky?)").argument("<repo>", "repository in owner/repo format").requiredOption("--workflow <path|name>", "workflow path or name").option("--branch <branch...>", "narrow the window to branches/refs").option("--job <job>", "narrow the rollup to one job name or workflow job id").option("--limit <n>", "runs in the window (default 10, max 50)")
+  ).action(async (repo, opts) => {
+    try {
+      const c = client(opts);
+      const { workflows } = await c.get(
+        "/api/v1/actions/workflows",
+        { repo }
+      );
+      const workflow = matchWorkflow(workflows, opts.workflow) ?? workflows.find((w) => w.path === opts.workflow);
+      const workflowPath = workflow?.path ?? opts.workflow;
+      const history = await c.get("/api/v1/actions/history", {
+        repo,
+        workflow: workflowPath,
+        branch: opts.branch,
+        job: opts.job,
+        limit: opts.limit
+      });
+      output(opts, history, (h) => console.log(formatRunHistory(h)));
+    } catch (e) {
+      fail(e);
+    }
+  });
   common(
     actions.command("run").description("Show a run: jobs, provider:region placement, placement attempts").argument("<run-id>", "run ID")
   ).action(async (runId, opts) => {
@@ -1104,7 +1330,37 @@ function registerActionsCommands(program2) {
       const run = await c.get(`/api/v1/actions/runs/${runId}`);
       const org = await c.org();
       const url = `${c.baseUrl}/${org.slug}/actions/runs/${run.id}`;
-      output(opts, { ...run, url }, (r) => console.log(formatRunDetail(r, r.url)));
+      const summary = run.conclusion === "failed" ? await fetchRunSummary(c, runId) : null;
+      output(opts, { ...run, url, summary }, (r) => {
+        console.log(formatRunDetail(r, r.url));
+        if (summary && summary.failures.length > 0) {
+          console.log("");
+          console.log(formatRunSummary(summary));
+        }
+      });
+    } catch (e) {
+      fail(e);
+    }
+  });
+  common(
+    actions.command("summary").description("Show a run's failure digest: failed jobs, failed steps, bounded log tails").argument("<run-id>", "run ID")
+  ).action(async (runId, opts) => {
+    try {
+      const summary = await client(opts).get(`/api/v1/actions/runs/${runId}/summary`);
+      output(opts, summary, (s) => console.log(formatRunSummary(s)));
+    } catch (e) {
+      fail(e);
+    }
+  });
+  common(
+    actions.command("inspect").description("Inspect a run: resolved runner image, caches, secret names, concurrency, placement context").argument("<run-id>", "run ID")
+  ).action(async (runId, opts) => {
+    try {
+      const c = client(opts);
+      const inspection = await c.get(
+        `/api/v1/actions/runs/${runId}/state`
+      );
+      output(opts, inspection, (r) => console.log(formatRunInspection(r)));
     } catch (e) {
       fail(e);
     }
@@ -1167,6 +1423,157 @@ function registerActionsCommands(program2) {
       fail(e);
     }
   });
+  const providers = actions.command("providers").description("List the org's registered compute providers (regions, act/usable status)");
+  common(providers).action(async (opts) => {
+    try {
+      const data = await client(opts).get("/api/v1/actions/providers");
+      output(opts, data, (d) => {
+        for (const p5 of d.providers) console.log(formatProviderRow(p5));
+      });
+    } catch (e) {
+      fail(e);
+    }
+  });
+  common(
+    providers.command("configure").description("Save the org's credential for a provider (owner/admin API key)").argument("<provider>", "provider id (e.g. tensorlake, blaxel)").option("--key <key>", "provider API key (single-field credentials)").option("--field <pair...>", "credential fields as name=value (multi-field providers)").option("--verify", "run the placement probe after saving")
+  ).action(async (provider, opts) => {
+    try {
+      const c = client(opts);
+      let body;
+      if (opts.field !== void 0) {
+        if (opts.key !== void 0) throw new Error("Pass either --key or --field, not both.");
+        body = { fields: parseInputs(opts.field) };
+      } else if (opts.key !== void 0) {
+        body = { key: opts.key };
+      } else {
+        throw new Error("Pass --key <key> or --field name=value.");
+      }
+      const saved = await c.put(
+        `/api/v1/actions/providers/${provider}/key`,
+        body
+      );
+      const verification = opts.verify ? await c.post(
+        `/api/v1/actions/providers/${provider}/verify`
+      ) : void 0;
+      output(opts, verification ? { key: saved.key, verification } : saved, () => {
+        console.log(`saved  ${saved.key.provider}  ${pc.dim(saved.key.keyHint)}  ${saved.key.status}`);
+        if (verification) console.log(formatVerifyResult(verification));
+      });
+      if (verification?.verified === false) process.exitCode = 1;
+    } catch (e) {
+      fail(e);
+    }
+  });
+  common(
+    providers.command("verify").description('Probe the stored provider key with a real sandbox ("Test" in Settings)').argument("<provider>", "provider id")
+  ).action(async (provider, opts) => {
+    try {
+      const result = await client(opts).post(
+        `/api/v1/actions/providers/${provider}/verify`
+      );
+      output(opts, result, (r) => console.log(formatVerifyResult(r)));
+      if (result.verified === false) process.exitCode = 1;
+    } catch (e) {
+      fail(e);
+    }
+  });
+  common(
+    providers.command("remove").description("Delete the org's stored credential for a provider").argument("<provider>", "provider id")
+  ).action(async (provider, opts) => {
+    try {
+      const result = await client(opts).del(
+        `/api/v1/actions/providers/${provider}/key`
+      );
+      output(opts, result, (r) => {
+        console.log(r.deleted ? `deleted  ${r.provider}` : `no key stored for ${r.provider}`);
+      });
+    } catch (e) {
+      fail(e);
+    }
+  });
+  const repos = actions.command("repos").description("List the org's connected repositories");
+  common(repos).action(async (opts) => {
+    try {
+      const data = await client(opts).get("/api/v1/actions/repos");
+      output(opts, data, (d) => {
+        for (const r of d.repos) console.log(formatRepoRow(r));
+      });
+    } catch (e) {
+      fail(e);
+    }
+  });
+  common(
+    repos.command("connect").description("Connect a git remote (validated by a real ls-remote; lands enabled)").argument("<cloneUrl>", "http(s) or ssh git remote URL").option("--name <owner/repo>", "repo name override (default: derived from cloneUrl)").option("--branch <branch>", "default branch (default: main, else the remote's first)").option("--token <token>", "credential for private http(s) remotes").option("--username <user>", 'username \u2014 with --token, makes auth "basic" instead of "token"').option("--ssh-key-file <path>", "OpenSSH/PEM private key file for ssh remotes").option("--known-hosts-file <path>", "known_hosts pin for ssh remotes")
+  ).action(async (cloneUrl, opts) => {
+    try {
+      let body;
+      if (opts.sshKeyFile !== void 0) {
+        if (opts.token !== void 0 || opts.username !== void 0) {
+          throw new Error("Pass either --ssh-key-file or --token/--username, not both.");
+        }
+        body = {
+          authType: "ssh",
+          credential: readFileSync(opts.sshKeyFile, "utf8"),
+          ...opts.knownHostsFile !== void 0 && {
+            knownHosts: readFileSync(opts.knownHostsFile, "utf8")
+          }
+        };
+      } else if (opts.username !== void 0) {
+        if (opts.token === void 0) throw new Error("--username requires --token.");
+        body = { authType: "basic", username: opts.username, credential: opts.token };
+      } else if (opts.token !== void 0) {
+        body = { authType: "token", credential: opts.token };
+      } else {
+        body = { authType: "none" };
+      }
+      if (opts.knownHostsFile !== void 0 && opts.sshKeyFile === void 0) {
+        throw new Error("--known-hosts-file requires --ssh-key-file.");
+      }
+      const result = await client(opts).post("/api/v1/actions/repos", {
+        cloneUrl,
+        ...body,
+        ...opts.name !== void 0 && { name: opts.name },
+        ...opts.branch !== void 0 && { defaultBranch: opts.branch }
+      });
+      output(opts, result, (r) => {
+        console.log(`connected  ${pc.cyan(safeTerm(r.fullName))}  ${pc.dim(`(${safeTerm(r.authType)}, ${safeTerm(r.defaultBranch)})`)}`);
+        printDiscovery(r.discovery);
+      });
+    } catch (e) {
+      fail(e);
+    }
+  });
+  common(
+    repos.command("enable").description("Enable a repo the org can already see (granted by a GitHub App install, or a connected remote)").argument("<repo>", "repository in owner/repo format").option("--repo-id <id>", "scope to one row when two installations grant the same name")
+  ).action(async (repo, opts) => {
+    try {
+      const result = await client(opts).patch("/api/v1/actions/repos", {
+        fullName: repo,
+        enabled: true,
+        ...opts.repoId !== void 0 && { repoId: opts.repoId }
+      });
+      output(opts, result, (r) => {
+        console.log(`enabled  ${pc.cyan(safeTerm(r.fullName))}`);
+        if (r.discovery) printDiscovery(r.discovery);
+      });
+    } catch (e) {
+      fail(e);
+    }
+  });
+  common(
+    repos.command("disable").description("Disable a repo \u2014 it stays connected but no runs are scheduled").argument("<repo>", "repository in owner/repo format").option("--repo-id <id>", "scope to one row when two installations grant the same name")
+  ).action(async (repo, opts) => {
+    try {
+      const result = await client(opts).patch("/api/v1/actions/repos", {
+        fullName: repo,
+        enabled: false,
+        ...opts.repoId !== void 0 && { repoId: opts.repoId }
+      });
+      output(opts, result, (r) => console.log(`disabled  ${pc.cyan(safeTerm(r.fullName))}`));
+    } catch (e) {
+      fail(e);
+    }
+  });
   common(
     actions.command("cancel").description("Cancel a run").argument("<run-id>", "run ID")
   ).action(async (runId, opts) => {
@@ -1500,7 +1907,7 @@ init_workspace_cli();
 var __filename2 = fileURLToPath2(import.meta.url);
 var __dirname2 = dirname2(__filename2);
 var packageJson = JSON.parse(
-  readFileSync4(join5(__dirname2, "..", "package.json"), "utf-8")
+  readFileSync5(join5(__dirname2, "..", "package.json"), "utf-8")
 );
 var isDevBuild = import.meta.url.includes("worktrees") || import.meta.url.includes("/packages/cli/");
 var VERSION = isDevBuild ? `${packageJson.version}-dev` : packageJson.version;