@corelayer-ai/cli 0.2.0 → 0.4.0

package/dist/commands/config.js

@@ -1,6 +1,34 @@
 import { readConfig, updateConfig } from "../lib/config.js";
 import { fail, printJson } from "../lib/output.js";
+function printHelp() {
+    process.stdout.write(`corelayer config - Read and write local CLI config
+
+USAGE:
+  corelayer config <subcommand> [key] [value]
+
+SUBCOMMANDS:
+  get [key]           Print the full config, or one value
+  set <key> <value>   Set a config value
+
+KEYS:
+  api-url             API server URL
+  default-group       Default group ID for issues and integrations commands
+
+OPTIONS:
+  --json              Output as JSON (get only)
+  -h, --help          Print help
+
+EXAMPLES:
+  corelayer config get
+  corelayer config get api-url
+  corelayer config set default-group g_123
+`);
+}
 export async function runConfig(args, ctx) {
+    if (args.includes("--help") || args.includes("-h")) {
+        printHelp();
+        return;
+    }
     const sub = args[0];
     if (sub === "get") {
         const key = args[1];

package/dist/commands/groups.js

@@ -1,17 +1,38 @@
 import { CorelayerClient } from "../lib/api-client.js";
-import { readConfig } from "../lib/config.js";
+import { resolveToken, resolveApiUrl } from "../lib/config.js";
 import { fail, formatDate, printJson, printTable } from "../lib/output.js";
+function printHelp() {
+    process.stdout.write(`corelayer groups - List and inspect groups
+
+USAGE:
+  corelayer groups <subcommand> [options]
+
+SUBCOMMANDS:
+  list    List all groups you have access to
+
+OPTIONS:
+  --json        Output as JSON
+  -h, --help    Print help
+
+EXAMPLES:
+  corelayer groups list
+  corelayer groups list --json
+`);
+}
 export async function runGroups(args, ctx) {
+    if (args.includes("--help") || args.includes("-h")) {
+        printHelp();
+        return;
+    }
     const sub = args[0];
     if (sub !== "list") {
         fail("Usage: corelayer groups list");
     }
-    const config = readConfig();
-    const token = config.token;
+    const token = resolveToken();
     if (!token) {
-        fail("Not logged in. Run: corelayer login");
+        fail("Not authenticated. Set CORELAYER_API_KEY or run: corelayer login");
     }
-    const apiUrl = ctx.apiUrlOverride || config.apiUrl;
+    const apiUrl = resolveApiUrl(ctx.apiUrlOverride);
     const client = new CorelayerClient(apiUrl, token);
     const result = await client.listGroups();
     if (ctx.json) {

package/dist/commands/install-skill.js

@@ -13,7 +13,37 @@ function getSkillSourcePath() {
     const packageDir = dirname(distDir);
     return join(packageDir, "skill", "SKILL.md");
 }
-export async function runInstallSkill(_args, ctx) {
+function printInstallHelp() {
+    process.stdout
+        .write(`corelayer install-skill - Install the Corelayer agent skill
+
+USAGE:
+  corelayer install-skill
+
+DESCRIPTION:
+  Copies the Corelayer skill into ~/.claude/skills/corelayer so coding agents
+  can use it. Run 'corelayer uninstall-skill' to remove it.
+
+OPTIONS:
+  -h, --help    Print help
+`);
+}
+function printUninstallHelp() {
+    process.stdout
+        .write(`corelayer uninstall-skill - Remove the Corelayer agent skill
+
+USAGE:
+  corelayer uninstall-skill
+
+OPTIONS:
+  -h, --help    Print help
+`);
+}
+export async function runInstallSkill(args, ctx) {
+    if (args.includes("--help") || args.includes("-h")) {
+        printInstallHelp();
+        return;
+    }
     const source = getSkillSourcePath();
     if (!existsSync(source)) {
         fail("Skill file not found. The CLI package may be incomplete.");
@@ -23,10 +53,14 @@ export async function runInstallSkill(_args, ctx) {
     mkdirSync(targetDir, { recursive: true });
     copyFileSync(source, targetFile);
     if (!ctx.quiet) {
-        process.stdout.write(`Corelayer skill installed to ${targetFile}\nClaude Code will now automatically use the Corelayer CLI for production tasks.\n`);
+        process.stdout.write(`Corelayer skill installed to ${targetFile}\n`);
     }
 }
-export async function runUninstallSkill(_args, ctx) {
+export async function runUninstallSkill(args, ctx) {
+    if (args.includes("--help") || args.includes("-h")) {
+        printUninstallHelp();
+        return;
+    }
     const targetDir = getSkillTargetDir();
     const targetFile = join(targetDir, "SKILL.md");
     if (!existsSync(targetFile)) {

package/dist/commands/integrations.js

@@ -1,5 +1,5 @@
 import { CorelayerClient } from "../lib/api-client.js";
-import { readConfig } from "../lib/config.js";
+import { readConfig, resolveToken, resolveApiUrl } from "../lib/config.js";
 import { fail, printJson, printTable } from "../lib/output.js";
 function readFlag(args, flag) {
     const index = args.indexOf(flag);
@@ -7,18 +7,41 @@ function readFlag(args, flag) {
         return undefined;
     return args[index + 1];
 }
+function printHelp() {
+    process.stdout.write(`corelayer integrations - List integrations for a group
+
+USAGE:
+  corelayer integrations <subcommand> [options]
+
+SUBCOMMANDS:
+  list    List integrations for a group
+
+OPTIONS:
+  --group <id>    Group ID (or set default-group via 'corelayer config set')
+  --json          Output as JSON
+  -h, --help      Print help
+
+EXAMPLES:
+  corelayer integrations list --group g_123
+  corelayer integrations list --json
+`);
+}
 export async function runIntegrations(args, ctx) {
+    if (args.includes("--help") || args.includes("-h")) {
+        printHelp();
+        return;
+    }
     const sub = args[0];
     if (sub !== "list") {
         fail("Usage: corelayer integrations list [--group <groupId>]");
     }
     const config = readConfig();
-    const token = config.token;
+    const token = resolveToken();
     if (!token) {
-        fail("Not logged in. Run: corelayer login");
+        fail("Not authenticated. Set CORELAYER_API_KEY or run: corelayer login");
     }
     const groupId = readFlag(args, "--group") || config.defaults?.group;
-    const apiUrl = ctx.apiUrlOverride || config.apiUrl;
+    const apiUrl = resolveApiUrl(ctx.apiUrlOverride);
     const client = new CorelayerClient(apiUrl, token);
     const result = await client.listIntegrations(groupId);
     if (ctx.json) {

package/dist/commands/issues.js

@@ -1,7 +1,7 @@
 import { createInterface } from "node:readline/promises";
 import { stdin as input, stdout as output } from "node:process";
 import { CorelayerClient } from "../lib/api-client.js";
-import { readConfig } from "../lib/config.js";
+import { readConfig, resolveToken, resolveApiUrl } from "../lib/config.js";
 import { fail, formatDate, printJson, printTable } from "../lib/output.js";
 function readFlag(args, flag) {
     const index = args.indexOf(flag);
@@ -25,7 +25,9 @@ function removeFlags(args) {
             arg === "--severity" ||
             arg === "--limit" ||
             arg === "--page" ||
-            arg === "--feedback") {
+            arg === "--feedback" ||
+            arg === "--last-seen-before" ||
+            arg === "--last-seen-before-or-on") {
             skipNext = true;
             continue;
         }
@@ -45,14 +47,56 @@ async function confirmDelete() {
     rl.close();
     return answer.trim().toLowerCase() === "y";
 }
+function printHelp() {
+    process.stdout.write(`corelayer issues - List, inspect, and manage issues
+
+USAGE:
+  corelayer issues <subcommand> [options]
+
+SUBCOMMANDS:
+  list                  List issues in a group
+  get <id>              Show details for one issue
+  summary               Summarize issue health for a group
+  close <id>            Close an issue (write operation)
+  bulk-close            Close many issues in one request (write operation)
+  reopen <id>           Reopen a closed issue (write operation)
+  delete <id>           Delete an issue (write operation)
+
+OPTIONS:
+  --group <id>          Group ID (or set default-group via 'corelayer config set')
+  --status <status>     Filter by status (list)
+  --severity <sev>      Filter by severity (list)
+  --limit <n>           Limit results (list)
+  --page <n>            Page number (list)
+  --feedback <text>     Feedback message (close)
+  --last-seen-before <date|preset>
+                        Filter bulk-close to issues seen before a cutoff
+  --last-seen-before-or-on <date|preset>
+                        Filter bulk-close to issues seen on or before a cutoff
+  --yes                 Skip confirmation prompt (delete)
+  --json                Output as JSON
+  -h, --help            Print help
+
+EXAMPLES:
+  corelayer issues list --group g_123 --status Open
+  corelayer issues get i_456 --json
+  corelayer issues close i_456 --feedback "fixed in deploy 2026-04-07"
+  corelayer issues bulk-close --group g_123 --last-seen-before-or-on 14days --feedback "Not seen in two weeks"
+  corelayer issues delete i_456 --yes
+`);
+}
 export async function runIssues(args, ctx) {
+    if (args.includes("--help") || args.includes("-h")) {
+        printHelp();
+        return;
+    }
     const sub = args[0];
     const config = readConfig();
-    const token = config.token;
+    const token = resolveToken();
     if (!token) {
-        fail("Not logged in. Run: corelayer login");
+        fail("Not authenticated. Set CORELAYER_API_KEY or run: corelayer login");
     }
-    const apiUrl = ctx.apiUrlOverride || config.apiUrl;
+    const apiUrl = resolveApiUrl(ctx.apiUrlOverride);
     const client = new CorelayerClient(apiUrl, token);
     const commandArgs = removeFlags(args.slice(1));
     if (sub === "list") {
@@ -123,6 +167,39 @@ export async function runIssues(args, ctx) {
         }
         return;
     }
+    if (sub === "bulk-close") {
+        const groupId = readFlag(args, "--group") || config.defaults?.group;
+        if (!groupId) {
+            fail("groupId is required. Use --group <groupId> or set default-group via corelayer config set default-group <groupId>");
+        }
+        const lastSeenBefore = readFlag(args, "--last-seen-before");
+        const lastSeenBeforeOrOn = readFlag(args, "--last-seen-before-or-on");
+        if (!lastSeenBefore && !lastSeenBeforeOrOn) {
+            fail('Usage: corelayer issues bulk-close --group <groupId> (--last-seen-before <date|preset> | --last-seen-before-or-on <date|preset>) [--feedback "..."]');
+        }
+        const feedback = readFlag(args, "--feedback");
+        const result = await client.bulkIssueAction({
+            action: "close",
+            groupId,
+            feedback,
+            filters: {
+                status: readFlag(args, "--status") || "Open",
+                severity: readFlag(args, "--severity"),
+                lastSeenBefore,
+                lastSeenBeforeOrOn,
+            },
+        });
+        if (ctx.json) {
+            printJson(result);
+            return;
+        }
+        process.stdout.write(`Bulk close complete. Closed ${result.affected} issues`);
+        if (result.skipped > 0) {
+            process.stdout.write(`, skipped ${result.skipped}`);
+        }
+        process.stdout.write(".\n");
+        return;
+    }
     if (sub === "reopen") {
         const issueId = commandArgs[0];
         if (!issueId) {
@@ -162,5 +239,5 @@ export async function runIssues(args, ctx) {
         printJson(summary);
         return;
     }
-    fail("Usage: corelayer issues <list|get|close|reopen|delete|summary> [options]");
+    fail("Usage: corelayer issues <list|get|close|bulk-close|reopen|delete|summary> [options]");
 }

package/dist/commands/login.js

@@ -1,4 +1,5 @@
 import { loginWithBrowser, loginWithCodeDirect } from "../lib/auth.js";
+import { updateConfig } from "../lib/config.js";
 import { fail } from "../lib/output.js";
 function readFlag(args, flag) {
     const index = args.indexOf(flag);
@@ -6,8 +7,58 @@ function readFlag(args, flag) {
         return undefined;
     return args[index + 1];
 }
+function hasFlag(args, flag) {
+    return args.includes(flag);
+}
+function printHelp() {
+    process.stdout.write(`corelayer login - Authenticate with Corelayer
+
+USAGE:
+  corelayer login                                 Open browser to authenticate
+  corelayer login --code <code> --api-url <url>   Complete login with an auth code
+  corelayer login --with-token --api-url <url>    Save a token piped on stdin
+
+OPTIONS:
+  --code <code>      Auth code from the browser flow (manual login)
+  --with-token       Read an API key from stdin and save it to config
+  --api-url <url>    API server URL (required for --code and --with-token)
+  -h, --help         Print help
+
+EXAMPLES:
+  corelayer login
+  corelayer login --code abc123 --api-url https://api.corelayer.com
+  echo $CORELAYER_API_KEY | corelayer login --with-token --api-url https://api.corelayer.com
+`);
+}
+async function readStdin() {
+    if (process.stdin.isTTY) {
+        fail("No token provided on stdin. Usage: echo $CORELAYER_API_KEY | corelayer login --with-token");
+    }
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks).toString("utf8").trim();
+}
 export async function runLogin(args, ctx) {
+    if (hasFlag(args, "--help") || hasFlag(args, "-h")) {
+        printHelp();
+        return;
+    }
     const code = readFlag(args, "--code");
+    const withToken = hasFlag(args, "--with-token");
+    if (withToken) {
+        const token = await readStdin();
+        if (!token) {
+            fail("Empty token. Usage: echo $CORELAYER_API_KEY | corelayer login --with-token");
+        }
+        const apiUrl = ctx.apiUrlOverride || "https://api.corelayer.com";
+        updateConfig({ token, apiUrl });
+        if (!ctx.quiet) {
+            process.stdout.write(`Token saved. API URL: ${apiUrl}\n`);
+        }
+        return;
+    }
     let email;
     let orgName;
     if (code) {

package/dist/commands/logout.js

@@ -1,5 +1,19 @@
 import { clearToken } from "../lib/config.js";
-export async function runLogout(_args, ctx) {
+function printHelp() {
+    process.stdout.write(`corelayer logout - Sign out and clear local credentials
+
+USAGE:
+  corelayer logout
+
+OPTIONS:
+  -h, --help    Print help
+`);
+}
+export async function runLogout(args, ctx) {
+    if (args.includes("--help") || args.includes("-h")) {
+        printHelp();
+        return;
+    }
     clearToken();
     if (!ctx.quiet) {
         process.stdout.write("Logged out.\n");

package/dist/index.js

@@ -10,24 +10,36 @@ import { runLogout } from "./commands/logout.js";
 const require = createRequire(import.meta.url);
 const { version } = require("../package.json");
 function printHelp() {
-    process.stdout.write(`Corelayer CLI
+    process.stdout
+        .write(`Corelayer CLI - Manage groups, issues, and integrations from your terminal
 
-Usage:
-  corelayer login                              (opens browser)
-  corelayer login --code <CODE> --api-url <url> (manual)
-  corelayer logout
-  corelayer issues <list|get|close|reopen|delete|summary> ...
-  corelayer groups list
-  corelayer integrations list [--group <groupId>]
-  corelayer config <get|set> ...
-  corelayer install-skill                       (install Claude Code skill)
-  corelayer uninstall-skill                     (remove Claude Code skill)
+USAGE:
+  corelayer [global options] <command> [command options]
 
-Global flags:
-  --json
-  --quiet, -q
-  --api-url <url>
-  --no-color
+COMMANDS:
+  login              Authenticate with Corelayer (opens browser)
+  logout             Sign out and clear local credentials
+  groups             List and inspect groups
+  issues             List, inspect, and manage issues
+  integrations       List integrations for a group
+  config             Read and write local CLI config
+  install-skill      Install the Corelayer agent skill
+  uninstall-skill    Remove the Corelayer agent skill
+
+GLOBAL OPTIONS:
+  --json             Output as JSON for scripting
+  -q, --quiet        Suppress non-essential output
+  --api-url <url>    Override the configured API server
+  --no-color         Disable colored output
+  -h, --help         Print help
+  -v, --version      Print version
+
+ENVIRONMENT VARIABLES:
+  CORELAYER_API_KEY  API key for non-interactive auth (skips login)
+  CORELAYER_API_URL  Server URL (default: https://api.corelayer.com)
+  CORELAYER_AUTH_URL Auth server URL (default: https://app.corelayer.com)
+
+Run 'corelayer <command> --help' for more information on a command.
 `);
 }
 function parseGlobalFlags(argv) {

package/dist/lib/api-client.js

@@ -6,9 +6,14 @@ async function parseError(res) {
     catch {
         body = null;
     }
-    return (body?.error ||
+    const message = body?.error ||
         body?.message ||
-        `${res.status} ${res.statusText || "Request failed"}`);
+        `${res.status} ${res.statusText || "Request failed"}`;
+    const retryAfter = res.headers.get("retry-after");
+    if (res.status === 429 && retryAfter) {
+        return `${message}. Retry after ${retryAfter}s.`;
+    }
+    return message;
 }
 export class CorelayerClient {
     baseUrl;
@@ -65,6 +70,22 @@ export class CorelayerClient {
             feedback,
         });
     }
+    async bulkIssueAction(params) {
+        const filters = new URLSearchParams();
+        for (const [key, value] of Object.entries(params.filters || {})) {
+            if (value !== undefined && value !== null && value !== "") {
+                filters.set(key, String(value));
+            }
+        }
+        return this.request("POST", "/api/v1/issues/bulk", {
+            action: params.action,
+            groupId: params.groupId,
+            issueIds: params.issueIds,
+            selectAll: !params.issueIds || params.issueIds.length === 0,
+            filters: filters.toString() || undefined,
+            feedback: params.feedback,
+        });
+    }
     async reopenIssue(issueId) {
         await this.request("PATCH", `/api/v1/issues/${issueId}`, {
             status: "Open",

package/dist/lib/config.js

@@ -4,7 +4,7 @@ import path from "node:path";
 const CONFIG_DIR = path.join(os.homedir(), ".corelayer");
 const CONFIG_PATH = path.join(CONFIG_DIR, "config.json");
 function defaultApiUrl() {
-    return process.env.CORELAYER_API_URL || "http://localhost:3000";
+    return process.env.CORELAYER_API_URL || "https://api.corelayer.com";
 }
 export function getConfigPath() {
     return CONFIG_PATH;
@@ -52,6 +52,12 @@ export function updateConfig(partial) {
     writeConfig(merged);
     return merged;
 }
+export function resolveToken() {
+    return process.env.CORELAYER_API_KEY || readConfig().token;
+}
+export function resolveApiUrl(override) {
+    return override || readConfig().apiUrl;
+}
 export function clearToken() {
     const current = readConfig();
     delete current.token;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corelayer-ai/cli",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Corelayer CLI",
   "type": "module",
   "bin": {

package/skill/SKILL.md

@@ -47,6 +47,7 @@ Returns: title, status, severity, event count, what happened, root cause, and ne
 
 ```bash
 corelayer issues close <issueId> --feedback "Fixed in PR #123"
+corelayer issues bulk-close --group <groupId> --last-seen-before-or-on 14days --feedback "Not seen in two weeks"
 corelayer issues reopen <issueId>
 corelayer issues delete <issueId> --yes
 ```
@@ -95,6 +96,10 @@ Returns a JSON severity breakdown for the group.
 
 Close an issue. Optionally provide feedback (e.g., link to the fix).
 
+### `corelayer issues bulk-close --group <id> (--last-seen-before <date|preset> | --last-seen-before-or-on <date|preset>) [--feedback "..."]`
+
+Close many stale issues in one request. Presets such as `14days` are supported.
+
 ### `corelayer issues reopen <issueId>`
 
 Reopen a previously closed issue.

package/dist/lib/cli-auth.js

@@ -1,31 +0,0 @@
-import crypto from "node:crypto";
-const MAX_CALLBACK_BODY_BYTES = 8 * 1024;
-export function parseTrustedOrigin(authBaseUrl) {
-    const parsed = new URL(authBaseUrl);
-    return parsed.origin;
-}
-export function hashCliAuthCode(code) {
-    return crypto.createHash("sha256").update(code).digest("hex");
-}
-export async function readJsonBody(req) {
-    const chunks = [];
-    let total = 0;
-    for await (const chunk of req) {
-        const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        total += buffer.length;
-        if (total > MAX_CALLBACK_BODY_BYTES) {
-            throw new Error("Callback body is too large");
-        }
-        chunks.push(buffer);
-    }
-    const raw = Buffer.concat(chunks).toString("utf8").trim();
-    if (!raw) {
-        return {};
-    }
-    try {
-        return JSON.parse(raw);
-    }
-    catch {
-        throw new Error("Callback body is not valid JSON");
-    }
-}