@formigio/fazemos-cli 0.10.39 → 0.10.41

package/dist/autostart.d.ts

@@ -0,0 +1,49 @@
+/**
+ * AUTON-AUTOSTART — Action→Pipeline Auto-Start: CLI command helpers.
+ *
+ * Exports `registerAutoStartCommands(program)` which wires the following commands
+ * into the root Commander program (mirrors the trigger/wake group pattern):
+ *
+ *   fazemos autostart list
+ *     → GET /api/control-plane/autostart?project_id=<id>
+ *       Reads the allow-listed (action_id, template_id, enabled) bindings.
+ *
+ *   fazemos autostart status [--json]
+ *     → GET /api/control-plane/autostart?project_id=<id>
+ *       bindings + recent action_pipeline_fires (window_key, fire_status,
+ *       pipeline_instance_id, last_error).
+ *
+ *   fazemos autostart disable --action <action-id> [--until <iso>] [--reason <text>]
+ *     → POST /api/control-plane/autostart/disable
+ *       { action: "disable", project_id, worksheet_action_id, reason, until? }
+ *       Upserts an action_autostart_disables row; timed (--until) or indefinite.
+ *
+ *   fazemos autostart enable --action <action-id>
+ *     → POST /api/control-plane/autostart/disable
+ *       { action: "enable", project_id, worksheet_action_id }
+ *       Deletes the disable row (re-enables the action's auto-start).
+ *
+ * Auth: disable/enable require admin/owner (same as trigger/wake).
+ *       list/status require any active org member.
+ * Scope: project-scoped reads (project_id query param); writes are org+project.
+ *
+ * NOTE: `fire-now` is deliberately NOT offered in V1 — manual pipeline start is
+ *       already `fazemos pl create`. A fire-now re-drive of a failed row is V2.
+ *
+ * Spec: AUTON-AUTOSTART-tech-spec.md §11 (R12, AC14)
+ * Manifest: cli_commands (fazemos autostart list/status/disable/enable)
+ *
+ * Key differences from trigger.ts:
+ *   - No cadence dimension (action auto-start is per-action, per-window)
+ *   - No fire-now command (V1 spec explicitly excludes it)
+ *   - Bindings keyed by action_id + template_id (not role + cadence)
+ *   - disable/enable keyed by --action <worksheet_action_id> (not --role + --cadence)
+ *   - Endpoint: /api/control-plane/autostart  and  /api/control-plane/autostart/disable
+ */
+import type { Command } from 'commander';
+/**
+ * Register `autostart list`, `autostart status`, `autostart disable`, and
+ * `autostart enable` into the root Commander program. Called from index.ts
+ * alongside registerTriggerCommands and registerWakeCommands.
+ */
+export declare function registerAutoStartCommands(program: Command): void;

package/dist/autostart.js

@@ -0,0 +1,364 @@
+/**
+ * AUTON-AUTOSTART — Action→Pipeline Auto-Start: CLI command helpers.
+ *
+ * Exports `registerAutoStartCommands(program)` which wires the following commands
+ * into the root Commander program (mirrors the trigger/wake group pattern):
+ *
+ *   fazemos autostart list
+ *     → GET /api/control-plane/autostart?project_id=<id>
+ *       Reads the allow-listed (action_id, template_id, enabled) bindings.
+ *
+ *   fazemos autostart status [--json]
+ *     → GET /api/control-plane/autostart?project_id=<id>
+ *       bindings + recent action_pipeline_fires (window_key, fire_status,
+ *       pipeline_instance_id, last_error).
+ *
+ *   fazemos autostart disable --action <action-id> [--until <iso>] [--reason <text>]
+ *     → POST /api/control-plane/autostart/disable
+ *       { action: "disable", project_id, worksheet_action_id, reason, until? }
+ *       Upserts an action_autostart_disables row; timed (--until) or indefinite.
+ *
+ *   fazemos autostart enable --action <action-id>
+ *     → POST /api/control-plane/autostart/disable
+ *       { action: "enable", project_id, worksheet_action_id }
+ *       Deletes the disable row (re-enables the action's auto-start).
+ *
+ * Auth: disable/enable require admin/owner (same as trigger/wake).
+ *       list/status require any active org member.
+ * Scope: project-scoped reads (project_id query param); writes are org+project.
+ *
+ * NOTE: `fire-now` is deliberately NOT offered in V1 — manual pipeline start is
+ *       already `fazemos pl create`. A fire-now re-drive of a failed row is V2.
+ *
+ * Spec: AUTON-AUTOSTART-tech-spec.md §11 (R12, AC14)
+ * Manifest: cli_commands (fazemos autostart list/status/disable/enable)
+ *
+ * Key differences from trigger.ts:
+ *   - No cadence dimension (action auto-start is per-action, per-window)
+ *   - No fire-now command (V1 spec explicitly excludes it)
+ *   - Bindings keyed by action_id + template_id (not role + cadence)
+ *   - disable/enable keyed by --action <worksheet_action_id> (not --role + --cadence)
+ *   - Endpoint: /api/control-plane/autostart  and  /api/control-plane/autostart/disable
+ */
+import chalk from 'chalk';
+import { api } from './api.js';
+import { getActiveProjectId } from './config.js';
+// ── Helpers ────────────────────────────────────────────────────────────────────
+/**
+ * Validate an ISO 8601 timestamp string (used for --until on disable).
+ * The API is strict — malformed timestamps produce a 400.
+ */
+function validateIsoTimestamp(value) {
+    const d = new Date(value);
+    if (isNaN(d.getTime())) {
+        throw new Error(`--until must be a valid ISO 8601 timestamp (e.g. 2026-12-31T23:59:59Z), got: ${value}`);
+    }
+    return value;
+}
+/**
+ * Human-readable fire_status label with colour.
+ * Mirrors the action_pipeline_fires.fire_status CHECK values:
+ *   'claimed' → in progress; 'fired' → created + launched; 'failed' → errored.
+ */
+function fireStatusLabel(status) {
+    switch (status) {
+        case 'fired':
+            return chalk.green(status);
+        case 'failed':
+            return chalk.red(status);
+        case 'claimed':
+            return chalk.cyan(status);
+        default:
+            return chalk.dim(status);
+    }
+}
+// ── Command registration ───────────────────────────────────────────────────────
+/**
+ * Register `autostart list`, `autostart status`, `autostart disable`, and
+ * `autostart enable` into the root Commander program. Called from index.ts
+ * alongside registerTriggerCommands and registerWakeCommands.
+ */
+export function registerAutoStartCommands(program) {
+    // ── `fazemos autostart` ──────────────────────────────────────────────────────
+    //
+    // Parent command hosting sub-commands: list, status, disable, enable.
+    // The parent itself has no action (sub-commands always required).
+    const autoStartCmd = program
+        .command('autostart')
+        .description('Inspect and operate the action→pipeline auto-start control plane (AUTONOMY).\n\n' +
+        'Sub-commands:\n' +
+        '  list       List the allow-listed (action, template) auto-start bindings\n' +
+        '  status     Show bindings + recent fire history (last 50 entries)\n' +
+        '  disable    Disable auto-start for an action (timed or indefinite) (admin/owner)\n' +
+        '  enable     Re-enable a previously disabled action auto-start (admin/owner)\n\n' +
+        'list/status are readable by any active org member.\n' +
+        'disable/enable require admin or owner role.\n' +
+        'All operations are project-scoped (uses active project or --project override).\n\n' +
+        'The auto-start engine is GATED OFF by default (AUTOSTART_ALLOWLIST empty).\n' +
+        'An empty bindings list means the engine is dormant — this is the safe\n' +
+        'default state. The ENABLE flip is a separate founder step.');
+    // ── `fazemos autostart list` ──────────────────────────────────────────────────
+    //
+    // GET /api/control-plane/autostart?project_id=<id>
+    //
+    // Prints the allow-listed (action_id, template_id) bindings + enabled state.
+    // No --json flag needed (list is simple enough for human output only).
+    //
+    // Usage:
+    //   fazemos autostart list
+    autoStartCmd
+        .command('list')
+        .description('List the configured auto-start bindings for the active project.\n\n' +
+        'Shows each allow-listed (action_id, template_id) pair and whether it is\n' +
+        'currently enabled. The binding list is driven by AUTOSTART_ALLOWLIST on\n' +
+        'the API; the enabled state reflects any operator disable in effect.\n\n' +
+        'An empty list means the engine is dormant (default safe state).\n\n' +
+        'Readable by any active org member.')
+        .action(async () => {
+        try {
+            const projectId = getActiveProjectId();
+            if (!projectId) {
+                throw new Error('No active project. Run `fazemos projects switch <slug>` first.');
+            }
+            const data = await api('GET', `/api/control-plane/autostart?project_id=${encodeURIComponent(projectId)}`, undefined, { noProjectHeader: true });
+            const { bindings } = data;
+            if (bindings.length === 0) {
+                console.log(chalk.yellow('No auto-start bindings configured (AUTOSTART_ALLOWLIST is empty or not set).\n' +
+                    'The engine is dormant — this is the default safe state.'));
+                return;
+            }
+            console.log(chalk.bold(`Auto-start bindings (${bindings.length} entries):`));
+            console.log();
+            for (const binding of bindings) {
+                const enabledLabel = binding.enabled
+                    ? chalk.green('enabled')
+                    : chalk.red('disabled');
+                console.log(`  ${chalk.cyan(binding.action_id)}  ${enabledLabel}`);
+                console.log(`    template: ${chalk.dim(binding.template_id)}`);
+                console.log();
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(chalk.red(`Error: ${msg}`));
+            process.exit(1);
+        }
+    });
+    // ── `fazemos autostart status` ────────────────────────────────────────────────
+    //
+    // GET /api/control-plane/autostart?project_id=<id>
+    //
+    // bindings + recent action_pipeline_fires (window_key, fire_status,
+    // pipeline_instance_id, last_error, claimed_at, fired_at, failed_at).
+    // Fires capped at 50 most recent entries (ordered by claimed_at DESC) by the API.
+    //
+    // Usage:
+    //   fazemos autostart status
+    //   fazemos autostart status --json
+    autoStartCmd
+        .command('status')
+        .description('Show auto-start bindings and recent fire history for the active project.\n\n' +
+        'Prints the allow-listed (action, template) bindings alongside the last 50\n' +
+        'action_pipeline_fire records (window_key, fire_status, pipeline_instance_id).\n\n' +
+        'fire_status values:\n' +
+        '  claimed  — claim inserted; pipeline create + launch in progress\n' +
+        '  fired    — pipeline instance created and launched successfully\n' +
+        '  failed   — the create/launch attempt failed (see last_error)\n\n' +
+        'Note: suppressed fires do NOT appear in the ledger (the claim is deleted on\n' +
+        'suppression; `autostart_suppressed` is logged as an agent_event instead).\n\n' +
+        'Readable by any active org member. Use --json for machine-readable output.')
+        .option('--json', 'output machine-readable JSON')
+        .action(async (opts) => {
+        try {
+            const projectId = getActiveProjectId();
+            if (!projectId) {
+                throw new Error('No active project. Run `fazemos projects switch <slug>` first.');
+            }
+            const data = await api('GET', `/api/control-plane/autostart?project_id=${encodeURIComponent(projectId)}`, undefined, { noProjectHeader: true });
+            if (opts.json) {
+                console.log(JSON.stringify(data, null, 2));
+                return;
+            }
+            const { bindings, fires } = data;
+            // ── Bindings ──────────────────────────────────────────────────────────
+            if (bindings.length === 0) {
+                console.log(chalk.yellow('No auto-start bindings configured (AUTOSTART_ALLOWLIST is empty or not set).'));
+            }
+            else {
+                console.log(chalk.bold(`Auto-start bindings (${bindings.length} entries):`));
+                console.log();
+                for (const binding of bindings) {
+                    const enabledLabel = binding.enabled
+                        ? chalk.green('enabled')
+                        : chalk.red('disabled');
+                    console.log(`  ${chalk.cyan(binding.action_id)}  ${enabledLabel}`);
+                    console.log(`    template: ${chalk.dim(binding.template_id)}`);
+                }
+                console.log();
+            }
+            // ── Recent fires ──────────────────────────────────────────────────────
+            if (fires.length === 0) {
+                console.log(chalk.dim('No recent auto-start fires.'));
+                return;
+            }
+            console.log(chalk.bold(`Recent auto-start fires (${fires.length}):`));
+            console.log();
+            for (const fire of fires) {
+                const statusLabel = fireStatusLabel(fire.fire_status);
+                console.log(`  ${chalk.cyan(fire.worksheet_action_id.slice(0, 8) + '…')}  window: ${fire.window_key}  ${statusLabel}`);
+                if (fire.pipeline_instance_id) {
+                    console.log(`    pipeline: ${chalk.dim(fire.pipeline_instance_id)}`);
+                }
+                if (fire.template_id) {
+                    console.log(`    template: ${chalk.dim(fire.template_id)}`);
+                }
+                if (fire.last_error) {
+                    console.log(`    error:    ${chalk.red(fire.last_error)}`);
+                }
+                console.log(`    claimed:  ${new Date(fire.claimed_at).toLocaleString()}`);
+                if (fire.fired_at) {
+                    console.log(`    fired:    ${new Date(fire.fired_at).toLocaleString()}`);
+                }
+                if (fire.failed_at) {
+                    console.log(`    failed:   ${chalk.red(new Date(fire.failed_at).toLocaleString())}`);
+                }
+                console.log(`    id:       ${chalk.dim(fire.id)}`);
+                console.log();
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(chalk.red(`Error: ${msg}`));
+            process.exit(1);
+        }
+    });
+    // ── `fazemos autostart disable` ───────────────────────────────────────────────
+    //
+    // POST /api/control-plane/autostart/disable  { action: "disable", ... }
+    //
+    // Upserts an action_autostart_disables row the sweep consults before claiming.
+    // Active disable → action not eligible → no claim, no fire.
+    // --until <iso>: timed disable; omit for indefinite until `fazemos autostart enable`.
+    //
+    // Note: does NOT delete the action from the AUTOSTART_ALLOWLIST (that is an
+    //       SSM / deployment-level change). The disable row is the operator kill switch.
+    //
+    // Usage:
+    //   fazemos autostart disable --action <action-id> --reason "Pausing during Q2 freeze"
+    //   fazemos autostart disable --action <action-id> --until 2026-12-31T23:59:59Z --reason "Q2 freeze"
+    autoStartCmd
+        .command('disable')
+        .description('Disable auto-start for an action (admin/owner only).\n\n' +
+        'Upserts a disable record for the given action. While disabled, the auto-start\n' +
+        'sweep skips this action — no claim, no fire. The action\'s readiness state\n' +
+        '(auto_start=\'ready\') is preserved; re-enabling allows the next sweep to fire.\n\n' +
+        '  (no --until)       Indefinite disable — remains until `fazemos autostart enable`\n' +
+        '  --until <iso>      Timed disable — auto-expires at the given UTC timestamp\n\n' +
+        'Requires admin or owner role. --reason is mandatory (audit trail).')
+        .requiredOption('--action <id>', 'worksheet_action_id (UUID) to disable')
+        .requiredOption('--reason <text>', 'reason for the disable (required for audit trail)')
+        .option('--until <iso>', 'ISO 8601 timestamp when the disable expires (omit for indefinite)')
+        .option('--json', 'output machine-readable JSON')
+        .action(async (opts) => {
+        try {
+            const projectId = getActiveProjectId();
+            if (!projectId) {
+                throw new Error('No active project. Run `fazemos projects switch <slug>` first.');
+            }
+            const body = {
+                action: 'disable',
+                project_id: projectId,
+                worksheet_action_id: opts.action.trim(),
+                reason: opts.reason,
+            };
+            if (opts.until !== undefined) {
+                body.until = validateIsoTimestamp(opts.until);
+            }
+            const data = await api('POST', '/api/control-plane/autostart/disable', body, {
+                noProjectHeader: true,
+            });
+            if (opts.json) {
+                console.log(JSON.stringify(data, null, 2));
+                return;
+            }
+            if (data.disabled) {
+                console.log(chalk.red(`⏸  Auto-start disabled for action: ${chalk.cyan(opts.action.trim())}`));
+                if (opts.until) {
+                    console.log(`  Expires at: ${new Date(opts.until).toLocaleString()}`);
+                }
+                else {
+                    console.log(`  Duration:   indefinite (run \`fazemos autostart enable --action ${opts.action.trim()}\` to re-enable)`);
+                }
+                console.log(`  Reason:     ${opts.reason}`);
+                console.log();
+                console.log(chalk.dim('  The action remains in the AUTOSTART_ALLOWLIST.'));
+                console.log(chalk.dim('  The sweep will skip it until the disable is removed or expires.'));
+            }
+            else {
+                console.log(chalk.yellow(`No change — auto-start was already disabled for action ${opts.action.trim()}.`));
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(chalk.red(`Error: ${msg}`));
+            process.exit(1);
+        }
+    });
+    // ── `fazemos autostart enable` ────────────────────────────────────────────────
+    //
+    // POST /api/control-plane/autostart/disable  { action: "enable", ... }
+    //
+    // Deletes the action_autostart_disables row (re-enables the action's auto-start).
+    // After enable: the next sweep tick that finds this action ready + allow-listed
+    // will claim and fire as normal (subject to windowed-claim and live-pipeline checks).
+    //
+    // Usage:
+    //   fazemos autostart enable --action <action-id>
+    autoStartCmd
+        .command('enable')
+        .description('Re-enable auto-start for a previously disabled action (admin/owner only).\n\n' +
+        'Deletes the disable record for the given action, allowing the next auto-start\n' +
+        'sweep tick to evaluate and fire it (subject to the windowed-claim and\n' +
+        'live-pipeline idempotency checks — one pipeline per window maximum).\n\n' +
+        'Requires admin or owner role.')
+        .requiredOption('--action <id>', 'worksheet_action_id (UUID) to re-enable')
+        .option('--reason <text>', 'reason for re-enabling (optional; recorded in audit trail)')
+        .option('--json', 'output machine-readable JSON')
+        .action(async (opts) => {
+        try {
+            const projectId = getActiveProjectId();
+            if (!projectId) {
+                throw new Error('No active project. Run `fazemos projects switch <slug>` first.');
+            }
+            const body = {
+                action: 'enable',
+                project_id: projectId,
+                worksheet_action_id: opts.action.trim(),
+            };
+            if (opts.reason !== undefined) {
+                body.reason = opts.reason;
+            }
+            const data = await api('POST', '/api/control-plane/autostart/disable', body, {
+                noProjectHeader: true,
+            });
+            if (opts.json) {
+                console.log(JSON.stringify(data, null, 2));
+                return;
+            }
+            if (data.enabled) {
+                console.log(chalk.green(`▶  Auto-start enabled for action: ${chalk.cyan(opts.action.trim())}`));
+                console.log(`  The next sweep tick (≤5 min) will evaluate and fire this action`);
+                console.log(`  if it is still ready, allow-listed, and has no live pipeline.`);
+            }
+            else {
+                console.log(chalk.dim(`No-op — auto-start was not disabled for action ${opts.action.trim()}.`));
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(chalk.red(`Error: ${msg}`));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=autostart.js.map

package/dist/autostart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autostart.js","sourceRoot":"","sources":["../src/autostart.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAoCjD,kFAAkF;AAElF;;;GAGG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,gFAAgF,KAAK,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B;YACE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,kFAAkF;AAElF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IAExD,gFAAgF;IAChF,EAAE;IACF,sEAAsE;IACtE,kEAAkE;IAElE,MAAM,YAAY,GAAG,OAAO;SACzB,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CACV,kFAAkF;QAClF,iBAAiB;QACjB,6EAA6E;QAC7E,sEAAsE;QACtE,qFAAqF;QACrF,kFAAkF;QAClF,sDAAsD;QACtD,+CAA+C;QAC/C,oFAAoF;QACpF,8EAA8E;QAC9E,yEAAyE;QACzE,4DAA4D,CAC7D,CAAC;IAEJ,iFAAiF;IACjF,EAAE;IACF,mDAAmD;IACnD,EAAE;IACF,6EAA6E;IAC7E,uEAAuE;IACvE,EAAE;IACF,SAAS;IACT,2BAA2B;IAE3B,YAAY;SACT,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CACV,qEAAqE;QACrE,2EAA2E;QAC3E,2EAA2E;QAC3E,yEAAyE;QACzE,qEAAqE;QACrE,oCAAoC,CACrC;SACA,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CACpB,KAAK,EACL,2CAA2C,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAC1E,SAAS,EACT,EAAE,eAAe,EAAE,IAAI,EAAE,CACF,CAAC;YAE1B,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;YAE1B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CACtB,gFAAgF;oBAChF,yDAAyD,CAC1D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO;oBAClC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;oBACxB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC1B,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY,EAAE,CACtD,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,iFAAiF;IACjF,EAAE;IACF,mDAAmD;IACnD,EAAE;IACF,oEAAoE;IACpE,sEAAsE;IACtE,kFAAkF;IAClF,EAAE;IACF,SAAS;IACT,6BAA6B;IAC7B,oCAAoC;IAEpC,YAAY;SACT,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,8EAA8E;QAC9E,6EAA6E;QAC7E,mFAAmF;QACnF,uBAAuB;QACvB,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,+EAA+E;QAC/E,+EAA+E;QAC/E,4EAA4E,CAC7E;SACA,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CACpB,KAAK,EACL,2CAA2C,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAC1E,SAAS,EACT,EAAE,eAAe,EAAE,IAAI,EAAE,CACF,CAAC;YAE1B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;YAEjC,yEAAyE;YAEzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CACtB,8EAA8E,CAC/E,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC;gBAC7E,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO;wBAClC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;wBACxB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAC1B,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,YAAY,EAAE,CACtD,CAAC;oBACF,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;YAED,yEAAyE;YAEzE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,WAAW,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,aAAa,IAAI,CAAC,UAAU,KAAK,WAAW,EAAE,CAC1G,CAAC;gBACF,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;gBACvE,CAAC;gBACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAC9D,CAAC;gBACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAC3E,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAClB,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,iFAAiF;IACjF,EAAE;IACF,wEAAwE;IACxE,EAAE;IACF,+EAA+E;IAC/E,4DAA4D;IAC5D,sFAAsF;IACtF,EAAE;IACF,4EAA4E;IAC5E,qFAAqF;IACrF,EAAE;IACF,SAAS;IACT,uFAAuF;IACvF,qGAAqG;IAErG,YAAY;SACT,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,0DAA0D;QAC1D,iFAAiF;QACjF,8EAA8E;QAC9E,qFAAqF;QACrF,sFAAsF;QACtF,kFAAkF;QAClF,oEAAoE,CACrE;SACA,cAAc,CAAC,eAAe,EAAE,uCAAuC,CAAC;SACxE,cAAc,CAAC,iBAAiB,EAAE,mDAAmD,CAAC;SACtF,MAAM,CAAC,eAAe,EAAE,mEAAmE,CAAC;SAC5F,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAKd,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,IAAI,GAA2B;gBACnC,MAAM,EAAE,SAAS;gBACjB,UAAU,EAAE,SAAS;gBACrB,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACvC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC;YAEF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,sCAAsC,EAAE,IAAI,EAAE;gBAC3E,eAAe,EAAE,IAAI;aACtB,CAAuD,CAAC;YAEzD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/F,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,qEAAqE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;gBACzH,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC,CAAC;gBAC3E,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,0DAA0D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC7G,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,iFAAiF;IACjF,EAAE;IACF,uEAAuE;IACvE,EAAE;IACF,kFAAkF;IAClF,gFAAgF;IAChF,sFAAsF;IACtF,EAAE;IACF,SAAS;IACT,kDAAkD;IAElD,YAAY;SACT,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CACV,+EAA+E;QAC/E,iFAAiF;QACjF,yEAAyE;QACzE,0EAA0E;QAC1E,+BAA+B,CAChC;SACA,cAAc,CAAC,eAAe,EAAE,yCAAyC,CAAC;SAC1E,MAAM,CAAC,iBAAiB,EAAE,4DAA4D,CAAC;SACvF,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC;SAChD,MAAM,CAAC,KAAK,EAAE,IAId,EAAE,EAAE;QACH,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,IAAI,GAA2B;gBACnC,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,SAAS;gBACrB,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;aACxC,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC5B,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,sCAAsC,EAAE,IAAI,EAAE;gBAC3E,eAAe,EAAE,IAAI;aACtB,CAAsD,CAAC;YAExD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAChG,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;gBACjF,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YACjF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kDAAkD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.js

@@ -21,6 +21,7 @@ import { registerBudgetCommands } from './budget.js';
 import { registerTriggerCommands } from './trigger.js';
 import { registerWakeCommands } from './wake.js';
 import { registerGovernanceCommands } from './governance.js';
+import { registerAutoStartCommands } from './autostart.js';
 import { parseExecutionsJson, resolveWaitOptions, waitForPipelines, buildAwsCommand, validateExecutionEntry, } from './wait-for-pipeline.js';
 import { readFileSync, readdirSync, writeFileSync, mkdirSync, existsSync, statSync } from 'fs';
 import { fileURLToPath } from 'url';
@@ -2383,8 +2384,20 @@ ws
     .argument('<id>', 'Worksheet ID')
     .action(async (id) => {
     try {
-        const data = await api('GET', `/api/worksheets/${id}`);
+        // G4 (AC15): fetch enriched actions in parallel so we can display
+        // linked_pipeline status chips next to bound actions.
+        const [data, actionsResult] = await Promise.all([
+            api('GET', `/api/worksheets/${id}`),
+            api('GET', `/api/worksheets/${id}/actions`).catch(() => null),
+        ]);
         const w = data.worksheet;
+        // Build a lookup map from action id → linked_pipeline (from the enriched endpoint)
+        const actionPipelineMap = new Map();
+        if (actionsResult?.actions) {
+            for (const a of actionsResult.actions) {
+                actionPipelineMap.set(a.id, a.linked_pipeline ?? null);
+            }
+        }
         console.log(chalk.cyan(w.name));
         console.log(`  ID:       ${w.id}`);
         console.log(`  Purpose:  ${w.purpose || '(none)'}`);
@@ -2414,7 +2427,16 @@ ws
             console.log(chalk.cyan(`\n  Actions (${data.actions.length}):`));
             for (const a of data.actions) {
                 const progress = a.target_value ? ` ${a.current_value ?? 0}/${a.target_value}` : '';
-                console.log(`    ${chalk.cyan(a.description)}${progress} — ${a.member_name || 'unassigned'} — ${a.id}`);
+                // G4 (AC15): show pipeline status chip when action is bound to a pipeline
+                const linkedPipeline = actionPipelineMap.get(a.id);
+                let pipelineChip = '';
+                if (linkedPipeline) {
+                    const chipColor = linkedPipeline.status === 'completed' ? chalk.green :
+                        linkedPipeline.status === 'failed' ? chalk.red :
+                            chalk.yellow;
+                    pipelineChip = ` ${chipColor(`[${linkedPipeline.status}]`)}`;
+                }
+                console.log(`    ${chalk.cyan(a.description)}${progress}${pipelineChip} — ${a.member_name || 'unassigned'} — ${a.id}`);
             }
         }
         if (data.commitments?.length) {
@@ -4808,17 +4830,29 @@ pipelines
     .argument('<templateId>', 'Template ID')
     .requiredOption('-n, --name <name>', 'Instance name')
     .option('--params <json>', 'Parameters as JSON string')
+    .option('--action <action-id>', 'Bind to a worksheet action at creation time (UUID)')
     .action(async (templateId, opts) => {
     try {
         const body = { templateId, name: opts.name };
         if (opts.params)
             body.parameters = parseJson(opts.params, '--params');
+        // G4: optionally bind to a worksheet action at creation time (AC12)
+        if (opts.action)
+            body.worksheetActionId = opts.action;
         const data = await api('POST', '/api/pipeline-instances', body);
         const inst = data.instance;
         console.log(chalk.green(`Created: ${inst.name}`));
         console.log(`  ID: ${inst.id}`);
+        if (inst.worksheet_action_id) {
+            console.log(`  Bound Action: ${inst.worksheet_action_id}`);
+        }
     }
     catch (err) {
+        // G4: org-isolation guard fires when the action belongs to a different org (AC11)
+        if (err instanceof ApiError && err.code === 'BINDING_ORG_ISOLATION_FAILED') {
+            console.error(chalk.red('Binding failed: the action belongs to a different org than this pipeline.'));
+            process.exit(1);
+        }
         // F16 — Role-aware Connection-unavailable error (tech spec §5.14).
         // The pipeline-run path returns a structured payload when the
         // Project's Connection is missing/revoked/suspended/uninstalled.
@@ -4855,6 +4889,50 @@ pipelines
         process.exit(1);
     }
 });
+// G4 — Bind an existing pipeline instance to a worksheet action (AC13)
+pipelines
+    .command('bind')
+    .description('Bind an existing pipeline instance to a worksheet action')
+    .argument('<instance-id>', 'Pipeline instance ID')
+    .requiredOption('--action <action-id>', 'Worksheet action UUID to bind')
+    .action(async (instanceId, opts) => {
+    try {
+        const data = await api('PATCH', `/api/pipeline-instances/${instanceId}`, {
+            worksheetActionId: opts.action,
+        });
+        const inst = data.instance;
+        console.log(chalk.green(`Bound: ${inst.name}`));
+        console.log(`  Pipeline: ${inst.id}`);
+        console.log(`  Action:   ${inst.worksheet_action_id}`);
+    }
+    catch (err) {
+        if (err instanceof ApiError && err.code === 'BINDING_ORG_ISOLATION_FAILED') {
+            console.error(chalk.red('Binding failed: the action belongs to a different org than this pipeline.'));
+            process.exit(1);
+        }
+        console.error(chalk.red(err.message));
+        process.exit(1);
+    }
+});
+// G4 — Remove binding between a pipeline instance and a worksheet action (AC14)
+pipelines
+    .command('unbind')
+    .description('Remove binding between a pipeline instance and a worksheet action')
+    .argument('<instance-id>', 'Pipeline instance ID')
+    .action(async (instanceId) => {
+    try {
+        const data = await api('PATCH', `/api/pipeline-instances/${instanceId}`, {
+            worksheetActionId: null,
+        });
+        const inst = data.instance;
+        console.log(chalk.green(`Unbound: ${inst.name}`));
+        console.log(`  Pipeline: ${inst.id}`);
+    }
+    catch (err) {
+        console.error(chalk.red(err.message));
+        process.exit(1);
+    }
+});
 // I30 — `pl force-cancel` removed. Replaced by the generalised
 // `pl force-transition pipeline <id> --to cancelled` admin endpoint, which
 // covers the same emergency cancel path plus 12 more entity/state combos
@@ -5765,10 +5843,12 @@ program
 const executions = program.command('executions').alias('ex').description('Execution commands');
 executions
     .command('list')
-    .description('List executions')
+    .description('List executions in the active project (or all projects with --all-projects)')
     .option('-s, --status <status>', 'Filter by status (pending, running, completed, failed)')
     .option('-a, --agent <name>', 'Filter by agent')
     .option('--source-type <type>', 'Filter by source type')
+    .option('--project <slug>', 'Override active project for this call')
+    .option('--all-projects', 'List executions across every project in the active org', false)
     .action(async (opts) => {
     try {
         const params = [];
@@ -5779,7 +5859,7 @@ executions
         if (opts.sourceType)
             params.push(`source_type=${opts.sourceType}`);
         const qs = params.length ? `?${params.join('&')}` : '';
-        const data = await api('GET', `/api/executions${qs}`);
+        const data = await api('GET', `/api/executions${qs}`, undefined, projectOpts(opts));
         if (!data.executions?.length) {
             console.log(chalk.yellow('No executions'));
             return;
@@ -5790,12 +5870,20 @@ executions
                     : e.status === 'failed' ? chalk.red('✗')
                         : '○';
             const cost = e.cost_usd ? ` $${e.cost_usd}` : '';
-            console.log(`  ${icon} ${e.agent_name} — ${e.source_type} (${e.status})${cost} — ${e.id}`);
+            // AUTON-PORTFOLIO-VIEW — in the org-wide fleet view (--all-projects),
+            // surface which project each execution belongs to so the list is
+            // legible across projects. Degrades gracefully to project_id (the
+            // executions list payload today includes project_id but not slug/name)
+            // and is omitted entirely in the default single-project view where a
+            // project column would be redundant.
+            const projectCell = opts.allProjects
+                ? chalk.gray(` [${e.project_slug || e.project_name || e.project_id || '—'}]`)
+                : '';
+            console.log(`  ${icon} ${e.agent_name} — ${e.source_type} (${e.status})${cost}${projectCell} — ${e.id}`);
         }
     }
     catch (err) {
-        console.error(chalk.red(err.message));
-        process.exit(1);
+        handleScopedError(err);
     }
 });
 executions
@@ -9432,6 +9520,13 @@ registerWakeCommands(program);
 // Cross-Org read (noProjectHeader: true); server resolves orgIds[] + roleSlugs[]
 // via resolveCallerContext. Read-only in v1 — no write sub-commands (AC1).
 registerGovernanceCommands(program);
+// ── AUTON-AUTOSTART — Action→Pipeline Auto-Start: autostart list/status/disable/enable ──
+// Registers `autostart` top-level command with list, status, disable, and enable
+// sub-commands. Project-scoped reads (project_id query param);
+// writes are org+project level (noProjectHeader: true on all calls).
+// admin/owner required for disable/enable; any active member for list/status.
+// No fire-now in V1 (spec §11 explicitly excludes it).
+registerAutoStartCommands(program);
 // Skip auto-parse only when running under Vitest (which sets process.env.VITEST).
 // Tests import `program` and drive it via `program.parseAsync(...)` after mocking
 // `./api.js`. In every other context — direct invocation, npx tsx, OR the bin