@formigio/fazemos-cli 0.10.55 → 0.10.59

package/dist/index.js

@@ -26,6 +26,8 @@ import { registerFtrCommand } from './ftr.js';
 import { registerScheduleCommands } from './schedule.js';
 import { registerApprovalsCommands } from './approvals.js';
 import { registerSecretsCommands } from './commands/secrets.js';
+import { registerProfilesCommands } from './commands/profiles.js';
+import { registerImageCommands } from './commands/image.js';
 import { parseExecutionsJson, resolveWaitOptions, waitForPipelines, buildAwsCommand, validateExecutionEntry, } from './wait-for-pipeline.js';
 import { readFileSync, readdirSync, writeFileSync, mkdirSync, existsSync, statSync } from 'fs';
 import { fileURLToPath } from 'url';
@@ -6348,6 +6350,7 @@ program
     .option('--repos <repos>', 'Comma-separated repo names to clone (overrides agent config)', (v) => v.split(','))
     .option('--model <model>', 'Model override (e.g., opus, sonnet)')
     .option('--budget <usd>', 'Max budget override in USD', parseNumber)
+    .option('--profile <name>', 'Named execution profile (F48-B). Threaded into POST /api/executions context as context.profile. Tracking-only in B.1 — does not change runtime resolution.')
     .action(async (sourceId, opts) => {
     try {
         const validTypes = ['action', 'commitment', 'pipeline_step'];
@@ -6480,6 +6483,13 @@ program
         }
         if (opts.prompt)
             context.prompt = opts.prompt;
+        // [F48-B LD-14] --profile threads the named profile into context.profile
+        // for tracking/dispatch. In Phase B.1 this field is recorded on the
+        // executions row but does NOT drive runtime resolution — the nb-scanning
+        // path continues through the unchanged Phase-A tools path. B.2 will wire
+        // the DB-backed resolver at executionService.ts.
+        if (opts.profile)
+            context.profile = opts.profile;
         // [F24 §3.3 / D2] Forward --no-auto-complete intent. The CLI guard
         // above suppresses this for pipeline_step (forwardSuppress is false
         // in that case). Agent's buildSelfReportingInstructions reads
@@ -9767,7 +9777,7 @@ Recipients are resolved via the nearest .fazemos/roles.json registry, walking
 up from the current directory. Cross-workspace recipients are followed via
 the local registry's cross_workspace_roles block.
 
-Types: question | task | signal | response | flag | decision | direction`)
+Types: question | task | signal | response | flag | decision | direction | brief`)
     .requiredOption('--from <role>', 'sender role-slug (required)')
     .option('--body <text>', 'markdown body of the dispatch (or use --body-file)')
     .option('--body-file <path>', 'read body from a file')
@@ -9783,7 +9793,8 @@ Types: question | task | signal | response | flag | decision | direction`)
     .action(async (to, type, opts) => {
     try {
         // Validate type
-        const allowedTypes = ['question', 'task', 'signal', 'response', 'flag', 'decision', 'direction'];
+        // AUTON-ROLLUP-INBOX-API Leg B: 'brief' added (mirrors API allowedTypes + migration 068).
+        const allowedTypes = ['question', 'task', 'signal', 'response', 'flag', 'decision', 'direction', 'brief'];
         if (!allowedTypes.includes(type)) {
             throw new Error(`Invalid type "${type}". Allowed: ${allowedTypes.join(', ')}`);
         }
@@ -10250,6 +10261,154 @@ program
         }
     }
 });
+// ── AUTON-ROLLUP-INBOX-API — `fazemos inbox` ─────────────────────────────────
+//
+// Drains dispatches from the DB via GET /api/dispatches.
+// Replaces the legacy file-read drain (roles/<slug>/inbox/*.md) that failed
+// cross-workspace (the root cause of the 2026-07-25 cadence incident).
+//
+// API mapping:
+//   List:      GET  /api/dispatches?role=<slug>&status=<status>&limit=<N>
+//   Mark-read: PATCH /api/dispatches/:id { status: "read" } × each item
+//
+// Auth: API-key (agent callers) or Cognito (human callers). Both are accepted
+// by requireAuth + the AUTON-ROLLUP-INBOX-API extension to GET / and PATCH /:id.
+program
+    .command('inbox')
+    .description(`Drain inbox dispatches from the API.
+
+Reads dispatches from the DB via GET /api/dispatches and renders them as a
+table (default) or JSON. Use --mark-read to PATCH each returned dispatch to
+status=read after rendering (standard agent playbook usage).
+
+Replaces the legacy file-read drain (roles/<slug>/inbox/*.md) that silently
+dropped cross-workspace dispatches.
+
+Examples:
+  fazemos inbox --role chief-of-staff              # unread for role
+  fazemos inbox --role engineering-director --status all
+  fazemos inbox --role project-manager --mark-read  # drain + mark read
+  fazemos inbox --format json --role luca | jq .`)
+    .option('--role <slug>', 'filter to a specific role-slug (defaults to all roles the caller fills)')
+    .option('--status <status>', 'unread | read | all (default: unread)', 'unread')
+    .option('--limit <n>', 'max dispatches to return (default: 50)', (v) => parseInt(v, 10), 50)
+    .option('--format <format>', 'table | json (default: table)', 'table')
+    .option('--mark-read', 'after listing, PATCH each dispatch to status=read')
+    .action(async (opts) => {
+    try {
+        // Validate --status
+        const validStatuses = ['unread', 'read', 'all'];
+        if (!validStatuses.includes(opts.status)) {
+            throw new Error(`Invalid --status "${opts.status}". Valid: ${validStatuses.join(', ')}`);
+        }
+        // Validate --format
+        const validFormats = ['table', 'json'];
+        if (!validFormats.includes(opts.format)) {
+            throw new Error(`Invalid --format "${opts.format}". Valid: ${validFormats.join(', ')}`);
+        }
+        // Build query
+        const params = new URLSearchParams();
+        if (opts.role)
+            params.set('role', opts.role);
+        params.set('status', opts.status);
+        params.set('limit', String(opts.limit));
+        const result = await api('GET', `/api/dispatches?${params.toString()}`, undefined, {
+            noProjectHeader: true,
+        });
+        const items = result.items ?? [];
+        // ── JSON output ──────────────────────────────────────────
+        if (opts.format === 'json') {
+            console.log(JSON.stringify(result, null, 2));
+        }
+        else {
+            // ── Table output ─────────────────────────────────────
+            if (items.length === 0) {
+                if (opts.role) {
+                    console.log(chalk.gray(`No ${opts.status} dispatches for role "${opts.role}".`));
+                }
+                else {
+                    console.log(chalk.gray(`No ${opts.status} dispatches.`));
+                }
+            }
+            else {
+                const now = Date.now();
+                function age(iso) {
+                    const ms = now - new Date(iso).getTime();
+                    const mins = Math.floor(ms / 60000);
+                    if (mins < 60)
+                        return `${mins}m`;
+                    const hrs = Math.floor(mins / 60);
+                    if (hrs < 24)
+                        return `${hrs}h`;
+                    return `${Math.floor(hrs / 24)}d`;
+                }
+                // Column widths
+                const COL_ROLE = 26;
+                const COL_FROM = 22;
+                const COL_TYPE = 10;
+                const COL_PRI = 6;
+                const COL_AGE = 5;
+                const COL_BODY = 60;
+                function pad(s, n) {
+                    return s.length > n ? s.slice(0, n - 1) + '…' : s.padEnd(n);
+                }
+                const header = [
+                    chalk.bold(pad('TO ROLE', COL_ROLE)),
+                    chalk.bold(pad('FROM', COL_FROM)),
+                    chalk.bold(pad('TYPE', COL_TYPE)),
+                    chalk.bold(pad('PRI', COL_PRI)),
+                    chalk.bold(pad('AGE', COL_AGE)),
+                    chalk.bold('SUMMARY'),
+                ].join('  ');
+                console.log(header);
+                console.log(chalk.gray('─'.repeat(130)));
+                for (const d of items) {
+                    const priColor = d.priority === 'high' ? chalk.red : d.priority === 'low' ? chalk.gray : chalk.white;
+                    const row = [
+                        pad(d.to_role ?? '', COL_ROLE),
+                        pad(d.from_role ?? '', COL_FROM),
+                        pad(d.type ?? '', COL_TYPE),
+                        priColor(pad(d.priority ?? 'normal', COL_PRI)),
+                        chalk.gray(pad(age(d.created_at), COL_AGE)),
+                        chalk.cyan(pad(d.summary ?? d.body?.split('\n')[0] ?? '', COL_BODY)),
+                    ].join('  ');
+                    console.log(row);
+                }
+                console.log(chalk.gray('─'.repeat(130)));
+                console.log(chalk.gray(`${items.length} dispatch(es) shown.${result.nextCursor ? ' More available (use --limit to increase).' : ''}`));
+            }
+        }
+        // ── --mark-read ──────────────────────────────────────────
+        if (opts.markRead && items.length > 0) {
+            const unread = items.filter(d => d.status === 'unread');
+            if (unread.length === 0) {
+                console.log(chalk.gray('\nAll shown dispatches already read; nothing to mark.'));
+            }
+            else {
+                let marked = 0;
+                let failed = 0;
+                for (const d of unread) {
+                    try {
+                        await api('PATCH', `/api/dispatches/${d.id}`, { status: 'read' }, {
+                            noProjectHeader: true,
+                        });
+                        marked++;
+                    }
+                    catch (err) {
+                        failed++;
+                        const msg = err instanceof Error ? err.message : String(err);
+                        console.error(chalk.yellow(`  ⚠ Failed to mark dispatch ${d.id} as read: ${msg}`));
+                    }
+                }
+                console.log(chalk.green(`\n✓ Marked ${marked} dispatch(es) as read.${failed > 0 ? chalk.yellow(` ${failed} failed.`) : ''}`));
+            }
+        }
+    }
+    catch (err) {
+        console.error(chalk.red(err instanceof Error ? err.message : String(err)));
+        process.exit(1);
+    }
+});
 // ── F32 — Pause Switches: pause / resume / pause status ─────────────────────
 // Mirrors the dispatch group pattern. Registers `pause`, `resume` top-level
 // commands and the `pause status` sub-command. All calls are org-level
@@ -10315,6 +10474,22 @@ registerApprovalsCommands(program);
 // set supports interactive masked input, --value-from <file>, positional arg,
 // and piped stdin. delete prompts for confirmation unless --yes / -y is passed.
 registerSecretsCommands(program);
+// ── F48-B — Execution Profiles: profiles create / list / show / delete / register-source ────
+// Registers `profiles` top-level command and sub-commands.
+// All calls use project ID in the URL path (/api/projects/:projectId/profiles/...);
+// noProjectHeader: true on every call (path-scoped, not header-scoped).
+// create/delete/register-source: owner/admin only (server-side gate).
+// list/show: all project members.
+// register-image / admit: B2 DEFERRED stubs (print friendly error + exit 1).
+registerProfilesCommands(program);
+// ── F48-B — Image Builds: image build / status / list ───────────────────────
+// Registers `image` top-level command with build, status, and list sub-commands.
+// All calls use project ID in the URL path (/api/projects/:projectId/profiles/:name/builds[/:id]);
+// noProjectHeader: true on every call.
+// build: owner/admin only. status/list: all project members.
+// When codebuildEnabled=false on a build response, the note field is surfaced
+// to the user (infrastructure not yet deployed).
+registerImageCommands(program);
 // Skip auto-parse only when running under Vitest (which sets process.env.VITEST).
 // Tests import `program` and drive it via `program.parseAsync(...)` after mocking
 // `./api.js`. In every other context — direct invocation, npx tsx, OR the bin