@formigio/fazemos-cli 0.4.9 → 0.5.0

package/dist/api.d.ts

@@ -1 +1,14 @@
+/**
+ * Error thrown when an API request returns a non-2xx response. Carries the
+ * `code` field from the API's error envelope (when present) so command
+ * handlers can branch on specific failure modes (e.g., EMAIL_SEND_FAILED).
+ * Also exposes the parsed body so callers can read extra fields like
+ * `inviteEmail`/`sessionEmail` on INVITE_EMAIL_MISMATCH.
+ */
+export declare class ApiError extends Error {
+    status: number;
+    code?: string;
+    body?: unknown;
+    constructor(message: string, status: number, code?: string, body?: unknown);
+}
 export declare function api(method: string, path: string, body?: unknown): Promise<unknown>;

package/dist/api.js

@@ -1,5 +1,24 @@
 import { getEnv, getToken, getActiveOrgId } from './config.js';
 import { refreshSession } from './auth.js';
+/**
+ * Error thrown when an API request returns a non-2xx response. Carries the
+ * `code` field from the API's error envelope (when present) so command
+ * handlers can branch on specific failure modes (e.g., EMAIL_SEND_FAILED).
+ * Also exposes the parsed body so callers can read extra fields like
+ * `inviteEmail`/`sessionEmail` on INVITE_EMAIL_MISMATCH.
+ */
+export class ApiError extends Error {
+    status;
+    code;
+    body;
+    constructor(message, status, code, body) {
+        super(message);
+        this.name = 'ApiError';
+        this.status = status;
+        this.code = code;
+        this.body = body;
+    }
+}
 export async function api(method, path, body) {
     const env = getEnv();
     let token = getToken();
@@ -38,10 +57,11 @@ export async function api(method, path, body) {
         data = text;
     }
     if (!response.ok) {
-        const msg = typeof data === 'object' && data !== null && 'error' in data
-            ? data.error
-            : `HTTP ${response.status}`;
-        throw new Error(msg);
+        const obj = typeof data === 'object' && data !== null
+            ? data
+            : null;
+        const msg = obj?.error ?? `HTTP ${response.status}`;
+        throw new ApiError(msg, response.status, obj?.code, data);
     }
     return data;
 }

package/dist/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,IAAc;IACpE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAE/B,mCAAmC;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAgB;QAC3B,MAAM;QACN,OAAO;KACR,CAAC;IAEF,IAAI,IAAI,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,IAAI;YACtE,CAAC,CAAE,IAA0B,CAAC,KAAK;YACnC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,MAAM,CAAS;IACf,IAAI,CAAU;IACd,IAAI,CAAW;IACf,YAAY,OAAe,EAAE,MAAc,EAAE,IAAa,EAAE,IAAc;QACxE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,IAAc;IACpE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IACrB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAE/B,mCAAmC;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAgB;QAC3B,MAAM;QACN,OAAO;KACR,CAAC;IAEF,IAAI,IAAI,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,GAAG,GACP,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YACvC,CAAC,CAAE,IAA0C;YAC7C,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,GAAG,GAAG,GAAG,EAAE,KAAK,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.js

@@ -3,7 +3,7 @@ import { Command } from 'commander';
 import chalk from 'chalk';
 import { config, getEnv, getToken, getActiveOrgId, setActiveOrgId, addEnvironment, hasEnvironments } from './config.js';
 import { login, signup, confirmSignup, adminLogin } from './auth.js';
-import { api } from './api.js';
+import { api, ApiError } from './api.js';
 import { execSync } from 'child_process';
 import { readFileSync, readdirSync } from 'fs';
 import { fileURLToPath } from 'url';
@@ -330,9 +330,10 @@ orgs
 });
 orgs
     .command('invite')
-    .description('Invite a human member to the organization by email. The invitee receives an email to join. Use "orgs add-agent" for AI agents instead.')
+    .description('Invite a human member to the organization by email. The invitee receives an email with a one-time link to join. Use "orgs add-agent" for AI agents instead.')
     .requiredOption('-e, --email <email>', 'Email address to invite')
     .option('-r, --role <role>', 'Organization role: admin (full access) or member (default)', 'member')
+    .option('-d, --display-name <name>', 'Optional display name for the invitee')
     .action(async (opts) => {
     try {
         const orgId = getActiveOrgId();
@@ -343,14 +344,81 @@ orgs
         const data = await api('POST', `/api/organizations/${orgId}/members/invite`, {
             email: opts.email,
             role: opts.role,
+            displayName: opts.displayName,
+        });
+        printInviteSuccess({
+            email: opts.email,
+            role: opts.role,
+            member: data.member,
+            inviteLink: data.inviteLink,
+            expiresAt: data.expiresAt,
         });
-        console.log(chalk.green(`Invited ${opts.email} as ${opts.role}`));
     }
     catch (err) {
-        console.error(chalk.red(err.message));
+        // EMAIL_SEND_FAILED carries the member row + invite link in the body
+        // because the row was committed in 'failed' state for retry. Show
+        // the warning UX (yellow) instead of a hard error.
+        if (err instanceof ApiError && err.code === 'EMAIL_SEND_FAILED') {
+            const body = (err.body ?? {});
+            printInviteSendFailedWarning({
+                email: opts.email,
+                role: opts.role,
+                member: body.member,
+                inviteLink: body.inviteLink,
+                sendError: body.error || err.message,
+            });
+            process.exit(1);
+        }
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(chalk.red(`Error: ${msg}`));
         process.exit(1);
     }
 });
+function printInviteSuccess(args) {
+    const expiry = new Date(args.expiresAt);
+    const absoluteFmt = new Intl.DateTimeFormat('en-US', {
+        weekday: 'short',
+        month: 'short',
+        day: 'numeric',
+        year: 'numeric',
+    });
+    const days = Math.max(1, Math.round((expiry.getTime() - Date.now()) / (24 * 60 * 60 * 1000)));
+    console.log(chalk.bold(chalk.green(`Invited ${args.email} as ${args.role}.`)));
+    console.log('');
+    console.log(`  Email sent to: ${args.email}`);
+    console.log(`  Role:          ${args.role}`);
+    if (args.member?.id) {
+        console.log(`  Member ID:     ${args.member.id}`);
+    }
+    console.log(`  Expires:       ${absoluteFmt.format(expiry)} (${days} days)`);
+    console.log('');
+    console.log(chalk.gray('  Invite link (for manual sharing):'));
+    console.log(chalk.gray(`  ${args.inviteLink}`));
+}
+function printInviteSendFailedWarning(args) {
+    // HP5: warnings go to stderr so scripts piping stdout (e.g., for parsing
+    // the invite link or member id) don't get the recoverable warning text
+    // mixed into their parsed output. Exit code is already 1.
+    console.error(chalk.yellow('Warning: invite created but email delivery failed.'));
+    console.error('');
+    console.error(`  Email:         ${args.email}`);
+    console.error(`  Role:          ${args.role}`);
+    // HP4: Member ID is the row the operator needs to act on. Show it in the
+    // same labeled position as the success block, immediately after Role.
+    if (args.member?.id) {
+        console.error(`  Member ID:     ${args.member.id}`);
+    }
+    console.error(`  Invite status: ${chalk.red('failed')} (${args.sendError})`);
+    if (args.inviteLink) {
+        console.error('');
+        console.error(chalk.gray('  Invite link (share manually or use `fazemos orgs invites resend`):'));
+        console.error(chalk.gray(`  ${args.inviteLink}`));
+    }
+    if (args.member?.id) {
+        console.error('');
+        console.error(`  To retry: fazemos orgs invites resend ${args.member.id}`);
+    }
+}
 orgs
     .command('add-agent')
     .description('Create an AI agent member in the organization. The agent can then be assigned work via actions, commitments, or pipeline steps. Use "agents register" for bulk registration with roles and config.')
@@ -375,27 +443,44 @@ orgs
         process.exit(1);
     }
 });
+const ORGS_MEMBERS_STATUSES = ['active', 'invited', 'failed', 'all'];
 orgs
     .command('members')
     .description('List org members')
     .option('--agents', 'Show only agent members')
+    .option('--status <status>', 'Filter by status: active|invited|failed|all (default: active)', 'active')
     .action(async (opts) => {
     try {
+        const status = opts.status || 'active';
+        if (!ORGS_MEMBERS_STATUSES.includes(status)) {
+            console.error(chalk.red(`Invalid --status "${status}". Allowed values: ${ORGS_MEMBERS_STATUSES.join(', ')}`));
+            process.exit(1);
+        }
         const orgId = getActiveOrgId();
         if (!orgId) {
             console.error(chalk.red('No active org. Run: fazemos orgs switch <slug>'));
             process.exit(1);
         }
-        const data = await api('GET', `/api/organizations/${orgId}/members`);
+        const data = await api('GET', `/api/organizations/${orgId}/members?status=${encodeURIComponent(status)}`);
         if (!data.members?.length) {
-            console.log(chalk.yellow('No members'));
+            console.log(chalk.yellow(`No members (status=${status})`));
             return;
         }
+        if (status === 'invited' || status === 'failed') {
+            printPendingInvites(data.members);
+            return;
+        }
+        // S6: when status !== 'active', the result set may contain a mix of
+        // statuses (active, invited, failed, revoked). Show the row's status
+        // inline so callers can tell them apart. The default `--status active`
+        // path stays unchanged (no status noise).
+        const showStatus = status !== 'active';
         for (const m of data.members) {
             if (opts.agents && m.member_type !== 'agent')
                 continue;
             const type = m.member_type === 'agent' ? chalk.blue('agent') : 'human';
-            console.log(`  ${chalk.cyan(m.display_name)} (${m.role}, ${type}) — ${m.id}`);
+            const statusBadge = showStatus ? ` ${formatMemberStatusBadge(m.status)}` : '';
+            console.log(`  ${chalk.cyan(m.display_name)} (${m.role}, ${type})${statusBadge} — ${m.id}`);
         }
     }
     catch (err) {
@@ -403,6 +488,171 @@ orgs
         process.exit(1);
     }
 });
+function printPendingInvites(members) {
+    console.log(chalk.bold(`Pending invites (${members.length}):`));
+    console.log('');
+    console.log('  EMAIL                          ROLE     INVITED BY        SENT             EXPIRES         STATUS  ID');
+    for (const m of members) {
+        const email = (m.email || '').padEnd(30).slice(0, 30);
+        const role = (m.role || '').padEnd(8).slice(0, 8);
+        const inviter = (m.inviter_name || 'unknown').padEnd(17).slice(0, 17);
+        const sent = m.invite_last_sent_at
+            ? formatRelative(new Date(m.invite_last_sent_at)).padEnd(16).slice(0, 16)
+            : 'never           ';
+        let expires;
+        if (m.invite_expires_at) {
+            const e = formatExpiresAt(new Date(m.invite_expires_at));
+            // Pad the visible text first, then colorize. Colorizing before padding
+            // would break .padEnd because chalk's ANSI escape codes inflate .length.
+            expires = e.expired
+                ? chalk.red(e.text.padEnd(15))
+                : e.text.padEnd(15);
+        }
+        else {
+            expires = 'unknown        ';
+        }
+        const status = m.status === 'failed' ? chalk.red('failed ') : chalk.green('invited');
+        const resendNote = m.invite_resend_count
+            ? chalk.gray(` (resent ${m.invite_resend_count}x)`)
+            : '';
+        console.log(`  ${email} ${role} ${inviter} ${sent} ${expires} ${status} ${m.id}${resendNote}`);
+    }
+    console.log('');
+    console.log(chalk.gray('Use `fazemos orgs invites resend <member-id>` to resend.'));
+    console.log(chalk.gray('Use `fazemos orgs invites revoke <member-id>` to revoke.'));
+}
+function formatRelative(d) {
+    const diffMs = Date.now() - d.getTime();
+    const days = Math.floor(diffMs / (24 * 60 * 60 * 1000));
+    if (days <= 0)
+        return 'today';
+    if (days === 1)
+        return '1 day ago';
+    return `${days} days ago`;
+}
+function formatExpiresAt(d) {
+    const diffMs = d.getTime() - Date.now();
+    if (diffMs <= 0)
+        return { text: 'EXPIRED', expired: true };
+    const days = Math.ceil(diffMs / (24 * 60 * 60 * 1000));
+    if (days === 1)
+        return { text: 'in 1 day', expired: false };
+    return { text: `in ${days} days`, expired: false };
+}
+// S6: render a per-row status badge for the bullet member list. Used only
+// when --status is not the default 'active' so a mixed result set (e.g. from
+// --status all) is unambiguous about which row is active vs revoked vs etc.
+function formatMemberStatusBadge(status) {
+    const s = (status || 'unknown').toLowerCase();
+    switch (s) {
+        case 'active': return chalk.green('[active]');
+        case 'invited': return chalk.yellow('[invited]');
+        case 'failed': return chalk.red('[failed]');
+        case 'revoked': return chalk.gray('[revoked]');
+        default: return chalk.gray(`[${s}]`);
+    }
+}
+// ── orgs invites subcommands ────────────────────────────────
+const invites = orgs.command('invites').description('Manage pending org invites');
+const INVITES_LIST_STATUSES = ['invited', 'failed', 'all'];
+invites
+    .command('list')
+    .description('List pending invites for the active org (alias of `orgs members --status invited`)')
+    .option('--status <status>', 'Filter: invited|failed|all (default: invited)', 'invited')
+    .action(async (opts) => {
+    try {
+        const status = opts.status || 'invited';
+        if (!INVITES_LIST_STATUSES.includes(status)) {
+            console.error(chalk.red(`Invalid --status "${status}". Allowed values: ${INVITES_LIST_STATUSES.join(', ')}`));
+            process.exit(1);
+        }
+        const orgId = getActiveOrgId();
+        if (!orgId) {
+            console.error(chalk.red('No active org. Run: fazemos orgs switch <slug>'));
+            process.exit(1);
+        }
+        // S6: `orgs invites list` is scoped to invites. When --status all is
+        // passed it should mean "all invite statuses" (invited + failed), NOT
+        // "all members regardless of invite status". The backend ?status=all
+        // returns every member, so we filter client-side here. We keep the
+        // single ?status=all call (rather than two calls for invited+failed)
+        // for simplicity — do not "optimize" this into the underlying status
+        // params without re-checking that the API supports a multi-value filter.
+        const data = await api('GET', `/api/organizations/${orgId}/members?status=${encodeURIComponent(status)}`);
+        let rows = data.members || [];
+        if (status === 'all') {
+            rows = rows.filter((m) => m.status === 'invited' || m.status === 'failed');
+        }
+        if (!rows.length) {
+            const label = status === 'all' ? 'pending or failed' : status;
+            console.log(chalk.yellow(`No ${label} invites.`));
+            return;
+        }
+        printPendingInvites(rows);
+    }
+    catch (err) {
+        console.error(chalk.red(err.message));
+        process.exit(1);
+    }
+});
+invites
+    .command('resend <memberId>')
+    .description('Generate a fresh invite token and re-send the email')
+    .action(async (memberId) => {
+    try {
+        const orgId = getActiveOrgId();
+        if (!orgId) {
+            console.error(chalk.red('No active org. Run: fazemos orgs switch <slug>'));
+            process.exit(1);
+        }
+        const data = await api('POST', `/api/organizations/${orgId}/members/${memberId}/resend`, {});
+        console.log(chalk.green(`Invite resent to ${data.member.email}.`));
+        console.log('');
+        const expiry = new Date(data.expiresAt);
+        const days = Math.max(1, Math.round((expiry.getTime() - Date.now()) / (24 * 60 * 60 * 1000)));
+        const fmt = new Intl.DateTimeFormat('en-US', {
+            weekday: 'short', month: 'short', day: 'numeric', year: 'numeric',
+        });
+        console.log(`  New expiry:  ${fmt.format(expiry)} (${days} days)`);
+        console.log(chalk.gray(`  Invite link: ${data.inviteLink}`));
+    }
+    catch (err) {
+        if (err instanceof ApiError && err.code === 'EMAIL_SEND_FAILED') {
+            const body = (err.body ?? {});
+            // HP5: warnings go to stderr so scripts piping stdout don't get
+            // recoverable warnings mixed into their parsed output.
+            console.error(chalk.yellow('Warning: invite resent but email delivery failed.'));
+            console.error('');
+            console.error(`  Member ID: ${memberId}`);
+            console.error(`  Reason:    ${body.error || err.message}`);
+            if (body.inviteLink) {
+                console.error(chalk.gray(`  Invite link: ${body.inviteLink}`));
+            }
+            process.exit(1);
+        }
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(chalk.red(`Error: ${msg}`));
+        process.exit(1);
+    }
+});
+invites
+    .command('revoke <memberId>')
+    .description('Revoke a pending invite immediately (invalidates the token)')
+    .action(async (memberId) => {
+    try {
+        const orgId = getActiveOrgId();
+        if (!orgId) {
+            console.error(chalk.red('No active org. Run: fazemos orgs switch <slug>'));
+            process.exit(1);
+        }
+        await api('POST', `/api/organizations/${orgId}/members/${memberId}/revoke`, {});
+        console.log(chalk.green(`Invite for member ${memberId} has been revoked.`));
+    }
+    catch (err) {
+        console.error(chalk.red(`Error: ${err.message}`));
+        process.exit(1);
+    }
+});
 // ── Worksheets ──────────────────────────────────────────────
 const ws = program.command('worksheets').alias('ws').description('Worksheet commands');
 ws