@ghostystudio/cli 0.45.0 → 0.46.0

package/README.md

@@ -103,6 +103,10 @@ Every command has its own help with examples: `ghosty <command> --help` or `ghos
 
 Exit codes: `0` ok · `1` API error · `2` usage error · `3` not signed in.
 
+### Changes in 0.46.0
+
+- New `staff ls|assign|unassign <staff-email> <client-email>` (Ghosty staff): a staff member assigned to a client account sees and runs its agents (with or without a workspace), documents, databases and boards as themselves — no keys, billing or transfers, every write logged. The client sees «Your Ghosty account manager».
+
 ### Changes in 0.45.0
 
 - New `turns grep <id> "text" [--since 7d] [--role user|agent]`: finds what the customer or the agent said, with its turn, to open with `turns show`.

package/dist/index.js

@@ -3122,9 +3122,9 @@ var require_timestamp = __commonJS({
         const match = str.match(timestamp.test);
         if (!match)
           throw new Error("!!timestamp expects a date, starting with yyyy-mm-dd");
-        const [, year, month, day2, hour, minute, second] = match.map(Number);
+        const [, year, month, day3, hour, minute, second] = match.map(Number);
         const millisec = match[7] ? Number((match[7] + "00").substr(1, 3)) : 0;
-        let date = Date.UTC(year, month - 1, day2, hour || 0, minute || 0, second || 0, millisec);
+        let date = Date.UTC(year, month - 1, day3, hour || 0, minute || 0, second || 0, millisec);
         const tz = match[8];
         if (tz && tz !== "Z") {
           let d = parseSexagesimal(tz, false);
@@ -8422,7 +8422,7 @@ async function postLong(path, body, timeoutMs = 9e5) {
     const req = httpsRequest(`${base}${path}`, {
       method: "POST",
       timeout: timeoutMs,
-      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.45.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
+      headers: { authorization: `Bearer ${token}`, "user-agent": `ghosty-cli/${"0.46.0"}`, "content-type": "application/json", "content-length": Buffer.byteLength(data) }
     }, (res) => {
       let buf = "";
       res.on("data", (c) => buf += c);
@@ -8464,7 +8464,7 @@ async function request(path, opts = {}, retried = false) {
     method: opts.method ?? (opts.body !== void 0 || opts.raw !== void 0 ? "POST" : "GET"),
     headers: {
       authorization: `Bearer ${token}`,
-      "user-agent": `ghosty-cli/${"0.45.0"}`,
+      "user-agent": `ghosty-cli/${"0.46.0"}`,
       "accept-language": lang(),
       ...opts.body !== void 0 ? { "content-type": "application/json" } : {},
       ...opts.headers
@@ -9738,7 +9738,7 @@ async function call(path, v, init = {}) {
         "x-ghosty-ts": ts,
         "x-ghosty-sig": sig,
         "content-type": "application/json",
-        "user-agent": `ghosty-cli/${"0.45.0"}`
+        "user-agent": `ghosty-cli/${"0.46.0"}`
       },
       body: method === "GET" ? void 0 : raw
     });
@@ -11598,6 +11598,18 @@ var HELPS_ES = {
       ["--yes", "s\xE1ltate la confirmaci\xF3n (obligatorio sin terminal)"]
     ],
     notes: ["create sigue las reglas de la web: queda a tu nombre, nace como prueba de 30 d\xEDas, tu correo debe estar confirmado y tu plan topa cu\xE1ntos tienes. Sigue: ghosty partner enable <slug>.", "Con suscripci\xF3n de Stripe renew se niega: la fecha la mueve la factura pagada.", "rename cambia s\xF3lo el slug (id y namespace se quedan, as\xED que tablero, Stripe y WhatsApp siguen funcionando); las ligas viejas <slug>.sales dejan de servir.", "transfer se lleva los agentes con el espacio y recicla sus cajas (el due\xF1o va horneado en la caja); sin --copy-keys la simulaci\xF3n dice qu\xE9 llaves le faltan al nuevo \u2014 esos agentes dejar\xEDan de contestar."]
+  },
+  staff: {
+    summary: "Staff de Ghosty asignado a CUENTAS cliente (admin delegado que act\xFAa como s\xED mismo): ve y opera con su propia sesi\xF3n los agentes (con y sin espacio), documentos, bases y tableros de esa cuenta. Sin llaves, cobro, traspasos ni borrados. S\xF3lo el staff de Ghosty asigna; el cliente s\xF3lo ve \xABTu ejecutivo de Ghosty\xBB. Cada cambio y cada escritura quedan en la bit\xE1cora.",
+    flags: [
+      ["--all", "ls: tambi\xE9n las asignaciones revocadas"],
+      ["--reason TEXT", "assign: por qu\xE9 (va a la bit\xE1cora)"],
+      ["--yes", "unassign: s\xE1ltate la confirmaci\xF3n (obligatorio sin terminal)"]
+    ],
+    notes: [
+      "En el panel web el staff elige \xABAtendiendo: <cliente>\xBB (Documentos y bases, Agentes); es una cookie que se revalida en cada request, nunca otra sesi\xF3n.",
+      "Revocar corta en el siguiente request. Asignar dos veces no hace nada (una sola activa por par)."
+    ]
   }
 };
 var HELP_ALIASES = { creds: "credentials", conectores: "connectors", board: "cards", conversations: "chat", workspaces: "spaces" };
@@ -12229,6 +12241,25 @@ HELPS.sites = {
   notes: ["A folder needs index.html at its root; hidden files and node_modules are skipped. Limits: 1 MB per file, 8 MB and 40 files per site.", "Without --site, publish always creates a new site (house sites are never matched by title).", "Slug errors: slug_invalid, slug_taken, and slug_unsupported while EasyBits does not accept a slug yet (exit 1, nothing changes)."],
   learn: `${REF}#sitios`
 };
+HELPS.staff = {
+  summary: "Ghosty staff assigned to client ACCOUNTS (delegated admin acting as themselves): the staff member sees and runs that account's agents (with and without a workspace), documents, databases and boards with their own session. No keys, billing, transfers or deletes. Only Ghosty staff assigns; the customer just sees \xABYour Ghosty account executive\xBB. Every change and every write is logged.",
+  usage: [
+    "ghosty staff ls [staff-email] [client-email] [--all]",
+    "ghosty staff assign <staff-email> <client-email> [--reason TEXT]",
+    "ghosty staff unassign <staff-email> <client-email> [--yes]"
+  ],
+  flags: [
+    ["--all", "ls: also revoked assignments"],
+    ["--reason TEXT", "assign: why (goes to the audit log)"],
+    ["--yes", "unassign: skip the confirmation (required without a terminal)"]
+  ],
+  examples: ['ghosty staff assign brenda@siiqtec.com siiqtec@gmail.com --reason "migraci\xF3n SIIQTEC"', "ghosty staff ls brenda@siiqtec.com", "ghosty staff unassign brenda@siiqtec.com siiqtec@gmail.com --yes"],
+  notes: [
+    "In the web panel the staff member picks \xABAtendiendo: <client>\xBB (Documents and databases, Agents); it is a cookie revalidated on every request, never another session.",
+    "Revoking cuts on the next request. Assigning twice is a no-op (one active assignment per pair)."
+  ],
+  learn: `${REF}#staff-asignado`
+};
 function helpText(cmd) {
   const base = HELPS[cmd];
   if (!base) return void 0;
@@ -12843,7 +12874,7 @@ ${dim(t(`${total2} message(s) unanswered for lack of balance in ${r.days} day(s)
       d.noQuota += x.noQuota;
       days.set(x.day, d);
     }
-    rows = [...days].map(([day2, x]) => ({ day: day2, ...fmt2(x) }));
+    rows = [...days].map(([day3, x]) => ({ day: day3, ...fmt2(x) }));
   } else rows = r.agents.map((x) => ({ agent: x.agent, ...fmt2(x) }));
   const cols = [...by.has("day") ? ["day"] : [], ...by.has("agent") ? ["agent"] : [], "turns", "failed", "tokens", "no balance"];
   const total = r.agents.reduce((n, a) => n + a.billable, 0);
@@ -13044,6 +13075,43 @@ ${dim(t("Links with the old slug may stop working.", "Las ligas con el slug viej
   }
 }
 
+// src/commands/staff.ts
+var day2 = (iso) => iso ? iso.slice(0, 10) : "";
+async function staffCmd(sub, staff, client, v) {
+  if (!sub || sub === "ls" || sub === "list") {
+    const q = new URLSearchParams();
+    if (staff) q.set("staff", staff);
+    if (client) q.set("client", client);
+    if (v.all) q.set("all", "1");
+    const r = await api(`/api/v2/staff/assignments${q.toString() ? `?${q}` : ""}`);
+    const rows = r.assignments.map((a) => ({
+      staff: a.staff.email,
+      client: a.client.email,
+      since: day2(a.createdAt),
+      by: a.grantedBy,
+      reason: a.reason ?? "",
+      ...v.all ? { revoked: day2(a.revokedAt) } : {}
+    }));
+    return out(r, () => rows.length ? table(rows, ["staff", "client", "since", "by", "reason", ...v.all ? ["revoked"] : []]) : dim(t("No assignments.", "Sin asignaciones.")));
+  }
+  if (sub === "assign" || sub === "unassign") {
+    if (!staff || !client) throw usage(t("Missing emails.", "Faltan correos."), `ghosty staff ${sub} <staff-email> <client-email>${sub === "assign" ? " [--reason TEXT]" : ""}`);
+    if (sub === "assign") {
+      const r2 = await api("/api/v2/staff/assignments", { method: "POST", body: { staff, client, ...v.reason ? { reason: v.reason } : {} } });
+      return out(
+        r2,
+        () => r2.already ? dim(t(`${r2.staff} already serves ${r2.client}.`, `${r2.staff} ya atend\xEDa a ${r2.client}.`)) : `${lavender("\u2713")} ${t(`${r2.staff} now serves ${r2.client}: agents, documents, databases and boards, with no keys, billing or transfers (logged).`, `${r2.staff} ahora atiende a ${r2.client}: agentes, documentos, bases y tableros, sin llaves, cobro ni traspasos (queda en bit\xE1cora).`)}`
+      );
+    }
+    const retry = `ghosty staff unassign ${staff} ${client} --yes`;
+    requireYesIfHeadless(v.yes, retry);
+    if (!v.yes) await confirm(t(`Stop ${staff} serving ${client}? It cuts on their next click.`, `\xBFQue ${staff} deje de atender a ${client}? Se corta en su siguiente clic.`), { retry });
+    const r = await api("/api/v2/staff/assignments", { method: "DELETE", body: { staff, client } });
+    return out(r, () => r.revoked ? `${lavender("\u2713")} ${t(`${r.staff} no longer serves ${r.client}.`, `${r.staff} ya no atiende a ${r.client}.`)}` : dim(t("There was no active assignment.", "No hab\xEDa asignaci\xF3n activa.")));
+  }
+  throw usage(t(`Unknown staff subcommand: ${sub}.`, `Subcomando de staff desconocido: ${sub}.`), "ghosty staff ls|assign|unassign <staff-email> [client-email]");
+}
+
 // src/commands/support.ts
 import { readFile as readFile14 } from "node:fs/promises";
 var enc12 = encodeURIComponent;
@@ -13286,6 +13354,8 @@ ${bold("Workspaces")}  ${dim("(changing them: Ghosty staff)")}
   spaces rename <old> <new>                   Change its slug only   [--dry-run]
   spaces transfer <workspace> --to EMAIL      New owner; agents go with it and their boxes are recycled   [--keep-as admin|member|none] [--copy-keys] [--dry-run]
   spaces log <workspace>                      Its log: transfers, staff in/out, renewals (owner or staff)   [--since 30d] [--action workspace]
+  staff ls [staff-email] [client-email]       Ghosty staff assigned to client accounts (staff)   [--all: also revoked]
+  staff assign|unassign <staff> <client>      Staff sees and runs that account's agents, documents, databases and boards as themselves (no keys, billing or transfers; logged)   [--reason]
 
 ${bold("Agents")}
   agents ls                 List your agents   [--engine E] [--ids: only ids, for xargs] \xB7 --user EMAIL --app all|android|ios|desktop: as their app sees it (staff)
@@ -13429,6 +13499,8 @@ ${bold("Espacios")}  ${dim("(cambiarlos: staff de Ghosty)")}
   spaces rename <viejo> <nuevo>               Cambia s\xF3lo su slug   [--dry-run]
   spaces transfer <espacio> --to CORREO       Due\xF1o nuevo; los agentes se van con \xE9l y se reciclan sus cajas   [--keep-as admin|member|none] [--copy-keys] [--dry-run]
   spaces log <espacio>                        Su bit\xE1cora: traspasos, staff que entra o sale, renovaciones (due\xF1o o staff)   [--since 30d] [--action workspace]
+  staff ls [correo-staff] [correo-cliente]    Staff de Ghosty asignado a cuentas cliente (staff)   [--all: tambi\xE9n revocadas]
+  staff assign|unassign <staff> <cliente>     El staff ve y opera agentes, documentos, bases y tableros de esa cuenta como s\xED mismo (sin llaves, cobro ni traspasos; queda en bit\xE1cora)   [--reason]
 
 ${bold("Agentes")}
   agents ls                 Lista tus agentes   [--engine E] [--ids: s\xF3lo ids, para xargs] \xB7 --user CORREO --app all|android|ios|desktop: como lo ve su app (staff)
@@ -13548,7 +13620,7 @@ ${bold("Opciones globales")}
 ${bold("C\xF3digos de salida")}  0 bien \xB7 1 error de la API \xB7 2 uso incorrecto \xB7 3 sin sesi\xF3n
 ${dim("Nota: `ghosty` puede chocar con otro binario en tu PATH (p. ej. la TUI de Ghosty). Rev\xEDsalo con `which -a ghosty`; corre `npx @ghostystudio/cli` para ir a la segura.")}
 ${dim("Documentaci\xF3n: https://www.ghosty.studio/docs/cli")}`;
-var COMMANDS = ["login", "logout", "whoami", "usage", "use", "apply", "plan", "engines", "bags", "spaces", "workspaces", "demos", "sites", "push", "novedades", "completion", "cards", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "partner", "me", "channels", "board", "boards", "credentials", "connectors", "browser", "docs", "help"];
+var COMMANDS = ["login", "logout", "whoami", "usage", "use", "apply", "plan", "engines", "bags", "spaces", "workspaces", "staff", "demos", "sites", "push", "novedades", "completion", "cards", "agents", "files", "skills", "mcp", "dbs", "turns", "try", "chat", "conversations", "schedule", "partner", "me", "channels", "board", "boards", "credentials", "connectors", "browser", "docs", "help"];
 var AGENTS_SUBS = ["ls", "create", "get", "set", "export", "doctor", "docs", "share", "unshare", "shares", "teams", "rm", "restart", "demo", "box"];
 function unknown(what, input, known, helpCmd) {
   const s = suggest(input, known);
@@ -13724,6 +13796,7 @@ async function main() {
       recurring: { type: "string" },
       "hard-cap": { type: "string" },
       note: { type: "string" },
+      reason: { type: "string" },
       bag: { type: "string" },
       avatar: { type: "string" },
       tool: { type: "string" },
@@ -13777,7 +13850,7 @@ async function main() {
   const tokens = splitTokens(pos, v);
   globals.token = tokens.session;
   globals.profile = v.profile;
-  if (v.version) return out({ version: "0.45.0" }, () => "0.45.0");
+  if (v.version) return out({ version: "0.46.0" }, () => "0.46.0");
   for (const n of normalizeArgs(pos, v)) if (!globals.json) info(dim(n));
   const context = (await readConfig()).workspace;
   if (!explicitToken()?.startsWith("gat_")) {
@@ -13918,6 +13991,8 @@ async function main() {
     case "space":
     case "workspaces":
       return spacesCmd(sub, a1, a2, v, context);
+    case "staff":
+      return staffCmd(sub, a1, a2, v);
     case "plan":
       return planCmd(sub, a1, v, context);
     case "me":
@@ -13935,7 +14010,7 @@ async function main() {
       throw unknown(cmd, cmd, COMMANDS, "ghosty --help");
   }
 }
-var notice = updateNotice("0.45.0").catch(() => null);
+var notice = updateNotice("0.46.0").catch(() => null);
 main().then(
   async () => {
     const n = await notice;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ghostystudio/cli",
-  "version": "0.45.0",
+  "version": "0.46.0",
   "description": "Official Ghosty Studio CLI — configure, test and chat with your agents from the terminal. Built for humans and coding agents.",
   "type": "module",
   "bin": {