@skillcdn/console 0.1.12 → 0.1.13

package/README.md

@@ -33,13 +33,14 @@ const { items } = await client.tasks({ state: "ready" });
 - **The bounds** every input is held to (`MAX_TITLE_LENGTH`, `MAX_BODY_LENGTH`, `MAX_OPTIONS`, ...), so that a page can say so before a request is made.
 - **The routes:** `REST_ROUTES` (the workspace's resources), `AUTH_ROUTES`, and the helpers that build a path (`projectPath(key, collection, id)` for everything under a project, `projectIconPath(key, icon)` for a project's image, `restPath`, `loginPath`, `signInPath`). The API itself is described in [docs/specs/rest.md](https://github.com/skillcdn/console/blob/main/docs/specs/rest.md).
 - **The schemas,** in the mini build of zod, which runs in a browser: what the server answers (`restProjectSchema`, `restMemberSchema`, `restTaskSchema`, `restDecisionSchema`, `restEventSchema`, `restMeSchema`, ...) and what it is sent (`restProjectInputSchema`, `restTaskInputSchema`, `restTaskPatchSchema`, `restDecisionInputSchema`, `restAnswerInputSchema`, ...). Absent values are `null` on the wire, never missing keys. The server validates with the input schemas and is tested against the others.
-- **The client:** `createClient({ baseUrl, fetch })` answers typed values parsed with those schemas, and throws an `ApiError` with the server's stable `code` (or `network`, `invalid_response`) for anything else. It takes a `fetch` and reads nothing else. With `token`, a token a person made on their Agents page, every request carries `Authorization: Bearer` and no cookie: how a script or a console of a person's own acts as that person. The board is a project's: `client.projects()` lists those the person may see, and `client.project(key)` is the client of one, with its tasks, decisions, goals, runs, files, events, skills, documents, settings, members and image (`setIcon`, `removeIcon`). `tasks(filter)` narrows the board (`TaskFilter`: a state, the open ones, a category's key, a goal, an assignee, a day tasks are due by) and pages it (`Page`: `limit` and `offset`; the answer carries `more`), as `decisions(filter)` and `runs(filter)` are paged; a task carries its `category`, `goalId`, its plan (`startsOn`, `dueOn`) and its moments (`startedAt`, `doneAt`). The roadmap is `goals()`, `goal(id)`, `createGoal` and `updateGoal`; the workspace's categories are `client.categories()`, `createCategory`, `updateCategory` and `removeCategory`; `client.work()` is what is on the person's plate across their projects ([ADR-0019](https://github.com/skillcdn/console/blob/main/docs/adr/0019-a-task-is-planned-in-days-the-board-keeps-its-moments-and-goals-and-categories-give-the-work-its-shape.md)). The documents go by path: `documents({ folder })` lists a folder, `documents({ q })` finds pages by their words, `document(path)` reads one with its links both ways and its files, `writeDocument(path, { title, body, baseVersion })` writes a version, `archiveDocument`, `restoreDocument`, `documentVersions`, `documentVersion(path, n)`, `attachFile(path, upload)` and `documentFileUrl(path, id)` do the rest; `updateDecision(id, { outcome })` grows a decision's record. `connect`, `connectRequest`, `approveConnection`, `denyConnection` and `claimConnection` are the two sides of an agent connecting with a code a person approves (ADR-0011), and `personTokens` and `revokePersonToken` an administrator's sight of everyone's agents. An `EventSource` cannot carry a header, so a stream read with a token is a `fetch` of `eventStreamUrl(after)`. `handInFile` sends a file as a form, and `fileUrl` says where its bytes are read back. `events(after, { task })` is everything that happened to one task.
+- **The client:** `createClient({ baseUrl, fetch })` answers typed values parsed with those schemas, and throws an `ApiError` with the server's stable `code` (or `network`, `invalid_response`) for anything else. It takes a `fetch` and reads nothing else. With `token`, a token a person made on their Agents page, every request carries `Authorization: Bearer` and no cookie: how a script or a console of a person's own acts as that person, configuring included (`createProject`, `updatePerson`, a project's `update`, `setIcon`, `addMember`, `updateMember` and `removeMember`, `createCategory`, `updateCategory` and `removeCategory`), within the person's own roles; only the tokens themselves and the approval of a connection are a session's ([ADR-0021](https://github.com/skillcdn/console/blob/main/docs/adr/0021-a-token-configures-as-its-person-does.md)). The board is a project's: `client.projects()` lists those the person may see, and `client.project(key)` is the client of one, with its tasks, decisions, goals, runs, files, events, skills, documents, settings, members and image (`setIcon`, `removeIcon`). `tasks(filter)` narrows the board (`TaskFilter`: a state, the open ones, a category's key, a goal, an assignee, a day tasks are due by) and pages it (`Page`: `limit` and `offset`; the answer carries `more`), as `decisions(filter)` and `runs(filter)` are paged; a task carries its `category`, `goalId`, its plan (`startsOn`, `dueOn`) and its moments (`startedAt`, `doneAt`). The roadmap is `goals()`, `goal(id)`, `createGoal` and `updateGoal`; the workspace's categories are `client.categories()`, `createCategory`, `updateCategory` and `removeCategory`; `client.work()` is what is on the person's plate across their projects ([ADR-0019](https://github.com/skillcdn/console/blob/main/docs/adr/0019-a-task-is-planned-in-days-the-board-keeps-its-moments-and-goals-and-categories-give-the-work-its-shape.md)). The documents go by path: `documents({ folder })` lists a folder, `documents({ q })` finds pages by their words, `document(path)` reads one with its links both ways and its files, `writeDocument(path, { title, body, baseVersion })` writes a version, `archiveDocument`, `restoreDocument`, `documentVersions`, `documentVersion(path, n)`, `attachFile(path, upload)` and `documentFileUrl(path, id)` do the rest; `updateDecision(id, { outcome })` grows a decision's record. `connect`, `connectRequest`, `approveConnection`, `denyConnection` and `claimConnection` are the two sides of an agent connecting with a code a person approves (ADR-0011), and `personTokens` and `revokePersonToken` an administrator's sight of everyone's agents. An `EventSource` cannot carry a header, so a stream read with a token is a `fetch` of `eventStreamUrl(after)`. `handInFile` sends a file as a form, and `fileUrl` says where its bytes are read back. `events(after, { task })` is everything that happened to one task.
 
 ### The command line
 
 ```sh
 npm install -g @skillcdn/console                 # where the agent runs
 console login --url https://console.example      # shows an address and a code; a person approves, and the token arrives here
+console project new web "The web app"            # a project of your own, as on the pages; member, category and person role do the rest
 console use web                                  # the project this directory works in; .skillcdn-console.json, committed
 console take 7                                   # a run begins on task #7 of the project, for the person the token is
 console report "Found the cause: the parser trusts its input."
@@ -52,8 +53,9 @@ console finish --summary "Done: the parser refuses empty input."
 console serve dist                                # a console of your own, built from this package, served for you
 ```
 
-- **`console`** is the agent's side of the console ([docs/specs/cli.md](https://github.com/skillcdn/console/blob/main/docs/specs/cli.md)): a thin client of the REST API with no logic of its own, no dependencies beyond the package's, and no cost to an agent until it is used. `console help` says everything an agent needs and `console --version` which version this is; `--json` answers with the console's own JSON; the exit code says whether the console did it (`0`), refused or could not be reached (`1`), did not understand (`2`), or a decision still waits (`3`).
+- **`console`** is the agent's side of the console ([docs/specs/cli.md](https://github.com/skillcdn/console/blob/main/docs/specs/cli.md)): a thin client of the REST API with no logic of its own, no dependencies beyond the package's, and no cost to an agent until it is used. The package states Node.js 24 as its floor and is tested on it; 22 runs the command today, checked by hand on each release. `console help` says everything an agent needs and `console --version` which version this is; `--json` answers with the console's own JSON; the exit code says whether the console did it (`0`), refused or could not be reached (`1`), did not understand (`2`), or a decision still waits (`3`).
 - **A person signs it in once:** `login` checks the token against the console and keeps it, with the console's address, in `$XDG_CONFIG_HOME/skillcdn-console/credentials.json` (`~/.config` when unset). `CONSOLE_URL` and `CONSOLE_TOKEN` in the environment win over the file, for a hook or a job. A token is never taken on the command line.
+- **Configuring, as the person** ([ADR-0021](https://github.com/skillcdn/console/blob/main/docs/adr/0021-a-token-configures-as-its-person-does.md)): `people`, `person role`, `project new`, `project edit`, `project icon`, `members`, `member add`, `member role`, `member remove`, `category new`, `category edit` and `category remove` do what an administrator or an owner does on the pages, with the same refusals (`auth.forbidden` where the person may not), and the event names the agent beside the person. The tokens themselves have no command: they are made and removed on the Agents page, signed in.
 - **The project's documents** are the agent's to read and write: `docs`, `doc`, `write`, `attach`, `archive` and `restore`, by path; a link in a body to a page's path refers to the page.
 - **Every command on the board works in one project:** `--project <key>`, else `CONSOLE_PROJECT`, else what `console use <key>` wrote to `.skillcdn-console.json` in the working directory or one above it, a file meant to be committed. `console projects` lists the projects the person may work in.
 - **`console serve [<dir>] [--port <n>]`** is for a person: it serves [a console of your own](#a-console-of-your-own) from your machine, the build in `<dir>` at `http://127.0.0.1:11197/`, and carries everything under `/api/` to the console the command is signed in to, with your token, which the pages never see ([ADR-0014](https://github.com/skillcdn/console/blob/main/docs/adr/0014-a-persons-own-console-is-served-from-their-machine-by-the-command.md)). The loopback only; a request from another site's page is refused. Without a directory only the API is served, for a development server.
@@ -119,7 +121,7 @@ npx vite                                         # your pages, reloading as you
 npx vite build && console serve dist             # the build served whole, at http://127.0.0.1:11197/
 ```
 
-The pages run on your token: what you may do on the board, they may do, and no more. The token never reaches the browser; the command adds it on the way, on the loopback only, and refuses a request from another site's page. The tokens themselves and configuring are done on the organization's console, signed in, and the pages say so where it matters. Replace a component, pass your own language pack or your own marks, or compose pages of your own from the components and `useConsoleData`: the sections above say what each piece takes.
+The pages run on your token: what you may do on the board, they may do, and no more. The token never reaches the browser; the command adds it on the way, on the loopback only, and refuses a request from another site's page. The tokens themselves are made and removed on the organization's console, signed in, and the pages say so there; everything else, configuring included, the pages do on your token as the organization's console does on your session. Replace a component, pass your own language pack or your own marks, or compose pages of your own from the components and `useConsoleData`: the sections above say what each piece takes.
 
 ### The skills, for an agent
 

package/dist/cli/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,SAAS,EAEf,MAAM,cAAc,CAAC;AAatB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAuBrD,OAAO,EAA0C,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAQjF,qFAAqF;AACrF,eAAO,MAAM,IAAI;aACf,EAAE,EAAE,CAAC;IACL,6EAA6E;aAC7E,MAAM,EAAE,CAAC;IACT,sCAAsC;aACtC,KAAK,EAAE,CAAC;IACR,6CAA6C;aAC7C,OAAO,EAAE,CAAC;CACF,CAAC;AAWX,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,kCAAkC;IAClC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAozCD,yFAAyF;AACzF,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BhF"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,SAAS,EAEf,MAAM,cAAc,CAAC;AAqBtB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AA0BrD,OAAO,EAA0C,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAQjF,qFAAqF;AACrF,eAAO,MAAM,IAAI;aACf,EAAE,EAAE,CAAC;IACL,6EAA6E;aAC7E,MAAM,EAAE,CAAC;IACT,sCAAsC;aACtC,KAAK,EAAE,CAAC;IACR,6CAA6C;aAC7C,OAAO,EAAE,CAAC;CACF,CAAC;AAWX,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,2CAA2C;IAC3C,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,kCAAkC;IAClC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAinDD,yFAAyF;AACzF,wBAAsB,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CA6BhF"}

package/dist/cli/cli.js

@@ -3,9 +3,9 @@ import { parseArgs } from "node:util";
 import { ApiError, createClient, } from "../client.js";
 import { addDays, dayOf as dayOfDate, isDay } from "../dates.js";
 import { DEFAULT_PAGE_LIMIT, LIST_LIMIT, MAX_OPTIONS, MIN_OPTIONS } from "../limits.js";
-import { GOAL_STATES, TASK_PRIORITIES, TASK_STATES, } from "../vocabulary.js";
+import { COLOR_NAMES, GOAL_STATES, PERSON_ROLES, PROJECT_ROLES, PROJECT_VISIBILITIES, TASK_PRIORITIES, TASK_STATES, } from "../vocabulary.js";
 import { loadWebRoot, WebRootError } from "../web.js";
-import { formatAnswer, formatCategoryLine, formatDecision, formatDecisionLine, formatDocument, formatDocuments, formatGoal, formatGoalLine, formatMore, formatOptions, formatProjectLine, formatRun, formatRunLine, formatSkills, formatTask, formatTaskLine, formatVersion, formatVersionLine, formatWork, } from "./format.js";
+import { formatAnswer, formatCategoryLine, formatDecision, formatDecisionLine, formatDocument, formatDocuments, formatGoal, formatGoalLine, formatMemberLine, formatMore, formatOptions, formatPersonLine, formatProject, formatProjectLine, formatRun, formatRunLine, formatSkills, formatTask, formatTaskLine, formatVersion, formatVersionLine, formatWork, } from "./format.js";
 import { COMMAND_HELP, helpFor, usage } from "./help.js";
 import { createServeHandler, DEFAULT_SERVE_PORT } from "./serve.js";
 // The `console` command (docs/specs/cli.md): the agent's side of the console. A thin client of
@@ -212,13 +212,31 @@ async function personIdOf(session, value) {
         }
         return me.person.id;
     }
+    return (await personOf(session, value)).id;
+}
+/** The person a login names, among the workspace's; the logins are as people sign in. */
+async function personOf(session, login) {
     const { items } = await session.client.people();
-    const found = items.find((person) => person.login.toLowerCase() === value.toLowerCase());
+    const found = items.find((person) => person.login.toLowerCase() === login.toLowerCase());
     if (found === undefined) {
-        throw misuse(`Nobody of the workspace is called ${value}. console people is not a command; the logins are as people sign in.`);
+        throw misuse(`Nobody of the workspace is called ${login}. console people lists everyone, by login.`);
     }
-    return found.id;
+    return found;
 }
+/** One word of a vocabulary, or the refusal to understand. */
+function wordOf(value, words, what) {
+    const found = words.find((word) => word === value);
+    if (found === undefined) {
+        throw misuse(`Not ${what}: ${value}. One of ${words.join(", ")}`);
+    }
+    return found;
+}
+const personRoleOf = (value) => wordOf(value, PERSON_ROLES, "a role in the workspace");
+const projectRoleOf = (value) => wordOf(value, PROJECT_ROLES, "a role in a project");
+const visibilityOf = (value) => wordOf(value, PROJECT_VISIBILITIES, "a visibility");
+const colorOf = (value) => wordOf(value, COLOR_NAMES, "a colour");
+/** A colour, or `none` for the one the pages choose, which is `null` on the wire. */
+const colorOrNoneOf = (value) => value === undefined ? undefined : value === "none" ? null : colorOf(value);
 function secondsOf(value, fallback) {
     if (value === undefined) {
         return fallback;
@@ -255,6 +273,14 @@ function theOne(positionals, ask) {
     }
     return first;
 }
+/** Exactly two words, for a command on a thing and a value. */
+function theTwo(positionals, ask) {
+    const [first, second] = positionals;
+    if (first === undefined || second === undefined || positionals.length > 2) {
+        throw misuse(ask);
+    }
+    return [first, second];
+}
 /**
  * The decision once answered, or as it stands when the wait is over. Each request asks the
  * console to hold it for a while, so the answer arrives as soon as a person gives it.
@@ -366,7 +392,7 @@ const projects = async (args, io) => {
     const session = await open(io, values);
     const found = await session.client.projects();
     answer(io, session, found, () => found.items.length === 0
-        ? "No projects you may work in. A person makes one on the console's Projects page."
+        ? 'No projects you may work in. Make one: console project new <key> "<name>"'
         : found.items.map(formatProjectLine).join("\n"));
     return EXIT.ok;
 };
@@ -1032,6 +1058,208 @@ const serve = async (args, io) => {
     await listening.closed;
     return EXIT.ok;
 };
+// Configuring, as the person (ADR-0021): what an administrator or an owner does on the pages,
+// their agent does here, attributed to them as the agent. The console decides on every request
+// with the same roles; what the person may not, the agent may not (auth.forbidden). The tokens
+// themselves have no command, by design.
+const people = async (args, io) => {
+    const { values } = parse(args, {}, false);
+    const session = await open(io, values);
+    const found = await session.client.people();
+    answer(io, session, found, () => found.items.map(formatPersonLine).join("\n"));
+    return EXIT.ok;
+};
+const person = async (args, io) => {
+    if (args[0] !== "role") {
+        throw misuse("Say what to do: console person role <login> <admin|member>");
+    }
+    const { values, positionals } = parse(args.slice(1), {});
+    const [login, role] = theTwo(positionals, "Say whom and what: console person role <login> <admin|member>");
+    const wanted = personRoleOf(role);
+    const session = await open(io, values);
+    const found = await personOf(session, login);
+    const changed = await session.client.updatePerson(found.id, { role: wanted });
+    answer(io, session, changed, () => formatPersonLine(changed));
+    return EXIT.ok;
+};
+/** The flags that set what a project is, shared by making one and changing one. */
+const PROJECT_FIELDS = {
+    description: { type: "string" },
+    file: { type: "string" },
+    visibility: { type: "string" },
+    skills: { type: "string" },
+    color: { type: "string" },
+    symbol: { type: "string" },
+};
+/** What the flags say of a project; `none` clears what may be cleared. */
+async function projectFieldsOf(io, values) {
+    const description = await bodyOf(io, values, text(values, "description"));
+    const visibility = text(values, "visibility");
+    const skills = orNone(text(values, "skills"));
+    const color = colorOrNoneOf(text(values, "color"));
+    const symbol = orNone(text(values, "symbol"));
+    return {
+        ...(description === undefined
+            ? {}
+            : { description: description === "none" ? "" : description }),
+        ...(visibility === undefined ? {} : { visibility: visibilityOf(visibility) }),
+        ...(skills === undefined ? {} : { skillsAddress: skills }),
+        ...(color === undefined ? {} : { color }),
+        ...(symbol === undefined ? {} : { symbol }),
+    };
+}
+const newProject = async (args, io) => {
+    const { values, positionals } = parse(args, PROJECT_FIELDS);
+    const [key, name] = theTwo(positionals, 'Say the key and the name: console project new <key> "<name>" [--visibility workspace|private]');
+    const fields = await projectFieldsOf(io, values);
+    const session = await open(io, values);
+    const made = await session.client.createProject({ key, name, ...fields });
+    answer(io, session, made, () => `Project made: ${made.name} (${made.key}), with you as its owner.\nTo work in it from this directory: console use ${made.key}`);
+    return EXIT.ok;
+};
+const editProject = async (args, io) => {
+    const { values, positionals } = parse(args, { ...PROJECT_FIELDS, name: { type: "string" } });
+    const key = theOne(positionals, "Say which project: console project edit <key> --name <name> ...");
+    const name = text(values, "name");
+    const patch = { ...(name === undefined ? {} : { name }), ...(await projectFieldsOf(io, values)) };
+    if (Object.keys(patch).length === 0) {
+        throw misuse("Say what to change: --name, --description, --visibility, --skills, --color or --symbol; none clears the description, the skills address, the colour or the symbol.");
+    }
+    const session = await open(io, values);
+    const changed = await session.client.project(key).update(patch);
+    answer(io, session, changed, () => formatProject(changed));
+    return EXIT.ok;
+};
+const projectIcon = async (args, io) => {
+    const { values, positionals } = parse(args, { remove: { type: "boolean" } });
+    const [key, file] = positionals;
+    const removing = on(values, "remove");
+    if (key === undefined || positionals.length > 2 || (file === undefined) !== removing) {
+        throw misuse("Say which project and which image: console project icon <key> <file>, or console project icon <key> --remove");
+    }
+    const session = await open(io, values);
+    const project = session.client.project(key);
+    const changed = file === undefined
+        ? await project.removeIcon()
+        : await project.setIcon({
+            name: basename(file),
+            bytes: await io.readBytes(file),
+            contentType: CONTENT_TYPES[extname(file).toLowerCase()] ?? "application/octet-stream",
+        });
+    answer(io, session, changed, () => formatProject(changed));
+    return EXIT.ok;
+};
+const project = async (args, io) => {
+    if (args[0] === "new") {
+        return newProject(args.slice(1), io);
+    }
+    if (args[0] === "edit") {
+        return editProject(args.slice(1), io);
+    }
+    if (args[0] === "icon") {
+        return projectIcon(args.slice(1), io);
+    }
+    const { values, positionals } = parse(args, {});
+    const key = theOne(positionals, "Say which project: console project <key>; or console project new, edit or icon");
+    const session = await open(io, values);
+    const found = await session.client.project(key).get();
+    answer(io, session, found, () => formatProject(found));
+    return EXIT.ok;
+};
+const members = async (args, io) => {
+    const { values } = parse(args, {}, false);
+    const session = await open(io, values);
+    const project = await session.project();
+    const found = await project.members();
+    answer(io, session, found, () => found.items.length === 0
+        ? "Nobody is listed in the project."
+        : found.items.map(formatMemberLine).join("\n"));
+    return EXIT.ok;
+};
+const member = async (args, io) => {
+    const [verb, ...rest] = args;
+    if (verb === "add") {
+        const { values, positionals } = parse(rest, { role: { type: "string" } });
+        const login = theOne(positionals, "Say whom: console member add <login> [--role owner|member]");
+        const role = text(values, "role");
+        const session = await open(io, values);
+        const project = await session.project();
+        const added = await project.addMember({
+            personId: (await personOf(session, login)).id,
+            ...(role === undefined ? {} : { role: projectRoleOf(role) }),
+        });
+        answer(io, session, added, () => formatMemberLine(added));
+        return EXIT.ok;
+    }
+    if (verb === "role") {
+        const { values, positionals } = parse(rest, {});
+        const [login, role] = theTwo(positionals, "Say whom and what: console member role <login> <owner|member>");
+        const wanted = projectRoleOf(role);
+        const session = await open(io, values);
+        const project = await session.project();
+        const changed = await project.updateMember((await personOf(session, login)).id, {
+            role: wanted,
+        });
+        answer(io, session, changed, () => formatMemberLine(changed));
+        return EXIT.ok;
+    }
+    if (verb === "remove") {
+        const { values, positionals } = parse(rest, {});
+        const login = theOne(positionals, "Say whom: console member remove <login>");
+        const session = await open(io, values);
+        const project = await session.project();
+        const found = await personOf(session, login);
+        await project.removeMember(found.id);
+        answer(io, session, { removed: found.login }, () => `${found.login} is no longer listed in the project.`);
+        return EXIT.ok;
+    }
+    throw misuse("Say what to do: console member add <login> [--role owner|member], console member role <login> <owner|member>, or console member remove <login>");
+};
+const category = async (args, io) => {
+    const [verb, ...rest] = args;
+    if (verb === "new") {
+        const { values, positionals } = parse(rest, { color: { type: "string" } });
+        const [key, name] = theTwo(positionals, 'Say the key and the name: console category new <key> "<name>" [--color <name>]');
+        const color = text(values, "color");
+        const session = await open(io, values);
+        const made = await session.client.createCategory({
+            key,
+            name,
+            ...(color === undefined ? {} : { color: colorOf(color) }),
+        });
+        answer(io, session, made, () => formatCategoryLine(made));
+        return EXIT.ok;
+    }
+    if (verb === "edit") {
+        const { values, positionals } = parse(rest, {
+            name: { type: "string" },
+            color: { type: "string" },
+        });
+        const key = theOne(positionals, "Say which category: console category edit <key> [--name <name>] [--color <name>]");
+        const name = text(values, "name");
+        const color = text(values, "color");
+        const patch = {
+            ...(name === undefined ? {} : { name }),
+            ...(color === undefined ? {} : { color: colorOf(color) }),
+        };
+        if (Object.keys(patch).length === 0) {
+            throw misuse("Say what to change: --name or --color.");
+        }
+        const session = await open(io, values);
+        const changed = await session.client.updateCategory(key, patch);
+        answer(io, session, changed, () => formatCategoryLine(changed));
+        return EXIT.ok;
+    }
+    if (verb === "remove") {
+        const { values, positionals } = parse(rest, {});
+        const key = theOne(positionals, "Say which category: console category remove <key>");
+        const session = await open(io, values);
+        await session.client.removeCategory(key);
+        answer(io, session, { removed: key }, () => `Category ${key} removed.`);
+        return EXIT.ok;
+    }
+    throw misuse('Say what to do: console category new <key> "<name>" [--color <name>], console category edit <key> [--name <name>] [--color <name>], or console category remove <key>');
+};
 const COMMANDS = {
     login,
     logout,
@@ -1046,6 +1274,12 @@ const COMMANDS = {
     goal,
     categories,
     skills,
+    people,
+    person,
+    project,
+    members,
+    member,
+    category,
     take,
     report,
     "hand-in": handIn,
@@ -1097,6 +1331,26 @@ function hintFor(error) {
             return "The due day is before the start. Say a due day on or after it.\n";
         case "goal.not_found":
             return "No goal of this project has that id. console goals lists them.\n";
+        case "auth.forbidden":
+            return "What was asked is an administrator's, or an owner's of the project, and the person this token acts as is not one here. Hand the step to them.\n";
+        case "project.key_taken":
+            return "A project has that key already. console projects lists them.\n";
+        case "project.invalid_address":
+            return "The skills address is not one as SkillCDN spells it; none makes the organization's skills the project's.\n";
+        case "project.invalid_icon":
+            return "The image must be a PNG, a JPEG, a GIF or a WebP, known by its bytes.\n";
+        case "member.exists":
+            return "The person is listed already. console member role <login> <owner|member> changes what they are.\n";
+        case "member.not_found":
+            return "The person is not listed in the project. console members lists those who are.\n";
+        case "category.key_taken":
+            return "A category has that key already. console categories lists them.\n";
+        case "category.not_found":
+            return "No category has that key. console categories lists them.\n";
+        case "category.in_use":
+            return "Tasks are sorted into the category. Move them out first: console task edit <number> --category <other|none>\n";
+        case "person.last_admin":
+            return "The board keeps at least one administrator. Make another one first.\n";
         case "connect.too_many":
             return "The console holds as many connections as it may at once. Try again in a few minutes.\n";
         case "network":