@skillcdn/console 0.1.8 → 0.1.10

package/skills/deploying-a-console/references/sizing.md

@@ -78,7 +78,7 @@ Part of the plan, in plain words, one line per item, the chosen size first:
 ## Options the plan offers
 
 - **The database as serverless capacity.** Aurora Serverless v2 for PostgreSQL scales its capacity with load, down to nothing when idle (0 ACU with automatic pause, since 2024-11). The console holds a listening connection open and sweeps every fifteen minutes, so it never idles and the database never pauses: the floor is 0.5 ACU, about $44 a month at $0.12 per ACU-hour (read 2026-10), more than the `small` and `medium` instances. Offer it when the organization wants capacity that follows load without resizing, and say the floor.
-- **The bucket on Cloudflare R2** instead of S3: the same S3 API, keys made in the Cloudflare dashboard, `S3_ENDPOINT=https://<account id>.r2.cloudflarestorage.com`, `S3_REGION=auto`, path style; no egress charges. Offer it when the organization keeps its files at Cloudflare already; S3 stays the default because the keys, the budget and the audit are then in one account.
+- **The bucket on Cloudflare R2** instead of S3: the same S3 API, `S3_ENDPOINT=https://<account id>.r2.cloudflarestorage.com`, `S3_REGION=auto`, path style; no egress charges. Its keys are made in the Cloudflare dashboard (R2, Manage API tokens, Object Read & Write on the one bucket), saved in the secrets file as `S3_ACCESS_KEY_ID` and `S3_SECRET_ACCESS_KEY`, stored as parameters and carried by the `api` task as secrets, with no `S3_CREDENTIALS` line: the task's role cannot reach R2. Offer it when the organization keeps its files at Cloudflare already; S3 stays the default because the task's own role reaches it with no key to keep, and the budget and the audit are then in one account.
 - **A load balancer instead of the tunnel.** ECS Express Mode creates an Application Load Balancer with HTTPS on an AWS domain in one command, at about $16 to $23 a month for the balancer (read 2026-10); the custom domain is a manual step on the balancer, and Cloudflare then proxies to it. Offer it only when the organization does not want its traffic through the tunnel; the tunnel is the default because it costs nothing, exposes nothing, and brings the client's address to the console cleanly.
 - **ARM tasks** when the organization has ARM runners for its builds (building for ARM on an x86 runner takes many times longer): a fifth off the task line.
 

package/skills/deploying-a-console/scripts/store-secrets.mjs

@@ -5,7 +5,6 @@
 //   node store-secrets.mjs set <file> <NAME>                  the value is standard input
 //   node store-secrets.mjs derive <file> <NAME> <template>    {{OTHER}} in the template is replaced
 //   node store-secrets.mjs render <file> <in> <out>           a JSON file with {{NAME}} placeholders filled
-//   node store-secrets.mjs key <file> <iam user>              creates an access key for the user and stores both halves
 //   node store-secrets.mjs store <file> <prefix>              every value as a SecureString parameter <prefix>/<NAME>
 import { execFileSync } from "node:child_process";
 import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
@@ -15,7 +14,7 @@ import process from "node:process";
 
 const [mode, file, ...rest] = process.argv.slice(2);
 const usage = () => {
-  process.stderr.write("usage: node store-secrets.mjs set|derive|render|key|store <file> ...\n");
+  process.stderr.write("usage: node store-secrets.mjs set|derive|render|store <file> ...\n");
   process.exit(2);
 };
 if (mode === undefined || file === undefined) {
@@ -73,19 +72,6 @@ switch (mode) {
     writeFileSync(output, fill(read(), readFileSync(input, "utf8")), { mode: 0o600 });
     break;
   }
-  case "key": {
-    const [user] = rest;
-    if (user === undefined) {
-      usage();
-    }
-    const answer = JSON.parse(aws(["iam", "create-access-key"], { UserName: user }));
-    write({
-      ...read(),
-      S3_ACCESS_KEY_ID: answer.AccessKey.AccessKeyId,
-      S3_SECRET_ACCESS_KEY: answer.AccessKey.SecretAccessKey,
-    });
-    break;
-  }
   case "store": {
     const [prefix] = rest;
     if (prefix === undefined) {

package/skills/working-the-board/SKILL.md

@@ -5,7 +5,7 @@ license: MIT
 compatibility: Needs a shell with the console command on the PATH (npm install -g @skillcdn/console, Node.js 24 or newer), signed in by a person. Nothing else; the command needs no key of its own and the agent never sees a token.
 metadata:
   author: skillcdn
-  version: "1.1"
+  version: "1.2"
 skillcdn:
   translations:
     ko:
@@ -37,8 +37,8 @@ The full contract is the [specification of the command line](/docs/specs/cli.md)
 
 | Input | Source |
 |---|---|
-| The task | Its number (`#7`) or its id, from what the person said. Told to pick one, `console tasks --state ready` lists what is ready; a task is never taken without being told which, or that any ready one may be. |
-| The work | The task's body, read with `console task <number>`: what to make, where, the milestones, what to ask. The pages it links to (`console doc <path>`) and the project's skills (`console skills`, each loaded through the agent's own SkillCDN connection) say the rest. |
+| The task | Its number (`#7`) or its id, from what the person said. Told to pick one, `console work` lists what is on the person's plate across their projects, the sooner due first, and `console tasks --state ready --mine` what is ready and theirs in this one (`--due overdue`, `--due week`, `--category <key>` and `--goal <id>` narrow it further); a task is never taken without being told which, or that any ready one may be. |
+| The work | The task's body, read with `console task <number>`: what to make, where, the milestones, what to ask; with its plan, the category, the goal it works towards (`console goal <id>` says what reaching it means) and the days it starts and is due, which the reports and the summary keep to. The pages it links to (`console doc <path>`) and the project's skills (`console skills`, each loaded through the agent's own SkillCDN connection) say the rest. |
 | The organization's way | Its own skill for its console, when it has one, adds which tasks to take, what to report and when to ask; it comes through the same kind of address as its other skills. |
 
 ## Workflow
@@ -47,7 +47,7 @@ Each phase ends with something on the board. Only phase 4 waits for a person.
 
 ### Phase 1: Read
 
-`console task <number>` shows the task in full, the decisions about it and the runs on it. A run open on it by another agent means the task is taken: say so and stop. Read what the body links to, with `console doc <path>` for the project's pages and `console skills` for the organization's skills, before anything is made.
+`console task <number>` shows the task in full, with its plan, the decisions about it and the runs on it. A run open on it by another agent means the task is taken: say so and stop. A task that is past its due day is still the task; the first report says so, and what the day was for is kept in mind. Read what the body links to, with `console doc <path>` for the project's pages and `console skills` for the organization's skills, before anything is made.
 
 ### Phase 2: Take
 
@@ -77,10 +77,11 @@ After the last report, `console finish --summary "<what was done, and what is le
 
 - Never look for, read, print or send a token. The rules of the repository say the rest.
 - One run at a time: a command on a run acts on the one open run of this token in the project; working two tasks at once, say which with `--run <id>`.
-- The board's words are the vocabulary's own: states `idea`, `ready`, `in_progress`, `in_review`, `done` and `dropped`; priorities `low`, `normal`, `high` and `urgent`. Taking a task moves it, finishing moves it; it is not moved by hand around a run.
+- The board's words are the vocabulary's own: states `idea`, `ready`, `in_progress`, `in_review`, `done` and `dropped`; priorities `low`, `normal`, `high` and `urgent`; a day is `2026-10-24`. Taking a task moves it, finishing moves it; it is not moved by hand around a run. When a task is started and when it is done, the board writes down itself: never typed.
+- The plan is the person's: a task's days, its category and its goal are changed (`console task edit`) only when the task says so or a person asks, and a goal is set or moved (`console goal new`, `console goal edit`) only when the person is an owner and said to.
 - Exit codes: `0` done; `1` refused or unreachable, the reason on standard error as a code and words, which `console help <command>` names; `2` not understood; `3` a decision still waits.
 - Everything sent is held to limits the console states (`console help <command>`); a refusal `request.invalid` names the field.
 
 ## Terms
 
-- **Task**: what is to be done, numbered per project. **Run**: one agent at work on one task for one person, with its reports, what it handed in, and what it waits for. **Decision**: a question with options, which a person answers on the board. **Page**: a document of the project, Markdown at a path that does not change. **Project**: a board of its own, with its members and its skills address.
+- **Task**: what is to be done, numbered per project, with its plan (a category, a goal, the days it starts and is due) and its moments (when it was started and done, which the board keeps). **Goal**: what the project works towards, on its roadmap, with the day it is meant to be reached by; its progress is its tasks. **Category**: a kind of work, the workspace's word for it, by key. **Run**: one agent at work on one task for one person, with its reports, what it handed in, and what it waits for. **Decision**: a question with options, which a person answers on the board. **Page**: a document of the project, Markdown at a path that does not change. **Project**: a board of its own, with its members and its skills address.

package/src/api.ts

@@ -13,6 +13,7 @@ export {
   type FetchLike,
   type FileUpload,
   type ProjectClient,
+  type TaskFilter,
 } from "./client.js";
 export {
   CONNECT_CODE_ALPHABET,
@@ -36,6 +37,9 @@ export {
   MAX_AGENT_LENGTH,
   MAX_ARTIFACTS_PER_RUN,
   MAX_BODY_LENGTH,
+  MAX_CATEGORIES,
+  MAX_CATEGORY_KEY_LENGTH,
+  MAX_CATEGORY_NAME_LENGTH,
   MAX_DOCUMENT_LENGTH,
   MAX_DOCUMENT_PATH_LENGTH,
   MAX_DOCUMENT_SEGMENT_LENGTH,
@@ -68,6 +72,7 @@ export {
 export {
   AUTH_ROUTES,
   CLAIM_PATH,
+  categoryPath,
   connectPath,
   isSignInFailure,
   loginPath,
@@ -88,6 +93,10 @@ export {
   type RestArtifact,
   type RestArtifactInput,
   type RestBacklink,
+  type RestCategories,
+  type RestCategory,
+  type RestCategoryInput,
+  type RestCategoryPatch,
   type RestClaim,
   type RestClaimInput,
   type RestConnectInput,
@@ -110,6 +119,10 @@ export {
   type RestEvents,
   type RestFile,
   type RestFileInput,
+  type RestGoal,
+  type RestGoalInput,
+  type RestGoalPatch,
+  type RestGoals,
   type RestMe,
   type RestMember,
   type RestMemberInput,
@@ -133,6 +146,7 @@ export {
   type RestSkill,
   type RestSkills,
   type RestTask,
+  type RestTaskCounts,
   type RestTaskInput,
   type RestTaskLink,
   type RestTaskPatch,
@@ -144,10 +158,15 @@ export {
   type RestVersion,
   type RestVersionSummary,
   type RestVersions,
+  type RestWork,
   restAnswerInputSchema,
   restArtifactInputSchema,
   restArtifactSchema,
   restBacklinkSchema,
+  restCategoriesSchema,
+  restCategoryInputSchema,
+  restCategoryPatchSchema,
+  restCategorySchema,
   restClaimInputSchema,
   restClaimSchema,
   restConnectInputSchema,
@@ -170,6 +189,10 @@ export {
   restEventsSchema,
   restFileInputSchema,
   restFileSchema,
+  restGoalInputSchema,
+  restGoalPatchSchema,
+  restGoalSchema,
+  restGoalsSchema,
   restMemberInputSchema,
   restMemberPatchSchema,
   restMemberSchema,
@@ -192,6 +215,7 @@ export {
   restRunsSchema,
   restSkillSchema,
   restSkillsSchema,
+  restTaskCountsSchema,
   restTaskInputSchema,
   restTaskLinkSchema,
   restTaskPatchSchema,
@@ -204,16 +228,22 @@ export {
   restVersionSchema,
   restVersionSummarySchema,
   restVersionsSchema,
+  restWorkSchema,
 } from "./schemas.js";
 export { hasForbiddenCodePoint } from "./text.js";
 export {
   ARTIFACT_KINDS,
   type ArtifactKind,
+  CATEGORY_COLORS,
+  type CategoryColor,
   EVENT_KINDS,
   type EventKind,
+  GOAL_STATES,
+  type GoalState,
   isProviderKey,
   LINK_SOURCES,
   type LinkSource,
+  OPEN_TASK_STATES,
   PERSON_ROLES,
   type PersonRole,
   PROJECT_ROLES,

package/src/cli/cli.ts

@@ -7,18 +7,29 @@ import {
   type FetchLike,
   type ProjectClient,
 } from "../client.js";
+import { addDays, dayOf as dayOfDate, isDay } from "../dates.js";
 import { MAX_OPTIONS, MIN_OPTIONS } from "../limits.js";
-import type { RestClaim, RestDecision } from "../schemas.js";
-import { TASK_PRIORITIES, TASK_STATES, type TaskPriority, type TaskState } from "../vocabulary.js";
+import type { RestClaim, RestDecision, RestTaskPatch } from "../schemas.js";
+import {
+  GOAL_STATES,
+  type GoalState,
+  TASK_PRIORITIES,
+  TASK_STATES,
+  type TaskPriority,
+  type TaskState,
+} from "../vocabulary.js";
 import { loadWebRoot, type WebRoot, WebRootError } from "../web.js";
 import type { CredentialStore } from "./credentials.js";
 import type { DirectoryStore } from "./directory.js";
 import {
   formatAnswer,
+  formatCategoryLine,
   formatDecision,
   formatDecisionLine,
   formatDocument,
   formatDocuments,
+  formatGoal,
+  formatGoalLine,
   formatOptions,
   formatProjectLine,
   formatRun,
@@ -28,6 +39,7 @@ import {
   formatTaskLine,
   formatVersion,
   formatVersionLine,
+  formatWork,
 } from "./format.js";
 import { COMMAND_HELP, helpFor, usage } from "./help.js";
 import { createServeHandler, DEFAULT_SERVE_PORT, type Listen } from "./serve.js";
@@ -255,6 +267,79 @@ function priorityOf(value: string | undefined): TaskPriority | undefined {
   return found;
 }
 
+function goalStateOf(value: string | undefined): GoalState | undefined {
+  if (value === undefined) {
+    return undefined;
+  }
+  const found = GOAL_STATES.find((state) => state === value);
+  if (found === undefined) {
+    throw misuse(`Not a state of a goal: ${value}. One of ${GOAL_STATES.join(", ")}`);
+  }
+  return found;
+}
+
+/** Today by this machine's clock, as a day. */
+const todayOf = (io: CliIo): string => dayOfDate(new Date(io.now()));
+
+/**
+ * A day as a flag takes one: `2026-10-24`, `today`, `tomorrow`, or `+<n>` days from today; and
+ * `none` where a field may be cleared, which is `null` on the wire.
+ */
+function dayOf(io: CliIo, value: string | undefined, clearable = false): string | null | undefined {
+  if (value === undefined) {
+    return undefined;
+  }
+  if (clearable && value === "none") {
+    return null;
+  }
+  if (value === "today") {
+    return todayOf(io);
+  }
+  if (value === "tomorrow") {
+    return addDays(todayOf(io), 1);
+  }
+  const ahead = /^\+(\d{1,3})$/.exec(value);
+  if (ahead !== null) {
+    return addDays(todayOf(io), Number(ahead[1]));
+  }
+  if (!isDay(value)) {
+    throw misuse(`Not a day: ${value}. Say it as 2026-10-24, today, tomorrow, or +7`);
+  }
+  return value;
+}
+
+/** A value a field is set to, or `none` to clear it, which is `null` on the wire. */
+const orNone = (value: string | undefined): string | null | undefined =>
+  value === "none" ? null : value;
+
+/** The id of the person a flag names: `me`, or a login of the workspace. */
+async function personIdOf(
+  session: Session,
+  value: string | undefined,
+): Promise<string | null | undefined> {
+  if (value === undefined) {
+    return undefined;
+  }
+  if (value === "none") {
+    return null;
+  }
+  if (value === "me") {
+    const me = await session.client.me();
+    if (me.person === null) {
+      throw failed("The console does not know this token. Sign in again: console login");
+    }
+    return me.person.id;
+  }
+  const { items } = await session.client.people();
+  const found = items.find((person) => person.login.toLowerCase() === value.toLowerCase());
+  if (found === undefined) {
+    throw misuse(
+      `Nobody of the workspace is called ${value}. console people is not a command; the logins are as people sign in.`,
+    );
+  }
+  return found.id;
+}
+
 function secondsOf(value: string | undefined, fallback: number): number {
   if (value === undefined) {
     return fallback;
@@ -452,17 +537,67 @@ const use: Command = async (args, io) => {
 };
 
 const tasks: Command = async (args, io) => {
-  const { values } = parse(args, { state: { type: "string" } }, false);
+  const { values } = parse(
+    args,
+    {
+      state: { type: "string" },
+      open: { type: "boolean" },
+      mine: { type: "boolean" },
+      category: { type: "string" },
+      goal: { type: "string" },
+      due: { type: "string" },
+    },
+    false,
+  );
   const state = stateOf(text(values, "state"));
   const session = await open(io, values);
   const project = await session.project();
-  const found = await project.tasks(state === undefined ? {} : { state });
+  // What is due: a day, or the words for the usual windows; overdue keeps only the open ones.
+  const due = text(values, "due");
+  const today = todayOf(io);
+  const dueBy =
+    due === undefined
+      ? undefined
+      : due === "overdue"
+        ? addDays(today, -1)
+        : due === "week"
+          ? addDays(today, 6)
+          : (dayOf(io, due) ?? undefined);
+  const assignee = on(values, "mine")
+    ? ((await personIdOf(session, "me")) ?? undefined)
+    : undefined;
+  const found = await project.tasks({
+    ...(state === undefined ? {} : { state }),
+    ...(on(values, "open") || due === "overdue" ? { open: true } : {}),
+    ...(assignee === undefined ? {} : { assignee }),
+    ...(text(values, "category") === undefined ? {} : { category: text(values, "category") }),
+    ...(text(values, "goal") === undefined ? {} : { goal: text(values, "goal") }),
+    ...(dueBy === undefined ? {} : { dueBy }),
+  });
   answer(io, session, found, () =>
     found.items.length === 0 ? "No tasks." : found.items.map(formatTaskLine).join("\n"),
   );
   return EXIT.ok;
 };
 
+const work: Command = async (args, io) => {
+  const { values } = parse(args, {}, false);
+  const session = await open(io, values);
+  const found = await session.client.work();
+  answer(io, session, found, () => formatWork(found));
+  return EXIT.ok;
+};
+
+const categories: Command = async (args, io) => {
+  const { values } = parse(args, {}, false);
+  const session = await open(io, values);
+  const found = await session.client.categories();
+  answer(io, session, found, () =>
+    found.items.length === 0 ? "No categories." : found.items.map(formatCategoryLine).join("\n"),
+  );
+  return EXIT.ok;
+};
+
 const skills: Command = async (args, io) => {
   const { values } = parse(args, {}, false);
   const session = await open(io, values);
@@ -472,33 +607,105 @@ const skills: Command = async (args, io) => {
   return EXIT.ok;
 };
 
+/** The flags that set a task's fields, shared by writing one and changing one. */
+const TASK_FIELDS: OptionSpec = {
+  state: { type: "string" },
+  priority: { type: "string" },
+  category: { type: "string" },
+  goal: { type: "string" },
+  starts: { type: "string" },
+  due: { type: "string" },
+  assignee: { type: "string" },
+  parent: { type: "string" },
+};
+
+/** What the flags say of a task's fields, as the API takes them; `none` clears a field. */
+async function taskFieldsOf(
+  io: CliIo,
+  session: Session,
+  project: ProjectClient,
+  values: Values,
+): Promise<RestTaskPatch> {
+  const state = stateOf(text(values, "state"));
+  const priority = priorityOf(text(values, "priority"));
+  const category = orNone(text(values, "category"));
+  const goalId = orNone(text(values, "goal"));
+  const startsOn = dayOf(io, text(values, "starts"), true);
+  const dueOn = dayOf(io, text(values, "due"), true);
+  const assigneeId = await personIdOf(session, text(values, "assignee"));
+  const parent = text(values, "parent");
+  const parentId =
+    parent === undefined ? undefined : parent === "none" ? null : (await project.task(parent)).id;
+  return {
+    ...(state === undefined ? {} : { state }),
+    ...(priority === undefined ? {} : { priority }),
+    ...(category === undefined ? {} : { category }),
+    ...(goalId === undefined ? {} : { goalId }),
+    ...(startsOn === undefined ? {} : { startsOn }),
+    ...(dueOn === undefined ? {} : { dueOn }),
+    ...(assigneeId === undefined ? {} : { assigneeId }),
+    ...(parentId === undefined ? {} : { parentId }),
+  };
+}
+
 const newTask: Command = async (args, io) => {
   const { values, positionals } = parse(args, {
+    ...TASK_FIELDS,
     body: { type: "string" },
     file: { type: "string" },
-    state: { type: "string" },
-    priority: { type: "string" },
   });
   const title = theOne(positionals, 'Say the title: console task new "<title>"');
-  const state = stateOf(text(values, "state"));
-  const priority = priorityOf(text(values, "priority"));
   const body = await bodyOf(io, values, text(values, "body"));
   const session = await open(io, values);
   const project = await session.project();
+  const fields = await taskFieldsOf(io, session, project, values);
   const made = await project.createTask({
     title,
     ...(body === undefined ? {} : { body }),
-    ...(state === undefined ? {} : { state }),
-    ...(priority === undefined ? {} : { priority }),
+    ...fields,
   });
   answer(io, session, made, () => `Task #${made.number} written: ${made.title}\nid: ${made.id}`);
   return EXIT.ok;
 };
 
+const editTask: Command = async (args, io) => {
+  const { values, positionals } = parse(args, {
+    ...TASK_FIELDS,
+    title: { type: "string" },
+    body: { type: "string" },
+    file: { type: "string" },
+  });
+  const ref = theOne(
+    positionals,
+    "Say which task: console task edit <number|id> --due <day> [--category <key>] ...",
+  );
+  const body = await bodyOf(io, values, text(values, "body"));
+  const session = await open(io, values);
+  const project = await session.project();
+  const title = text(values, "title");
+  const patch: RestTaskPatch = {
+    ...(title === undefined ? {} : { title }),
+    ...(body === undefined ? {} : { body }),
+    ...(await taskFieldsOf(io, session, project, values)),
+  };
+  if (Object.keys(patch).length === 0) {
+    throw misuse(
+      "Say what to change: --title, --body, --state, --priority, --category, --goal, --starts, --due, --assignee or --parent; none clears a field.",
+    );
+  }
+  const found = await project.task(ref);
+  const changed = await project.updateTask(found.id, patch);
+  answer(io, session, changed, () => formatTask(changed));
+  return EXIT.ok;
+};
+
 const task: Command = async (args, io) => {
   if (args[0] === "new") {
     return newTask(args.slice(1), io);
   }
+  if (args[0] === "edit") {
+    return editTask(args.slice(1), io);
+  }
   const { values, positionals } = parse(args, {});
   const ref = theOne(positionals, "Say which task: console task <number|id>");
   const session = await open(io, values);
@@ -864,6 +1071,88 @@ const restore: Command = async (args, io) => {
   return EXIT.ok;
 };
 
+const goals: Command = async (args, io) => {
+  const { values } = parse(args, {}, false);
+  const session = await open(io, values);
+  const project = await session.project();
+  const found = await project.goals();
+  answer(io, session, found, () =>
+    found.items.length === 0
+      ? "No goals. An owner sets one: console goal new <title> --due <day>"
+      : found.items.map(formatGoalLine).join("\n"),
+  );
+  return EXIT.ok;
+};
+
+const GOAL_FIELDS: OptionSpec = {
+  state: { type: "string" },
+  due: { type: "string" },
+  body: { type: "string" },
+  file: { type: "string" },
+};
+
+const newGoal: Command = async (args, io) => {
+  const { values, positionals } = parse(args, GOAL_FIELDS);
+  const title = theOne(positionals, 'Say the title: console goal new "<title>" [--due <day>]');
+  const state = goalStateOf(text(values, "state"));
+  const dueOn = dayOf(io, text(values, "due"));
+  const body = await bodyOf(io, values, text(values, "body"));
+  const session = await open(io, values);
+  const project = await session.project();
+  const made = await project.createGoal({
+    title,
+    ...(body === undefined ? {} : { body }),
+    ...(state === undefined ? {} : { state }),
+    ...(dueOn === undefined ? {} : { dueOn }),
+  });
+  answer(io, session, made, () => `Goal set: ${made.title}\nid: ${made.id}`);
+  return EXIT.ok;
+};
+
+const editGoal: Command = async (args, io) => {
+  const { values, positionals } = parse(args, { ...GOAL_FIELDS, title: { type: "string" } });
+  const id = theOne(positionals, "Say which goal: console goal edit <id> --state <state> ...");
+  const title = text(values, "title");
+  const state = goalStateOf(text(values, "state"));
+  const dueOn = dayOf(io, text(values, "due"), true);
+  const body = await bodyOf(io, values, text(values, "body"));
+  const patch = {
+    ...(title === undefined ? {} : { title }),
+    ...(body === undefined ? {} : { body }),
+    ...(state === undefined ? {} : { state }),
+    ...(dueOn === undefined ? {} : { dueOn }),
+  };
+  if (Object.keys(patch).length === 0) {
+    throw misuse(
+      "Say what to change: --title, --body, --state or --due; --due none clears the day.",
+    );
+  }
+  const session = await open(io, values);
+  const project = await session.project();
+  const changed = await project.updateGoal(id, patch);
+  answer(io, session, changed, () => formatGoal(changed));
+  return EXIT.ok;
+};
+
+const goal: Command = async (args, io) => {
+  if (args[0] === "new") {
+    return newGoal(args.slice(1), io);
+  }
+  if (args[0] === "edit") {
+    return editGoal(args.slice(1), io);
+  }
+  const { values, positionals } = parse(args, {});
+  const id = theOne(positionals, "Say which goal: console goal <id>");
+  const session = await open(io, values);
+  const project = await session.project();
+  const found = await project.goal(id);
+  const towards = await project.tasks({ goal: found.id });
+  answer(io, session, { goal: found, tasks: towards.items }, () =>
+    formatGoal(found, towards.items),
+  );
+  return EXIT.ok;
+};
+
 const decisions: Command = async (args, io) => {
   const { values } = parse(args, { open: { type: "boolean" } }, false);
   const session = await open(io, values);
@@ -1024,8 +1313,12 @@ const COMMANDS: Readonly<Record<string, Command>> = {
   serve,
   projects,
   use,
+  work,
   tasks,
   task,
+  goals,
+  goal,
+  categories,
   skills,
   take,
   report,
@@ -1072,6 +1365,14 @@ function hintFor(error: ApiError): string {
       return "The page has moved on since the version you started from. Read it again, and write from there.\n";
     case "document.archived":
       return "The page is archived. console restore <path> brings it back first.\n";
+    case "task.invalid_category":
+      return "No category has that key. console categories lists them.\n";
+    case "task.invalid_goal":
+      return "No goal of this project has that id. console goals lists them.\n";
+    case "task.invalid_dates":
+      return "The due day is before the start. Say a due day on or after it.\n";
+    case "goal.not_found":
+      return "No goal of this project has that id. console goals lists them.\n";
     case "connect.too_many":
       return "The console holds as many connections as it may at once. Try again in a few minutes.\n";
     case "network":