@skillcdn/console 0.3.0 → 0.3.2

package/src/cli/credentials.ts

@@ -22,6 +22,11 @@ export interface Login {
   readonly agent: string | undefined;
   /** When the command was signed in, when known. */
   readonly since: string | undefined;
+  /**
+   * The workspace's time zone as the console last said it, at login or whoami (ADR-0035): what
+   * the command prints moments in, without asking again; none when the workspace names none.
+   */
+  readonly timeZone?: string | undefined;
 }
 
 /** Everything the command keeps: the logins, and the console a directory that names none works at. */
@@ -71,6 +76,7 @@ const loginSchema = z.object({
   token: z.string().check(z.minLength(1), z.maxLength(1024)),
   agent: z.optional(z.string().check(z.maxLength(200))),
   since: z.optional(z.string().check(z.maxLength(40))),
+  timeZone: z.optional(z.string().check(z.minLength(1), z.maxLength(64))),
 });
 const fileSchema = z.object({
   version: z.literal(2),
@@ -95,6 +101,7 @@ export function parseCredentials(json: unknown): Credentials | undefined {
         token: login.token,
         agent: login.agent,
         since: login.since,
+        ...(login.timeZone === undefined ? {} : { timeZone: login.timeZone }),
       })),
     };
   }

package/src/cli/directory.ts

@@ -15,6 +15,15 @@ import * as z from "zod/mini";
 /** The file's name, in the working directory or one above it. */
 export const DIRECTORY_FILE = ".skillcdn-console.json";
 
+/**
+ * The sentence a checkout's agreement carries to send the agents working there to the console:
+ * the one the skill working-the-board keeps (references/the-sentence.md) and this repository's
+ * own agreement carries. `console use` prints it, since nothing tells an agent to look until the
+ * checkout says so, as `skillcdn use` prints the sentence for a pack.
+ */
+export const THE_SENTENCE =
+  "**Bound to a console?** When `.skillcdn-console.json` is in this checkout, or `console whoami` names a project, work the task through that SkillCDN console (`console help` says how).";
+
 /** How large the file may be before it is not read: a few names, never more. */
 const MAX_FILE_CHARS = 16 * 1024;
 

package/src/cli/format.ts

@@ -19,6 +19,7 @@ import type {
   RestVersion,
   RestVersionSummary,
   RestWork,
+  RestWorkspace,
 } from "../schemas.js";
 
 // What the command prints: one line per thing in a list, a few lines for one thing in full.
@@ -27,6 +28,48 @@ import type {
 
 const plural = (count: number, word: string): string => `${count} ${word}${count === 1 ? "" : "s"}`;
 
+/** The time zone moments are printed in: the workspace's, as the command last learned it (ADR-0035); none leaves them as the API gives them. */
+let momentZone: string | undefined;
+
+/** Says which time zone the moments printed from now on are in, or none. */
+export function setMomentZone(zone: string | undefined): void {
+  momentZone = zone;
+}
+
+/**
+ * An instant as the command prints it: in the workspace's time zone, as ISO 8601 with its
+ * offset (`2026-10-18T15:04:17+09:00`), when a zone is known; else as the API gave it, in UTC.
+ */
+export function moment(iso: string): string {
+  if (momentZone === undefined) {
+    return iso;
+  }
+  const date = new Date(iso);
+  if (Number.isNaN(date.getTime())) {
+    return iso;
+  }
+  let parts: Intl.DateTimeFormatPart[];
+  try {
+    parts = new Intl.DateTimeFormat("en-US", {
+      timeZone: momentZone,
+      hourCycle: "h23",
+      year: "numeric",
+      month: "2-digit",
+      day: "2-digit",
+      hour: "2-digit",
+      minute: "2-digit",
+      second: "2-digit",
+      timeZoneName: "longOffset",
+    }).formatToParts(date);
+  } catch {
+    return iso;
+  }
+  const of = (type: Intl.DateTimeFormatPartTypes): string =>
+    parts.find((part) => part.type === type)?.value ?? "";
+  const offset = of("timeZoneName").replace("GMT", "");
+  return `${of("year")}-${of("month")}-${of("day")}T${of("hour")}:${of("minute")}:${of("second")}${offset === "" ? "Z" : offset}`;
+}
+
 const indent = (text: string): string =>
   text
     .trimEnd()
@@ -54,7 +97,7 @@ export function formatProject(project: RestProject): string {
     `project ${project.key}: ${project.name}`,
     `visibility: ${project.visibility}  role: ${project.role}  skills: ${project.skillsAddress ?? "the organization's"}`,
     `color: ${project.color ?? "none"}  symbol: ${project.symbol ?? "none"}  image: ${project.icon === null ? "none" : project.icon.contentType}`,
-    `pack token: ${project.packToken === null ? "none" : `set ${project.packToken.setAt}`}`,
+    `pack token: ${project.packToken === null ? "none" : `set ${moment(project.packToken.setAt)}`}`,
   ];
   if (project.description.trim().length > 0) {
     lines.push("", project.description.trimEnd());
@@ -78,9 +121,25 @@ export function formatListingLine(listing: RestListing): string {
   return `${listing.login}  (let in at ${HOST_NAMES[listing.host]}, not signed in yet)`;
 }
 
+/** The workspace as its Settings page shows it: what it is called, who sees whom, the week, the time zone, where the skills come from, and what tokens may last. */
+export function formatWorkspace(workspace: RestWorkspace): string {
+  const visibility = workspace.peopleVisibility ?? "everyone";
+  const zone = workspace.timeZone ?? null;
+  const token = workspace.skills.packToken ?? null;
+  return [
+    `workspace ${workspace.name}`,
+    `people visibility: ${visibility}  (${visibility === "everyone" ? "everyone sees everyone" : "a member sees only the people they share a project with; an administrator sees everyone"})`,
+    `week begins on: ${workspace.weekStart ?? "auto"}  (auto: the system default, as each device has it)`,
+    `time zone: ${zone ?? "none"}  (${zone === null ? "moments are printed as the API gives them, in UTC" : "moments are printed in it, as ISO 8601 with its offset"})`,
+    `skills: ${workspace.skills.address ?? "no address of the organization's"}  at ${workspace.skills.source}`,
+    `SkillCDN token: ${token === null ? "none" : `set ${moment(token.setAt)}`}  (${token === null ? "the organization's pack is read with none" : "the organization's pack is read with it by a project with no address and no token of its own"})`,
+    `token days at most: ${workspace.tokenDaysAtMost ?? "a person chooses"}`,
+  ].join("\n");
+}
+
 /** One member of a project: their login, what they are in it, and since when. */
 export function formatMemberLine(member: RestMember): string {
-  return `${member.person.login}  ${member.role}  (since ${member.addedAt.slice(0, 10)})`;
+  return `${member.person.login}  ${member.role}  (since ${moment(member.addedAt).slice(0, 10)})`;
 }
 
 /** The line under a page of a listing that has more after it: how to ask for the next page. */
@@ -88,10 +147,14 @@ export function formatMore(more: boolean, limit: number, offset: number): string
   return more ? `\n... more: --offset ${offset + limit}` : "";
 }
 
+/** The logins of the people at work on a task, in the order they came to it. */
+const logins = (people: readonly RestPerson[]): string =>
+  people.map((person) => person.login).join(", ");
+
 export function formatTaskLine(task: RestTask): string {
   const notes = [`owner ${task.owner.login}`];
-  if (task.assignee !== null) {
-    notes.push(`assigned to ${task.assignee.login}`);
+  if (task.workers.length > 0) {
+    notes.push(`workers ${logins(task.workers)}`);
   }
   if (task.category !== null) {
     notes.push(task.category.key);
@@ -121,9 +184,9 @@ function scheduleLines(task: RestTask): string[] {
     lines.push(plan.join("  "));
   }
   const happened = [
-    task.startedAt === null ? undefined : `started: ${task.startedAt}`,
-    task.doneAt === null ? undefined : `done: ${task.doneAt}`,
-    task.archivedAt === null ? undefined : `archived: ${task.archivedAt}`,
+    task.startedAt === null ? undefined : `started: ${moment(task.startedAt)}`,
+    task.doneAt === null ? undefined : `done: ${moment(task.doneAt)}`,
+    task.archivedAt === null ? undefined : `archived: ${moment(task.archivedAt)}`,
   ].filter((part) => part !== undefined);
   if (happened.length > 0) {
     lines.push(happened.join("  "));
@@ -140,7 +203,7 @@ export function formatTask(
 ): string {
   const lines = [
     `#${task.number} ${task.title}`,
-    `state: ${task.state}  priority: ${task.priority}  owner: ${task.owner.login}  assignee: ${task.assignee?.login ?? "nobody"}`,
+    `state: ${task.state}  priority: ${task.priority}  owner: ${task.owner.login}  workers: ${task.workers.length === 0 ? "nobody" : logins(task.workers)}`,
     `id: ${task.id}${task.parentId === null ? "" : `  part of: ${task.parentId}`}`,
     ...scheduleLines(task),
   ];
@@ -181,7 +244,7 @@ export function formatTask(
 export function formatComment(comment: RestComment): string {
   const who =
     comment.agent === null ? comment.author.login : `${comment.author.login} as ${comment.agent}`;
-  const lines = [`  ${who}, ${comment.createdAt}, comment ${comment.id}:`];
+  const lines = [`  ${who}, ${moment(comment.createdAt)}, comment ${comment.id}:`];
   if (comment.body.trim().length > 0) {
     lines.push(indent(comment.body));
   }
@@ -199,7 +262,7 @@ export function formatRunLine(run: RestRun): string {
     notes.push(`waiting for decision ${run.waitingFor}`);
   }
   if (run.endedAt === null) {
-    notes.push(`last heard ${run.lastHeardAt}`);
+    notes.push(`last heard ${moment(run.lastHeardAt)}`);
   }
   return `${run.id}  ${run.status}  ${run.agent} for ${run.person.login}  task #${run.taskNumber}  (${notes.join(", ")})`;
 }
@@ -208,7 +271,7 @@ export function formatRunLine(run: RestRun): string {
 export function formatRun(run: RestRun, fileUrl?: (artifactId: string) => string): string {
   const lines = [
     formatRunLine(run),
-    `started: ${run.startedAt}${run.endedAt === null ? "" : `  ended: ${run.endedAt}`}`,
+    `started: ${moment(run.startedAt)}${run.endedAt === null ? "" : `  ended: ${moment(run.endedAt)}`}`,
   ];
   if (run.summary !== null) {
     lines.push("", "summary:", indent(run.summary));
@@ -216,7 +279,7 @@ export function formatRun(run: RestRun, fileUrl?: (artifactId: string) => string
   if (run.reports.length > 0) {
     lines.push("", "reports:");
     for (const report of run.reports) {
-      lines.push(`  [${report.createdAt}]`, indent(report.body));
+      lines.push(`  [${moment(report.createdAt)}]`, indent(report.body));
     }
   }
   if (run.artifacts.length > 0) {
@@ -246,7 +309,7 @@ function formatRulesHalf(where: "the workspace" | "this project", rules: RestRul
   const facts =
     page === null
       ? undefined
-      : `v${page.version}, by ${writer(page.updatedBy, page.agent)}; ${page.updatedAt}`;
+      : `v${page.version}, by ${writer(page.updatedBy, page.agent)}; ${moment(page.updatedAt)}`;
   if (rules.source === "none" || rules.body === null) {
     return `Rules of ${where}: none of its own; the workspace's hold.`;
   }
@@ -316,9 +379,9 @@ export function formatCategoryLine(category: RestCategory): string {
 export function formatWork(work: RestWork): string {
   const lines: string[] = [];
   if (work.tasks.length === 0) {
-    lines.push("No open task is assigned to you.");
+    lines.push("No open task is on your plate.");
   } else {
-    lines.push("tasks assigned to you:");
+    lines.push("tasks you work on:");
     for (const { project, task } of work.tasks) {
       lines.push(`  ${project.key}  ${formatTaskLine(task)}`);
     }
@@ -333,10 +396,10 @@ export function formatWork(work: RestWork): string {
 /** Another person's plate: their open tasks, each with its project; no decisions, which wait for anyone. */
 export function formatPersonWork(person: RestPerson, work: RestPersonWork): string {
   if (work.tasks.length === 0) {
-    return `No open task is assigned to ${person.login}.`;
+    return `No open task is on ${person.login}'s plate.`;
   }
   return [
-    `tasks assigned to ${person.login}:`,
+    `tasks ${person.login} works on:`,
     ...work.tasks.map(({ project, task }) => `  ${project.key}  ${formatTaskLine(task)}`),
   ].join("\n");
 }
@@ -397,7 +460,7 @@ export function formatDocumentLine(document: RestDocumentSummary): string {
   if (document.archivedAt !== null) {
     notes.push("archived");
   }
-  return `${document.path}  ${document.title}  (${notes.join(", ")}; ${document.updatedAt})`;
+  return `${document.path}  ${document.title}  (${notes.join(", ")}; ${moment(document.updatedAt)})`;
 }
 
 /** A folder's folders and pages, or the pages a search found. */
@@ -419,7 +482,7 @@ export function formatDocument(
 ): string {
   const lines = [
     `${document.path}: ${document.title}`,
-    `version ${document.version}, by ${writer(document.updatedBy, document.agent)} at ${document.updatedAt}${document.archivedAt === null ? "" : `; archived ${document.archivedAt}`}`,
+    `version ${document.version}, by ${writer(document.updatedBy, document.agent)} at ${moment(document.updatedAt)}${document.archivedAt === null ? "" : `; archived ${moment(document.archivedAt)}`}`,
     `id: ${document.id}`,
   ];
   if (document.body.trim().length > 0) {
@@ -453,7 +516,7 @@ export function formatDocument(
 }
 
 export function formatVersionLine(version: RestVersionSummary): string {
-  return `v${version.number}  ${version.title}  (by ${writer(version.author, version.agent)}; ${version.createdAt})`;
+  return `v${version.number}  ${version.title}  (by ${writer(version.author, version.agent)}; ${moment(version.createdAt)})`;
 }
 
 /** One version of a document, with its body as it was. */

package/src/cli/help.ts

@@ -23,9 +23,11 @@ import {
   MAX_QUESTION_LENGTH,
   MAX_REPORTS_PER_RUN,
   MAX_RULES_LENGTH,
+  MAX_SEARCH_LENGTH,
   MAX_SUMMARY_LENGTH,
   MAX_TITLE_LENGTH,
   MAX_VERSIONS_PER_DOCUMENT,
+  MAX_WORKERS,
   MIN_OPTIONS,
 } from "../limits.js";
 import { COLOR_NAMES } from "../vocabulary.js";
@@ -84,17 +86,17 @@ const DAY = "a day as 2026-10-24, today, tomorrow, or +7 for seven days from tod
 const COLORS = `one of ${COLOR_NAMES.join(", ")}`;
 const KEY = "lowercase letters, digits and hyphens";
 const TASK_FIELD_FLAGS =
-  "[--state <state>] [--priority <priority>] [--category <key>] [--goal <id>] [--starts <day>] [--due <day>] [--assignee <login|me>] [--parent <number|id>]";
+  "[--state <state>] [--priority <priority>] [--category <key>] [--goal <id>] [--starts <day>] [--due <day>] [--worker <login|me|none>]... [--parent <number|id>]";
 const TASK_FIELD_LIMITS = [
   `starts, due: ${DAY}; the due day is not before the start`,
   "category: the key of one of the workspace's categories (console categories); goal: the id of one of the project's goals (console goals)",
-  "assignee: a login of the workspace, or me; parent: a task of the project",
+  `worker: a login of the workspace, or me; given again, or with commas between, for several, up to ${MAX_WORKERS}, in place of the workers there were; none alone for nobody. parent: a task of the project, by its number or its id; console tasks --search <words> finds one by its title`,
 ];
 const TASK_FIELD_REFUSALS = [
   "task.invalid_category: no category has that key",
   "task.invalid_goal: the goal is not one of this project",
   "task.invalid_dates: the due day is before the start",
-  "task.invalid_assignee: the person may not work in the project",
+  "task.invalid_worker: a person named as a worker may not work in the project",
   "task.invalid_parent: the parent is not a task of the project, or would make a loop",
 ];
 
@@ -136,9 +138,10 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
   },
   use: {
     usage: "use <key> [--url <origin>] [--account <login>]",
-    synopsis: "Binds this directory to a project: writes .skillcdn-console.json here.",
+    synopsis:
+      "Binds this directory to a project: writes .skillcdn-console.json here, and prints the sentence for the checkout's agreement.",
     about:
-      "Says which project this directory works in: writes .skillcdn-console.json here, which the commands read from this directory or one above it, and which is meant to be committed in a private repository and left out of a public one. The file names the project; and the console, where that is not the default login here or --url says so; and the account, where the console has several logins or --account says so. Never a token. --project <key> on any command, or CONSOLE_PROJECT in the environment, wins over the project it names.",
+      "Says which project this directory works in: writes .skillcdn-console.json here, which the commands read from this directory or one above it, and which is meant to be committed in a private repository and left out of a public one. The file names the project; and the console, where that is not the default login here or --url says so; and the account, where the console has several logins or --account says so. Never a token. --project <key> on any command, or CONSOLE_PROJECT in the environment, wins over the project it names. Then prints the sentence for the checkout's agreement (AGENTS.md, or CLAUDE.md where that is the file agents read), to be copied as it is, since nothing sends an agent to the console until the checkout says so.",
     refusals: ["project.not_found: no project has the key, or it is not yours to see"],
   },
   work: {
@@ -146,14 +149,15 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
     synopsis:
       "What is on your plate across your projects: your open tasks, and the decisions waiting.",
     about:
-      "What is on your plate across the projects you may see: the open tasks assigned to you, the sooner due first, each with its project; and the decisions waiting for a person. Needs no project. --person <login> shows another person's plate, for an administrator or for an owner of a project they are in: their open tasks within the projects you may see, without the decisions, which wait for anyone.",
+      "What is on your plate across the projects you may see: the open tasks you work on, the sooner due first, each with its project; and the decisions waiting for a person. Needs no project. --person <login> shows another person's plate, for an administrator or for an owner of a project they are in: the open tasks they work on within the projects you may see, without the decisions, which wait for anyone.",
   },
   tasks: {
     usage:
-      "tasks [--state <state>] [--open] [--mine] [--category <key>] [--goal <id>] [--due <day|today|week|overdue>] [--unassigned] [--archived] [--limit <n>] [--offset <n>]",
+      "tasks [--state <state>] [--open] [--mine] [--category <key>] [--goal <id>] [--due <day|today|week|overdue>] [--unassigned] [--search <words>] [--archived] [--limit <n>] [--offset <n>]",
     synopsis:
-      "The tasks on the board, newest first, narrowed by state, owner, category, goal or due day.",
-    about: `The tasks on the board, newest first: number, state, priority, title, who owns and works on each, its category and its due day, and what waits on it. --open keeps the ones not done or dropped, --mine those assigned to you, --unassigned those assigned to nobody (not with --mine), --category and --goal those sorted into one, --due those due by a day: today, within the week, or overdue (the open ones past their day). The tasks put away (ADR-0029) are left out unless --archived asks for them alone. A page at a time: ${DEFAULT_PAGE_LIMIT} unless --limit says otherwise, from --offset on; a last line says when there is more. States: idea, ready, in_progress, in_review, done, dropped.`,
+      "The tasks on the board, newest first, narrowed by state, worker, category, goal, due day or words of the title.",
+    about: `The tasks on the board, newest first: number, state, priority, title, who owns and who works on each, its category and its due day, and what waits on it. --open keeps the ones not done or dropped, --mine those you work on, --unassigned those nobody works on (not with --mine), --category and --goal those sorted into one, --due those due by a day: today, this week (through its last day, the week beginning as the workspace says, console workspace, or as your language has it), or overdue (the open ones past their day), --search those whose title has every word given, whatever the case, and the task of that number for a number (12 or #12): how a task is found by its title, as a parent or otherwise. The tasks put away (ADR-0029) are left out unless --archived asks for them alone. A page at a time: ${DEFAULT_PAGE_LIMIT} unless --limit says otherwise, from --offset on; a last line says when there is more. States: idea, ready, in_progress, in_review, done, dropped.`,
+    limits: [`search: 1 to ${MAX_SEARCH_LENGTH} characters`],
   },
   task: {
     usage: `task <number|id>  |  task new <title> [--body <markdown>|--file <path>] ${TASK_FIELD_FLAGS}  |  task edit <number|id> [--title <title>] [--body <markdown>|--file <path>] ${TASK_FIELD_FLAGS}  |  task archive <number|id>  |  task archive --goal <id>  |  task restore <number|id>`,
@@ -170,10 +174,11 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
     refusals: ["task.not_found: no task has that number or id", ...TASK_FIELD_REFUSALS],
   },
   goals: {
-    usage: "goals [--category <key>] [--state <state>]",
+    usage:
+      "goals [--category <key>] [--state <state>] [--search <words>] [--limit <n>] [--offset <n>]",
     synopsis: "The roadmap: the project's goals, with their state, their days and how far each is.",
-    about:
-      "The roadmap of the project: its goals, the active first, each with its id, its state (planned, active, done, dropped), its category, the days it starts and is meant to be reached by, and how far it is, counted from the tasks that work towards it. --category keeps those sorted into one, --state those in one state.",
+    about: `The roadmap of the project: its goals, the active first, each with its id, its state (planned, active, done, dropped), its category, the days it starts and is meant to be reached by, and how far it is, counted from the tasks that work towards it. --category keeps those sorted into one, --state those in one state, --search those whose title has every word given, whatever the case: how a goal's id is found for --goal. A page at a time: ${DEFAULT_PAGE_LIMIT} unless --limit says otherwise, from --offset on; a last line says when there is more.`,
+    limits: [`search: 1 to ${MAX_SEARCH_LENGTH} characters`],
   },
   goal: {
     usage:
@@ -203,9 +208,26 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
   },
   people: {
     usage: "people",
-    synopsis: "Everyone of the workspace, by login, with what each is in it.",
+    synopsis: "The people you see, by login, with what each is in the workspace.",
     about:
-      "Everyone of the workspace, by login, with their name where the host gives one and what they are in it: admin, who configures the workspace, or member, who works in the projects they are in; a person taken out is marked deactivated. Then the logins an administrator let in that nobody has signed in with yet. The logins are what --assignee, member and person take.",
+      "The people of the workspace you see, by login, with their name where the host gives one and what they are in it: admin, who configures the workspace, or member, who works in the projects they are in; a person taken out is marked deactivated. Everyone, unless the workspace shows a member only the people they share a project with (console workspace says which; an administrator sees everyone). Then, where you see everyone, the logins an administrator let in that nobody has signed in with yet. The logins are what --worker, member and person take; a login is found exactly, so an owner lists someone the list does not show.",
+  },
+  workspace: {
+    usage:
+      "workspace  |  workspace edit [--people-visibility <everyone|shared-projects>] [--week-start <auto|monday|sunday>] [--time-zone <zone|none>]  |  workspace pack-token --connect  |  workspace pack-token --stdin  |  workspace pack-token --remove",
+    overview:
+      "workspace  |  workspace edit [flags]  |  workspace pack-token --connect|--stdin|--remove",
+    synopsis:
+      "The workspace's settings; or some changed, or its SkillCDN token set, for an administrator.",
+    about:
+      "What the workspace is called; who sees whom on the People page and in the pickers (everyone; or shared-projects: a member sees only the people they share a project with, an administrator everyone; a project open to the workspace has everyone in it, so a member of one sees everyone); the day the calendars begin a week on (auto: the system default, as each device has it); the workspace's time zone, an IANA name such as Asia/Seoul, in which this command prints moments as ISO 8601 with its offset, as the login kept it at login or whoami, or none, which leaves them as the API gives them, in UTC; where the organization's skills come from; and the most days a token may last. edit changes any of the first three, for an administrator; --json leaves moments as the API gives them. pack-token is the SkillCDN token the organization's pack is read with, by every project that names no address of its own and holds no token of its own (ADR-0036), for an administrator: with --connect, the console asks SkillCDN for a code, this command prints the page and the code, a person who may open the repository approves there, signed in at SkillCDN, and the console receives the token, shown to nobody; with --stdin, a token made by hand at SkillCDN is read from standard input and never an argument; --remove takes the token away.",
+    refusals: [
+      "auth.forbidden: only an administrator changes the workspace's settings or its token",
+      "request.invalid: the time zone is not a name the console knows",
+      "workspace.pack_token_refused: SkillCDN does not serve the organization's pack to the token, or the console names no address for the organization's skills",
+      "workspace.pack_connect_refused: the console names no address for the organization's skills, the pack is on the console's machine, or SkillCDN refused to begin",
+      "workspace.pack_token_unsupported, workspace.pack_connect_unsupported: the console keeps no secret to seal a token with (AUTH_SECRET), or reaches no deployment",
+    ],
   },
   person: {
     usage:
@@ -224,12 +246,13 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
   },
   project: {
     usage:
-      'project <key>  |  project new <key> "<name>" [--description <markdown>|--file <path>] [--visibility workspace|private] [--skills <address>|none] [--color <name>] [--symbol <text>]  |  project edit <key> [--name "<name>"] [the same flags; none clears]  |  project icon <key> <file>  |  project icon <key> --remove  |  project pack-token <key> --stdin  |  project pack-token <key> --remove',
+      'project <key>  |  project new <key> "<name>" [--description <markdown>|--file <path>] [--visibility workspace|private] [--skills <address>|none] [--color <name>] [--symbol <text>]  |  project edit <key> [--name "<name>"] [the same flags; none clears]  |  project icon <key> <file>  |  project icon <key> --remove  |  project pack-token <key> --connect  |  project pack-token <key> --stdin  |  project pack-token <key> --remove',
     overview:
-      "project <key>  |  project new <key> <name> [flags]  |  project edit <key> [flags]  |  project icon <key> <file>|--remove  |  project pack-token <key> --stdin|--remove",
-    synopsis: "One project in full; or a project made, changed, given its mark or its pack token.",
+      "project <key>  |  project new <key> <name> [flags]  |  project edit <key> [flags]  |  project icon <key> <file>|--remove  |  project pack-token <key> --connect|--stdin|--remove",
+    synopsis:
+      "One project in full; or a project made, changed, given its mark or its SkillCDN token.",
     about:
-      "One project in full; or a project made, with you as its owner, private unless --visibility workspace says everyone of the workspace works in it; or one changed, only in what the flags say, for an owner; or its image for its mark, set from a file of this machine or taken away; or its pack token (ADR-0028), the token a person made at SkillCDN for a private pack, read from standard input and never an argument, which the console keeps sealed to read the pack with, or taken away. The organization's skills are the project's unless --skills names an address of its own.",
+      "One project in full; or a project made, with you as its owner, private unless --visibility workspace says everyone of the workspace works in it; or one changed, only in what the flags say, for an owner; or its image for its mark, set from a file of this machine or taken away; or its SkillCDN token (pack-token, ADR-0028), which the console keeps sealed to read a private pack with, and which a project that reads the organization's pack may leave to the workspace's (console workspace pack-token): with --connect, the console asks SkillCDN for a code, this command prints the page and the code, a person who may open the repository approves there, signed in at SkillCDN, and the console receives the token, shown to nobody (ADR-0036); with --stdin, a token a person made by hand at SkillCDN is read from standard input and never an argument; --remove takes the token away. The organization's skills are the project's unless --skills names an address of its own.",
     limits: [
       `key: ${KEY}, up to ${MAX_PROJECT_KEY_LENGTH} characters; it does not change once made`,
       `name: one line, up to ${MAX_PROJECT_NAME_LENGTH} characters; description: up to ${MAX_PROJECT_DESCRIPTION_LENGTH}`,
@@ -243,13 +266,16 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
       "project.invalid_address: the skills address is not one as SkillCDN spells it",
       "project.invalid_icon: the file is not an image of those kinds, by its bytes",
       "request.too_large: the image is over the limit",
+      "project.pack_connect_unsupported: the console reaches no deployment, or keeps no secret to seal a token with",
+      "project.pack_connect_refused: the project names no pack, the pack is on the console's machine, or SkillCDN refused to begin",
+      "skills.unavailable: SkillCDN could not be reached; try again later",
     ],
   },
   members: {
     usage: "members",
-    synopsis: "Those listed in the project, with what each is in it.",
+    synopsis: "The members of the project, with what each is in it.",
     about:
-      "Those listed in the project, by login, with what each is in it (owner, who configures it; member, who works on it) and since when. A project open to the workspace has everyone of it as a member besides, and an administrator owns every project.",
+      "The members of the project, by login, with what each is in it (owner, who configures it; member, who works on it) and since when. In a private project, those listed; in one open to the workspace, everyone of it, an owner where listed as one or an administrator, a member otherwise. An administrator owns every project.",
   },
   member: {
     usage:
@@ -257,11 +283,12 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
     synopsis:
       "Lists a person in the project, changes what they are in it, or takes them off; for an owner.",
     about:
-      "Lists a person of the workspace in the project, as a member unless --role says owner; changes what they are in it; or takes them off the list. For an owner of the project. With --project naming several keys with commas, member add lists the person in each of them in turn, one line per project; one listed already is said so, and the rest go on.",
+      "Lists a person of the workspace in the project, as a member unless --role says owner; changes what they are in it; or takes them off the list. For an owner of the project. In a project open to the workspace everyone is a member already: only an owner is listed (member add --role owner, or member role <login> owner), and an owner made a member again stays the member everyone is. With --project naming several keys with commas, member add lists the person in each of them in turn, one line per project; one listed already is said so, and the rest go on.",
     refusals: [
       "auth.forbidden: only an owner of the project lists its members",
       "member.invalid_person: the person is not of the workspace",
       "member.exists: the person is listed already; member role changes what they are",
+      "member.open_project: the project is open to the workspace, so everyone is a member already; list an owner with --role owner",
       "member.not_found: the person is not listed in the project",
     ],
   },
@@ -328,7 +355,7 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
     usage: "take <number|id> [--agent <name>]",
     synopsis: "Takes a task: a run begins, and the task is in progress and the person's.",
     about:
-      "Takes a task: a run begins, and the task is in progress and the person's; the rules of the board are printed with the task. A run still open on the task is taken over, since the board cannot know whether its agent still runs: it ends as abandoned, the feed says who took over, and that agent is refused on its next command; console task <number> shows the runs on a task, with when each was last heard from, before it is taken. --agent is what people see at work; left out, it is what the person called the token.",
+      "Takes a task: a run begins, and the task is in progress and the person's; the run's id and the task's id are printed on a line of their own, then the task, then the rules of the board. A run still open on the task is taken over, since the board cannot know whether its agent still runs: it ends as abandoned, the feed says who took over, and that agent is refused on its next command; console task <number> shows the runs on a task, with when each was last heard from, before it is taken. --agent is what people see at work; left out, it is what the person called the token.",
     limits: [`agent: one line, up to ${MAX_AGENT_LENGTH} characters`],
     refusals: [
       "task.not_found: no task has that number or id",
@@ -604,7 +631,7 @@ const SECTIONS: readonly { readonly title: string; readonly commands: readonly s
   {
     title:
       "Configuring, as the person: what an administrator or an owner does on the pages, their agent does here, named on it",
-    commands: ["people", "person", "project", "members", "member", "category"],
+    commands: ["workspace", "people", "person", "project", "members", "member", "category"],
   },
 ];
 

package/src/cli/main.ts

@@ -60,6 +60,7 @@ process.exitCode = await runCli(process.argv.slice(2), {
     exists: existsSync,
   }),
   notices: createNoticeStore(configDir),
+  locale: Intl.DateTimeFormat().resolvedOptions().locale,
   skillsDir: existsSync(skillsDir) ? skillsDir : undefined,
   listen: listenOn,
 });