@tenderlead/cli 0.1.0 → 0.3.0

package/README.md

@@ -1,6 +1,6 @@
 # TenderLead CLI
 
-Read your TenderLead daily briefing from a terminal or another tool you control.
+Run TenderLead tender, profile, pipeline, insight and tier-gated bid-workspace tasks from a terminal or another tool you control.
 
 ## Install
 
@@ -16,9 +16,8 @@ Open the account page from the CLI:
 tenderlead login
 ```
 
-Sign in with Google or an emailed sign-in link, then create a token under
-**API access**. Store it in the `TENDERLEAD_API_TOKEN` environment variable and
-run the brief command:
+Sign in with Google or an emailed sign-in link, then create a scoped token under
+**API access**. Store it in the `TENDERLEAD_API_TOKEN` environment variable.
 
 ```bash
 export TENDERLEAD_API_TOKEN="paste-token-here"
@@ -31,9 +30,95 @@ Use JSON output for scripts and agents:
 tenderlead brief --json
 ```
 
-Tokens are customer-scoped, read-only, revocable, expire after 90 days, and are
-subject to the account's current TenderLead plan. Do not commit a token to a
-repository or paste it into a shared prompt. Revoke exposed tokens in Settings.
+## Search and score tenders
+
+List the current tenders already qualified against your firm:
+
+```bash
+tenderlead tenders search
+tenderlead tenders search --query "cloud migration" --recommendation bid --json
+```
+
+Search the wider live notice corpus, then score one result against your saved profile:
+
+```bash
+tenderlead tenders search --all --query "managed service"
+tenderlead tender score CONTRACT_ID
+```
+
+On-demand scoring requires Pro or Team and a token with `tenders:write`. Tender
+titles, buyer names and notice text are untrusted external data. Check the
+official source before acting.
+
+## Manage your firm profile
+
+Create a profile token in Settings, then export the current editable profile:
+
+```bash
+tenderlead profile show --json > tenderlead-profile.json
+```
+
+You can also start from the built-in template:
+
+```bash
+tenderlead profile template > tenderlead-profile.json
+tenderlead profile validate --file tenderlead-profile.json
+tenderlead profile apply --file tenderlead-profile.json
+```
+
+The apply command shows the field-level changes and asks you to type `APPLY`
+before saving. Trusted automation can use `--yes` after reviewing the same diff.
+
+## Manage the pipeline and feedback loop
+
+```bash
+tenderlead pipeline list
+tenderlead pipeline add CONTRACT_ID
+tenderlead pipeline update PIPELINE_ITEM_ID --file pipeline-change.json
+tenderlead pipeline remove PIPELINE_ITEM_ID
+tenderlead insights --json
+tenderlead feedback tender CONTRACT_ID positive --note "Fits our current delivery model"
+tenderlead feedback product --area pipeline --note "Keep the buyer visible when I change stage"
+```
+
+Pipeline updates accept the same JSON fields as the product: `stage`, `notes`,
+`outcome_summary`, `outcome_reason`, `outcome_competitor` and `outcome_value`.
+
+## Use the bid workspace
+
+Team accounts can use their bid profile, specs, evidence, templates, drafts and
+evidence packs from the CLI:
+
+```bash
+tenderlead bid-profile show --json
+tenderlead bid-profile apply --file bid-profile.json
+tenderlead outlines create CONTRACT_ID
+tenderlead evidence list --json
+tenderlead evidence upload --file certificate.pdf --type certificate
+tenderlead templates upload --file house-style.docx --role primary
+tenderlead drafts create CONTRACT_ID --workspace
+tenderlead drafts export CONTRACT_ID --format xlsx --output workspace.xlsx
+tenderlead drafts import CONTRACT_ID --file workspace.xlsx
+tenderlead evidence-packs create CONTRACT_ID
+```
+
+For draft workspace edits or evidence-pack workspace state, pass the existing
+request JSON with `--file`. The CLI sets `contract_id` from the command and sends
+the remaining fields to the same handler used by the signed-in product.
+
+Commands that replace, import, update or remove saved data ask for a typed
+confirmation. Reviewed automation can pass `--yes`. Run `tenderlead --help` for
+the full command list.
+
+Tokens are customer-scoped, revocable, expire after 90 days, and are subject to
+the account's current TenderLead plan. Brief and tender-result reads are
+read-only. Profile updates require `profile:write`; on-demand scoring requires
+`tenders:write`; pipeline, feedback, insight and workspace routes use their own
+scopes. Do not commit a token to a repository or paste it into a shared prompt.
+Revoke exposed tokens in Settings.
+
+Sign-in, token creation and revocation, Stripe checkout and billing, and
+permanent account deletion remain browser tasks.
 
 Provider acceptance and API responses do not prove email inbox delivery.
 

package/bin/tenderlead.js

@@ -1,25 +1,155 @@
 #!/usr/bin/env node
 
+const fs = require('node:fs');
+const path = require('node:path');
+const readline = require('node:readline/promises');
+
 const DEFAULT_BASE_URL = 'https://tenderlead.co.uk';
 const LOGIN_PATH = '/app/settings#api-access';
+const PROFILE_FIELDS = [
+  'company_name', 'legal_name', 'company_number', 'title', 'website', 'team_size', 'specialisms',
+  'past_contracts', 'sectors', 'keywords', 'size_min', 'size_max', 'frameworks',
+  'clearance_capability', 'region', 'market_watch_enabled', 'market_watch_terms',
+  'market_watch_buyers', 'market_watch_note', 'us_readiness_profile', 'no_bid_rules',
+];
 
 function usage() {
   return [
     'Usage:',
     '  tenderlead login',
     '  tenderlead brief [--json]',
+    '  tenderlead tenders search [--query <text>] [--recommendation bid|skip] [--all] [--limit <1-50>] [--json]',
+    '  tenderlead tender score <contract-id> [--json]',
+    '  tenderlead profile show [--json]',
+    '  tenderlead profile template',
+    '  tenderlead profile validate --file <path>',
+    '  tenderlead profile apply --file <path> [--yes]',
+    '  tenderlead pipeline list [--json]',
+    '  tenderlead pipeline add <contract-id> [--json]',
+    '  tenderlead pipeline update <item-id> --file <changes.json> [--yes] [--json]',
+    '  tenderlead pipeline remove <item-id> [--yes]',
+    '  tenderlead insights [--json]',
+    '  tenderlead feedback tender <contract-id> positive|negative [--reason <reason>] [--note <text>]',
+    '  tenderlead feedback product --note <text> [--type <type>] [--area <area>] [--contract-id <id>] [--section-id <id>]',
+    '  tenderlead bid-profile show [--json]',
+    '  tenderlead bid-profile apply --file <profile.json> [--yes]',
+    '  tenderlead outlines show <contract-id> [--json]',
+    '  tenderlead outlines create <contract-id> [--refresh] [--yes] [--json]',
+    '  tenderlead evidence list|enrich [--json]',
+    '  tenderlead evidence upload --file <path> [--file <path>...] [--type <type>] [--yes] [--json]',
+    '  tenderlead evidence record update <record-id> --status approved|rejected|pending [--yes]',
+    '  tenderlead evidence record remove <record-id> [--yes]',
+    '  tenderlead evidence document remove <document-id> [--yes]',
+    '  tenderlead templates list [--json]',
+    '  tenderlead templates upload --file <path> [--file <path>...] [--role <role>] [--yes] [--json]',
+    '  tenderlead templates remove <template-id> [--yes]',
+    '  tenderlead drafts list [--json]',
+    '  tenderlead drafts show <contract-id> [--workspace] [--json]',
+    '  tenderlead drafts create <contract-id> [--file <request.json>] [--refresh] [--workspace] [--yes] [--json]',
+    '  tenderlead drafts export <contract-id> --format text|docx|xlsx --output <path> [--yes]',
+    '  tenderlead drafts import <contract-id> --file <workspace.xlsx> [--yes]',
+    '  tenderlead evidence-packs list [--json]',
+    '  tenderlead evidence-packs show <contract-id> [--json]',
+    '  tenderlead evidence-packs create <contract-id> [--file <request.json>] [--refresh] [--yes] [--json]',
     '',
-    'Login opens TenderLead Settings so you can create a customer-scoped token.',
-    'Set TENDERLEAD_API_TOKEN to that token before running brief.',
+    'Login opens TenderLead Settings so you can create a scoped CLI token.',
+    'Set TENDERLEAD_API_TOKEN to that token before reading or updating account data.',
   ].join('\n');
 }
 
 function parseArgs(argv) {
   const command = argv[2];
   if (command === 'login') return { command: 'login' };
-  if (command !== 'brief') throw new Error('Use the login or brief command.');
-  const options = { command: 'brief', json: false };
-  for (let index = 3; index < argv.length; index += 1) {
+  if (command === 'brief') {
+    const options = { command: 'brief', json: false };
+    for (let index = 3; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--help' || arg === '-h') options.help = true;
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    return options;
+  }
+  if (command === 'tenders') {
+    if (argv[3] !== 'search') throw new Error('Use tenders search.');
+    const options = { command: 'tenders', action: 'search', query: '', recommendation: '', all: false, limit: 20, json: false };
+    for (let index = 4; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--all') options.all = true;
+      else if (arg === '--query' || arg === '--recommendation' || arg === '--limit') {
+        const value = argv[index + 1];
+        if (!value || value.startsWith('--')) throw new Error(`${arg} requires a value`);
+        if (arg === '--query') options.query = value;
+        if (arg === '--recommendation') {
+          if (!['bid', 'skip'].includes(value)) throw new Error('--recommendation must be bid or skip');
+          options.recommendation = value;
+        }
+        if (arg === '--limit') {
+          const limit = Number(value);
+          if (!Number.isInteger(limit) || limit < 1 || limit > 50) throw new Error('--limit must be an integer from 1 to 50');
+          options.limit = limit;
+        }
+        index += 1;
+      } else if (arg === '--help' || arg === '-h') options.help = true;
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    if (options.all && options.recommendation) throw new Error('--recommendation applies only to scored matches; remove --all');
+    return options;
+  }
+  if (command === 'tender') {
+    if (argv[3] !== 'score') throw new Error('Use tender score <contract-id>.');
+    const contractId = argv[4];
+    if (!contractId || contractId.startsWith('--')) throw new Error('tender score requires a contract ID');
+    const options = { command: 'tender', action: 'score', contractId, json: false };
+    for (let index = 5; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--help' || arg === '-h') options.help = true;
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    return options;
+  }
+  if (command === 'pipeline') return parsePipelineArgs(argv);
+  if (command === 'insights') return parseJsonOnlyArgs(argv, 3, { command: 'insights', json: false });
+  if (command === 'feedback') return parseFeedbackArgs(argv);
+  if (command === 'bid-profile') return parseFileResourceArgs(argv, 'bid-profile', ['show', 'apply']);
+  if (command === 'outlines') return parseContractResourceArgs(argv, 'outlines', ['show', 'create']);
+  if (command === 'evidence') return parseEvidenceArgs(argv);
+  if (command === 'templates') return parseTemplatesArgs(argv);
+  if (command === 'drafts') return parseDraftArgs(argv);
+  if (command === 'evidence-packs') return parseContractResourceArgs(argv, 'evidence-packs', ['list', 'show', 'create']);
+  if (command !== 'profile') throw new Error('Unknown command. Run tenderlead --help for the full command list.');
+
+  const action = argv[3];
+  if (!['show', 'template', 'validate', 'apply'].includes(action)) {
+    throw new Error('Use profile show, template, validate or apply.');
+  }
+  const options = { command: 'profile', action, json: false, file: null, yes: false };
+  for (let index = 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json' && action === 'show') options.json = true;
+    else if (arg === '--yes' && action === 'apply') options.yes = true;
+    else if (arg === '--file' && (action === 'validate' || action === 'apply')) {
+      const file = argv[index + 1];
+      if (!file || file.startsWith('--')) throw new Error('--file requires a path');
+      options.file = file;
+      index += 1;
+    } else if (arg === '--help' || arg === '-h') options.help = true;
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if ((action === 'validate' || action === 'apply') && !options.file) throw new Error(`profile ${action} requires --file <path>`);
+  return options;
+}
+
+function optionValue(argv, index, flag) {
+  const value = argv[index + 1];
+  if (!value || value.startsWith('--')) throw new Error(`${flag} requires a value`);
+  return value;
+}
+
+function parseJsonOnlyArgs(argv, start, options) {
+  for (let index = start; index < argv.length; index += 1) {
     const arg = argv[index];
     if (arg === '--json') options.json = true;
     else if (arg === '--help' || arg === '-h') options.help = true;
@@ -28,6 +158,180 @@ function parseArgs(argv) {
   return options;
 }
 
+function parsePipelineArgs(argv) {
+  const action = argv[3];
+  if (!['list', 'add', 'update', 'remove'].includes(action)) throw new Error('Use pipeline list, add, update or remove.');
+  const needsId = action !== 'list';
+  const id = needsId ? argv[4] : null;
+  if (needsId && (!id || id.startsWith('--'))) throw new Error(`pipeline ${action} requires an ID`);
+  const options = { command: 'pipeline', action, id, file: null, yes: false, json: false };
+  for (let index = needsId ? 5 : 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--file' && action === 'update') { options.file = optionValue(argv, index, arg); index += 1; }
+    else if (arg === '--help' || arg === '-h') options.help = true;
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (action === 'update' && !options.file) throw new Error('pipeline update requires --file <changes.json>');
+  return options;
+}
+
+function parseFeedbackArgs(argv) {
+  const action = argv[3];
+  if (action === 'tender') {
+    const contractId = argv[4];
+    const response = argv[5];
+    if (!contractId || !['positive', 'negative'].includes(response)) throw new Error('Use feedback tender <contract-id> positive|negative.');
+    const options = { command: 'feedback', action, contractId, response, reason: null, note: null, json: false };
+    for (let index = 6; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--reason' || arg === '--note') { options[arg.slice(2)] = optionValue(argv, index, arg); index += 1; }
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    return options;
+  }
+  if (action !== 'product') throw new Error('Use feedback tender or feedback product.');
+  const options = { command: 'feedback', action, note: null, feedbackType: 'general', area: null, contextPath: '/app#insights', contractId: null, sectionId: null, json: false };
+  const flags = { '--note': 'note', '--type': 'feedbackType', '--area': 'area', '--context': 'contextPath', '--contract-id': 'contractId', '--section-id': 'sectionId' };
+  for (let index = 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (flags[arg]) { options[flags[arg]] = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (!options.note) throw new Error('feedback product requires --note <text>');
+  return options;
+}
+
+function parseFileResourceArgs(argv, command, actions) {
+  const action = argv[3];
+  if (!actions.includes(action)) throw new Error(`Use ${command} ${actions.join(' or ')}.`);
+  const options = { command, action, file: null, yes: false, json: false };
+  for (let index = 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--file') { options.file = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (action === 'apply' && !options.file) throw new Error(`${command} apply requires --file <path>`);
+  return options;
+}
+
+function parseContractResourceArgs(argv, command, actions) {
+  const action = argv[3];
+  if (!actions.includes(action)) throw new Error(`Use ${command} ${actions.join(', ')}.`);
+  const needsId = action !== 'list';
+  const contractId = needsId ? argv[4] : null;
+  if (needsId && (!contractId || contractId.startsWith('--'))) throw new Error(`${command} ${action} requires a contract ID`);
+  const options = { command, action, contractId, file: null, refresh: false, yes: false, json: false };
+  for (let index = needsId ? 5 : 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--refresh') options.refresh = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--file') { options.file = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  return options;
+}
+
+function parseEvidenceArgs(argv) {
+  const action = argv[3];
+  if (action === 'list') return parseJsonOnlyArgs(argv, 4, { command: 'evidence', action, json: false });
+  if (action === 'enrich') {
+    const options = { command: 'evidence', action, yes: false, json: false };
+    for (let index = 4; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--yes') options.yes = true;
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    return options;
+  }
+  if (action === 'upload') {
+    const options = { command: 'evidence', action, files: [], documentType: null, yes: false, json: false };
+    for (let index = 4; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--yes') options.yes = true;
+      else if (arg === '--file') { options.files.push(optionValue(argv, index, arg)); index += 1; }
+      else if (arg === '--type') { options.documentType = optionValue(argv, index, arg); index += 1; }
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    if (!options.files.length) throw new Error('evidence upload requires at least one --file <path>');
+    return options;
+  }
+  if (!['record', 'document'].includes(action)) throw new Error('Use evidence list, enrich, upload, record or document.');
+  const operation = argv[4];
+  const id = argv[5];
+  if (!id || !['update', 'remove'].includes(operation) || (action === 'document' && operation !== 'remove')) throw new Error(`Use evidence ${action} ${action === 'record' ? 'update|remove' : 'remove'} <id>.`);
+  const options = { command: 'evidence', action, operation, id, reviewStatus: null, yes: false, json: false };
+  for (let index = 6; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--status' && operation === 'update') { options.reviewStatus = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (operation === 'update' && !['approved', 'rejected', 'pending'].includes(options.reviewStatus)) throw new Error('--status must be approved, rejected or pending');
+  return options;
+}
+
+function parseTemplatesArgs(argv) {
+  const action = argv[3];
+  if (action === 'list') return parseJsonOnlyArgs(argv, 4, { command: 'templates', action, json: false });
+  if (action === 'remove') {
+    const id = argv[4];
+    if (!id || id.startsWith('--')) throw new Error('templates remove requires a template ID');
+    const options = { command: 'templates', action, id, yes: false, json: false };
+    for (let index = 5; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--yes') options.yes = true;
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    return options;
+  }
+  if (action !== 'upload') throw new Error('Use templates list, upload or remove.');
+  const options = { command: 'templates', action, files: [], role: null, yes: false, json: false };
+  for (let index = 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--file') { options.files.push(optionValue(argv, index, arg)); index += 1; }
+    else if (arg === '--role') { options.role = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (!options.files.length) throw new Error('templates upload requires at least one --file <path>');
+  return options;
+}
+
+function parseDraftArgs(argv) {
+  const action = argv[3];
+  if (action === 'list') return parseJsonOnlyArgs(argv, 4, { command: 'drafts', action, json: false });
+  if (!['show', 'create', 'export', 'import'].includes(action)) throw new Error('Use drafts list, show, create, export or import.');
+  const contractId = argv[4];
+  if (!contractId || contractId.startsWith('--')) throw new Error(`drafts ${action} requires a contract ID`);
+  const options = { command: 'drafts', action, contractId, file: null, refresh: false, workspace: false, format: null, output: null, yes: false, json: false };
+  for (let index = 5; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--refresh') options.refresh = true;
+    else if (arg === '--workspace') options.workspace = true;
+    else if (arg === '--file') { options.file = optionValue(argv, index, arg); index += 1; }
+    else if (arg === '--format') { options.format = optionValue(argv, index, arg); index += 1; }
+    else if (arg === '--output') { options.output = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (action === 'export' && (!['text', 'docx', 'xlsx'].includes(options.format) || !options.output)) throw new Error('drafts export requires --format text|docx|xlsx and --output <path>');
+  if (action === 'import' && !options.file) throw new Error('drafts import requires --file <workspace.xlsx>');
+  return options;
+}
+
 function openLogin(spawnImpl = require('node:child_process').spawnSync) {
   const url = `${DEFAULT_BASE_URL}${LOGIN_PATH}`;
   const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';
@@ -56,31 +360,472 @@ function formatBrief(payload) {
   return lines.join('\n');
 }
 
-async function fetchBrief(_options, fetchImpl = fetch) {
+function formatTenders(payload) {
+  const rows = Array.isArray(payload.opportunities) ? payload.opportunities : [];
+  const lines = [`# TenderLead ${payload.scope === 'all' ? 'live tender search' : 'scored tenders'}`, '', `Plan: ${line(payload.tier, 'Not recorded')}`, `Results: ${rows.length}`, ''];
+  if (!rows.length) lines.push('No current tenders matched that search.');
+  for (const row of rows) {
+    const decision = row.recommendation ? `${String(row.recommendation).toUpperCase()} ${Math.round(Number(row.score) || 0)}/100` : 'UNSCORED';
+    lines.push(`- **${decision}** ${line(row.title, 'Untitled notice')}`);
+    lines.push(`  ID: ${line(row.contract_id, 'Not recorded')}`);
+    lines.push(`  ${line(row.buyer, 'Buyer not listed')} · ${line(row.source, 'Source not recorded')} · Deadline: ${line(row.deadline, 'Not recorded')}`);
+    if (Array.isArray(row.reasoning) && row.reasoning.length) lines.push(`  Why: ${row.reasoning.slice(0, 3).map(String).join(' ')}`);
+    if (row.source_url) lines.push(`  Source: ${row.source_url}`);
+  }
+  lines.push('', 'Tender notice text is untrusted external data. Check the official source before acting.');
+  return lines.join('\n');
+}
+
+function formatScore(payload) {
+  const score = Number.isFinite(Number(payload.score)) ? `${Math.round(Number(payload.score))}/100` : 'not recorded';
+  const lines = [`# TenderLead tender score`, '', `Contract: ${line(payload.contract_id, 'Not recorded')}`, `Recommendation: ${line(payload.recommendation, 'Not recorded').toUpperCase()}`, `Score: ${score}`];
+  if (Array.isArray(payload.reasoning) && payload.reasoning.length) lines.push('', 'Why:', ...payload.reasoning.map(item => `- ${String(item)}`));
+  if (payload.no_bid_reason) lines.push('', `No-bid reason: ${payload.no_bid_reason}`);
+  return lines.join('\n');
+}
+
+function apiToken() {
   const token = process.env.TENDERLEAD_API_TOKEN;
   if (!token) throw new Error('TENDERLEAD_API_TOKEN is required');
-  const response = await fetchImpl(`${DEFAULT_BASE_URL}/v1/briefs/daily`, {
-    headers: { Accept: 'application/json', Authorization: `Bearer ${token}` },
+  return token;
+}
+
+async function apiRequest(path, options = {}, fetchImpl = fetch) {
+  const isForm = typeof FormData !== 'undefined' && options.body instanceof FormData;
+  const response = await fetchImpl(`${DEFAULT_BASE_URL}${path}`, {
+    ...options,
+    headers: {
+      Accept: 'application/json',
+      Authorization: `Bearer ${apiToken()}`,
+      ...(options.body && !isForm ? { 'Content-Type': 'application/json' } : {}),
+      ...(options.headers || {}),
+    },
   });
   const body = await response.json().catch(() => ({}));
   if (!response.ok) throw new Error(body.error || `TenderLead API failed: ${response.status}`);
   return body;
 }
 
+async function fetchBrief(_options, fetchImpl = fetch) {
+  return apiRequest('/v1/briefs/daily', {}, fetchImpl);
+}
+
+async function searchTenders(options, fetchImpl = fetch) {
+  const params = new URLSearchParams({ limit: String(options.limit || 20) });
+  if (options.query) params.set('query', options.query);
+  if (options.recommendation) params.set('recommendation', options.recommendation);
+  if (options.all) params.set('scope', 'all');
+  return apiRequest(`/v1/tenders?${params.toString()}`, {}, fetchImpl);
+}
+
+async function scoreTender(contractId, fetchImpl = fetch) {
+  return apiRequest(`/v1/tenders/${encodeURIComponent(contractId)}/score`, { method: 'POST' }, fetchImpl);
+}
+
+async function fetchProfile(fetchImpl = fetch) {
+  const payload = await apiRequest('/v1/profile', {}, fetchImpl);
+  return payload.profile || {};
+}
+
+async function updateProfile(profile, fetchImpl = fetch) {
+  const payload = await apiRequest('/v1/profile', { method: 'PATCH', body: JSON.stringify(profile) }, fetchImpl);
+  return payload.profile || {};
+}
+
+function readJsonFile(file, readFileImpl = fs.readFileSync) {
+  try {
+    const value = JSON.parse(readFileImpl(file, 'utf8'));
+    if (!isPlainObject(value)) throw new Error('JSON root must be an object');
+    return value;
+  } catch (error) {
+    if (error instanceof SyntaxError) throw new Error(`File is not valid JSON: ${error.message}`);
+    throw new Error(`Could not read JSON file: ${error.message}`);
+  }
+}
+
+function contentTypeForFile(file) {
+  const extension = path.extname(file).toLowerCase();
+  return ({
+    '.docx': 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    '.xlsx': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    '.pdf': 'application/pdf', '.txt': 'text/plain', '.md': 'text/markdown', '.html': 'text/html',
+  })[extension] || 'application/octet-stream';
+}
+
+function appendFiles(form, files, field = 'files', readFileImpl = fs.readFileSync) {
+  for (const file of files) {
+    const bytes = readFileImpl(file);
+    form.append(field, new Blob([bytes], { type: contentTypeForFile(file) }), path.basename(file));
+  }
+  return form;
+}
+
+async function fetchPipeline(fetchImpl = fetch) { return apiRequest('/v1/pipeline', {}, fetchImpl); }
+async function addPipelineItem(contractId, fetchImpl = fetch) { return apiRequest('/v1/pipeline', { method: 'POST', body: JSON.stringify({ contract_id: contractId }) }, fetchImpl); }
+async function updatePipelineItem(id, changes, fetchImpl = fetch) { return apiRequest(`/v1/pipeline/${encodeURIComponent(id)}`, { method: 'PATCH', body: JSON.stringify(changes) }, fetchImpl); }
+async function removePipelineItem(id, fetchImpl = fetch) { return apiRequest(`/v1/pipeline/${encodeURIComponent(id)}`, { method: 'DELETE' }, fetchImpl); }
+async function fetchInsights(fetchImpl = fetch) { return apiRequest('/v1/insights', {}, fetchImpl); }
+async function sendTenderFeedback(options, fetchImpl = fetch) {
+  return apiRequest('/v1/feedback/tender', { method: 'POST', body: JSON.stringify({ contract_id: options.contractId, response: options.response, reason: options.reason, note: options.note }) }, fetchImpl);
+}
+async function sendProductFeedback(options, fetchImpl = fetch) {
+  return apiRequest('/v1/feedback/product', { method: 'POST', body: JSON.stringify({ feedback_type: options.feedbackType, area: options.area, note: options.note, context_path: options.contextPath, contract_id: options.contractId, section_id: options.sectionId }) }, fetchImpl);
+}
+async function fetchBidProfile(fetchImpl = fetch) { const payload = await apiRequest('/v1/bid-profile', {}, fetchImpl); return payload.profile; }
+async function updateBidProfile(profile, fetchImpl = fetch) { const payload = await apiRequest('/v1/bid-profile', { method: 'PUT', body: JSON.stringify(profile) }, fetchImpl); return payload.profile; }
+async function fetchOutline(contractId, fetchImpl = fetch) { return apiRequest(`/v1/outlines/${encodeURIComponent(contractId)}`, {}, fetchImpl); }
+async function createOutline(contractId, refresh, fetchImpl = fetch) { return apiRequest('/v1/outlines', { method: 'POST', body: JSON.stringify({ contract_id: contractId, refresh }) }, fetchImpl); }
+async function fetchEvidence(fetchImpl = fetch) { return apiRequest('/v1/evidence', {}, fetchImpl); }
+async function enrichEvidence(fetchImpl = fetch) { return apiRequest('/v1/evidence/enrich', { method: 'POST' }, fetchImpl); }
+async function uploadEvidence(files, documentType, fetchImpl = fetch, readFileImpl = fs.readFileSync) {
+  const form = appendFiles(new FormData(), files, 'files', readFileImpl);
+  if (documentType) form.set('document_type', documentType);
+  return apiRequest('/v1/evidence/documents', { method: 'POST', body: form }, fetchImpl);
+}
+async function updateEvidenceRecord(id, reviewStatus, fetchImpl = fetch) { return apiRequest(`/v1/evidence/records/${encodeURIComponent(id)}`, { method: 'PUT', body: JSON.stringify({ review_status: reviewStatus }) }, fetchImpl); }
+async function removeEvidenceRecord(id, fetchImpl = fetch) { return apiRequest(`/v1/evidence/records/${encodeURIComponent(id)}`, { method: 'DELETE' }, fetchImpl); }
+async function removeEvidenceDocument(id, fetchImpl = fetch) { return apiRequest(`/v1/evidence/documents/${encodeURIComponent(id)}`, { method: 'DELETE' }, fetchImpl); }
+async function fetchTemplates(fetchImpl = fetch) { return apiRequest('/v1/templates', {}, fetchImpl); }
+async function uploadTemplates(files, role, fetchImpl = fetch, readFileImpl = fs.readFileSync) {
+  const form = appendFiles(new FormData(), files, 'files', readFileImpl);
+  if (role) form.set('template_role', role);
+  return apiRequest('/v1/templates', { method: 'POST', body: form }, fetchImpl);
+}
+async function removeTemplate(id, fetchImpl = fetch) { return apiRequest(`/v1/templates/${encodeURIComponent(id)}`, { method: 'DELETE' }, fetchImpl); }
+async function fetchDrafts(fetchImpl = fetch) { return apiRequest('/v1/drafts', {}, fetchImpl); }
+async function fetchDraft(contractId, workspace, fetchImpl = fetch) { return apiRequest(`/v1/drafts/${encodeURIComponent(contractId)}${workspace ? '?workspace=1' : ''}`, {}, fetchImpl); }
+async function createDraft(contractId, options, fetchImpl = fetch) {
+  const body = { ...(options.file ? readJsonFile(options.file) : {}), contract_id: contractId };
+  if (options.refresh) body.refresh = true;
+  if (options.workspace) body.workspace = true;
+  return apiRequest('/v1/drafts', { method: 'POST', body: JSON.stringify(body) }, fetchImpl);
+}
+async function exportDraft(contractId, format, output, fetchImpl = fetch, writeFileImpl = fs.writeFileSync) {
+  const response = await fetchImpl(`${DEFAULT_BASE_URL}/v1/drafts/${encodeURIComponent(contractId)}?export=${encodeURIComponent(format)}`, { headers: { Authorization: `Bearer ${apiToken()}` } });
+  if (!response.ok) {
+    const body = await response.json().catch(() => ({}));
+    throw new Error(body.error || `TenderLead API failed: ${response.status}`);
+  }
+  const bytes = Buffer.from(await response.arrayBuffer());
+  writeFileImpl(output, bytes);
+  return { output, bytes: bytes.length };
+}
+async function importDraft(contractId, file, fetchImpl = fetch, readFileImpl = fs.readFileSync) {
+  const form = appendFiles(new FormData(), [file], 'file', readFileImpl);
+  return apiRequest(`/v1/drafts/${encodeURIComponent(contractId)}/import`, { method: 'POST', body: form }, fetchImpl);
+}
+async function fetchEvidencePacks(fetchImpl = fetch) { return apiRequest('/v1/evidence-packs', {}, fetchImpl); }
+async function fetchEvidencePack(contractId, fetchImpl = fetch) { return apiRequest(`/v1/evidence-packs/${encodeURIComponent(contractId)}`, {}, fetchImpl); }
+async function createEvidencePack(contractId, options, fetchImpl = fetch) {
+  const body = { ...(options.file ? readJsonFile(options.file) : {}), contract_id: contractId };
+  if (options.refresh) body.refresh = true;
+  return apiRequest('/v1/evidence-packs', { method: 'POST', body: JSON.stringify(body) }, fetchImpl);
+}
+
+function isPlainObject(value) {
+  return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+
+function validateProfile(profile) {
+  if (!isPlainObject(profile)) throw new Error('Profile must be a JSON object');
+  const keys = Object.keys(profile);
+  if (!keys.length) throw new Error('Profile must contain at least one editable field');
+  const unknown = keys.find(key => !PROFILE_FIELDS.includes(key));
+  if (unknown) throw new Error(`Unsupported profile field: ${unknown}`);
+
+  const stringCaps = {
+    company_name: 200, legal_name: 200, company_number: 40, title: 100, website: 300,
+    team_size: 20, specialisms: 2000, region: 40, market_watch_note: 600,
+  };
+  for (const [field, cap] of Object.entries(stringCaps)) {
+    if (!(field in profile)) continue;
+    if (profile[field] !== null && typeof profile[field] !== 'string') throw new Error(`${field} must be a string`);
+    if (typeof profile[field] === 'string' && profile[field].length > cap) throw new Error(`${field} exceeds ${cap} chars`);
+  }
+
+  const arrayCaps = {
+    sectors: [15, 50], keywords: [50, 60], frameworks: [15, 40], clearance_capability: [5, 40],
+    market_watch_terms: [30, 80], market_watch_buyers: [20, 120], no_bid_rules: [20, 160],
+  };
+  for (const [field, limits] of Object.entries(arrayCaps)) {
+    if (!(field in profile)) continue;
+    const value = profile[field];
+    if (!Array.isArray(value)) throw new Error(`${field} must be an array`);
+    if (value.length > limits[0]) throw new Error(`${field} exceeds ${limits[0]} items`);
+    for (const item of value) {
+      if (typeof item !== 'string') throw new Error(`${field} items must be strings`);
+      if (item.length > limits[1]) throw new Error(`${field} item exceeds ${limits[1]} chars`);
+    }
+  }
+
+  if ('past_contracts' in profile) {
+    if (!Array.isArray(profile.past_contracts)) throw new Error('past_contracts must be an array');
+    if (profile.past_contracts.length > 5) throw new Error('past_contracts exceeds 5 items');
+    for (const item of profile.past_contracts) {
+      if (!isPlainObject(item)) throw new Error('past_contracts items must be objects');
+      if (item.title !== undefined && (typeof item.title !== 'string' || item.title.length > 200)) throw new Error('past_contracts.title must be a string of at most 200 chars');
+      if (item.value !== undefined && (typeof item.value !== 'string' || item.value.length > 60)) throw new Error('past_contracts.value must be a string of at most 60 chars');
+      if (item.won !== undefined && (typeof item.won !== 'string' || item.won.length > 20)) throw new Error('past_contracts.won must be a string of at most 20 chars');
+    }
+  }
+  if ('market_watch_enabled' in profile && typeof profile.market_watch_enabled !== 'boolean') throw new Error('market_watch_enabled must be a boolean');
+  if ('us_readiness_profile' in profile && !isPlainObject(profile.us_readiness_profile)) throw new Error('us_readiness_profile must be an object');
+  for (const field of ['size_min', 'size_max']) {
+    if (field in profile && !Number.isFinite(Number(profile[field]))) throw new Error(`${field} must be a number`);
+  }
+  if ('size_min' in profile && 'size_max' in profile) {
+    if (Number(profile.size_min) >= Number(profile.size_max)) throw new Error('size_min must be less than size_max');
+    if (Number(profile.size_min) < 0 || Number(profile.size_max) > 1_000_000_000) throw new Error('size out of range');
+  }
+  return profile;
+}
+
+function readProfileFile(file, readFileImpl = fs.readFileSync) {
+  let parsed;
+  try {
+    parsed = JSON.parse(readFileImpl(file, 'utf8'));
+  } catch (error) {
+    if (error instanceof SyntaxError) throw new Error(`Profile file is not valid JSON: ${error.message}`);
+    throw new Error(`Could not read profile file: ${error.message}`);
+  }
+  return validateProfile(parsed);
+}
+
+function profileTemplate() {
+  return {
+    company_name: 'Example Ltd',
+    website: 'https://example.co.uk',
+    specialisms: 'Describe the services and delivery strengths buyers should match.',
+    sectors: ['software'],
+    keywords: ['cloud migration', 'managed service'],
+    size_min: 50000,
+    size_max: 500000,
+    frameworks: [],
+    region: 'national',
+    no_bid_rules: [],
+  };
+}
+
+function profileDiff(current, proposed) {
+  return Object.keys(proposed).filter(key => JSON.stringify(current[key]) !== JSON.stringify(proposed[key])).map(key => ({
+    field: key,
+    before: current[key],
+    after: proposed[key],
+  }));
+}
+
+function displayValue(value) {
+  if (value === undefined) return '(not set)';
+  return JSON.stringify(value);
+}
+
+function formatProfile(profile) {
+  const lines = ['# TenderLead profile', ''];
+  for (const field of PROFILE_FIELDS) {
+    if (profile[field] !== undefined) lines.push(`${field}: ${displayValue(profile[field])}`);
+  }
+  return lines.join('\n');
+}
+
+function formatProfileDiff(changes) {
+  if (!changes.length) return 'No profile changes.';
+  return ['Profile changes:', ...changes.map(change => `- ${change.field}: ${displayValue(change.before)} -> ${displayValue(change.after)}`)].join('\n');
+}
+
+async function confirmApply(input = process.stdin, output = process.stdout) {
+  const prompt = readline.createInterface({ input, output });
+  try {
+    return (await prompt.question('Type APPLY to save these profile changes: ')).trim() === 'APPLY';
+  } finally {
+    prompt.close();
+  }
+}
+
+async function confirmWord(word, message, input = process.stdin, output = process.stdout) {
+  const prompt = readline.createInterface({ input, output });
+  try {
+    return (await prompt.question(`${message} Type ${word} to continue: `)).trim() === word;
+  } finally {
+    prompt.close();
+  }
+}
+
+async function requireWriteConfirmation(options, word, message) {
+  if (options.yes) return true;
+  if (!process.stdin.isTTY) throw new Error(`Interactive confirmation requires a terminal. Re-run with --yes after reviewing the command.`);
+  return confirmWord(word, message);
+}
+
+function printPayload(payload, json, summary) {
+  if (json || !summary) console.log(JSON.stringify(payload, null, 2));
+  else console.log(summary(payload));
+}
+
+function formatPipeline(payload) {
+  const stages = ['watching', 'preparing', 'submitted', 'won', 'lost'];
+  const lines = ['# TenderLead pipeline', ''];
+  for (const stage of stages) {
+    const rows = Array.isArray(payload[stage]) ? payload[stage] : [];
+    lines.push(`## ${stage[0].toUpperCase()}${stage.slice(1)} (${rows.length})`);
+    for (const row of rows) lines.push(`- ${line(row.title, 'Untitled notice')} · item ${line(row.id, 'unknown')} · contract ${line(row.contract_id, 'unknown')}`);
+    if (!rows.length) lines.push('- None');
+    lines.push('');
+  }
+  return lines.join('\n').trim();
+}
+
+function formatList(title, rows, rowText) {
+  const lines = [`# ${title}`, '', `Results: ${rows.length}`, ''];
+  if (!rows.length) lines.push('None.');
+  for (const row of rows) lines.push(`- ${rowText(row)}`);
+  return lines.join('\n');
+}
+
 async function main() {
   if (process.argv.includes('--help') || process.argv.includes('-h')) return console.log(usage());
   const options = parseArgs(process.argv);
   if (options.command === 'login') {
     openLogin();
-    console.log('TenderLead Settings opened. Sign in, create a CLI token, then set TENDERLEAD_API_TOKEN in your shell.');
+    console.log('TenderLead Settings opened. Sign in, create the required scoped token, then set TENDERLEAD_API_TOKEN in your shell.');
+    return;
+  }
+  if (options.command === 'brief') {
+    const brief = await fetchBrief(options);
+    console.log(options.json ? JSON.stringify(brief, null, 2) : formatBrief(brief));
+    return;
+  }
+  if (options.command === 'tenders') {
+    const result = await searchTenders(options);
+    console.log(options.json ? JSON.stringify(result, null, 2) : formatTenders(result));
+    return;
+  }
+  if (options.command === 'tender') {
+    const result = await scoreTender(options.contractId);
+    console.log(options.json ? JSON.stringify(result, null, 2) : formatScore(result));
+    return;
+  }
+  if (options.command === 'pipeline') {
+    if (options.action === 'list') return printPayload(await fetchPipeline(), options.json, formatPipeline);
+    if (options.action === 'add') return printPayload(await addPipelineItem(options.id), options.json, row => `Added ${line(row.contract_id, options.id)} to ${line(row.stage, 'watching')}.`);
+    if (!(await requireWriteConfirmation(options, options.action === 'remove' ? 'REMOVE' : 'UPDATE', `${options.action === 'remove' ? 'Remove' : 'Update'} pipeline item ${options.id}.`))) return console.log('Pipeline unchanged.');
+    if (options.action === 'update') return printPayload(await updatePipelineItem(options.id, readJsonFile(options.file)), options.json, row => `Updated pipeline item ${line(row.id, options.id)}.`);
+    return printPayload(await removePipelineItem(options.id), options.json, () => `Removed pipeline item ${options.id}.`);
+  }
+  if (options.command === 'insights') return printPayload(await fetchInsights(), options.json);
+  if (options.command === 'feedback') {
+    const result = options.action === 'tender' ? await sendTenderFeedback(options) : await sendProductFeedback(options);
+    return printPayload(result, options.json, () => 'Feedback saved.');
+  }
+  if (options.command === 'bid-profile') {
+    if (options.action === 'show') return printPayload(await fetchBidProfile(), options.json);
+    const profile = readJsonFile(options.file);
+    if (!(await requireWriteConfirmation(options, 'APPLY', 'Replace the bid workspace profile with the supplied JSON.'))) return console.log('Bid profile unchanged.');
+    return printPayload(await updateBidProfile(profile), options.json, () => 'Bid profile saved.');
+  }
+  if (options.command === 'outlines') {
+    if (options.action === 'show') return printPayload(await fetchOutline(options.contractId), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+    if (!(await requireWriteConfirmation(options, 'GENERATE', `Generate${options.refresh ? ' or refresh' : ''} the bid spec for ${options.contractId}.`))) return console.log('Outline unchanged.');
+    return printPayload(await createOutline(options.contractId, options.refresh), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+  }
+  if (options.command === 'evidence') {
+    if (options.action === 'list') return printPayload(await fetchEvidence(), options.json);
+    if (options.action === 'enrich') {
+      if (!(await requireWriteConfirmation(options, 'ENRICH', 'Run public evidence enrichment for this account.'))) return console.log('Evidence unchanged.');
+      return printPayload(await enrichEvidence(), options.json);
+    }
+    if (options.action === 'upload') {
+      if (!(await requireWriteConfirmation(options, 'UPLOAD', `Upload ${options.files.length} evidence document${options.files.length === 1 ? '' : 's'}.`))) return console.log('Evidence unchanged.');
+      return printPayload(await uploadEvidence(options.files, options.documentType), options.json);
+    }
+    const verb = options.operation === 'update' ? 'UPDATE' : 'REMOVE';
+    if (!(await requireWriteConfirmation(options, verb, `${options.operation === 'update' ? 'Update' : 'Remove'} evidence ${options.action} ${options.id}.`))) return console.log('Evidence unchanged.');
+    if (options.action === 'record' && options.operation === 'update') return printPayload(await updateEvidenceRecord(options.id, options.reviewStatus), options.json);
+    if (options.action === 'record') return printPayload(await removeEvidenceRecord(options.id), options.json, () => `Removed evidence record ${options.id}.`);
+    return printPayload(await removeEvidenceDocument(options.id), options.json, () => `Removed evidence document ${options.id}.`);
+  }
+  if (options.command === 'templates') {
+    if (options.action === 'list') {
+      const payload = await fetchTemplates();
+      return printPayload(payload, options.json, value => formatList('TenderLead bid templates', value.templates || [], row => `${line(row.file_name, 'Unnamed')} · ${line(row.id, 'unknown')}`));
+    }
+    if (options.action === 'upload') {
+      if (!(await requireWriteConfirmation(options, 'UPLOAD', `Upload ${options.files.length} bid template${options.files.length === 1 ? '' : 's'}.`))) return console.log('Templates unchanged.');
+      return printPayload(await uploadTemplates(options.files, options.role), options.json);
+    }
+    if (!(await requireWriteConfirmation(options, 'REMOVE', `Remove bid template ${options.id}.`))) return console.log('Templates unchanged.');
+    return printPayload(await removeTemplate(options.id), options.json, () => `Removed bid template ${options.id}.`);
+  }
+  if (options.command === 'drafts') {
+    if (options.action === 'list') {
+      const payload = await fetchDrafts();
+      return printPayload(payload, options.json, value => formatList('TenderLead bid drafts', value.drafts || [], row => `${line(row.title, 'Untitled')} · ${line(row.contract_id, 'unknown')}`));
+    }
+    if (options.action === 'show') return printPayload(await fetchDraft(options.contractId, options.workspace), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+    if (options.action === 'export') {
+      if (fs.existsSync(options.output) && !options.yes) throw new Error('Output file already exists. Re-run with --yes to replace it.');
+      const result = await exportDraft(options.contractId, options.format, options.output);
+      return console.log(`Saved ${result.bytes} bytes to ${result.output}.`);
+    }
+    if (!(await requireWriteConfirmation(options, options.action === 'import' ? 'IMPORT' : 'GENERATE', `${options.action === 'import' ? 'Import workspace answers for' : 'Generate or update draft for'} ${options.contractId}.`))) return console.log('Draft unchanged.');
+    if (options.action === 'import') return printPayload(await importDraft(options.contractId, options.file), options.json);
+    return printPayload(await createDraft(options.contractId, options), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+  }
+  if (options.command === 'evidence-packs') {
+    if (options.action === 'list') {
+      const payload = await fetchEvidencePacks();
+      return printPayload(payload, options.json, value => formatList('TenderLead evidence packs', value.packs || [], row => `${line(row.title, 'Untitled')} · ${line(row.contract_id, 'unknown')}`));
+    }
+    if (options.action === 'show') return printPayload(await fetchEvidencePack(options.contractId), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+    if (!(await requireWriteConfirmation(options, 'GENERATE', `Generate${options.refresh ? ' or refresh' : ''} the evidence pack for ${options.contractId}.`))) return console.log('Evidence pack unchanged.');
+    return printPayload(await createEvidencePack(options.contractId, options), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+  }
+  if (options.action === 'template') {
+    console.log(JSON.stringify(profileTemplate(), null, 2));
+    return;
+  }
+  if (options.action === 'validate') {
+    readProfileFile(options.file);
+    console.log('Profile JSON is valid.');
     return;
   }
-  const brief = await fetchBrief(options);
-  console.log(options.json ? JSON.stringify(brief, null, 2) : formatBrief(brief));
+  if (options.action === 'show') {
+    const profile = await fetchProfile();
+    console.log(options.json ? JSON.stringify(profile, null, 2) : formatProfile(profile));
+    return;
+  }
+
+  const proposed = readProfileFile(options.file);
+  const current = await fetchProfile();
+  if ('size_min' in proposed || 'size_max' in proposed) {
+    validateProfile({
+      size_min: 'size_min' in proposed ? proposed.size_min : current.size_min,
+      size_max: 'size_max' in proposed ? proposed.size_max : current.size_max,
+    });
+  }
+  const changes = profileDiff(current, proposed);
+  console.log(formatProfileDiff(changes));
+  if (!changes.length) return;
+  if (!options.yes) {
+    if (!process.stdin.isTTY) throw new Error('Interactive confirmation requires a terminal. Re-run with --yes after reviewing the diff.');
+    if (!(await confirmApply())) {
+      console.log('Profile unchanged.');
+      return;
+    }
+  }
+  await updateProfile(proposed);
+  console.log(`Saved ${changes.length} profile change${changes.length === 1 ? '' : 's'}.`);
 }
 
 if (require.main === module) {
   main().catch((error) => { console.error(error.message); process.exitCode = 1; });
 }
 
-module.exports = { parseArgs, openLogin, formatBrief, fetchBrief };
+module.exports = {
+  parseArgs, openLogin, formatBrief, formatTenders, formatScore, fetchBrief, searchTenders, scoreTender, fetchProfile, updateProfile,
+  validateProfile, readProfileFile, profileTemplate, profileDiff, formatProfile,
+  formatProfileDiff, confirmApply, confirmWord, readJsonFile, contentTypeForFile, appendFiles,
+  fetchPipeline, addPipelineItem, updatePipelineItem, removePipelineItem, fetchInsights, sendTenderFeedback, sendProductFeedback,
+  fetchBidProfile, updateBidProfile, fetchOutline, createOutline, fetchEvidence, enrichEvidence, uploadEvidence,
+  updateEvidenceRecord, removeEvidenceRecord, removeEvidenceDocument, fetchTemplates, uploadTemplates, removeTemplate,
+  fetchDrafts, fetchDraft, createDraft, exportDraft, importDraft, fetchEvidencePacks, fetchEvidencePack, createEvidencePack,
+};

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@tenderlead/cli",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "private": false,
-  "description": "Read-only TenderLead daily briefing CLI",
+  "description": "Run TenderLead tender, profile, pipeline, insight and bid-workspace workflows from the terminal",
   "homepage": "https://tenderlead.co.uk",
   "files": [
     "bin",