@tenderlead/cli 0.2.0 → 0.4.0

package/README.md

@@ -1,6 +1,6 @@
 # TenderLead CLI
 
-Search and score tenders, read your TenderLead daily briefing and manage the firm profile used for matching from a terminal or another tool you control.
+Run TenderLead tender, profile, pipeline, insight and tier-gated bid-workspace tasks from a terminal or another tool you control.
 
 ## Install
 
@@ -21,9 +21,13 @@ Sign in with Google or an emailed sign-in link, then create a scoped token under
 
 ```bash
 export TENDERLEAD_API_TOKEN="paste-token-here"
+tenderlead whoami
 tenderlead brief
 ```
 
+`whoami` confirms which account and token the CLI is using (masked email, plan,
+token label, scopes and expiry). It works with any valid token.
+
 Use JSON output for scripts and agents:
 
 ```bash
@@ -69,11 +73,56 @@ tenderlead profile apply --file tenderlead-profile.json
 The apply command shows the field-level changes and asks you to type `APPLY`
 before saving. Trusted automation can use `--yes` after reviewing the same diff.
 
+## Manage the pipeline and feedback loop
+
+```bash
+tenderlead pipeline list
+tenderlead pipeline add CONTRACT_ID
+tenderlead pipeline update PIPELINE_ITEM_ID --file pipeline-change.json
+tenderlead pipeline remove PIPELINE_ITEM_ID
+tenderlead insights --json
+tenderlead feedback tender CONTRACT_ID positive --note "Fits our current delivery model"
+tenderlead feedback product --area pipeline --note "Keep the buyer visible when I change stage"
+```
+
+Pipeline updates accept the same JSON fields as the product: `stage`, `notes`,
+`outcome_summary`, `outcome_reason`, `outcome_competitor` and `outcome_value`.
+
+## Use the bid workspace
+
+Team accounts can use their bid profile, specs, evidence, templates, drafts and
+evidence packs from the CLI:
+
+```bash
+tenderlead bid-profile show --json
+tenderlead bid-profile apply --file bid-profile.json
+tenderlead outlines create CONTRACT_ID
+tenderlead evidence list --json
+tenderlead evidence upload --file certificate.pdf --type certificate
+tenderlead templates upload --file house-style.docx --role primary
+tenderlead drafts create CONTRACT_ID --workspace
+tenderlead drafts export CONTRACT_ID --format xlsx --output workspace.xlsx
+tenderlead drafts import CONTRACT_ID --file workspace.xlsx
+tenderlead evidence-packs create CONTRACT_ID
+```
+
+For draft workspace edits or evidence-pack workspace state, pass the existing
+request JSON with `--file`. The CLI sets `contract_id` from the command and sends
+the remaining fields to the same handler used by the signed-in product.
+
+Commands that replace, import, update or remove saved data ask for a typed
+confirmation. Reviewed automation can pass `--yes`. Run `tenderlead --help` for
+the full command list.
+
 Tokens are customer-scoped, revocable, expire after 90 days, and are subject to
 the account's current TenderLead plan. Brief and tender-result reads are
 read-only. Profile updates require `profile:write`; on-demand scoring requires
-`tenders:write`. Do not commit a token to a repository or paste it into a shared
-prompt. Revoke exposed tokens in Settings.
+`tenders:write`; pipeline, feedback, insight and workspace routes use their own
+scopes. Do not commit a token to a repository or paste it into a shared prompt.
+Revoke exposed tokens in Settings.
+
+Sign-in, token creation and revocation, Stripe checkout and billing, and
+permanent account deletion remain browser tasks.
 
 Provider acceptance and API responses do not prove email inbox delivery.
 

package/bin/tenderlead.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
 const fs = require('node:fs');
+const path = require('node:path');
 const readline = require('node:readline/promises');
 
 const DEFAULT_BASE_URL = 'https://tenderlead.co.uk';
@@ -16,6 +17,7 @@ function usage() {
   return [
     'Usage:',
     '  tenderlead login',
+    '  tenderlead whoami [--json]',
     '  tenderlead brief [--json]',
     '  tenderlead tenders search [--query <text>] [--recommendation bid|skip] [--all] [--limit <1-50>] [--json]',
     '  tenderlead tender score <contract-id> [--json]',
@@ -23,6 +25,33 @@ function usage() {
     '  tenderlead profile template',
     '  tenderlead profile validate --file <path>',
     '  tenderlead profile apply --file <path> [--yes]',
+    '  tenderlead pipeline list [--json]',
+    '  tenderlead pipeline add <contract-id> [--json]',
+    '  tenderlead pipeline update <item-id> --file <changes.json> [--yes] [--json]',
+    '  tenderlead pipeline remove <item-id> [--yes]',
+    '  tenderlead insights [--json]',
+    '  tenderlead feedback tender <contract-id> positive|negative [--reason <reason>] [--note <text>]',
+    '  tenderlead feedback product --note <text> [--type <type>] [--area <area>] [--contract-id <id>] [--section-id <id>]',
+    '  tenderlead bid-profile show [--json]',
+    '  tenderlead bid-profile apply --file <profile.json> [--yes]',
+    '  tenderlead outlines show <contract-id> [--json]',
+    '  tenderlead outlines create <contract-id> [--refresh] [--yes] [--json]',
+    '  tenderlead evidence list|enrich [--json]',
+    '  tenderlead evidence upload --file <path> [--file <path>...] [--type <type>] [--yes] [--json]',
+    '  tenderlead evidence record update <record-id> --status approved|rejected|pending [--yes]',
+    '  tenderlead evidence record remove <record-id> [--yes]',
+    '  tenderlead evidence document remove <document-id> [--yes]',
+    '  tenderlead templates list [--json]',
+    '  tenderlead templates upload --file <path> [--file <path>...] [--role <role>] [--yes] [--json]',
+    '  tenderlead templates remove <template-id> [--yes]',
+    '  tenderlead drafts list [--json]',
+    '  tenderlead drafts show <contract-id> [--workspace] [--json]',
+    '  tenderlead drafts create <contract-id> [--file <request.json>] [--refresh] [--workspace] [--yes] [--json]',
+    '  tenderlead drafts export <contract-id> --format text|docx|xlsx --output <path> [--yes]',
+    '  tenderlead drafts import <contract-id> --file <workspace.xlsx> [--yes]',
+    '  tenderlead evidence-packs list [--json]',
+    '  tenderlead evidence-packs show <contract-id> [--json]',
+    '  tenderlead evidence-packs create <contract-id> [--file <request.json>] [--refresh] [--yes] [--json]',
     '',
     'Login opens TenderLead Settings so you can create a scoped CLI token.',
     'Set TENDERLEAD_API_TOKEN to that token before reading or updating account data.',
@@ -32,6 +61,7 @@ function usage() {
 function parseArgs(argv) {
   const command = argv[2];
   if (command === 'login') return { command: 'login' };
+  if (command === 'whoami') return parseJsonOnlyArgs(argv, 3, { command: 'whoami', json: false });
   if (command === 'brief') {
     const options = { command: 'brief', json: false };
     for (let index = 3; index < argv.length; index += 1) {
@@ -82,7 +112,16 @@ function parseArgs(argv) {
     }
     return options;
   }
-  if (command !== 'profile') throw new Error('Use the login, brief, tenders, tender or profile command.');
+  if (command === 'pipeline') return parsePipelineArgs(argv);
+  if (command === 'insights') return parseJsonOnlyArgs(argv, 3, { command: 'insights', json: false });
+  if (command === 'feedback') return parseFeedbackArgs(argv);
+  if (command === 'bid-profile') return parseFileResourceArgs(argv, 'bid-profile', ['show', 'apply']);
+  if (command === 'outlines') return parseContractResourceArgs(argv, 'outlines', ['show', 'create']);
+  if (command === 'evidence') return parseEvidenceArgs(argv);
+  if (command === 'templates') return parseTemplatesArgs(argv);
+  if (command === 'drafts') return parseDraftArgs(argv);
+  if (command === 'evidence-packs') return parseContractResourceArgs(argv, 'evidence-packs', ['list', 'show', 'create']);
+  if (command !== 'profile') throw new Error('Unknown command. Run tenderlead --help for the full command list.');
 
   const action = argv[3];
   if (!['show', 'template', 'validate', 'apply'].includes(action)) {
@@ -105,6 +144,196 @@ function parseArgs(argv) {
   return options;
 }
 
+function optionValue(argv, index, flag) {
+  const value = argv[index + 1];
+  if (!value || value.startsWith('--')) throw new Error(`${flag} requires a value`);
+  return value;
+}
+
+function parseJsonOnlyArgs(argv, start, options) {
+  for (let index = start; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--help' || arg === '-h') options.help = true;
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  return options;
+}
+
+function parsePipelineArgs(argv) {
+  const action = argv[3];
+  if (!['list', 'add', 'update', 'remove'].includes(action)) throw new Error('Use pipeline list, add, update or remove.');
+  const needsId = action !== 'list';
+  const id = needsId ? argv[4] : null;
+  if (needsId && (!id || id.startsWith('--'))) throw new Error(`pipeline ${action} requires an ID`);
+  const options = { command: 'pipeline', action, id, file: null, yes: false, json: false };
+  for (let index = needsId ? 5 : 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--file' && action === 'update') { options.file = optionValue(argv, index, arg); index += 1; }
+    else if (arg === '--help' || arg === '-h') options.help = true;
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (action === 'update' && !options.file) throw new Error('pipeline update requires --file <changes.json>');
+  return options;
+}
+
+function parseFeedbackArgs(argv) {
+  const action = argv[3];
+  if (action === 'tender') {
+    const contractId = argv[4];
+    const response = argv[5];
+    if (!contractId || !['positive', 'negative'].includes(response)) throw new Error('Use feedback tender <contract-id> positive|negative.');
+    const options = { command: 'feedback', action, contractId, response, reason: null, note: null, json: false };
+    for (let index = 6; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--reason' || arg === '--note') { options[arg.slice(2)] = optionValue(argv, index, arg); index += 1; }
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    return options;
+  }
+  if (action !== 'product') throw new Error('Use feedback tender or feedback product.');
+  const options = { command: 'feedback', action, note: null, feedbackType: 'general', area: null, contextPath: '/app#insights', contractId: null, sectionId: null, json: false };
+  const flags = { '--note': 'note', '--type': 'feedbackType', '--area': 'area', '--context': 'contextPath', '--contract-id': 'contractId', '--section-id': 'sectionId' };
+  for (let index = 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (flags[arg]) { options[flags[arg]] = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (!options.note) throw new Error('feedback product requires --note <text>');
+  return options;
+}
+
+function parseFileResourceArgs(argv, command, actions) {
+  const action = argv[3];
+  if (!actions.includes(action)) throw new Error(`Use ${command} ${actions.join(' or ')}.`);
+  const options = { command, action, file: null, yes: false, json: false };
+  for (let index = 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--file') { options.file = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (action === 'apply' && !options.file) throw new Error(`${command} apply requires --file <path>`);
+  return options;
+}
+
+function parseContractResourceArgs(argv, command, actions) {
+  const action = argv[3];
+  if (!actions.includes(action)) throw new Error(`Use ${command} ${actions.join(', ')}.`);
+  const needsId = action !== 'list';
+  const contractId = needsId ? argv[4] : null;
+  if (needsId && (!contractId || contractId.startsWith('--'))) throw new Error(`${command} ${action} requires a contract ID`);
+  const options = { command, action, contractId, file: null, refresh: false, yes: false, json: false };
+  for (let index = needsId ? 5 : 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--refresh') options.refresh = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--file') { options.file = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  return options;
+}
+
+function parseEvidenceArgs(argv) {
+  const action = argv[3];
+  if (action === 'list') return parseJsonOnlyArgs(argv, 4, { command: 'evidence', action, json: false });
+  if (action === 'enrich') {
+    const options = { command: 'evidence', action, yes: false, json: false };
+    for (let index = 4; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--yes') options.yes = true;
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    return options;
+  }
+  if (action === 'upload') {
+    const options = { command: 'evidence', action, files: [], documentType: null, yes: false, json: false };
+    for (let index = 4; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--yes') options.yes = true;
+      else if (arg === '--file') { options.files.push(optionValue(argv, index, arg)); index += 1; }
+      else if (arg === '--type') { options.documentType = optionValue(argv, index, arg); index += 1; }
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    if (!options.files.length) throw new Error('evidence upload requires at least one --file <path>');
+    return options;
+  }
+  if (!['record', 'document'].includes(action)) throw new Error('Use evidence list, enrich, upload, record or document.');
+  const operation = argv[4];
+  const id = argv[5];
+  if (!id || !['update', 'remove'].includes(operation) || (action === 'document' && operation !== 'remove')) throw new Error(`Use evidence ${action} ${action === 'record' ? 'update|remove' : 'remove'} <id>.`);
+  const options = { command: 'evidence', action, operation, id, reviewStatus: null, yes: false, json: false };
+  for (let index = 6; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--status' && operation === 'update') { options.reviewStatus = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (operation === 'update' && !['approved', 'rejected', 'pending'].includes(options.reviewStatus)) throw new Error('--status must be approved, rejected or pending');
+  return options;
+}
+
+function parseTemplatesArgs(argv) {
+  const action = argv[3];
+  if (action === 'list') return parseJsonOnlyArgs(argv, 4, { command: 'templates', action, json: false });
+  if (action === 'remove') {
+    const id = argv[4];
+    if (!id || id.startsWith('--')) throw new Error('templates remove requires a template ID');
+    const options = { command: 'templates', action, id, yes: false, json: false };
+    for (let index = 5; index < argv.length; index += 1) {
+      const arg = argv[index];
+      if (arg === '--json') options.json = true;
+      else if (arg === '--yes') options.yes = true;
+      else throw new Error(`Unknown argument: ${arg}`);
+    }
+    return options;
+  }
+  if (action !== 'upload') throw new Error('Use templates list, upload or remove.');
+  const options = { command: 'templates', action, files: [], role: null, yes: false, json: false };
+  for (let index = 4; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--file') { options.files.push(optionValue(argv, index, arg)); index += 1; }
+    else if (arg === '--role') { options.role = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (!options.files.length) throw new Error('templates upload requires at least one --file <path>');
+  return options;
+}
+
+function parseDraftArgs(argv) {
+  const action = argv[3];
+  if (action === 'list') return parseJsonOnlyArgs(argv, 4, { command: 'drafts', action, json: false });
+  if (!['show', 'create', 'export', 'import'].includes(action)) throw new Error('Use drafts list, show, create, export or import.');
+  const contractId = argv[4];
+  if (!contractId || contractId.startsWith('--')) throw new Error(`drafts ${action} requires a contract ID`);
+  const options = { command: 'drafts', action, contractId, file: null, refresh: false, workspace: false, format: null, output: null, yes: false, json: false };
+  for (let index = 5; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === '--json') options.json = true;
+    else if (arg === '--yes') options.yes = true;
+    else if (arg === '--refresh') options.refresh = true;
+    else if (arg === '--workspace') options.workspace = true;
+    else if (arg === '--file') { options.file = optionValue(argv, index, arg); index += 1; }
+    else if (arg === '--format') { options.format = optionValue(argv, index, arg); index += 1; }
+    else if (arg === '--output') { options.output = optionValue(argv, index, arg); index += 1; }
+    else throw new Error(`Unknown argument: ${arg}`);
+  }
+  if (action === 'export' && (!['text', 'docx', 'xlsx'].includes(options.format) || !options.output)) throw new Error('drafts export requires --format text|docx|xlsx and --output <path>');
+  if (action === 'import' && !options.file) throw new Error('drafts import requires --file <workspace.xlsx>');
+  return options;
+}
+
 function openLogin(spawnImpl = require('node:child_process').spawnSync) {
   const url = `${DEFAULT_BASE_URL}${LOGIN_PATH}`;
   const command = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';
@@ -119,6 +348,19 @@ function line(value, fallback) {
   return text || fallback;
 }
 
+function formatWhoami(payload) {
+  const token = payload.token || {};
+  const rows = [
+    ['Account', line(payload.email, 'unknown')],
+    ['Plan', `${line(payload.plan_tier, 'unknown')} (${line(payload.plan_status, 'unknown')})`],
+    ['Token', line(token.label, 'unnamed')],
+    ['Scopes', Array.isArray(token.scopes) && token.scopes.length ? token.scopes.join(', ') : 'none'],
+    ['Expires', token.expires_at ? String(token.expires_at).slice(0, 10) : 'unknown'],
+  ];
+  const width = Math.max(...rows.map(([label]) => label.length));
+  return rows.map(([label, value]) => `${label.padEnd(width)}  ${value}`).join('\n');
+}
+
 function formatBrief(payload) {
   const rows = Array.isArray(payload.opportunities) ? payload.opportunities : [];
   const lines = ['# TenderLead daily brief', '', `Generated: ${line(payload.generated_at, 'Not recorded')}`, `Plan: ${line(payload.tier, 'Not recorded')}`, '', '## Opportunities', ''];
@@ -164,12 +406,13 @@ function apiToken() {
 }
 
 async function apiRequest(path, options = {}, fetchImpl = fetch) {
+  const isForm = typeof FormData !== 'undefined' && options.body instanceof FormData;
   const response = await fetchImpl(`${DEFAULT_BASE_URL}${path}`, {
     ...options,
     headers: {
       Accept: 'application/json',
       Authorization: `Bearer ${apiToken()}`,
-      ...(options.body ? { 'Content-Type': 'application/json' } : {}),
+      ...(options.body && !isForm ? { 'Content-Type': 'application/json' } : {}),
       ...(options.headers || {}),
     },
   });
@@ -178,6 +421,8 @@ async function apiRequest(path, options = {}, fetchImpl = fetch) {
   return body;
 }
 
+async function fetchWhoami(fetchImpl = fetch) { return apiRequest('/api/cli/whoami', {}, fetchImpl); }
+
 async function fetchBrief(_options, fetchImpl = fetch) {
   return apiRequest('/v1/briefs/daily', {}, fetchImpl);
 }
@@ -204,6 +449,96 @@ async function updateProfile(profile, fetchImpl = fetch) {
   return payload.profile || {};
 }
 
+function readJsonFile(file, readFileImpl = fs.readFileSync) {
+  try {
+    const value = JSON.parse(readFileImpl(file, 'utf8'));
+    if (!isPlainObject(value)) throw new Error('JSON root must be an object');
+    return value;
+  } catch (error) {
+    if (error instanceof SyntaxError) throw new Error(`File is not valid JSON: ${error.message}`);
+    throw new Error(`Could not read JSON file: ${error.message}`);
+  }
+}
+
+function contentTypeForFile(file) {
+  const extension = path.extname(file).toLowerCase();
+  return ({
+    '.docx': 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    '.xlsx': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+    '.pdf': 'application/pdf', '.txt': 'text/plain', '.md': 'text/markdown', '.html': 'text/html',
+  })[extension] || 'application/octet-stream';
+}
+
+function appendFiles(form, files, field = 'files', readFileImpl = fs.readFileSync) {
+  for (const file of files) {
+    const bytes = readFileImpl(file);
+    form.append(field, new Blob([bytes], { type: contentTypeForFile(file) }), path.basename(file));
+  }
+  return form;
+}
+
+async function fetchPipeline(fetchImpl = fetch) { return apiRequest('/v1/pipeline', {}, fetchImpl); }
+async function addPipelineItem(contractId, fetchImpl = fetch) { return apiRequest('/v1/pipeline', { method: 'POST', body: JSON.stringify({ contract_id: contractId }) }, fetchImpl); }
+async function updatePipelineItem(id, changes, fetchImpl = fetch) { return apiRequest(`/v1/pipeline/${encodeURIComponent(id)}`, { method: 'PATCH', body: JSON.stringify(changes) }, fetchImpl); }
+async function removePipelineItem(id, fetchImpl = fetch) { return apiRequest(`/v1/pipeline/${encodeURIComponent(id)}`, { method: 'DELETE' }, fetchImpl); }
+async function fetchInsights(fetchImpl = fetch) { return apiRequest('/v1/insights', {}, fetchImpl); }
+async function sendTenderFeedback(options, fetchImpl = fetch) {
+  return apiRequest('/v1/feedback/tender', { method: 'POST', body: JSON.stringify({ contract_id: options.contractId, response: options.response, reason: options.reason, note: options.note }) }, fetchImpl);
+}
+async function sendProductFeedback(options, fetchImpl = fetch) {
+  return apiRequest('/v1/feedback/product', { method: 'POST', body: JSON.stringify({ feedback_type: options.feedbackType, area: options.area, note: options.note, context_path: options.contextPath, contract_id: options.contractId, section_id: options.sectionId }) }, fetchImpl);
+}
+async function fetchBidProfile(fetchImpl = fetch) { const payload = await apiRequest('/v1/bid-profile', {}, fetchImpl); return payload.profile; }
+async function updateBidProfile(profile, fetchImpl = fetch) { const payload = await apiRequest('/v1/bid-profile', { method: 'PUT', body: JSON.stringify(profile) }, fetchImpl); return payload.profile; }
+async function fetchOutline(contractId, fetchImpl = fetch) { return apiRequest(`/v1/outlines/${encodeURIComponent(contractId)}`, {}, fetchImpl); }
+async function createOutline(contractId, refresh, fetchImpl = fetch) { return apiRequest('/v1/outlines', { method: 'POST', body: JSON.stringify({ contract_id: contractId, refresh }) }, fetchImpl); }
+async function fetchEvidence(fetchImpl = fetch) { return apiRequest('/v1/evidence', {}, fetchImpl); }
+async function enrichEvidence(fetchImpl = fetch) { return apiRequest('/v1/evidence/enrich', { method: 'POST' }, fetchImpl); }
+async function uploadEvidence(files, documentType, fetchImpl = fetch, readFileImpl = fs.readFileSync) {
+  const form = appendFiles(new FormData(), files, 'files', readFileImpl);
+  if (documentType) form.set('document_type', documentType);
+  return apiRequest('/v1/evidence/documents', { method: 'POST', body: form }, fetchImpl);
+}
+async function updateEvidenceRecord(id, reviewStatus, fetchImpl = fetch) { return apiRequest(`/v1/evidence/records/${encodeURIComponent(id)}`, { method: 'PUT', body: JSON.stringify({ review_status: reviewStatus }) }, fetchImpl); }
+async function removeEvidenceRecord(id, fetchImpl = fetch) { return apiRequest(`/v1/evidence/records/${encodeURIComponent(id)}`, { method: 'DELETE' }, fetchImpl); }
+async function removeEvidenceDocument(id, fetchImpl = fetch) { return apiRequest(`/v1/evidence/documents/${encodeURIComponent(id)}`, { method: 'DELETE' }, fetchImpl); }
+async function fetchTemplates(fetchImpl = fetch) { return apiRequest('/v1/templates', {}, fetchImpl); }
+async function uploadTemplates(files, role, fetchImpl = fetch, readFileImpl = fs.readFileSync) {
+  const form = appendFiles(new FormData(), files, 'files', readFileImpl);
+  if (role) form.set('template_role', role);
+  return apiRequest('/v1/templates', { method: 'POST', body: form }, fetchImpl);
+}
+async function removeTemplate(id, fetchImpl = fetch) { return apiRequest(`/v1/templates/${encodeURIComponent(id)}`, { method: 'DELETE' }, fetchImpl); }
+async function fetchDrafts(fetchImpl = fetch) { return apiRequest('/v1/drafts', {}, fetchImpl); }
+async function fetchDraft(contractId, workspace, fetchImpl = fetch) { return apiRequest(`/v1/drafts/${encodeURIComponent(contractId)}${workspace ? '?workspace=1' : ''}`, {}, fetchImpl); }
+async function createDraft(contractId, options, fetchImpl = fetch) {
+  const body = { ...(options.file ? readJsonFile(options.file) : {}), contract_id: contractId };
+  if (options.refresh) body.refresh = true;
+  if (options.workspace) body.workspace = true;
+  return apiRequest('/v1/drafts', { method: 'POST', body: JSON.stringify(body) }, fetchImpl);
+}
+async function exportDraft(contractId, format, output, fetchImpl = fetch, writeFileImpl = fs.writeFileSync) {
+  const response = await fetchImpl(`${DEFAULT_BASE_URL}/v1/drafts/${encodeURIComponent(contractId)}?export=${encodeURIComponent(format)}`, { headers: { Authorization: `Bearer ${apiToken()}` } });
+  if (!response.ok) {
+    const body = await response.json().catch(() => ({}));
+    throw new Error(body.error || `TenderLead API failed: ${response.status}`);
+  }
+  const bytes = Buffer.from(await response.arrayBuffer());
+  writeFileImpl(output, bytes);
+  return { output, bytes: bytes.length };
+}
+async function importDraft(contractId, file, fetchImpl = fetch, readFileImpl = fs.readFileSync) {
+  const form = appendFiles(new FormData(), [file], 'file', readFileImpl);
+  return apiRequest(`/v1/drafts/${encodeURIComponent(contractId)}/import`, { method: 'POST', body: form }, fetchImpl);
+}
+async function fetchEvidencePacks(fetchImpl = fetch) { return apiRequest('/v1/evidence-packs', {}, fetchImpl); }
+async function fetchEvidencePack(contractId, fetchImpl = fetch) { return apiRequest(`/v1/evidence-packs/${encodeURIComponent(contractId)}`, {}, fetchImpl); }
+async function createEvidencePack(contractId, options, fetchImpl = fetch) {
+  const body = { ...(options.file ? readJsonFile(options.file) : {}), contract_id: contractId };
+  if (options.refresh) body.refresh = true;
+  return apiRequest('/v1/evidence-packs', { method: 'POST', body: JSON.stringify(body) }, fetchImpl);
+}
+
 function isPlainObject(value) {
   return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
 }
@@ -323,6 +658,46 @@ async function confirmApply(input = process.stdin, output = process.stdout) {
   }
 }
 
+async function confirmWord(word, message, input = process.stdin, output = process.stdout) {
+  const prompt = readline.createInterface({ input, output });
+  try {
+    return (await prompt.question(`${message} Type ${word} to continue: `)).trim() === word;
+  } finally {
+    prompt.close();
+  }
+}
+
+async function requireWriteConfirmation(options, word, message) {
+  if (options.yes) return true;
+  if (!process.stdin.isTTY) throw new Error(`Interactive confirmation requires a terminal. Re-run with --yes after reviewing the command.`);
+  return confirmWord(word, message);
+}
+
+function printPayload(payload, json, summary) {
+  if (json || !summary) console.log(JSON.stringify(payload, null, 2));
+  else console.log(summary(payload));
+}
+
+function formatPipeline(payload) {
+  const stages = ['watching', 'preparing', 'submitted', 'won', 'lost'];
+  const lines = ['# TenderLead pipeline', ''];
+  for (const stage of stages) {
+    const rows = Array.isArray(payload[stage]) ? payload[stage] : [];
+    lines.push(`## ${stage[0].toUpperCase()}${stage.slice(1)} (${rows.length})`);
+    for (const row of rows) lines.push(`- ${line(row.title, 'Untitled notice')} · item ${line(row.id, 'unknown')} · contract ${line(row.contract_id, 'unknown')}`);
+    if (!rows.length) lines.push('- None');
+    lines.push('');
+  }
+  return lines.join('\n').trim();
+}
+
+function formatList(title, rows, rowText) {
+  const lines = [`# ${title}`, '', `Results: ${rows.length}`, ''];
+  if (!rows.length) lines.push('None.');
+  for (const row of rows) lines.push(`- ${rowText(row)}`);
+  return lines.join('\n');
+}
+
 async function main() {
   if (process.argv.includes('--help') || process.argv.includes('-h')) return console.log(usage());
   const options = parseArgs(process.argv);
@@ -331,6 +706,7 @@ async function main() {
     console.log('TenderLead Settings opened. Sign in, create the required scoped token, then set TENDERLEAD_API_TOKEN in your shell.');
     return;
   }
+  if (options.command === 'whoami') return printPayload(await fetchWhoami(), options.json, formatWhoami);
   if (options.command === 'brief') {
     const brief = await fetchBrief(options);
     console.log(options.json ? JSON.stringify(brief, null, 2) : formatBrief(brief));
@@ -346,6 +722,81 @@ async function main() {
     console.log(options.json ? JSON.stringify(result, null, 2) : formatScore(result));
     return;
   }
+  if (options.command === 'pipeline') {
+    if (options.action === 'list') return printPayload(await fetchPipeline(), options.json, formatPipeline);
+    if (options.action === 'add') return printPayload(await addPipelineItem(options.id), options.json, row => `Added ${line(row.contract_id, options.id)} to ${line(row.stage, 'watching')}.`);
+    if (!(await requireWriteConfirmation(options, options.action === 'remove' ? 'REMOVE' : 'UPDATE', `${options.action === 'remove' ? 'Remove' : 'Update'} pipeline item ${options.id}.`))) return console.log('Pipeline unchanged.');
+    if (options.action === 'update') return printPayload(await updatePipelineItem(options.id, readJsonFile(options.file)), options.json, row => `Updated pipeline item ${line(row.id, options.id)}.`);
+    return printPayload(await removePipelineItem(options.id), options.json, () => `Removed pipeline item ${options.id}.`);
+  }
+  if (options.command === 'insights') return printPayload(await fetchInsights(), options.json);
+  if (options.command === 'feedback') {
+    const result = options.action === 'tender' ? await sendTenderFeedback(options) : await sendProductFeedback(options);
+    return printPayload(result, options.json, () => 'Feedback saved.');
+  }
+  if (options.command === 'bid-profile') {
+    if (options.action === 'show') return printPayload(await fetchBidProfile(), options.json);
+    const profile = readJsonFile(options.file);
+    if (!(await requireWriteConfirmation(options, 'APPLY', 'Replace the bid workspace profile with the supplied JSON.'))) return console.log('Bid profile unchanged.');
+    return printPayload(await updateBidProfile(profile), options.json, () => 'Bid profile saved.');
+  }
+  if (options.command === 'outlines') {
+    if (options.action === 'show') return printPayload(await fetchOutline(options.contractId), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+    if (!(await requireWriteConfirmation(options, 'GENERATE', `Generate${options.refresh ? ' or refresh' : ''} the bid spec for ${options.contractId}.`))) return console.log('Outline unchanged.');
+    return printPayload(await createOutline(options.contractId, options.refresh), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+  }
+  if (options.command === 'evidence') {
+    if (options.action === 'list') return printPayload(await fetchEvidence(), options.json);
+    if (options.action === 'enrich') {
+      if (!(await requireWriteConfirmation(options, 'ENRICH', 'Run public evidence enrichment for this account.'))) return console.log('Evidence unchanged.');
+      return printPayload(await enrichEvidence(), options.json);
+    }
+    if (options.action === 'upload') {
+      if (!(await requireWriteConfirmation(options, 'UPLOAD', `Upload ${options.files.length} evidence document${options.files.length === 1 ? '' : 's'}.`))) return console.log('Evidence unchanged.');
+      return printPayload(await uploadEvidence(options.files, options.documentType), options.json);
+    }
+    const verb = options.operation === 'update' ? 'UPDATE' : 'REMOVE';
+    if (!(await requireWriteConfirmation(options, verb, `${options.operation === 'update' ? 'Update' : 'Remove'} evidence ${options.action} ${options.id}.`))) return console.log('Evidence unchanged.');
+    if (options.action === 'record' && options.operation === 'update') return printPayload(await updateEvidenceRecord(options.id, options.reviewStatus), options.json);
+    if (options.action === 'record') return printPayload(await removeEvidenceRecord(options.id), options.json, () => `Removed evidence record ${options.id}.`);
+    return printPayload(await removeEvidenceDocument(options.id), options.json, () => `Removed evidence document ${options.id}.`);
+  }
+  if (options.command === 'templates') {
+    if (options.action === 'list') {
+      const payload = await fetchTemplates();
+      return printPayload(payload, options.json, value => formatList('TenderLead bid templates', value.templates || [], row => `${line(row.file_name, 'Unnamed')} · ${line(row.id, 'unknown')}`));
+    }
+    if (options.action === 'upload') {
+      if (!(await requireWriteConfirmation(options, 'UPLOAD', `Upload ${options.files.length} bid template${options.files.length === 1 ? '' : 's'}.`))) return console.log('Templates unchanged.');
+      return printPayload(await uploadTemplates(options.files, options.role), options.json);
+    }
+    if (!(await requireWriteConfirmation(options, 'REMOVE', `Remove bid template ${options.id}.`))) return console.log('Templates unchanged.');
+    return printPayload(await removeTemplate(options.id), options.json, () => `Removed bid template ${options.id}.`);
+  }
+  if (options.command === 'drafts') {
+    if (options.action === 'list') {
+      const payload = await fetchDrafts();
+      return printPayload(payload, options.json, value => formatList('TenderLead bid drafts', value.drafts || [], row => `${line(row.title, 'Untitled')} · ${line(row.contract_id, 'unknown')}`));
+    }
+    if (options.action === 'show') return printPayload(await fetchDraft(options.contractId, options.workspace), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+    if (options.action === 'export') {
+      if (fs.existsSync(options.output) && !options.yes) throw new Error('Output file already exists. Re-run with --yes to replace it.');
+      const result = await exportDraft(options.contractId, options.format, options.output);
+      return console.log(`Saved ${result.bytes} bytes to ${result.output}.`);
+    }
+    if (!(await requireWriteConfirmation(options, options.action === 'import' ? 'IMPORT' : 'GENERATE', `${options.action === 'import' ? 'Import workspace answers for' : 'Generate or update draft for'} ${options.contractId}.`))) return console.log('Draft unchanged.');
+    if (options.action === 'import') return printPayload(await importDraft(options.contractId, options.file), options.json);
+    return printPayload(await createDraft(options.contractId, options), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+  }
+  if (options.command === 'evidence-packs') {
+    if (options.action === 'list') {
+      const payload = await fetchEvidencePacks();
+      return printPayload(payload, options.json, value => formatList('TenderLead evidence packs', value.packs || [], row => `${line(row.title, 'Untitled')} · ${line(row.contract_id, 'unknown')}`));
+    }
+    if (options.action === 'show') return printPayload(await fetchEvidencePack(options.contractId), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+    if (!(await requireWriteConfirmation(options, 'GENERATE', `Generate${options.refresh ? ' or refresh' : ''} the evidence pack for ${options.contractId}.`))) return console.log('Evidence pack unchanged.');
+    return printPayload(await createEvidencePack(options.contractId, options), options.json, payload => payload.content || JSON.stringify(payload, null, 2));
+  }
   if (options.action === 'template') {
     console.log(JSON.stringify(profileTemplate(), null, 2));
     return;
@@ -388,7 +839,11 @@ if (require.main === module) {
 }
 
 module.exports = {
-  parseArgs, openLogin, formatBrief, formatTenders, formatScore, fetchBrief, searchTenders, scoreTender, fetchProfile, updateProfile,
+  parseArgs, openLogin, fetchWhoami, formatWhoami, formatBrief, formatTenders, formatScore, fetchBrief, searchTenders, scoreTender, fetchProfile, updateProfile,
   validateProfile, readProfileFile, profileTemplate, profileDiff, formatProfile,
-  formatProfileDiff, confirmApply,
+  formatProfileDiff, confirmApply, confirmWord, readJsonFile, contentTypeForFile, appendFiles,
+  fetchPipeline, addPipelineItem, updatePipelineItem, removePipelineItem, fetchInsights, sendTenderFeedback, sendProductFeedback,
+  fetchBidProfile, updateBidProfile, fetchOutline, createOutline, fetchEvidence, enrichEvidence, uploadEvidence,
+  updateEvidenceRecord, removeEvidenceRecord, removeEvidenceDocument, fetchTemplates, uploadTemplates, removeTemplate,
+  fetchDrafts, fetchDraft, createDraft, exportDraft, importDraft, fetchEvidencePacks, fetchEvidencePack, createEvidencePack,
 };

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@tenderlead/cli",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "private": false,
-  "description": "Search and score tenders, read briefings and manage your firm profile from the terminal",
+  "description": "Run TenderLead tender, profile, pipeline, insight and bid-workspace workflows from the terminal",
   "homepage": "https://tenderlead.co.uk",
   "files": [
     "bin",