epismo 0.4.0 → 0.4.1

package/dist/program.js

@@ -3,21 +3,19 @@ import { clearWorkspace, getCurrentWorkspace, listAvailableWorkspaces, login, lo
 import { resolveExecutionContext } from "./context.js";
 import { mergeDefined, parseJsonArrayOption, parseJsonObjectOption, parseOptionalPositiveInteger, parseStringArrayInput, readJsonObjectInput } from "./input.js";
 import { printJson, printWarning } from "./output.js";
-import { deleteTrack, getTrack, searchTracks, upsertTrack } from "./tracks.js";
-import { deletePack, getPack, likePack, searchPacks, upsertPack } from "./packs.js";
+import { applyTracks, createTrack, deleteTrack, getTrack, searchTracks, updateTrack } from "./tracks.js";
+import { createPack, deletePack, getPack, likePack, searchPacks, updatePack } from "./packs.js";
 import { deleteAlias, getAlias, listAliases, upsertAlias } from "./aliases.js";
 import { creditBalance, creditCheckout } from "./credits.js";
 import { CliError } from "./errors.js";
 import { addAgents, listAgents, removeAgents } from "./agents.js";
-import { deleteWorkspaceMember, listWorkspaceMembers, upsertWorkspace, upsertWorkspaceMember } from "./workspaces.js";
-import { addProjectMember, deleteProject, deleteProjectMember, listProjectMembers, listProjects, upsertProject } from "./projects.js";
+import { createWorkspace, deleteWorkspaceMember, getWorkspaceCheckout, listWorkspaceMembers, updateWorkspace, upsertWorkspaceMember } from "./workspaces.js";
+import { addProjectMember, createProject, deleteProject, deleteProjectMember, listProjectMembers, listProjects, updateProject } from "./projects.js";
+import { createToken } from "./token.js";
 const TRACK_TYPES = ["task", "goal"];
 const PACK_TYPES = ["workflow", "context"];
 const PACK_VISIBILITIES = ["public", "private"];
-// #1: centralize --workspace-id option so description is defined once
-const WORKSPACE_ID_OPT = "--workspace-id <workspaceId>";
-const WORKSPACE_ID_DESC = "workspace to use; resolved in order: CLI arg → saved default → personal space";
-// #2: centralize warning codes so wording is consistent everywhere
+// centralize warning codes so wording is consistent everywhere
 const WARNING_ENV_TOKEN_WORKSPACE_IGNORED = "EPISMO_TOKEN_WORKSPACE_IGNORED";
 async function resolveInput(options, overrides) {
     const base = await readJsonObjectInput(options.input);
@@ -30,8 +28,42 @@ function getExplicitOptionOverride(command, optionName, value) {
     }
     return value;
 }
-async function resolveContext(options) {
-    const context = await resolveExecutionContext(options);
+function buildSharingTargets(command, options) {
+    const targets = mergeDefined({}, {
+        projectIds: getExplicitOptionOverride(command, "projectIds", parseStringArrayInput(options.projectIds, "--project-ids")),
+        userIds: getExplicitOptionOverride(command, "userIds", parseStringArrayInput(options.userIds, "--user-ids")),
+        emails: getExplicitOptionOverride(command, "emails", parseStringArrayInput(options.emails, "--emails"))
+    });
+    return Object.keys(targets).length > 0 ? targets : undefined;
+}
+function buildSearchTargets(command, options) {
+    const targets = mergeDefined({}, {
+        projectIds: getExplicitOptionOverride(command, "projectIds", parseStringArrayInput(options.projectIds, "--project-ids")),
+        self: getExplicitOptionOverride(command, "self", parseOptionalBooleanText(options.self, "--self"))
+    });
+    return Object.keys(targets).length > 0 ? targets : undefined;
+}
+function parseOptionalBooleanText(value, optionName) {
+    if (value === undefined) {
+        return undefined;
+    }
+    if (typeof value === "boolean") {
+        return value;
+    }
+    if (typeof value === "string") {
+        const normalized = value.trim().toLowerCase();
+        if (normalized === "true")
+            return true;
+        if (normalized === "false")
+            return false;
+    }
+    throw new CliError({
+        code: "INVALID_INPUT",
+        message: `Invalid ${optionName}: expected true or false.`
+    });
+}
+async function resolveContext() {
+    const context = await resolveExecutionContext();
     if (context.warning) {
         printWarning({
             warning: { code: WARNING_ENV_TOKEN_WORKSPACE_IGNORED, message: context.warning }
@@ -51,11 +83,12 @@ export function buildProgram(version) {
         .exitOverride();
     program.addHelpText("after", `
 Workspace resolution:
-  Commands that accept --workspace-id resolve the workspace in this order:
-    1. --workspace-id flag
-    2. Saved default (epismo workspace use)
-    3. Personal space (fallback)
-  When EPISMO_TOKEN is set, the saved default is skipped.
+  All commands resolve workspace in this order:
+    1. Saved default (epismo workspace use)
+    2. Personal space (fallback)
+  When EPISMO_TOKEN is set, the saved default is skipped — the workspace is
+  resolved from the token itself. Use epismo token create --workspace-id to
+  issue a workspace-scoped token for CI/CD.
 
 Examples:
   epismo login
@@ -108,16 +141,14 @@ Examples:
     program
         .command("whoami")
         .description("show the currently authenticated user")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
-        .action(async (options) => {
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        .action(async () => {
+        const context = await resolveContext();
         printJson(await whoami({ workspaceId: context.workspaceId, auth: context.auth }));
     });
     program.commands.at(-1)?.addHelpText("after", `
 Examples:
   epismo whoami
-  EPISMO_TOKEN=<access-token> epismo whoami
-  epismo whoami --workspace-id <workspace-id>`);
+  EPISMO_TOKEN=<access-token> epismo whoami`);
     const workspace = program
         .command("workspace")
         .description("manage workspaces and the saved default workspace");
@@ -159,33 +190,63 @@ Example:
 Example:
   epismo workspace clear`);
     workspace
-        .command("upsert")
-        .description("create a new workspace or update one you can access")
+        .command("create")
+        .description("create a new workspace")
         .option("--input <input>", "JSON object, @file, or - for stdin")
-        .option("--id <id>", "existing workspace id")
         .option("--name <name>", "workspace name")
         .addOption(new Option("--plan <plan>", "basic | pro").choices(["basic", "pro"]))
         .action(async (options) => {
-        const payload = await resolveInput({ input: options.input }, { id: options.id, name: options.name, plan: options.plan });
-        const context = await resolveContext({});
-        printJson(await upsertWorkspace(context, payload));
+        const payload = await resolveInput({ input: options.input }, { name: options.name, plan: options.plan });
+        const context = await resolveContext();
+        const created = await createWorkspace(context, payload);
+        const workspaceId = created.workspace?.id;
+        if (workspaceId) {
+            const checkout = await getWorkspaceCheckout(context, workspaceId);
+            printJson({ ...created, ...checkout });
+        }
+        else {
+            printJson(created);
+        }
+    });
+    workspace.commands.at(-1)?.addHelpText("after", `
+Examples:
+  epismo workspace create --name my-team --plan basic
+  epismo workspace create --input @workspace.json`);
+    workspace
+        .command("checkout")
+        .description("get the billing URL for a workspace (to complete or retry payment)")
+        .requiredOption("--id <id>", "workspace id")
+        .action(async (options) => {
+        const context = await resolveContext();
+        printJson(await getWorkspaceCheckout(context, options.id));
+    });
+    workspace.commands.at(-1)?.addHelpText("after", `
+Examples:
+  epismo workspace checkout --id <workspace-id>`);
+    workspace
+        .command("update")
+        .description("update a workspace you own (PATCH — omitted fields are unchanged)")
+        .option("--input <input>", "JSON object, @file, or - for stdin")
+        .requiredOption("--id <id>", "workspace id to update")
+        .option("--name <name>", "updated workspace name")
+        .addOption(new Option("--plan <plan>", "basic | pro").choices(["basic", "pro"]))
+        .action(async (options) => {
+        const payload = await resolveInput({ input: options.input }, { name: options.name, plan: options.plan });
+        const context = await resolveContext();
+        printJson(await updateWorkspace(context, options.id, payload));
     });
     const workspaceMember = workspace.command("member").description("manage workspace members");
     workspaceMember
         .command("list")
         .description("list members in a workspace")
-        .option("--workspace-id <workspaceId>", "workspace id")
-        .action(async (options) => {
-        const context = await resolveContext({ workspaceId: options.workspaceId });
-        printJson(await listWorkspaceMembers(context, {
-            workspaceId: options.workspaceId ?? context.workspaceId
-        }));
+        .action(async () => {
+        const context = await resolveContext();
+        printJson(await listWorkspaceMembers(context, { workspaceId: context.workspaceId }));
     });
     workspaceMember
         .command("upsert")
         .description("add a workspace member or update the member role")
         .option("--input <input>", "JSON object, @file, or - for stdin")
-        .option("--workspace-id <workspaceId>", "workspace id")
         .option("--user-id <userId>", "user id")
         .addOption(new Option("--role <role>", "owner | admin | member").choices([
         "owner",
@@ -193,65 +254,74 @@ Example:
         "member"
     ]))
         .action(async (options) => {
+        const context = await resolveContext();
         const payload = await resolveInput({ input: options.input }, {
-            workspaceId: options.workspaceId,
+            workspaceId: context.workspaceId,
             userId: options.userId,
             role: options.role
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
         printJson(await upsertWorkspaceMember(context, payload));
     });
     workspaceMember
         .command("delete")
         .description("remove a workspace member")
         .option("--input <input>", "JSON object, @file, or - for stdin")
-        .option("--workspace-id <workspaceId>", "workspace id")
         .option("--user-id <userId>", "user id")
         .action(async (options) => {
+        const context = await resolveContext();
         const payload = await resolveInput({ input: options.input }, {
-            workspaceId: options.workspaceId,
+            workspaceId: context.workspaceId,
             userId: options.userId
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
         printJson(await deleteWorkspaceMember(context, payload));
     });
     const project = program.command("project").description("manage workspace projects");
     project
         .command("list")
         .description("list projects visible in the selected workspace")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
-        .action(async (options) => {
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        .action(async () => {
+        const context = await resolveContext();
         printJson(await listProjects(context));
     });
     project
-        .command("upsert")
-        .description("create a project in the selected workspace or update one you can access")
+        .command("create")
+        .description("create a project in the selected workspace")
         .option("--input <input>", "JSON object, @file, or - for stdin")
-        .option("--id <id>", "existing project id")
         .option("--name <name>", "project name")
         .option("--description <description>", "project description")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
-            id: options.id,
             name: options.name,
             description: options.description
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
-        printJson(await upsertProject(context, payload));
+        const context = await resolveContext();
+        printJson(await createProject(context, payload));
+    });
+    project
+        .command("update")
+        .description("update a project you can access (PATCH — omitted fields are unchanged)")
+        .option("--input <input>", "JSON object, @file, or - for stdin")
+        .requiredOption("--id <id>", "project id to update")
+        .option("--name <name>", "updated project name")
+        .option("--description <description>", "updated project description")
+        .action(async (options) => {
+        const payload = await resolveInput(options, {
+            name: options.name,
+            description: options.description
+        });
+        const context = await resolveContext();
+        printJson(await updateProject(context, options.id, payload));
     });
     project
         .command("delete")
         .description("delete a project you can access in the selected workspace")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--id <id>", "project id")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             id: options.id
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await deleteProject(context, payload));
     });
     const projectMember = project.command("member").description("manage project members");
@@ -260,12 +330,11 @@ Example:
         .description("list members across one or more projects")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--project-ids <projectIds>", "JSON array or comma-separated project ids")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             projectIds: parseStringArrayInput(options.projectIds, "--project-ids")
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await listProjectMembers(context, payload));
     });
     projectMember
@@ -274,13 +343,12 @@ Example:
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--project-id <projectId>", "project id")
         .option("--user-id <userId>", "user id")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             projectId: options.projectId,
             userId: options.userId
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await addProjectMember(context, payload));
     });
     projectMember
@@ -289,60 +357,88 @@ Example:
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--project-id <projectId>", "project id")
         .option("--user-id <userId>", "user id")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             projectId: options.projectId,
             userId: options.userId
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await deleteProjectMember(context, payload));
     });
     const track = program.command("track").description("manage project tracks (tasks and goals)");
     track
-        .command("upsert")
-        .description("create or update a project track (task or goal)")
+        .command("create")
+        .description("create a new project track (task or goal)")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .addOption(new Option("--type <type>", "task | goal").choices(TRACK_TYPES))
-        .option("--id <id>", "existing item id")
         .option("--title <title>", "title")
         .option("--content <content>", "markdown content")
-        .option("--projects <projects>", "JSON array or comma-separated project ids")
+        .option("--project-ids <projectIds>", "JSON array or comma-separated project ids")
+        .option("--user-ids <userIds>", "JSON array or comma-separated user ids")
+        .option("--emails <emails>", "JSON array or comma-separated email addresses")
         .option("--task <task>", 'task-specific fields as JSON object e.g. \'{"status":"todo","dueDate":"2025-12-31"}\'')
         .option("--goal <goal>", 'goal-specific fields as JSON object e.g. \'{"status":"on_track","dueDate":"2025-12-31"}\'')
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
-        .action(async (options) => {
+        .action(async (options, command) => {
         const payload = await resolveInput(options, {
             type: options.type,
-            id: options.id,
             title: options.title,
             content: options.content,
-            projects: parseStringArrayInput(options.projects, "--projects"),
+            targets: buildSharingTargets(command, options),
             task: parseJsonObjectOption(options.task, "--task"),
             goal: parseJsonObjectOption(options.goal, "--goal")
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
-        printJson(await upsertTrack(context, payload));
+        const context = await resolveContext();
+        printJson(await createTrack(context, payload));
     });
     track.commands.at(-1)?.addHelpText("after", `
 Notes:
   Use --task or --goal to pass type-specific fields.
 
 Examples:
-  epismo track upsert --type task --title "Fix bug" --content "Details..."
-  epismo track upsert --input @task.json
-  epismo track upsert --type goal --title "Launch" --goal '{"status":"on_track"}'`);
+  epismo track create --type task --title "Fix bug" --content "Details..."
+  epismo track create --input @task.json
+  epismo track create --type goal --title "Launch" --goal '{"status":"on_track"}'`);
+    track
+        .command("update")
+        .description("update an existing project track (PATCH — omitted fields are unchanged)")
+        .option("--input <input>", "JSON object, @file, or - for stdin")
+        .requiredOption("--id <id>", "track id to update")
+        .option("--title <title>", "updated title")
+        .option("--content <content>", "updated markdown content")
+        .option("--project-ids <projectIds>", "JSON array or comma-separated project ids")
+        .option("--user-ids <userIds>", "JSON array or comma-separated user ids")
+        .option("--emails <emails>", "JSON array or comma-separated email addresses")
+        .option("--task <task>", 'task-specific fields as partial JSON object e.g. \'{"status":"done"}\'')
+        .option("--goal <goal>", 'goal-specific fields as partial JSON object e.g. \'{"progress":50}\'')
+        .action(async (options, command) => {
+        const payload = await resolveInput(options, {
+            title: options.title,
+            content: options.content,
+            targets: buildSharingTargets(command, options),
+            task: parseJsonObjectOption(options.task, "--task"),
+            goal: parseJsonObjectOption(options.goal, "--goal")
+        });
+        const context = await resolveContext();
+        printJson(await updateTrack(context, options.id, payload));
+    });
+    track.commands.at(-1)?.addHelpText("after", `
+Notes:
+  Omitted fields keep their existing value.
+
+Examples:
+  epismo track update --id <id> --title "Updated title"
+  epismo track update --id <id> --task '{"status":"done"}'
+  epismo track update --id <id> --goal '{"progress":75}'`);
     track
         .command("get")
         .description("fetch one project track")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--id <id>", "item id")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             id: options.id
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await getTrack(context, payload));
     });
     track.commands.at(-1)?.addHelpText("after", `
@@ -355,18 +451,18 @@ Example:
         .addOption(new Option("--type <type>", "task | goal").choices(TRACK_TYPES))
         .option("--query <query>", "free-text query")
         .option("--page <page>", "1-based page number")
-        .option("--projects <projects>", "JSON array or comma-separated project ids")
+        .option("--project-ids <projectIds>", "JSON array or comma-separated project ids")
+        .option("--self <self>", "whether to include items that target the current user directly")
         .option("--filter <filter>", 'filter as JSON object; each value is an array of accepted values e.g. \'{"status":["todo","in_progress"]}\' (use --input @file.json for complex filters)')
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options, command) => {
         const payload = await resolveInput(options, {
             type: getExplicitOptionOverride(command, "type", options.type),
             query: getExplicitOptionOverride(command, "query", options.query),
             page: getExplicitOptionOverride(command, "page", parseOptionalPositiveInteger(options.page, "--page")),
-            projects: getExplicitOptionOverride(command, "projects", parseStringArrayInput(options.projects, "--projects")),
+            targets: buildSearchTargets(command, options),
             filter: getExplicitOptionOverride(command, "filter", parseJsonObjectOption(options.filter, "--filter"))
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await searchTracks(context, payload));
     });
     track.commands.at(-1)?.addHelpText("after", `
@@ -379,52 +475,125 @@ Examples:
         .description("delete one project track")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--id <id>", "item id")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             id: options.id
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await deleteTrack(context, payload));
     });
     track.commands.at(-1)?.addHelpText("after", `
 Example:
   epismo track delete --id <id>`);
+    track
+        .command("apply")
+        .description("create, update, and delete multiple tracks in a single request")
+        .option("--input <input>", "JSON object, @file, or - for stdin")
+        .option("--project-ids <projectIds>", "JSON array or comma-separated project ids")
+        .option("--user-ids <userIds>", "JSON array or comma-separated user ids")
+        .option("--emails <emails>", "JSON array or comma-separated email addresses")
+        .action(async (options, command) => {
+        const payload = await resolveInput(options, {
+            targets: buildSharingTargets(command, options)
+        });
+        const context = await resolveContext();
+        printJson(await applyTracks(context, payload));
+    });
+    track.commands.at(-1)?.addHelpText("after", `
+Notes:
+  updateDrafts: use a non-UUID string as id (e.g. "t001") to create a new track, or a UUID to update an existing one.
+  Labels in task.parentId, task.dependsOn, and task.goalId are resolved by the server, so you can wire
+  up dependencies between new entries in the same request.
+  deleteDrafts: provide UUIDs of tracks to delete.
+
+Examples:
+  epismo track apply --input @batch.json
+  epismo track apply --input '{"updateDrafts":[{"id":"t001","title":"Task A","task":{"status":"todo"}},{"id":"t002","title":"Task B","task":{"status":"todo","dependsOn":["t001"]}}]}'`);
     const pack = program.command("pack").description("manage agent packs (workflows and contexts)");
-    pack.command("upsert")
-        .description("create or update an agent pack")
+    pack.command("create")
+        .description("create a new agent pack")
         .option("--input <input>", "JSON object, @file, or - for stdin")
-        .addOption(new Option("--type <type>", "workflow | context").choices(PACK_TYPES))
-        .option("--id <id>", "existing pack id")
+        .addOption(new Option("--type <type>", "workflow | context (required unless provided in --input)")
+        .choices(PACK_TYPES))
         .option("--title <title>", "title")
         .option("--content <content>", "markdown content")
         .option("--category <category>", "pack category")
         .addOption(new Option("--visibility <visibility>", "public | private").choices(PACK_VISIBILITIES))
-        .option("--projects <projects>", "JSON array or comma-separated project ids")
+        .option("--project-ids <projectIds>", "JSON array or comma-separated project ids")
+        .option("--user-ids <userIds>", "JSON array or comma-separated user ids")
+        .option("--emails <emails>", "JSON array or comma-separated email addresses")
         .option("--steps <steps>", "workflow steps as JSON array (use --input @file.json for complex payloads)")
         .option("--blocks <blocks>", "context blocks as JSON array (for type=context; use --input @file.json for complex payloads)")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
-        .action(async (options) => {
+        .action(async (options, command) => {
         const payload = await resolveInput(options, {
             type: options.type,
-            id: options.id,
             title: options.title,
             content: options.content,
             category: options.category,
             visibility: options.visibility,
-            projects: parseStringArrayInput(options.projects, "--projects"),
+            targets: buildSharingTargets(command, options),
+            steps: parseJsonArrayOption(options.steps, "--steps"),
+            blocks: parseJsonArrayOption(options.blocks, "--blocks")
+        });
+        if (payload.type !== "workflow" && payload.type !== "context") {
+            throw new CliError({
+                code: "INVALID_INPUT",
+                message: "Pack type is required.",
+                hint: 'Pass --type workflow|context or include {"type":"workflow"} / {"type":"context"} in --input.'
+            });
+        }
+        const context = await resolveContext();
+        printJson(await createPack(context, payload));
+    });
+    pack.commands.at(-1)?.addHelpText("after", `
+Notes:
+  type is required for pack create. Pass --type or include it in --input.
+
+Examples:
+  epismo pack create --type workflow --title "My workflow" --input @workflow.json
+  epismo pack create --type workflow --title "My workflow" --steps '[{"title":"Step 1","content":"..."}]'
+  epismo pack create --type context --title "My context" --input @context.json
+  epismo pack create --type context --title "My context" --blocks '[{"title":"Block 1","content":"..."}]'`);
+    pack.command("update")
+        .description("update an existing agent pack (PATCH semantics — omitted fields are unchanged)")
+        .requiredOption("--id <id>", "pack id to update")
+        .option("--input <input>", "JSON object, @file, or - for stdin")
+        .option("--title <title>", "updated title")
+        .option("--content <content>", "updated markdown content")
+        .option("--category <category>", "updated pack category")
+        .addOption(new Option("--visibility <visibility>", "public | private").choices(PACK_VISIBILITIES))
+        .option("--project-ids <projectIds>", "JSON array or comma-separated project ids")
+        .option("--user-ids <userIds>", "JSON array or comma-separated user ids")
+        .option("--emails <emails>", "JSON array or comma-separated email addresses")
+        .option("--steps <steps>", 'step operations as JSON array with op field: [{"op":"add","title":"..."},{"op":"update","id":"s001","content":"..."},{"op":"remove","id":"s002"}]')
+        .option("--blocks <blocks>", 'block operations as JSON array with op field: [{"op":"add","title":"..."},{"op":"update","id":"b001","content":"..."},{"op":"remove","id":"b002"}]')
+        .action(async (options, command) => {
+        const payload = await resolveInput(options, {
+            title: options.title,
+            content: options.content,
+            category: options.category,
+            visibility: options.visibility,
+            targets: buildSharingTargets(command, options),
             steps: parseJsonArrayOption(options.steps, "--steps"),
             blocks: parseJsonArrayOption(options.blocks, "--blocks")
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
-        printJson(await upsertPack(context, payload));
+        const context = await resolveContext();
+        printJson(await updatePack(context, options.id, payload));
     });
     pack.commands.at(-1)?.addHelpText("after", `
+Notes:
+  Omitted fields keep their existing value.
+  steps/blocks use operation objects with an "op" field (add | update | remove).
+  Omitting steps/blocks keeps them unchanged. Passing an empty array [] is a no-op.
+  To remove all items, send a remove op for each existing item ID.
+
 Examples:
-  epismo pack upsert --type workflow --title "My workflow" --input @workflow.json
-  epismo pack upsert --type workflow --title "My workflow" --steps '[{"title":"Step 1","content":"..."}]'
-  epismo pack upsert --type context --title "My context" --input @context.json
-  epismo pack upsert --type context --title "My context" --blocks '[{"title":"Block 1","content":"..."}]'`);
+  epismo pack update --id <id> --category ""
+  epismo pack update --id <id> --visibility public --category productivity
+  epismo pack update --id <id> --blocks '[{"op":"add","title":"New Block","content":"..."}]'
+  epismo pack update --id <id> --blocks '[{"op":"update","id":"b001","content":"updated..."}]'
+  epismo pack update --id <id> --blocks '[{"op":"remove","id":"b002"}]'
+  epismo pack update --id <id> --input @changes.json`);
     pack.command("get")
         .description("fetch one agent pack")
         .option("--input <input>", "JSON object, @file, or - for stdin")
@@ -433,14 +602,13 @@ Examples:
         .option("--full", "include nested item content")
         .option("--block-id <blockId>", "context block id to extract (type=context only)")
         .option("--step-id <stepId>", "workflow step id to extract (type=workflow only)")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             id: options.id,
             alias: options.alias,
             full: options.full ? true : undefined
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await getPack(context, payload, {
             blockId: options.blockId,
             stepId: options.stepId
@@ -460,18 +628,18 @@ Examples:
         .addOption(new Option("--type <type>", "workflow | context").choices(PACK_TYPES))
         .option("--query <query>", "free-text query")
         .option("--page <page>", "1-based page number")
-        .option("--projects <projects>", "JSON array or comma-separated project ids")
+        .option("--project-ids <projectIds>", "JSON array or comma-separated project ids")
+        .option("--self <self>", "whether to include packs that target the current user directly")
         .option("--filter <filter>", 'filter as JSON object; each value is an array of accepted values e.g. \'{"visibility":["public"]}\' (use --input @file.json for complex filters)')
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options, command) => {
         const payload = await resolveInput(options, {
             type: getExplicitOptionOverride(command, "type", options.type),
             query: getExplicitOptionOverride(command, "query", options.query),
             page: getExplicitOptionOverride(command, "page", parseOptionalPositiveInteger(options.page, "--page")),
-            projects: getExplicitOptionOverride(command, "projects", parseStringArrayInput(options.projects, "--projects")),
+            targets: buildSearchTargets(command, options),
             filter: getExplicitOptionOverride(command, "filter", parseJsonObjectOption(options.filter, "--filter"))
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await searchPacks(context, payload));
     });
     pack.commands.at(-1)?.addHelpText("after", `
@@ -485,7 +653,6 @@ Examples:
         .option("--id <id>", "pack id")
         .option("--liked", "mark as liked")
         .option("--no-liked", "remove like")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             id: options.id,
@@ -498,7 +665,7 @@ Examples:
                 hint: "Use --liked to add a like, or --no-liked to remove one."
             });
         }
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await likePack(context, payload));
     });
     pack.commands.at(-1)?.addHelpText("after", `
@@ -509,12 +676,11 @@ Examples:
         .description("delete one agent pack and any of your aliases that point to it")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--id <id>", "pack id")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             id: options.id
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await deletePack(context, payload));
     });
     pack.commands.at(-1)?.addHelpText("after", `
@@ -524,26 +690,23 @@ Examples:
     agent
         .command("list")
         .description("list AI teammates and whether they appear in the assignee roster")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
-        .action(async (options) => {
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        .action(async () => {
+        const context = await resolveContext();
         printJson(await listAgents(context));
     });
     agent.commands.at(-1)?.addHelpText("after", `
 Examples:
-  epismo agent list
-  epismo agent list --workspace-id <workspace-id>`);
+  epismo agent list`);
     agent
         .command("add")
         .description("add AI teammates to the assignee roster")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--agent-ids <agentIds>", "JSON array or comma-separated agent ids")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             agentIds: parseStringArrayInput(options.agentIds, "--agent-ids")
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await addAgents(context, payload));
     });
     agent.commands.at(-1)?.addHelpText("after", `
@@ -555,12 +718,11 @@ Examples:
         .description("remove AI teammates from the assignee roster")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--agent-ids <agentIds>", "JSON array or comma-separated agent ids")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             agentIds: parseStringArrayInput(options.agentIds, "--agent-ids")
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await removeAgents(context, payload));
     });
     agent.commands.at(-1)?.addHelpText("after", `
@@ -571,26 +733,23 @@ Examples:
     credit
         .command("balance")
         .description("show current credit balance")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
-        .action(async (options) => {
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        .action(async () => {
+        const context = await resolveContext();
         printJson(await creditBalance(context));
     });
     credit.commands.at(-1)?.addHelpText("after", `
 Examples:
-  epismo credit balance
-  epismo credit balance --workspace-id <workspace-id>`);
+  epismo credit balance`);
     credit
         .command("checkout")
         .description("start a credit purchase and get a checkout URL")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--allocations <allocations>", 'JSON array of { userId, quantity } e.g. \'[{"userId":"u_1","quantity":10}]\'')
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             allocations: parseJsonArrayOption(options.allocations, "--allocations")
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await creditCheckout(context, payload));
     });
     credit.commands.at(-1)?.addHelpText("after", `
@@ -604,14 +763,13 @@ Example:
         .addOption(new Option("--type <type>", "workflow | context").choices(PACK_TYPES))
         .option("--id <id>", "target pack id")
         .option("--alias <alias>", "alias name")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             type: options.type,
             id: options.id,
             alias: options.alias
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await upsertAlias(context, payload));
     });
     alias.commands.at(-1)?.addHelpText("after", `
@@ -623,12 +781,11 @@ Examples:
         .description("resolve one alias")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--alias <alias>", "alias reference (`alias` or `@handle/alias`)")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             alias: options.alias
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await getAlias(context, payload));
     });
     alias.commands.at(-1)?.addHelpText("after", `
@@ -639,9 +796,8 @@ Examples:
         .command("list")
         .description("list your aliases")
         .addOption(new Option("--type <type>", "workflow | context").choices(PACK_TYPES))
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await listAliases(context, { type: options.type }));
     });
     alias.commands.at(-1)?.addHelpText("after", `
@@ -653,17 +809,36 @@ Example:
         .description("delete one alias")
         .option("--input <input>", "JSON object, @file, or - for stdin")
         .option("--alias <alias>", "alias name")
-        .option(WORKSPACE_ID_OPT, WORKSPACE_ID_DESC)
         .action(async (options) => {
         const payload = await resolveInput(options, {
             alias: options.alias
         });
-        const context = await resolveContext({ workspaceId: options.workspaceId });
+        const context = await resolveContext();
         printJson(await deleteAlias(context, payload));
     });
     alias.commands.at(-1)?.addHelpText("after", `
 Example:
   epismo alias delete --alias myproject`);
+    const token = program.command("token").description("manage CLI tokens for CI/CD");
+    token
+        .command("create")
+        .description("issue a workspace-scoped CLI token for use in CI/CD pipelines")
+        .option("--workspace-id <workspaceId>", "workspace to scope the token to (omit for personal space)")
+        .action(async (options) => {
+        const context = await resolveContext();
+        printJson(await createToken(context, options.workspaceId ?? context.workspaceId));
+    });
+    token.commands.at(-1)?.addHelpText("after", `
+Notes:
+  The issued token has the same scopes as a normal CLI token (read, write, offline_access)
+  but carries the workspace ID embedded. Use it via the EPISMO_TOKEN environment variable
+  in CI/CD so no --workspace-id flag is needed at runtime.
+  If --workspace-id is omitted, the saved default workspace is used (epismo workspace use),
+  falling back to personal space when no default is set.
+
+Examples:
+  epismo token create --workspace-id <workspace-id>
+  epismo token create   # uses saved default workspace, or personal space if none`);
     return program;
 }
 //# sourceMappingURL=program.js.map