tines 0.0.289 → 0.0.291

package/README.md

@@ -40,6 +40,9 @@ tines issues create <project> --title "…" -d @description.md
 tines issues create <project> --title "Linked" --blocked-by Other/12 --blocks Other/14 --duplicate-of Other/9
 tines issues show <project>/<number>
 tines issues move <project>/<number> <action>        # a workflow transition
+tines issues hold <project>/<number>                 # stop new admission, keep permission
+tines issues release <project>/<number>              # resume eligibility if permission remains on
+tines issues cancel-run <project>/<number> <run-id>   # request bounded cancellation
 tines issues transfer <project>/<number> --project <dest>   # move to another project (keeps ID, record and old refs)
 tines issues transfer <ref> --project <dest> --dry-run      # review only: no number allocated, nothing written
 tines issues transfer <ref> --project <dest> --inspect 0    # print any reviewed guidance item, including retained, in full
@@ -77,6 +80,20 @@ or narrow the list's filters.
 When a recurrence is also supplied, the relationships apply only to the first issue; later
 scheduled instances start without copied relationships.
 
+For a shared project's recurring schedule, `schedules list` and `schedules show` report
+your saved future-instance permission and its epoch. They are read receipts: the CLI and
+API keys cannot turn personal permission on or off. Open the schedule in the browser to
+choose. The first issue's permission is independent of the future schedule choice; future
+permission starts off.
+
+On a shared issue, `issues show` displays the safe member view. An accepted
+member can use `issues comment`, repair their own human or run comment with
+`comment-edit`/`comment-delete`, and use `issues move` from an awaiting-human
+state. `issues move` submits the current exact decision witness once and does
+not retry after a conflict. Keys cannot turn issue or future-schedule personal
+permission on or off; open the issue or shared project in the browser. A saved
+member choice does not enable member execution in this release.
+
 ## Workflow package files
 
 Export a workflow and its inheritance/context closure as canonical JSON, validate an edited

package/dist/index.js

@@ -3747,12 +3747,15 @@ function action(type) {
 function otherRef(p) {
   return {
     kind: "other-ref",
+    ...typeof p.other_project_id === "string" ? { project_id: p.other_project_id } : {},
     project_name: str(p.other_project_name),
     number: Number(p.other_number)
   };
 }
 function linkSegments(ev, p) {
   const lead = ev.type === "issue.link_added" ? "marked" : "unmarked";
+  if (!Number.isFinite(Number(p.other_number)))
+    return [text("changed an issue link on"), selfRef()];
   const duplicate = p.kind === "duplicate_of";
   if (duplicate && p.role === "target") {
     return [text(lead), otherRef(p), text("as a duplicate of"), selfRef()];
@@ -3795,6 +3798,14 @@ var DESCRIBERS = {
     });
     return segs;
   },
+  "issue.personal_permission_changed": (_ev, p) => [
+    text(`${p.value === "on" ? "allowed" : "stopped"} their agents on`),
+    selfRef()
+  ],
+  "issue.agent_hold_changed": (_ev, p) => [
+    text(p.held ? "held agents on" : "released the agent hold on"),
+    selfRef()
+  ],
   "issue.commented": () => [text("commented on"), selfRef()],
   "issue.comment_edited": () => [text("edited a comment on"), selfRef()],
   "issue.comment_deleted": () => [text("deleted a comment on"), selfRef()],
@@ -3816,6 +3827,10 @@ var DESCRIBERS = {
   "project.deleted": (ev, p) => projectSegments(ev, p),
   "project.archived": (ev, p) => projectSegments(ev, p),
   "project.unarchived": (ev, p) => projectSegments(ev, p),
+  "project.sharing_started": () => [text("started sharing this project")],
+  "project.invitation_created": () => [text("created a project invitation")],
+  "project.member_joined": () => [text("joined this project")],
+  "project.member_removed": () => [text("changed membership in this project")],
   "workflow.created": (ev, p) => [text(`${action(ev.type)} workflow`), name(p.name)],
   "workflow.updated": (ev, p) => [text(`${action(ev.type)} workflow`), name(p.name)],
   "workflow.deleted": (ev, p) => [text(`${action(ev.type)} workflow`), name(p.name)],
@@ -3826,6 +3841,11 @@ var DESCRIBERS = {
   ],
   "api_key.revoked": (_ev, p) => [text("revoked API key"), name(p.name)],
   "scheduled_task.created": (ev, p) => [text(`${action(ev.type)} schedule`), name(p.name)],
+  "scheduled_task.personal_permission_changed": (_ev, p) => [
+    text(
+      `${p.value === "on" ? "allowed" : "stopped"} their agents on future issues from a schedule`
+    )
+  ],
   "scheduled_task.updated": (ev, p) => [text(`${action(ev.type)} schedule`), name(p.name)],
   "scheduled_task.deleted": (ev, p) => [text(`${action(ev.type)} schedule`), name(p.name)],
   "scheduled_task.skipped": (_ev, p) => {
@@ -4156,12 +4176,34 @@ function createApiClient(options) {
     createProject: (body) => request("POST", "/api/v1/projects", body),
     listStarters: () => get("/api/v1/projects/starters"),
     getProject: (id2) => get(`/api/v1/projects/${id2}`),
+    getProjectPeople: (id2) => get(`/api/v1/projects/${id2}/people`),
+    listProjectInvitations: (id2) => get(`/api/v1/projects/${id2}/invitations`),
+    inviteProjectPerson: (id2, body) => request("POST", `/api/v1/projects/${id2}/invitations`, body),
+    resendProjectInvitation: (id2, inviteId, expectedGeneration) => request(
+      "POST",
+      `/api/v1/projects/${id2}/invitations/${inviteId}/resend`,
+      { expected_generation: expectedGeneration }
+    ),
+    cancelProjectInvitation: (id2, inviteId, expectedGeneration) => request("DELETE", `/api/v1/projects/${id2}/invitations/${inviteId}`, {
+      expected_generation: expectedGeneration
+    }),
+    removeProjectMember: (id2, userId, expectedRevision) => request(
+      "DELETE",
+      `/api/v1/projects/${id2}/members/${userId}`,
+      { expected_revision: expectedRevision }
+    ),
+    leaveProject: (id2, expectedRevision) => request(
+      "POST",
+      `/api/v1/projects/${id2}/leave`,
+      { expected_revision: expectedRevision }
+    ),
     updateProject: (id2, body) => request("PATCH", `/api/v1/projects/${id2}`, body),
     deleteProject: (id2, body) => request("DELETE", `/api/v1/projects/${id2}`, body),
     archiveProject: (id2) => request("POST", `/api/v1/projects/${id2}/archive`),
     unarchiveProject: (id2) => request("POST", `/api/v1/projects/${id2}/unarchive`),
     // Workflows
-    listWorkflows: (page = {}) => get(`/api/v1/workflows${query(page)}`),
+    /** `project` narrows to the workflows an issue in that project can use. */
+    listWorkflows: (params = {}) => get(`/api/v1/workflows${query(params)}`),
     createWorkflow: (body) => request("POST", "/api/v1/workflows", body),
     getWorkflow: (id2) => get(`/api/v1/workflows/${id2}`),
     updateWorkflow: (id2, body) => request("PATCH", `/api/v1/workflows/${id2}`, body),
@@ -4197,6 +4239,10 @@ function createApiClient(options) {
     },
     getIssue: (id2) => get(`/api/v1/issues/${id2}`),
     getIssueByNumber: (projectId, number) => get(`/api/v1/projects/${projectId}/issues/${number}`),
+    getIssueConsent: (id2) => get(`/api/v1/issues/${id2}/my-consent`),
+    setIssueConsent: (id2, body) => request("PUT", `/api/v1/issues/${id2}/my-consent`, body),
+    setIssueHold: (id2, body) => request("PUT", `/api/v1/issues/${id2}/agent-hold`, body),
+    cancelIssueRun: (issueId, runId) => request("POST", `/api/v1/issues/${issueId}/runs/${runId}/cancel`, {}),
     updateIssue: (id2, body) => request("PATCH", `/api/v1/issues/${id2}`, body),
     transitionIssue: (id2, body) => request("POST", `/api/v1/issues/${id2}/transition`, body),
     /** Un-park: clears needs_attention, resets the attempt count. */
@@ -4215,6 +4261,8 @@ function createApiClient(options) {
     listSchedules: (filters = {}) => get(`/api/v1/schedules${query(filters)}`),
     listProjectSchedules: (projectId, page = {}) => get(`/api/v1/projects/${projectId}/schedules${query(page)}`),
     getSchedule: (id2) => get(`/api/v1/schedules/${id2}`),
+    getScheduleConsent: (id2) => get(`/api/v1/schedules/${id2}/my-consent`),
+    setScheduleConsent: (id2, body) => request("PUT", `/api/v1/schedules/${id2}/my-consent`, body),
     updateSchedule: (id2, body) => request("PATCH", `/api/v1/schedules/${id2}`, body),
     deleteSchedule: (id2) => request("DELETE", `/api/v1/schedules/${id2}`),
     /** Run now: creates an instance immediately (gate-respecting; 422 when blocked). */
@@ -4354,6 +4402,7 @@ function createApiClient(options) {
     // Supervisor settings
     getPreferences: () => get("/api/v1/preferences"),
     updatePreferences: (body) => request("PATCH", "/api/v1/preferences", body),
+    acknowledgePermissionNotice: (version) => request("PUT", "/api/v1/preferences/disclosure", { version }),
     getSupervisorSettings: () => get("/api/v1/supervisor/settings"),
     getSupervisorQueue: (q = {}) => get(`/api/v1/supervisor/queue${query(q)}`),
     getSupervisorStats: (q = {}) => get(`/api/v1/supervisor/stats${query(q)}`),
@@ -5810,6 +5859,12 @@ function supportedEfforts(capabilities, model) {
   return capabilities.models.find((entry) => entry.model === model)?.efforts ?? null;
 }
 
+// ../shared/src/personal-permission.ts
+function personalPermissionLabel(role, value) {
+  if (role === "owner" && value === "unset") return "on (owner default)";
+  return value;
+}
+
 // src/format.ts
 function timestamp(ms) {
   return new Date(ms).toISOString().replace("T", " ").slice(0, 19);
@@ -6361,13 +6416,18 @@ async function resolveProject(api, ref) {
   const byName = items.filter((p) => p.name === ref);
   if (byName.length === 1) return byName[0];
   if (byName.length > 1) {
-    die(`project name "${ref}" is ambiguous; use an id: ${byName.map((p) => p.id).join(", ")}`);
+    die(
+      `project name "${ref}" is ambiguous; use an id: ${byName.map((p) => `${p.id}${p.owner ? ` (${p.owner.name})` : ""}`).join(", ")}`
+    );
   }
   const have = items.map((p) => p.archived_at ? `${p.name} (archived)` : p.name).join(", ");
   die(`no project named "${ref}" (have: ${have || "none"})`);
 }
-async function resolveWorkflow(api, ref) {
-  return pickWorkflow((await api.listWorkflows()).items, ref);
+async function resolveWorkflow(api, ref, projectId) {
+  return pickWorkflow(
+    (await api.listWorkflows(projectId ? { project: projectId } : {})).items,
+    ref
+  );
 }
 function pickWorkflow(items, ref) {
   const found = items.find((w) => w.id === ref) ?? (items.filter((w) => w.name === ref).length === 1 ? items.find((w) => w.name === ref) : void 0);
@@ -7558,6 +7618,44 @@ function printIssueLinks(links) {
   }
 }
 function printIssueDetail(issue) {
+  const shared = issue;
+  if (shared.mode === "member") {
+    console.log(`${shared.project?.name}/${shared.number}  ${shared.title}`);
+    console.log(
+      `state: ${shared.state?.name} (${shared.state?.category})  workflow: ${shared.workflow?.name}`
+    );
+    console.log(`owner: ${shared.project?.owner.name}  id: ${shared.id}`);
+    if (shared.description) console.log(`
+${shared.description}`);
+    if (shared.artifacts?.length) {
+      console.log("\nartifacts:");
+      table(shared.artifacts.map((a) => [a.name, `v${a.current_version.version}`]));
+    }
+    if (shared.roster?.length) {
+      console.log("\npeople and permission:");
+      table(
+        shared.roster.map((person) => [
+          person.user.name,
+          person.role,
+          personalPermissionLabel(person.role, person.value)
+        ])
+      );
+    }
+    console.log(`your issue permission: ${shared.my_choice?.value ?? "unset"} (browser control)`);
+    console.log(`latest run: ${shared.latest_run?.status ?? "none"}`);
+    if (shared.comments?.length) {
+      console.log("\ncomments:");
+      for (const comment of shared.comments)
+        console.log(
+          `${comment.id} \xB7 ${comment.author.name}${comment.author.run ? ` via ${comment.author.run.name}` : ""}${comment.editor ? ` \xB7 edited by ${comment.editor.name}` : ""}
+${comment.body}`
+        );
+    }
+    console.log(
+      "\nMembers work on shared issues as the owner does, except adding or removing people. Personal permission is chosen in the browser; member execution is unavailable."
+    );
+    return;
+  }
   console.log(`${issue.project_name}/#${issue.number}  ${issue.title}`);
   const dup = issue.duplicate_of;
   console.log(
@@ -7577,6 +7675,10 @@ function printIssueDetail(issue) {
     console.log(`labels: ${issue.labels.map((l) => l.name).join(", ")}`);
   }
   console.log(`id: ${issue.id}`);
+  if (issue.schedule_origin)
+    console.log(
+      `created by schedule: ${issue.schedule_origin.schedule_name} [${issue.schedule_origin.schedule_id}]  permission epoch: ${issue.schedule_origin.permission_epoch}  (historical source; current issue permission is separate)`
+    );
   printIssueLinks(issue.links);
   if (issue.description) {
     console.log(`
@@ -7732,13 +7834,13 @@ function register3(program3) {
               `${i.project_name}/${i.number}`,
               i.title,
               i.effective_state.name,
-              ageLabel2(new Date(i.state_entered_at).toISOString()),
+              ageLabel2(new Date(i.state_entered_at ?? i.created_at).toISOString()),
               arrivedViaLabel(i.arrived_via),
               roundSummaryLabel(i.round_summary ?? null),
               [
-                i.open_blockers.length > 0 ? "blocked" : "",
+                (i.open_blockers?.length ?? 0) > 0 ? "blocked" : "",
                 i.duplicate_of ? "dup" : "",
-                ...i.labels.map((l) => `[${l.name}]`)
+                ...(i.labels ?? []).map((l) => `[${l.name}]`)
               ].filter(Boolean).join(" ")
             ])
           ]);
@@ -7753,11 +7855,11 @@ function register3(program3) {
             // (and the filters above) go by the effective state.
             i.effective_state.name,
             i.effective_state.category,
-            timestamp(i.last_activity_at),
+            timestamp(i.last_activity_at ?? i.updated_at),
             [
-              i.open_blockers.length > 0 ? "blocked" : "",
+              (i.open_blockers?.length ?? 0) > 0 ? "blocked" : "",
               i.duplicate_of ? "dup" : "",
-              ...i.labels.map((l) => `[${l.name}]`)
+              ...(i.labels ?? []).map((l) => `[${l.name}]`)
             ].filter(Boolean).join(" ")
           ])
         ]);
@@ -7788,7 +7890,7 @@ function register3(program3) {
       const description = opts.description !== void 0 ? readBodyValue(opts.description) : void 0;
       const api = client(opts);
       const project = await resolveProject(api, projectRef2);
-      const workflowId = opts.workflow ? (await resolveWorkflow(api, opts.workflow)).id : void 0;
+      const workflowId = opts.workflow ? (await resolveWorkflow(api, opts.workflow, project.id)).id : void 0;
       const recurrence2 = buildRecurrence(opts);
       if (!recurrence2 && (opts.ifClosed !== void 0 || opts.scheduleName !== void 0)) {
         die('--if-closed/--schedule-name need a recurrence: add --every \u2026 or --cron "<expr>"');
@@ -7850,7 +7952,7 @@ function register3(program3) {
       if (description !== void 0) body.description = description;
       if (opts.state !== void 0) body.state = opts.state;
       if (opts.workflow !== void 0)
-        body.workflow_id = (await resolveWorkflow(api, opts.workflow)).id;
+        body.workflow_id = (await resolveWorkflow(api, opts.workflow, issue.project_id)).id;
       if (Object.keys(body).length === 0) {
         die("nothing to update: pass --title, --description, --state, and/or --workflow");
       }
@@ -7868,14 +7970,87 @@ function register3(program3) {
     }
   );
   withCommon(
-    issues.command("move <ref> <action>").description('Take a transition on an issue by its action name (e.g. "approve")')
+    issues.command("move <ref> <action>").description("Take a current transition (members: no permission change)")
   ).action(async (ref, action2, opts) => {
     const api = client(opts);
     const issue = await resolveIssue(api, ref);
-    const moved = await api.transitionIssue(issue.id, { action: action2 });
+    let request = { action: action2 };
+    const member = issue;
+    if (member.mode === "member") {
+      const transition = member.workflow.transitions?.find(
+        (candidate) => candidate.name.toLowerCase() === action2.toLowerCase()
+      );
+      if (!transition || !member.my_choice || member.workflow_revision === void 0 || member.decision_revision === void 0)
+        throw new Error(`No current transition named "${action2}"; refresh the issue`);
+      request = {
+        transition_id: transition.id,
+        expected_state_id: issue.state.id,
+        expected_decision_revision: member.decision_revision,
+        expected_workflow_revision: member.workflow_revision,
+        expected_consent_revision: member.my_choice.revision,
+        expected_consent_epoch: member.my_choice.epoch
+      };
+    } else {
+      const project = issue.project_id ? await api.getProject(issue.project_id) : null;
+      if (project?.shared_at != null) {
+        const transition = issue.allowed_transitions.find(
+          (candidate) => candidate.name.toLowerCase() === action2.toLowerCase()
+        );
+        if (!transition)
+          throw new Error(`No current transition named "${action2}"; refresh the issue`);
+        const permission = await api.getIssueConsent(issue.id);
+        request = {
+          transition_id: transition.transition_id,
+          expected_state_id: permission.issue_state.id,
+          expected_decision_revision: permission.issue_state.decision_revision,
+          expected_workflow_revision: permission.issue_state.workflow_revision,
+          expected_consent_revision: permission.my_agents.revision,
+          expected_consent_epoch: permission.my_agents.epoch
+        };
+      }
+    }
+    const moved = await api.transitionIssue(issue.id, request);
     if (opts.json) return printJson(moved);
+    const movedMember = moved;
     console.log(
-      `${moved.project_name}/#${moved.number}: ${issue.state.name} \u2192 ${moved.state.name} ("${action2}")`
+      `${moved.project_name ?? movedMember.project?.name}/#${moved.number}: ${issue.state.name} \u2192 ${moved.state.name} ("${action2}")`
+    );
+    if (member.mode === "member")
+      console.log(
+        "Personal permission is managed in the browser. Member execution is unavailable in this release."
+      );
+    else if (moved.permission_receipt?.message) console.log(moved.permission_receipt.message);
+  });
+  for (const held of [true, false]) {
+    const verb = held ? "hold" : "release";
+    withCommon(
+      issues.command(`${verb} <ref>`).description(
+        held ? "Hold an issue so approved agents cannot be admitted" : "Release an issue hold; existing permission choices stay unchanged"
+      )
+    ).action(async (ref, opts) => {
+      const api = client(opts);
+      const issue = await resolveIssue(api, ref);
+      const consent = await api.getIssueConsent(issue.id);
+      const receipt = await api.setIssueHold(issue.id, {
+        held,
+        expected_revision: consent.agent_hold.revision
+      });
+      if (opts.json) return printJson(receipt);
+      console.log(`${issueRef(issue)}: ${receipt.message}`);
+      if (receipt.released_assigned > 0) {
+        console.log(`${receipt.released_assigned} assigned run(s) were released without a strike.`);
+      }
+    });
+  }
+  withCommon(
+    issues.command("cancel-run <ref> <run-id>").description("Request cancellation of a run that belongs to this issue")
+  ).action(async (ref, runId, opts) => {
+    const api = client(opts);
+    const issue = await resolveIssue(api, ref);
+    const run3 = await api.cancelIssueRun(issue.id, runId);
+    if (opts.json) return printJson(run3);
+    console.log(
+      `${issueRef(issue)}: ${run3.status === "canceled" ? "run canceled" : "cancellation requested; the run keeps its slot until it stops"}`
     );
   });
   withCommon(
@@ -7974,7 +8149,7 @@ function register3(program3) {
     const comment = await api.createComment(issue.id, { body });
     if (opts.json) return printJson(comment);
     console.log(
-      `commented on ${issue.project_name}/#${issue.number} as ${actorLabel(comment.actor)} (id ${comment.id})`
+      `commented on ${issue.project_name ?? issue.project?.name}/#${issue.number} as ${actorLabel(comment.actor)} (id ${comment.id})`
     );
   });
   withCommon(
@@ -7987,7 +8162,9 @@ function register3(program3) {
       const issue = await resolveIssue(api, ref);
       const comment = await api.updateComment(issue.id, commentId, { body });
       if (opts.json) return printJson(comment);
-      console.log(`edited comment ${comment.id} on ${issue.project_name}/#${issue.number}`);
+      console.log(
+        `edited comment ${comment.id} on ${issue.project_name ?? issue.project?.name}/#${issue.number}`
+      );
     }
   );
   withCommon(
@@ -7997,7 +8174,9 @@ function register3(program3) {
     const issue = await resolveIssue(api, ref);
     await api.deleteComment(issue.id, commentId);
     if (opts.json) return printJson({ id: commentId, deleted: true });
-    console.log(`deleted comment ${commentId} from ${issue.project_name}/#${issue.number}`);
+    console.log(
+      `deleted comment ${commentId} from ${issue.project_name ?? issue.project?.name}/#${issue.number}`
+    );
   });
   withCommon(
     issues.command("label <ref> <name...>").description("Add labels to an issue (a label that does not exist yet is created)")
@@ -8857,6 +9036,89 @@ function registerEvents(program3) {
 // src/commands/projects.ts
 function register7(program3) {
   const projects = program3.command("projects").description("Manage projects");
+  withCommon(
+    projects.command("people <project>").description("List the owner and active members")
+  ).action(async (ref, opts) => {
+    const api = client(opts), project = await resolveProject(api, ref), people = await api.getProjectPeople(project.id);
+    if (opts.json) return printJson(people);
+    console.log(`${people.owner.name} [${people.owner.id}] \u2014 owner`);
+    for (const person of people.members)
+      console.log(`${person.name} [${person.id}] \u2014 member (revision ${person.revision})`);
+  });
+  withCommon(
+    projects.command("invite <project> <email>").description("Invite someone to the whole project").option("--issue <ref>", "issue to open after acceptance").option(
+      "--confirm-sharing",
+      "acknowledge that first sharing gives members the whole project and restarts assigned work"
+    )
+  ).action(
+    async (ref, email, opts) => {
+      const api = client(opts), project = await resolveProject(api, ref);
+      if (project.shared_at == null && !opts.confirmSharing)
+        die(
+          "First sharing gives access to the whole project. Your agents keep working on its issues and schedules unless you turn them off in the browser; members need their own permission. Assigned work is restarted and admitted work may finish. Rerun with --confirm-sharing to send the invite."
+        );
+      const issue = opts.issue ? await resolveIssue(api, opts.issue) : null;
+      if (issue && issue.project_id !== project.id)
+        die("--issue must name an issue in the invited project");
+      const result = await api.inviteProjectPerson(project.id, {
+        email,
+        ...issue ? { landing_issue_id: issue.id } : {},
+        confirm_sharing: opts.confirmSharing,
+        expected_sharing_revision: project.sharing_revision ?? 0
+      });
+      if (opts.json) return printJson(result);
+      console.log(
+        `${result.delivery_status === "sent" ? "Invited" : "Invitation saved; delivery failed for"} ${result.email} [${result.id}]`
+      );
+    }
+  );
+  withCommon(
+    projects.command("invite-resend <project> <invite-id>").description("Rotate and resend an invitation")
+  ).action(async (ref, inviteId, opts) => {
+    const api = client(opts), project = await resolveProject(api, ref);
+    const invite = (await api.listProjectInvitations(project.id)).items.find(
+      (item) => item.id === inviteId
+    );
+    if (!invite) die("No such invitation in this project");
+    const result = await api.resendProjectInvitation(project.id, inviteId, invite.generation);
+    if (opts.json) return printJson(result);
+    console.log(`Invitation ${inviteId} rotated; delivery ${result.delivery_status}`);
+  });
+  withCommon(
+    projects.command("invite-cancel <project> <invite-id>").description("Cancel an invitation")
+  ).action(async (ref, inviteId, opts) => {
+    const api = client(opts), project = await resolveProject(api, ref);
+    const invite = (await api.listProjectInvitations(project.id)).items.find(
+      (item) => item.id === inviteId
+    );
+    if (!invite) die("No such invitation in this project");
+    await api.cancelProjectInvitation(project.id, inviteId, invite.generation);
+    if (opts.json) return printJson({ canceled: true, id: inviteId });
+    console.log(`Canceled invitation ${inviteId}`);
+  });
+  withCommon(
+    projects.command("remove-member <project> <user-id>").description("Remove a project member")
+  ).action(async (ref, userId, opts) => {
+    const api = client(opts), project = await resolveProject(api, ref);
+    const member = (await api.getProjectPeople(project.id)).members.find(
+      (person) => person.id === userId
+    );
+    if (!member) die("No active member has that user ID");
+    const result = await api.removeProjectMember(project.id, userId, member.revision);
+    if (opts.json) return printJson(result);
+    console.log(`Removed ${member.name} from ${project.name}`);
+  });
+  withCommon(projects.command("leave <project>").description("Leave a shared project")).action(
+    async (ref, opts) => {
+      const api = client(opts), project = await resolveProject(api, ref);
+      const people = await api.getProjectPeople(project.id);
+      const revision = people.members.find((person) => person.id === people.viewer_id)?.revision;
+      if (!revision) die("No active membership to leave");
+      const result = await api.leaveProject(project.id, revision);
+      if (opts.json) return printJson(result);
+      console.log(`Left ${project.name}`);
+    }
+  );
   withCommon(
     projects.command("starters").description("List built-in project starters and their inputs")
   ).action(async (opts) => {
@@ -9004,9 +9266,11 @@ function register7(program3) {
       const project = await resolveProject(api, ref);
       if (opts.json) return printJson(project);
       console.log(`${project.name}  [${project.id}]`);
+      if (project.viewer_role === "member")
+        console.log(`shared by ${project.owner?.name ?? "project owner"} \u2014 read only`);
       if (project.description) console.log(project.description);
-      const defaultWorkflow = project.default_workflow_id ? (await api.getWorkflow(project.default_workflow_id)).name : "(standard)";
-      console.log(`
+      const defaultWorkflow = project.viewer_role === "member" ? null : project.default_workflow_id ? (await api.getWorkflow(project.default_workflow_id)).name : "(standard)";
+      if (defaultWorkflow) console.log(`
 default workflow: ${defaultWorkflow}`);
       console.log(
         `issues: ${project.issue_count}  created: ${timestamp(project.created_at)}  updated: ${timestamp(project.updated_at)}`
@@ -9025,7 +9289,7 @@ default workflow: ${defaultWorkflow}`);
       if (opts.description !== void 0) body.description = opts.description;
       if (opts.defaultWorkflow === false) body.default_workflow_id = null;
       else if (opts.defaultWorkflow !== void 0) {
-        body.default_workflow_id = (await resolveWorkflow(api, opts.defaultWorkflow)).id;
+        body.default_workflow_id = (await resolveWorkflow(api, opts.defaultWorkflow, project.id)).id;
       }
       if (Object.keys(body).length === 0) {
         die("nothing to update: pass --name, --description, or --[no-]default-workflow");
@@ -10361,6 +10625,14 @@ var RunTable = class {
     this.runs.delete(run3.runId);
     this.effects.persist();
     this.effects.release(run3, { keep: this.keep(outcome, run3), outcome });
+    if (run3.cancellationToken) {
+      const acknowledgement = this.effects.acknowledgeCancellation?.(run3);
+      if (acknowledgement) {
+        void acknowledgement.catch(
+          (error) => this.effects.log(`cancellation acknowledgement for ${run3.runId} failed: ${String(error)}`)
+        );
+      }
+    }
   }
   /**
    * Ends a run: flush logs, finish-report, clean up. On a run someone
@@ -10410,6 +10682,10 @@ var RunTable = class {
     run3.settled = true;
     return run3;
   }
+  noteCancellationRequest(runId, token) {
+    const run3 = this.runs.get(runId);
+    if (run3) run3.cancellationToken = token;
+  }
 };
 var LogBatcher = class {
   constructor(send, opts = {}) {
@@ -11024,6 +11300,7 @@ async function runDaemon(opts) {
   const ensureCli = () => opts.cliRefresh ? refresher.ensure().then(noteCli) : Promise.resolve(AMBIENT_CLI);
   const cliLabel = (cli) => cli.source === "ambient" ? `ambient PATH (${opts.cliRefresh ? "refresh failed" : "refresh disabled"})` : `tines ${cli.version ?? "unknown"} (daemon-managed${cli.source === "stale" ? ", last-good copy" : ""})`;
   log(`agent CLI: ${cliLabel(await ensureCli())}`);
+  const pendingCancellationAcks = /* @__PURE__ */ new Map();
   const table2 = new RunTable(
     {
       finish: async (run3, status, error, judgment) => {
@@ -11101,6 +11378,9 @@ async function runDaemon(opts) {
         void uploadRawLog(run3);
         sweepKeptWorkspaces();
       },
+      acknowledgeCancellation: async (run3) => {
+        if (run3.cancellationToken) pendingCancellationAcks.set(run3.runId, run3.cancellationToken);
+      },
       noteKept: (run3) => run3.batcher.append(`workspace kept at ${run3.workspace}
 `),
       persist: () => {
@@ -11502,6 +11782,12 @@ async function runDaemon(opts) {
       const res = await client2.pollRunner(creds.runner_id, {
         instance_id: instanceId,
         owned_runs: table2.ids(),
+        ...pendingCancellationAcks.size > 0 ? {
+          cancellation_acks: [...pendingCancellationAcks].slice(0, 100).map(([run_id, token]) => ({
+            run_id,
+            token
+          }))
+        } : {},
         // Kept for older servers. Opted-in daemons advertise only the last
         // accepted scheduling cap, never the higher machine ceiling.
         max_concurrent: effectiveConcurrency,
@@ -11521,6 +11807,14 @@ async function runDaemon(opts) {
         ...pendingUpdate ? { draining: true } : {}
       });
       failures = 0;
+      for (const ack of res.cancellation_acks ?? []) {
+        if (pendingCancellationAcks.get(ack.run_id) === ack.token) {
+          pendingCancellationAcks.delete(ack.run_id);
+        }
+      }
+      for (const request of res.cancel_requests ?? []) {
+        table2.noteCancellationRequest(request.run_id, request.token);
+      }
       for (const runId of res.cancels) killWithoutFinish(runId);
       let declinesChanged = false;
       for (const runId of res.released_assignments ?? []) {
@@ -12728,6 +13022,24 @@ async function resolveSchedule(api, ref) {
   return found;
 }
 function printScheduleDetail(s) {
+  const shared = s;
+  if (shared.project) {
+    console.log(`${shared.project.name}/${shared.name}  [${shared.id}]`);
+    console.log(`owner: ${shared.project.owner.name}  workflow: ${shared.workflow?.name}`);
+    console.log(`cron: ${shared.recurrence?.cron}  timezone: ${shared.recurrence?.timezone}`);
+    console.log(
+      `status: ${shared.recurrence?.enabled ? "enabled" : "paused"}  start state: ${shared.workflow?.start_state_name}`
+    );
+    console.log(`
+title template: ${shared.title_template}`);
+    if (shared.description_template)
+      console.log(`description template:
+${shared.description_template}`);
+    console.log(
+      "\nMembers edit, pause, run and delete shared schedules with `tines schedules` as the owner does."
+    );
+    return;
+  }
   console.log(`${scheduleRef(s)}  [${s.id}]${s.enabled ? "" : "  (paused)"}`);
   console.log(`${recurrenceLabel(s)} (cron "${s.cron}")`);
   console.log(
@@ -12736,6 +13048,10 @@ function printScheduleDetail(s) {
   console.log(
     `next run: ${s.enabled ? timestamp(s.next_run_at) : "(paused)"}  last run: ${s.last_run_at ? timestamp(s.last_run_at) : "never"}  runs: ${s.run_count}  open instances: ${s.open_instances}`
   );
+  if (s.my_future_permission)
+    console.log(
+      `my agents on future issues: ${personalPermissionLabel("owner", s.my_future_permission.value)}  permission epoch: ${s.my_future_permission.epoch}  (change in the browser)`
+    );
   console.log(`
 title template: ${s.title_template}`);
   if (s.description_template) {
@@ -12760,15 +13076,27 @@ function register10(program3) {
     printList(res, opts, (items) => {
       if (items.length === 0) return console.log("no schedules");
       table([
-        ["NAME", "RECURRENCE", "NEXT RUN", "LAST RUN", "OPEN", ""],
-        ...items.map((s) => [
-          scheduleRef(s),
-          recurrenceLabel(s),
-          s.enabled ? timestamp(s.next_run_at) : "\u2014",
-          s.last_run_at ? timestamp(s.last_run_at) : "never",
-          String(s.open_instances),
-          s.enabled ? "" : "(paused)"
-        ])
+        ["NAME", "RECURRENCE", "NEXT RUN", "LAST RUN", "OPEN", "MY FUTURE", ""],
+        ...items.map((s) => {
+          const shared = s;
+          return shared.project ? [
+            `${shared.project.name}/${shared.name}`,
+            shared.recurrence?.cron ?? "\u2014",
+            "\u2014",
+            "\u2014",
+            "\u2014",
+            shared.my_future_permission?.value ?? "unset",
+            shared.recurrence?.enabled ? "" : "(paused)"
+          ] : [
+            scheduleRef(s),
+            recurrenceLabel(s),
+            s.enabled ? timestamp(s.next_run_at) : "\u2014",
+            s.last_run_at ? timestamp(s.last_run_at) : "never",
+            String(s.open_instances),
+            s.my_future_permission ? personalPermissionLabel("owner", s.my_future_permission.value) : "\u2014",
+            s.enabled ? "" : "(paused)"
+          ];
+        })
       ]);
     });
   });
@@ -12821,7 +13149,7 @@ recent instances:`);
       if (opts.title !== void 0) body.title_template = opts.title;
       if (descriptionTemplate !== void 0) body.description_template = descriptionTemplate;
       if (opts.workflow !== void 0)
-        body.workflow_id = (await resolveWorkflow(api, opts.workflow)).id;
+        body.workflow_id = (await resolveWorkflow(api, opts.workflow, schedule2.project_id)).id;
       if (opts.state !== void 0) body.state = opts.state;
       const recurrence2 = buildRecurrence(opts);
       if (recurrence2?.preset) body.preset = recurrence2.preset;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tines",
-  "version": "0.0.289",
+  "version": "0.0.291",
   "description": "CLI for Tines, an orchestration layer for AI agents",
   "repository": {
     "type": "git",