crowdtime-cli 0.19.0__tar.gz → 0.20.0__tar.gz

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: crowdtime-cli
-Version: 0.19.0
+Version: 0.20.0
 Summary: AI-powered time tracking CLI — a modern, developer-friendly alternative to Harvest
 Project-URL: Homepage, https://crowdtime.lat
 Project-URL: Documentation, https://crowdtime.lat/docs

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "crowdtime-cli"
-version = "0.19.0"
+version = "0.20.0"
 description = "AI-powered time tracking CLI — a modern, developer-friendly alternative to Harvest"
 readme = "README.md"
 license = {text = "Proprietary"}

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/__init__.py

@@ -1,3 +1,3 @@
 """CrowdTime CLI - AI-powered time tracking from the command line."""
 
-__version__ = "0.19.0"
+__version__ = "0.20.0"

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/commands/pto_cmd.py

@@ -46,7 +46,11 @@ from ..models import (
 )
 from ..utils import format_date, format_duration, parse_date, parse_date_range
 
-app = typer.Typer(name="pto", help="Manage PTO (paid time off) requests.")
+app = typer.Typer(name="pto", help="Manage time off requests.")
+# Hidden from help: nothing may tell someone without paid time off that it
+# exists (CRO-84). Admins and people who have it know where to look.
+allowance_app = typer.Typer(name="allowance", help="Paid time off allowances (admin+).")
+app.add_typer(allowance_app, name="allowance", hidden=True)
 console = Console()
 
 
@@ -258,12 +262,6 @@ def add_cmd(
         help="Decimal hours per day. Omit for full-day from membership.",
     ),
     notes: Optional[str] = typer.Option(None, "--notes", "-n", help="Optional free-text notes."),
-    paid: Optional[bool] = typer.Option(
-        None, "--paid/--unpaid",
-        help="Whether these hours are paid. Omit to follow the organization's "
-             "policy for this kind. Account managers and above only — the API "
-             "rejects the request from anyone below, it is not ignored.",
-    ),
     output_json: bool = typer.Option(False, "--json", help="Output as JSON."),
 ) -> None:
     """On-behalf PTO entry, auto-approved. Project manager+, within their scope."""
@@ -289,18 +287,13 @@ def add_cmd(
         payload["hours_per_day"] = str(hpd)
     if notes is not None:
         payload["notes"] = notes
-    # Declared since the flag was added but never sent, so --unpaid silently
-    # booked paid leave. The backend defaults every kind to paid, so the
-    # omission was not neutral.
-    if paid is not None:
-        payload["is_paid"] = paid
 
     try:
         data = client.post("/time-off/", data=payload)
     except APIError as e:
         # Surface the rejection as a friendly error — the backend refuses
         # `user` values outside the caller's visible set, refuses it entirely
-        # below project manager, and refuses `is_paid` below account manager.
+        # below project manager.
         format_error(e.message)
         raise typer.Exit(1)
 
@@ -721,3 +714,119 @@ def summary_cmd(
 
     summary = TimeOffSummary(**data)
     console.print(format_timeoff_summary_panel(summary))
+
+
+# ── Paid time off (CRO-84) ──────────────────────────────────────────────
+# Whether someone is paid for leave follows the allowance an admin gave them;
+# nobody flags a request as paid. The API answers 404 to anyone who may not
+# know, so these commands print the same thing for "none" and "not allowed".
+
+
+def _print_balance(data: dict) -> None:
+    b = data.get("balance")
+    name = data.get("name") or data.get("email")
+    days = data.get("paid_time_off_days_per_year")
+    if not b:
+        console.print(f"[bold]{name}[/bold]: no paid time off — their leave is unpaid.")
+        return
+    console.print(
+        f"[bold]{name}[/bold]: {b['remaining_days']} of {b['allowance_days']} paid days left "
+        f"({b['year_start']} → {b['year_end']})"
+    )
+    console.print(
+        f"  used {b['used_days']} · requested {b['pending_days']} · unpaid {b['unpaid_days']}"
+        f"   [dim]{days} days/year from {data.get('paid_time_off_start_date')}[/dim]"
+    )
+
+
+@app.command("balance", hidden=True)
+def balance_cmd(
+    user: Optional[str] = typer.Option(None, "--user", "-u", help="Someone whose leave you approve (email or UUID). Default: you."),
+    output_json: bool = typer.Option(False, "--json", help="Output as JSON."),
+) -> None:
+    """Your paid time off balance, or that of someone whose leave you approve."""
+    client = CrowdTimeClient(require_auth=True, require_org=True)
+    try:
+        user_id = _resolve_user_to_uuid(client, user) if user else client.current_user_id()
+        data = client.get(f"/members/{user_id}/paid-time-off/")
+    except APIError as e:
+        if e.status_code == 404:
+            console.print("[dim]No balance to show.[/dim]")
+            return
+        format_error(e.message)
+        raise typer.Exit(1)
+    if output_json:
+        print_json(data)
+        return
+    _print_balance(data)
+
+
+@allowance_app.command("list")
+def allowance_list_cmd(
+    output_json: bool = typer.Option(False, "--json", help="Output as JSON."),
+) -> None:
+    """Every member's paid time off allowance and remaining days. Admin+."""
+    client = CrowdTimeClient(require_auth=True, require_org=True)
+    try:
+        rows = client.get("/members/paid-time-off/").get("results", [])
+    except APIError as e:
+        format_error("Only admins can list allowances." if e.status_code == 404 else e.message)
+        raise typer.Exit(1)
+    if output_json:
+        print_json(rows)
+        return
+    from rich.table import Table
+
+    table = Table(show_header=True, header_style="bold")
+    table.add_column("User ID", style="dim")
+    table.add_column("Name")
+    table.add_column("Days/year", justify="right")
+    table.add_column("Counting from")
+    table.add_column("Left this year", justify="right")
+    for r in rows:
+        b = r.get("balance")
+        table.add_row(
+            r["user_id"], r.get("name") or r.get("email"),
+            str(r["paid_time_off_days_per_year"]) if r.get("paid_time_off_days_per_year") else "—",
+            str(r.get("paid_time_off_start_date") or "—"),
+            str(b["remaining_days"]) if b else "—",
+        )
+    console.print(table)
+
+
+@allowance_app.command("set")
+def allowance_set_cmd(
+    user: str = typer.Argument(..., help="Member (email or UUID)."),
+    days: str = typer.Option(..., "--days", help="Paid days per allowance year; 0 for none."),
+    start: Optional[str] = typer.Option(
+        None, "--from",
+        help="When the allowance starts counting (YYYY-MM-DD): the day they joined, or the day "
+             "this arrangement started. Defaults to the day they joined.",
+    ),
+    output_json: bool = typer.Option(False, "--json", help="Output as JSON."),
+) -> None:
+    """Set someone's paid time off. Admin+, never your own.
+
+    Applies to leave approved from now on; leave already approved keeps what it was paid.
+    """
+    try:
+        value = Decimal(days)
+    except InvalidOperation:
+        format_error(f"--days must be a number, got '{days}'.")
+        raise typer.Exit(1)
+    payload: dict = {"paid_time_off_days_per_year": str(value)}
+    if start:
+        payload["paid_time_off_start_date"] = format_date(_parse_date_or_exit(start))
+
+    client = CrowdTimeClient(require_auth=True, require_org=True)
+    try:
+        user_id = _resolve_user_to_uuid(client, user)
+        data = client.patch(f"/members/{user_id}/paid-time-off/", data=payload)
+    except APIError as e:
+        format_error("Member not found." if e.status_code == 404 else e.message)
+        raise typer.Exit(1)
+    if output_json:
+        print_json(data)
+        return
+    format_success("Paid time off updated.")
+    _print_balance(data)

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/commands/team_cmd.py

@@ -1,4 +1,4 @@
-"""Team commands: manage manager → direct-report assignments.
+"""Team commands: member profiles and manager → direct-report assignments.
 
 Mirrors Harvest's manager model. Admins assign members as direct reports
 to a manager; the manager can see those members' hours across any project
@@ -11,6 +11,7 @@ concurrent edits from clobbering each other.
 
 from __future__ import annotations
 
+import re
 from typing import List, Optional
 
 import typer
@@ -18,9 +19,9 @@ from rich.console import Console
 from rich.table import Table
 
 from ..client import APIError, CrowdTimeClient
-from ..formatters import extract_results, format_error, format_success, print_json
+from ..formatters import extract_results, format_currency, format_error, format_success, print_json
 
-app = typer.Typer(name="team", help="Manage direct-report assignments.")
+app = typer.Typer(name="team", help="Member profiles and direct-report assignments.")
 console = Console()
 
 
@@ -413,3 +414,175 @@ def reports(
         )
 
     console.print(table)
+
+
+_UUID_RE = re.compile(r"^[0-9a-fA-F-]{36}$")
+
+
+def _resolve_user_id(client: CrowdTimeClient, ref: str) -> str:
+    """User id for ``me``, a user UUID, or an email.
+
+    Emails go through the member list, which project managers and up can read
+    (each within their reach) — everyone else passes ``me`` or the user ID.
+    """
+    if ref.lower() == "me":
+        user_id = client.current_user_id()
+        if not user_id:
+            raise APIError("Could not determine the current user.", status_code=401)
+        return user_id
+    if _UUID_RE.match(ref):
+        return ref
+    try:
+        return _resolve_membership(client, ref)["user"]["id"]
+    except APIError as e:
+        if e.status_code == 403:
+            raise APIError(
+                "Looking members up by email needs project manager access. Use 'me' or the user ID.",
+                status_code=403,
+            )
+        raise
+
+
+def _hours(value) -> str:
+    return f"{float(value or 0):.2f}h"
+
+
+@app.command("show")
+def show(
+    member: str = typer.Argument(..., help="Member: 'me', user ID, or email (email lookup needs project_manager+)."),
+    date_from: Optional[str] = typer.Option(None, "--from", help="Start date YYYY-MM-DD (default: 30 days ago)."),
+    date_to: Optional[str] = typer.Option(None, "--to", help="End date YYYY-MM-DD (default: today)."),
+    output_json: bool = typer.Option(False, "--json", help="Output profile and overview as JSON."),
+) -> None:
+    """Show a member's profile and activity, as far as your role allows.
+
+    Account managers and up can open anyone; others can open themselves and
+    the people on projects they run. Sections you may not see are left out:
+    project managers see only time on their projects, utilization and
+    timesheets are for the person's managers, rates are manager+.
+
+    Examples:
+        ct team show me
+        ct team show alice@acme.com --from 2026-09-01 --to 2026-09-30
+    """
+    client = CrowdTimeClient(require_auth=True, require_org=True)
+    params = {k: v for k, v in (("from", date_from), ("to", date_to)) if v}
+    try:
+        user_id = _resolve_user_id(client, member)
+        profile = client.get(f"/members/{user_id}/")
+        overview = client.get(f"/members/{user_id}/overview/", params=params)
+    except APIError as e:
+        format_error(e.message)
+        raise typer.Exit(1)
+
+    if output_json:
+        print_json({"profile": profile, "overview": overview})
+        return
+
+    user = profile.get("user", {})
+    access = profile.get("access", {})
+    console.print(f"[bold]{user.get('full_name') or user.get('email')}[/bold]  [dim]{profile.get('role')}[/dim]")
+    console.print(f"[dim]User ID:[/dim] {user.get('id')}")
+    console.print(f"[dim]Email:[/dim] {user.get('email')}   [dim]Timezone:[/dim] {user.get('timezone')}")
+    line = f"[dim]Capacity:[/dim] {profile.get('weekly_capacity_hours')}h/week   [dim]Joined:[/dim] {str(profile.get('joined_at', ''))[:10]}"
+    if access.get("money") and profile.get("hourly_rate") is not None:
+        line += f"   [dim]Rate:[/dim] {format_currency(profile['hourly_rate'])}/hr"
+    console.print(line)
+    for label, key in (("Reports to", "managers"), ("Direct reports", "direct_reports")):
+        people = profile.get(key) or []
+        if people:
+            console.print(f"[dim]{label}:[/dim] " + ", ".join(p["name"] for p in people))
+
+    projects = profile.get("projects") or []
+    if projects:
+        table = Table(show_header=True, header_style="bold", title="Assigned projects")
+        table.add_column("Project ID", style="dim")
+        table.add_column("Project")
+        table.add_column("Client", style="dim")
+        table.add_column("Role on project")
+        for p in projects:
+            role = (p.get("effective_role") or p.get("project_role") or "-").replace("_", " ")
+            table.add_row(p["id"], p["name"], p.get("client_name") or "-", role)
+        console.print(table)
+
+    timer = overview.get("running_timer")
+    if timer:
+        task = f" / {timer['task_name']}" if timer.get("task_name") else ""
+        console.print(f"[green]Tracking now:[/green] {timer['project_name']}{task} (since {timer['started_at']})")
+
+    if access.get("level") == "profile":
+        console.print("\n[dim]Profile only — time details are for this person's managers and project managers.[/dim]")
+    else:
+        if access.get("level") == "projects":
+            console.print("\n[dim]Showing time on the projects you run.[/dim]")
+        summary = overview.get("summary") or {}
+        console.print(f"\n[bold]{overview.get('from')} → {overview.get('to')}[/bold]")
+        stats = [
+            f"Hours {_hours(summary.get('total_hours'))}",
+            f"Billable {summary.get('billable_percent', 0)}%",
+            f"Entries {summary.get('entry_count', 0)}",
+            f"Days logged {summary.get('days_logged', 0)}",
+        ]
+        if "utilization_percent" in summary and summary["utilization_percent"] is not None:
+            stats.append(f"Utilization {summary['utilization_percent']}% of {summary.get('capacity_hours')}h")
+        if access.get("money") and summary.get("billable_amount") is not None:
+            stats.append(f"Billable amount {format_currency(summary['billable_amount'])}")
+        console.print("   ".join(stats))
+
+        by_project = overview.get("by_project") or []
+        if by_project:
+            table = Table(show_header=True, header_style="bold", title="By project")
+            table.add_column("Project ID", style="dim")
+            table.add_column("Project")
+            table.add_column("Client", style="dim")
+            table.add_column("Hours", justify="right")
+            table.add_column("Billable", justify="right")
+            if access.get("money"):
+                table.add_column("Amount", justify="right")
+            for p in by_project:
+                row = [p["project_id"], p["project_name"], p.get("client_name") or "-",
+                       _hours(p["hours"]), _hours(p["billable_hours"])]
+                if access.get("money"):
+                    row.append(format_currency(p.get("billable_amount")))
+                table.add_row(*row)
+            console.print(table)
+
+        recent = overview.get("recent_entries") or []
+        if recent:
+            table = Table(show_header=True, header_style="bold", title="Recent entries")
+            table.add_column("Date")
+            table.add_column("Project")
+            table.add_column("Task", style="dim")
+            table.add_column("Hours", justify="right")
+            table.add_column("Notes", style="dim")
+            for e in recent:
+                table.add_row(e["date"], e["project_name"], e.get("task_name") or "-", _hours(e["hours"]), e.get("notes") or "")
+            console.print(table)
+
+    timesheets = overview.get("timesheets")
+    if timesheets:
+        table = Table(show_header=True, header_style="bold", title="Timesheets")
+        table.add_column("Period")
+        table.add_column("Status")
+        table.add_column("Hours", justify="right")
+        for p in timesheets["periods"]:
+            hours = _hours(p["total_hours"]) if p.get("total_hours") is not None else "-"
+            table.add_row(f"{p['period_start']} → {p['period_end']}", p["status"], hours)
+        console.print(table)
+        if timesheets.get("submitted_rate") is not None:
+            console.print(f"[dim]Submitted on {timesheets['submitted_rate']}% of recent weeks, {timesheets.get('missing_count', 0)} missing.[/dim]")
+
+    time_off = overview.get("time_off")
+    if time_off:
+        kinds = ", ".join(f"{k} {v}d" for k, v in time_off.get("days_by_kind", {}).items()) or "none"
+        console.print(f"\n[bold]Time off {time_off.get('year')}:[/bold] {time_off.get('total_days', 0)} approved days ({kinds})")
+        bal = time_off.get("balance")  # only present for those allowed to see paid leave
+        if bal:
+            console.print(
+                f"  paid time off: {bal['remaining_days']} of {bal['allowance_days']} days left "
+                f"({bal['year_start']} → {bal['year_end']}), {bal['unpaid_days']} unpaid"
+            )
+        elif "balance" in time_off:
+            console.print("  no paid time off: their leave is unpaid")
+        for row in time_off.get("upcoming", []):
+            console.print(f"  upcoming: {row['start_date']} → {row['end_date']}  {row['kind']}  [{row['status']}]")

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/formatters.py

@@ -710,6 +710,9 @@ def format_timeoff_detail(entry: TimeOffEntry) -> Panel:
 
     table.add_row("Kind", _pto_kind_label(entry))
     table.add_row("Status", _pto_status_label(entry))
+    pay = _pto_pay_label(entry)  # empty unless the API sent the split (CRO-84)
+    if pay:
+        table.add_row("Paid", pay)
     table.add_row("Notes", entry.notes or "[dim](none)[/dim]")
 
     table.add_row("", "")  # spacer
@@ -729,7 +732,7 @@ def format_timeoff_detail(entry: TimeOffEntry) -> Panel:
         table.add_row("Updated", format_iso_datetime(str(entry.updated_at)))
 
     border = _pto_status_style(entry.status)
-    title = f"PTO {entry.id}"
+    title = f"Time off {entry.id}"
     return Panel(table, title=title, border_style=border, padding=(0, 1))
 
 
@@ -740,7 +743,7 @@ def format_timeoff_table(
 ) -> Table:
     """Tabular view. Returns the Rich Table for caller-side printing."""
     table = Table(show_header=True, header_style="bold", title=None)
-    table.add_column("ID", style="dim", width=36)  # full UUID
+    table.add_column("ID", style="dim", min_width=36, no_wrap=True)  # full UUID, never truncated
     if show_user:
         table.add_column("User", width=20)
     table.add_column("Dates", width=25)
@@ -748,7 +751,15 @@ def format_timeoff_table(
     table.add_column("Hours", justify="right", width=8)
     table.add_column("Kind", width=10)
     table.add_column("Status", width=10)
-    table.add_column("Notes", width=40)
+    # Paid/unpaid split, only when the API sent it — it never does to someone
+    # who isn't allowed to know paid leave exists (CRO-84).
+    show_pay = any(
+        getattr(e, "paid_days", None) is not None or getattr(e, "pay_preview", None)
+        for e in entries
+    )
+    if show_pay:
+        table.add_column("Paid", width=16)
+    table.add_column("Notes", width=24 if show_pay else 40)
 
     for e in entries:
         start = e.start_date.isoformat() if e.start_date else "—"
@@ -763,12 +774,32 @@ def format_timeoff_table(
             format_duration(hours),
             _pto_kind_label(e),
             _pto_status_label(e),
-            truncate(e.notes or "", 40),
         ])
+        if show_pay:
+            row.append(_pto_pay_label(e))
+        row.append(truncate(e.notes or "", 24 if show_pay else 40))
         table.add_row(*row)
     return table
 
 
+def _pto_pay_label(entry: Any) -> str:
+    """'3 paid · 2 unpaid' for approved entries, 'if approved: …' for pending."""
+    def label(paid, unpaid) -> str:
+        parts = []
+        if paid and Decimal(str(paid)) > 0:
+            parts.append(f"{paid} paid")
+        if unpaid and Decimal(str(unpaid)) > 0:
+            parts.append(f"{unpaid} unpaid")
+        return " · ".join(parts) or "unpaid"
+
+    if getattr(entry, "paid_days", None) is not None:
+        return label(entry.paid_days, entry.unpaid_days)
+    preview = getattr(entry, "pay_preview", None)
+    if preview:
+        return "if approved: " + label(preview.get("paid_days"), preview.get("unpaid_days"))
+    return ""
+
+
 def format_timeoff_calendar(
     items: list[TimeOffCalendarItem],
     from_date: date,

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/models.py

@@ -282,11 +282,10 @@ class TimeOffEntryListItem(BaseModel):
     days_count: int = 0
     kind: str = "vacation"
     kind_display: str = ""
-    # Explicit override; None follows the org policy for the kind.
-    is_paid: bool | None = None
-    # Effective paid/unpaid after resolution. Unpaid hours explain the absence
-    # but do not count towards the hours the person is paid for.
-    resolved_is_paid: bool = True
+    # Paid/unpaid split (CRO-84) — only sent to those allowed to see it.
+    paid_days: Decimal | None = None
+    unpaid_days: Decimal | None = None
+    pay_preview: dict | None = None
     status: str = "pending"
     status_display: str = ""
     resolved_hours_per_day: Decimal | None = None
@@ -312,8 +311,9 @@ class TimeOffEntry(BaseModel):
     total_hours: Decimal | None = None
     kind: str = "vacation"
     kind_display: str = ""
-    is_paid: bool | None = None
-    resolved_is_paid: bool = True
+    paid_days: Decimal | None = None
+    unpaid_days: Decimal | None = None
+    pay_preview: dict | None = None
     status: str = "pending"
     status_display: str = ""
     notes: str = ""

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/skills/crowdtime/SKILL.md

@@ -432,7 +432,6 @@ Per-user time-off entries with a kind (vacation, sick, holiday, personal, other)
 ```bash
 ct pto request <dates>                # Submit your own PTO request (status=pending)
 ct pto add <user> <dates>             # Add PTO on behalf of user, auto-approved (project manager+, in scope)
-ct pto add <user> <dates> --unpaid    # ... marked unpaid (account manager+; 400 for anyone below, not ignored)
 ct pto list [--mine|--team]           # List PTO entries with optional filters
 ct pto show <id>                      # Detail view of a single PTO entry (NEVER truncate the ID)
 ct pto edit <id> [fields]             # Edit date range, kind, notes, hours/day (your own: pending only)
@@ -472,8 +471,11 @@ ct payroll payments --period 2026-03 --status paid
 
 **Workflow**: Configure compensation → Run liquidation → Approve → Mark paid.
 
-### Team (Direct Reports)
+### Team (Member Profiles and Direct Reports)
 ```bash
+ct team show me                                        # Your own profile, hours, utilization, timesheets, time off
+ct team show <user-id> --from 2026-09-01 --to 2026-09-30   # A member's page; sections follow your access (see below)
+ct team show alice@co.com                              # Email lookup needs project_manager+; others use the user ID
 ct team list                                           # All direct-report assignments (admin+) or your own
 ct team list --manager alice@company.com               # Filter to a specific manager
 ct team reports                                        # Show YOUR direct reports
@@ -488,6 +490,8 @@ ct team set alice@co.com                               # Clear all (zero --membe
 ct team set alice@co.com --all                         # Set her reports to the full org
 ```
 
+`ct team show` returns only what you may see: its `access.level` is `full` (yourself, your direct reports, or everyone for admins), `projects` (people on projects you run — their time on those projects only), or `profile` (profile only). Missing sections mean no access, not no data — don't report them as zero.
+
 All mutating commands (`assign`, `unassign`, `set`) hit the atomic `bulk-set` endpoint — changes apply in a single transaction and the response reports `added` / `removed` / `skipped` buckets.
 
 **Visibility rule** — what a `manager` or `project_manager` sees of other people:

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/skills/crowdtime/references/commands.md

@@ -1562,7 +1562,7 @@ Switches active organization. Saves to config `defaults.organization`.
 ct org members [--json]
 ```
 
-Shows: Name, Email, Role, Projects, Status. Requires manager+ role. Each member carries `projects[]` in JSON — `{id, name, code, status, project_role}` for every project they are on; `project_role` is `"project_manager"` when they run it (shown as "(PM)" in the table). Endpoint: `GET /members/`
+Shows: Name, Email, Role, Projects, Status. Requires project_manager+. Account managers and up see every member; a project manager sees the people they reach (themselves, their direct reports, the people on projects they run), and of each person only the projects they share with them — rates are null below manager. Each member carries `projects[]` in JSON — `{id, name, code, status, project_role}` for every project they are on; `project_role` is `"project_manager"` when they run it (shown as "(PM)" in the table). Endpoint: `GET /members/`
 
 ### ct org invite
 
@@ -2586,6 +2586,29 @@ Endpoint: `GET /insights/profitability/`
 
 Manage manager → direct-report assignments. Mirrors Harvest's manager model: assign people to a manager so the manager can see their hours across any project without being a PM on each project individually. Orthogonal to per-project PM assignments; visibility is the union of both.
 
+### ct team show
+
+```
+ct team show MEMBER [--from DATE] [--to DATE] [--json]
+```
+
+One member's profile and activity — the CLI view of the web member page. `MEMBER` is `me`, a user ID, or an email; email lookup reads the member list (project_manager+, within their reach), so members and viewers pass `me` or the user ID. Defaults to the last 30 days; the range can be at most 366 days.
+
+What comes back depends on who is asking, and sections the caller may not see are **left out** of the response, not nulled. `access.level` says which case applies:
+- `full` — themselves, their people manager (direct reports via `ct team`), admins/owners. Hours, billable %, weekly trend, breakdown by project/client/task, recent entries, running timer, plus utilization against capacity and the last 8 timesheet periods (`missing` = never submitted).
+- `projects` — someone who runs (explicit `project_role=project_manager`) a project the person works on. The same time sections, limited to the caller's projects; no utilization or timesheets.
+- `profile` — anyone else who can reach the person (account managers see the whole roster). Name, role, capacity, joined date, and projects (below manager: only projects shared with the caller).
+
+Every level includes `profile.projects[]`: the projects the person is assigned to, each with `effective_role` — what the assignment grants on that project (`project_manager`, `member`, `viewer`; an org-level project manager without an explicit project role is a plain `member` there). Below manager, only projects shared with the caller are listed.
+
+`time_off` (upcoming, recent, approved days by kind this year) is included for the person themselves and for org-level people managers who reach them. Rates and billable amounts are manager+ and never shown on your own profile; pay is not part of this view — use `ct payroll`. A person outside your reach answers `404`.
+
+**Options:**
+- `--from DATE` / `--to DATE` — period (YYYY-MM-DD)
+- `--json` — `{"profile": ..., "overview": ...}`
+
+Endpoints: `GET /members/<user_id>/`, `GET /members/<user_id>/overview/?from=&to=`
+
 ### ct team list
 
 ```
@@ -2766,7 +2789,6 @@ Add a PTO entry on behalf of another user (project manager and above). The entry
 | `--kind`, `-k` | string | no | `vacation` (default), `sick`, `holiday`, `personal`, `other` |
 | `--hours-per-day`, `-h` | decimal | no | Hours/day. Empty = capacity-based default |
 | `--notes`, `-n` | string | no | Reason or context notes |
-| `--paid` / `--unpaid` | flag | no | Whether the hours are paid. **Account manager+ only** — sending it as a project manager returns `400`, it is NOT ignored. Omit to follow the org policy for the kind |
 | `--json` | flag | no | JSON output |
 
 **Response (201):** full entry serializer with `status=approved`, `decided_by=<your user>`, `decided_at=<now>`.
@@ -2777,8 +2799,6 @@ Add a PTO entry on behalf of another user (project manager and above). The entry
 - `400` on the `user` field — caller is below `project_manager`, or the named
   user is outside the caller's visibility scope. This is a `400`, not a `403`:
   the check lives in the serializer, so treat it as a validation error.
-- `400` on the `is_paid` field — caller is below account manager and sent
-  `--paid`/`--unpaid`.
 
 **Usage examples:**
 

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/skills/crowdtime/references/pto.md

@@ -31,25 +31,6 @@ If the user doesn't specify a kind, default to `vacation` but **confirm before s
 
 ---
 
-## Paid vs unpaid
-
-Every entry resolves to paid or unpaid, exposed as `resolved_is_paid`:
-
-1. The entry's own `is_paid`, when set.
-2. Otherwise the organization's policy for that kind (`time_off_paid_kinds`).
-3. Otherwise paid.
-
-**Paid** hours count towards the hours a person is paid for that month. **Unpaid**
-hours still explain the absence — reports and anomaly checks treat the person as
-away either way — but do not count towards what they are paid.
-
-Only account managers and above can set `is_paid`, via `ct pto add --paid/--unpaid`. A project manager passing the flag gets a `400` on the `is_paid` field — the request is refused, not silently booked under the org default. Omit the flag and the organization's policy for the kind applies. The same holds on update: changing `is_paid` on an existing entry is refused (`400`) below account manager.
-A member submitting their own request never chooses; it follows the org policy.
-Do not tell a user their leave is paid because they asked for it — read
-`resolved_is_paid` back from the entry.
-
----
-
 ## Status lifecycle
 
 ```

{crowdtime_cli-0.19.0 → crowdtime_cli-0.20.0}/src/crowdtime_cli/skills/crowdtime/references/workflows.md

@@ -444,6 +444,9 @@ ct report team --week
 # Specific member
 ct report team --month --member john@company.com
 
+# One person in depth: hours trend, projects, timesheet history, time off
+ct team show john@company.com --from 2026-09-01 --to 2026-09-30
+
 # List all members
 ct org members
 ```