Add personal access token commands

[robzolkos]

Summary

• Adds fizzy token list|create|delete backed by AccessTokensService on the root SDK client.
• Closes the last gap in CLI coverage of the SDK methods that ship in v0.1.2/v0.1.3 — CreateAccessToken, ListAccessTokens, and DeleteAccessToken previously had no command surface.
• Adds an e2e CRUD test mirroring the webhook pattern and regenerates SURFACE.txt.

Notes

• Create returns the raw token value once; the command surfaces a notice that it won't be shown again.
• permission is passed through as a free string (the spec doesn't constrain it to an enum).

---

Summary by cubic

Adds fizzy token list|create|delete to manage personal access tokens from the CLI using the root AccessTokensService (no account needed). Improves command discoverability and help, and adds e2e CRUD coverage.

• New Features

  • Create: requires --description and --permission; returns the raw token once with a save notice.
  • List: shows ID, description, permission, and created columns.
  • Delete: removes a token by ID and returns {deleted: true, id}.
  • Discoverability/help: token appears in the command catalog and root help; ls/rm aliases supported.

• Bug Fixes

  • Auth scope: use requireAuth + requireSDK to match the root /my/access_tokens endpoint (no account required).
  • Validation and UX: list/create reject positional args; delete requires an ID and the breadcrumb is gated on a non-empty id; add token to CORE in root help; register e2e cleanup earlier to avoid stranded tokens.

^{Written for commit f73886c. Summary will update on new commits. Review in cubic}

[cubic-dev-ai]

2 issues found across 4 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="e2e/cli_tests/token_test.go">

<violation number="1" location="e2e/cli_tests/token_test.go:19">
P2: Register cleanup before assertions that can `t.Fatal` after resource creation, otherwise a failing token-value check can skip deletion of the created token.</violation>
</file>

<file name="internal/commands/token.go">

<violation number="1" location="internal/commands/token.go:21">
P2: `token` subcommands incorrectly require an account for root-client access token APIs; this can fail for valid authenticated users without a configured profile/account.</violation>
</file>

_{Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.}

[Copilot]

Pull request overview

Adds CLI support for managing personal access tokens (fizzy token list|create|delete) backed by the root SDK client’s AccessTokensService, plus an e2e CRUD test and regenerated command surface docs.

Changes:

• Introduces token root command with list, create, and delete subcommands.
• Adds token table column definitions for human-readable list output.
• Adds an e2e CRUD test for tokens and updates SURFACE.txt accordingly.

Tip

If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
internal/commands/token.go	Adds fizzy token command implementation (list/create/delete) using the SDK AccessTokens service.
internal/commands/columns.go	Adds tokenColumns for rendering token lists in styled/markdown outputs.
e2e/cli_tests/token_test.go	Adds end-to-end CRUD coverage for token commands.
SURFACE.txt	Regenerates command/flag surface to include the new token commands.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 9 out of 9 changed files in this pull request and generated 3 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.