The v1 CLI is a thin client of the craclock HTTP API. Every subcommand below is fixed for v1:
craclock init
craclock product create --name <name> [--eu-establishment-country <ISO-3166-1 alpha-2>]
craclock sbom push <product-version-id> --file <cyclonedx-or-spdx.json>
craclock scan push <product-version-id> --file <grype-or-trivy.json>
craclock signals --exploited
craclock case open --type AEV|SI --product-version <id> --awareness-at <RFC3339> [--signal <id>]
craclock case package <case-id> --stage ew|notif|final [--json]
craclock case submitted <case-id> --stage ew|notif|final --at <RFC3339> --ref <portal-reference>
craclock statuscraclock status exits non-zero when any open case has a missed deadline —
wire it into CI right after scan push (see GitHub Action).