fix(user): list active org members by default

[xergioalex]

Summary

dailybot user list was returning every user the server exposed, including deactivated accounts — confusing for the human-facing table and a correctness hazard for downstream resolvers (e.g. kudos give --to "Old Employee" matching against a deactivated user record).

This change filters out is_active: false rows by default at the DailyBotClient.list_users layer. A missing is_active field is treated as active for forward-compatibility with older server payloads. The legacy unfiltered output is still available via dailybot user list --include-inactive.

Change Log

• api_client.py::DailyBotClient.list_users now accepts include_inactive (keyword-only, default False). When False, drops rows with is_active falsy.
• commands/user.py: new --include-inactive flag (default off). Updated help text + examples.
• commands/user_scoped_actions.py::execute_user_list plumbed through.
• Tests:
  • 2 new list_users tests — filter-by-default + opt-out behavior.
  • 1 new command-level test — asserts --include-inactive is forwarded.
  • Existing list_users paginated fixtures updated with is_active: True.

Risks

• Behavior change in the default response of dailybot user list — but the change reflects user intent ("members of the organization" → current/active members), and --include-inactive preserves the legacy output for admin / audit flows.
• No payload change to outgoing requests; no schema migrations; no new dependencies.
• Downstream impact: kudos give --to "<name>" resolves against list_users(), so deactivated accounts are now correctly excluded from name-matching. This is the desired behavior.

Local validation

• ruff check, ruff format --check, mypy dailybot_cli — all clean.
• pytest tests/api_client_test.py tests/public_api_commands_test.py — 78/78 pass.
• Smoke-tested against the local api-services server: dailybot user list returns 4 active members.

Test plan

• dailybot user list shows only active members by default.
• dailybot user list --include-inactive shows the full server response.
• dailybot kudos give --to "<deactivated-user-name>" returns "No user found matching X".
• dailybot user list --json matches the table contents (both filtered identically by default).

🤖 Generated with Claude Code