holivia 0.14.0 → 0.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fab1251135002a03f719e93cb2f2d1fcb52842e2f5c5fecc3fa8c47c279b8747
-  data.tar.gz: 8e2dd66d735bf875c123d42d90c25ab7d853024c5378dc8445d2f8c4eeb233aa
+  metadata.gz: f48cd0cfc125dae15d0ee9bcbdde6ba33bc7776a10a51491c8e604f20ebe5559
+  data.tar.gz: 751270d4fdc10546f597e4e3f42ee478a6d9bfbcdb07e72f5598f11eac6c3d74
 SHA512:
-  metadata.gz: a0c502ac53052598fff122e0b5bafc5028c7cd2dee25ebc6629879f0a77d17516314608012493d41ee8571cb79802d5a276c43e64d03236f2e86d8e7a4c68e77
-  data.tar.gz: 5454072e3f4e4d046b1a8de6e60a9a9641db2a5d16eaf85441de7340e065572f4606c83a603bc4f615ef0c86b02f4a03babf28fa267559375c9fa0602fac3c56
+  metadata.gz: 584bcae6722a7f2dcd078dd0730653df07f187234eeeebb3c3175efbcdc1fc7fabff2575327a9f42eb46eee915c733f2f1f246d91374f58b884b14612f4c27bc
+  data.tar.gz: 1847411588f4980e0820491cf78debe0b32cf7dd0f6656de617c68de5789dab93bb34b07ac63db7b3d8cadb8be23b6526fd5e58c5431d40cd9b4d3d73e213c08

data/CHANGELOG.md

@@ -1,5 +1,42 @@
 ## [Unreleased]
 
+## [0.19.0] - 2026-11-11
+
+- Add `holivia selfcare text <id>` to print the plain text of a selfcare content's text format: slide titles and rich text, in reading order; returns 404 when the content has no text format
+- Add `--format-type TYPE` (`text`, `audio`, or `video`) to `holivia selfcare index`, also with `--all`, to list only contents that have a format of that type
+- Requires a content viewer, content manager, or dev role
+- Requires the matching Holivia backoffice API deployment
+
+## [0.18.0] - 2026-11-03
+
+- Add `holivia credit-consumption-alert index` with `--enterprise-id`, `--page`, and `--per-page`, listing alerts with their `employees_count` and `consumption`
+- Add `holivia credit-consumption-alert show <id>` with the followed `employee_ids`
+- Add `holivia credit-consumption-alert create` with `--enterprise-id`, `--name`, `--starts-on`, `--ends-on`, `--threshold`, repeatable `--recipient-email`, and employee IDs from repeatable `--employee-ids ID,ID` or `--employee-ids-file PATH` (one per line or comma separated), plus piped JSON
+- Add `holivia credit-consumption-alert delete <id>`
+- Requires an enterprise manager role
+- Requires the matching Holivia backoffice API deployment
+
+## [0.17.0] - 2026-11-02
+
+- Add `holivia hr-access-grant show <employee_id>` to print an employee's `hr_manager` and `hr_space_only` flags and HR access grants, with each resource's type, id, and label
+- Add `holivia hr-access-grant update <employee_id>` with repeatable `--feature KEY=ID,ID` flags (each listed feature gets exactly those resource IDs, `KEY=` clears one, omitted features keep their grants), `--hr-manager true|false`, and piped JSON
+- `hr_space_only` cannot be changed through the CLI, and demo employees cannot be updated
+- Requires an enterprise manager or dev role
+- Requires the matching Holivia backoffice API deployment
+
+## [0.16.0] - 2026-10-30
+
+- Add `holivia appointment logs <id>` with `--page` and `--per-page` for an appointment's history (bookings, reschedules, cancellations, payments), newest first: log type, raw data, the backoffice title and content, and the author
+- Requires an appointment viewer or limited appointment viewer role
+- Requires the matching Holivia backoffice API deployment
+
+## [0.15.0] - 2026-10-29
+
+- Add `--query`, `--locale`, `--state`, `--content-type`, `--page`, and `--per-page` to `holivia selfcare index`; it previously ignored its arguments and only returned the first page
+- Add `--all` to `holivia selfcare index` to fetch every page of matching contents and print one JSON array
+- `holivia selfcare index` lists each content's `topic_slugs`, `tag_codes`, and `format_types`; `holivia selfcare show` adds `tag_codes` and `format_types`
+- Requires the matching Holivia backoffice API deployment for the new fields
+
 ## [0.14.0] - 2026-10-23
 
 - Add `holivia enterprise show <id>` for enterprise details: settings, headquarter, CSM, countries, employees count, and the current contract summary for contract viewers and managers

data/README.md

@@ -2,7 +2,7 @@
 
 Ruby client and command-line interface for the Holivia API.
 
-The `holivia` executable is primarily used to manage Holivia backoffice data from the terminal: environments, authentication, selfcare content, objectives, enterprises, employees, contracts, communication library items, HR intervention catalog items, HR home highlights, crises, collective interventions, and appointment diagnostics.
+The `holivia` executable is primarily used to manage Holivia backoffice data from the terminal: environments, authentication, selfcare content, objectives, enterprises, employees, HR access grants, contracts, credit consumption alerts, communication library items, HR intervention catalog items, HR home highlights, crises, collective interventions, and appointment diagnostics and history.
 
 Coding agents can use [`SKILL.md`](SKILL.md) as a downloadable usage guide for operating this CLI safely.
 
@@ -115,12 +115,39 @@ List selfcare contents:
 holivia selfcare index
 ```
 
+Search and filter contents (`--query` matches titles, descriptions, goals, and tag names; at most 100 per page):
+
+```bash
+holivia selfcare index --query "communication non violente" --locale fr --state published
+holivia selfcare index --content-type exercise --page 2 --per-page 100
+```
+
+Keep only contents that have a format of a given type (`text`, `audio`, or `video`):
+
+```bash
+holivia selfcare index --format-type text --all
+```
+
+Fetch every matching content as one JSON array (`--all` ignores `--page` and `--per-page`):
+
+```bash
+holivia selfcare index --all --locale fr --state published
+```
+
+Each listed content includes its `topic_slugs`, `tag_codes`, and `format_types`; `selfcare show` adds `tag_codes` and `format_types` next to its full `topics`.
+
 Show one selfcare content:
 
 ```bash
 holivia selfcare show 123
 ```
 
+Read the plain text of a content's text format (slide titles and rich text, in reading order; returns 404 when the content has no text format):
+
+```bash
+holivia selfcare text 123
+```
+
 Create a selfcare content from flags:
 
 ```bash
@@ -180,6 +207,13 @@ Show video diagnostics for an appointment:
 holivia appointment video-diagnostics 42
 ```
 
+Show an appointment's history (bookings, reschedules, cancellations, payments), newest first:
+
+```bash
+holivia appointment logs 42
+holivia appointment logs 42 --page 2 --per-page 50
+```
+
 Find an enterprise id:
 
 ```bash
@@ -205,6 +239,13 @@ holivia employee index --enterprise-id 123 --query durand --left false
 holivia employee show 42
 ```
 
+Show and update an employee's HR access grants (omitted features are kept; `KEY=` clears one):
+
+```bash
+holivia hr-access-grant show 42
+holivia hr-access-grant update 42 --feature crisis_management=3,4 --hr-manager true
+```
+
 List and inspect contracts of an enterprise:
 
 ```bash
@@ -212,6 +253,17 @@ holivia contract index --enterprise-id 123 --status active
 holivia contract show 7
 ```
 
+Follow the credits consumed by a fixed group of employees, and email recipients once when they reach a threshold:
+
+```bash
+holivia credit-consumption-alert create --enterprise-id 99 --name "Pavillon du Lac" \
+  --starts-on 2027-06-01 --ends-on 2028-06-01 --threshold 15 \
+  --recipient-email oceane@holivia.fr --employee-ids-file ids.txt
+holivia credit-consumption-alert index --enterprise-id 99
+holivia credit-consumption-alert show 5
+holivia credit-consumption-alert delete 5
+```
+
 List crises for an enterprise:
 
 ```bash

data/SKILL.md

@@ -2,7 +2,7 @@
 
 Use this skill when you need to operate the Holivia API through the `holivia` command-line tool.
 
-The CLI manages Holivia backoffice data: environments, authentication, selfcare contents, objectives, selfcare-objective associations, enterprises, employees, contracts, HR intervention catalog items, HR home highlights, crises, collective interventions, and appointment video diagnostics.
+The CLI manages Holivia backoffice data: environments, authentication, selfcare contents, objectives, selfcare-objective associations, enterprises, employees, HR access grants, contracts, credit consumption alerts, HR intervention catalog items, HR home highlights, crises, collective interventions, and appointment video diagnostics and history.
 
 ## Preconditions
 
@@ -20,7 +20,7 @@ Use `holivia` in examples below. If working from a checkout before installation,
 - Before creating or updating content, run `holivia selfcare schema` and use its returned enum values and permitted item params as the source of truth.
 - Before creating or updating intervention catalog items, run `holivia intervention schema` and use its returned enum values and locales as the source of truth.
 - Before creating or updating HR home highlights, run `holivia highlight schema` and use its returned enum values and locales as the source of truth.
-- For destructive actions such as `holivia env remove`, `holivia selfcare objective delete`, `holivia crisis delete`, or `holivia collective-intervention delete`, confirm the target environment and ID first unless the user explicitly requested that exact action.
+- For destructive actions such as `holivia env remove`, `holivia selfcare objective delete`, `holivia crisis delete`, `holivia credit-consumption-alert delete`, or `holivia collective-intervention delete`, confirm the target environment and ID first unless the user explicitly requested that exact action.
 - Employee data is personal data. Query only the employees a task needs, do not copy employee lists into unrelated output, and never try to infer whether an employee has a Holivia account.
 - Treat all command output as JSON except informational commands such as `holivia env`, `holivia env list`, `holivia login`, `holivia logout`, `holivia version`, and `holivia --help`.
 
@@ -157,12 +157,39 @@ List contents:
 holivia selfcare index
 ```
 
+Search and filter contents (`--query` matches titles, descriptions, goals, and tag names; at most 100 per page):
+
+```bash
+holivia selfcare index --query "communication non violente" --locale fr --state published
+holivia selfcare index --content-type exercise --page 2 --per-page 100
+```
+
+Keep only contents that have a format of a given type (`text`, `audio`, or `video`):
+
+```bash
+holivia selfcare index --format-type text --all
+```
+
+Fetch every matching content as one JSON array (`--all` ignores `--page` and `--per-page`):
+
+```bash
+holivia selfcare index --all --locale fr --state published
+```
+
+Each listed content includes its `topic_slugs`, `tag_codes`, and `format_types`; `selfcare show` adds `tag_codes` and `format_types` next to its full `topics`.
+
 Show one content:
 
 ```bash
 holivia selfcare show 123
 ```
 
+Read the plain text of a content's text format (slide titles and rich text, in reading order; returns 404 when the content has no text format):
+
+```bash
+holivia selfcare text 123
+```
+
 Create a content with flags:
 
 ```bash
@@ -404,6 +431,27 @@ Show one employee:
 holivia employee show 42
 ```
 
+## HR Access Grants
+
+Requires an enterprise manager role or `dev`. Grants decide which HR space features an employee can use, and for which resource: a data scope for `usage`, a segment for `segment_summary`, an enterprise for every other feature.
+
+Show an employee's `hr_manager` and `hr_space_only` flags and their grants, with each resource's type, id, and label:
+
+```bash
+holivia hr-access-grant show 42
+```
+
+Update grants. Each `--feature KEY=ID,ID` gets exactly those resource IDs; features you leave out keep their current grants, and `KEY=` clears a feature. Run `hr-access-grant show` first and pass back the IDs you want to keep:
+
+```bash
+holivia hr-access-grant update 42 --feature crisis_management=3,4 --feature employees_list= --hr-manager true
+echo '{"features": {"usage": [12]}}' | holivia hr-access-grant update 42
+```
+
+Piped JSON is merged after flags, and stdin wins on duplicate keys: a stdin `features` object replaces every `--feature` flag.
+
+The API answers 422 with details and changes nothing when a feature key is unknown, a resource ID is outside the employee's enterprise group, or the employee is a demo employee. `hr_space_only` cannot be changed through the CLI; ask for it to be changed in the backoffice.
+
 ## Contracts
 
 Requires a contract viewer or manager role.
@@ -428,6 +476,43 @@ Show every setting of one contract, including notes:
 holivia contract show 7
 ```
 
+## Credit Consumption Alerts
+
+Requires an enterprise manager role. An alert follows a fixed list of employees of one enterprise and counts the enterprise credits they consume from `starts_on` (and until `ends_on` when given). Once the consumption reaches `threshold`, recipients get one email and `triggered_at` is set. Employees stay followed after they leave or their details change.
+
+List alerts, most recent first, with `employees_count` and `consumption`:
+
+```bash
+holivia credit-consumption-alert index --enterprise-id 99
+```
+
+Show one alert with its followed `employee_ids`:
+
+```bash
+holivia credit-consumption-alert show 5
+```
+
+Create an alert. Employee IDs are the backoffice employee IDs (`holivia employee index --enterprise-id 99`); pass them with repeatable `--employee-ids 12,13` or with `--employee-ids-file` (one ID per line, or comma separated). `--recipient-email` is repeatable:
+
+```bash
+holivia credit-consumption-alert create \
+  --enterprise-id 99 \
+  --name "Pavillon du Lac" \
+  --starts-on 2027-06-01 \
+  --ends-on 2028-06-01 \
+  --threshold 15 \
+  --recipient-email oceane@holivia.fr \
+  --employee-ids-file ids.txt
+```
+
+Piped JSON is merged after flags, and stdin wins on duplicate keys. The API answers 422 and creates nothing when an ID is not an employee of the enterprise (the unknown IDs are listed), when no employee ID is given, or when a field is invalid.
+
+Delete an alert (its employees are kept):
+
+```bash
+holivia credit-consumption-alert delete 5
+```
+
 ## Crises
 
 List crises:
@@ -691,6 +776,15 @@ Show video diagnostics for an appointment:
 holivia appointment video-diagnostics 42
 ```
 
+Show an appointment's history, newest first:
+
+```bash
+holivia appointment logs 42
+holivia appointment logs 42 --page 2 --per-page 50
+```
+
+Each log has `log_type` (`appointment_booked`, `appointment_rescheduled`, `appointment_rescheduled_last_minute`, `appointment_canceled`, `appointment_payed`, `unconfirmed_appointment_booked`), `created_at` (UTC), raw `data` (UTC `logged_start_time`/`previous_start_time`, durations in minutes, `patient_credits` after the operation), the French `title` and `content` shown in the backoffice (dates in your time zone), and `user` (`type`, `id`, `name`) for who triggered it, or `null`. `title` and `content` are `null` for log types the backoffice cannot render. Logs contain patient names; treat them as personal data. Requires an appointment viewer or limited appointment viewer role.
+
 ## Errors
 
 - `401` means authentication failed or credentials could not be refreshed. Re-run `holivia login` for the active environment.

data/lib/holivia/browser_login.rb

@@ -53,6 +53,8 @@ module Holivia
 
     def launch_browser(url)
       command = RUBY_PLATFORM.include?("darwin") ? "open" : "xdg-open"
+      # Fixed command with an argument list (no shell); the URL is built by this class.
+      # nosemgrep: ruby.lang.security.dangerous-exec.dangerous-exec
       system(command, url, out: File::NULL, err: File::NULL)
     end
 

data/lib/holivia/cli/help.rb

@@ -22,8 +22,12 @@ module Holivia
           Tokens are stored at ~/.holivia/credentials.<env>.json and refreshed automatically on 401.
 
         Selfcare Contents:
-          holivia selfcare index                 List all selfcare contents
+          holivia selfcare index [options]       List selfcare contents
+                                                 (--query TEXT --locale LOCALE --state STATE
+                                                  --content-type TYPE --format-type TYPE
+                                                  --page N --per-page N --all)
           holivia selfcare show <id>             Show a selfcare content by id
+          holivia selfcare text <id>             Show the plain text of a selfcare content's text format
           holivia selfcare create [options]      Create a selfcare content
                                                  (--state draft|ongoing_translation|translation_to_be_reviewed|
                                                   translation_reviewed|published)
@@ -91,11 +95,40 @@ module Holivia
                                                 Demo employees are excluded unless --demo is given
           holivia employee show <id>            Show one employee with its enterprise
 
+        HR Access Grants:
+          holivia hr-access-grant show <employee_id>
+                                                Show an employee's hr_manager and hr_space_only flags
+                                                and HR feature grants with their resources
+          holivia hr-access-grant update <employee_id> [--feature KEY=ID,ID ... --hr-manager true|false]
+                                                Grant exactly the given resource IDs for each listed feature;
+                                                omitted features keep their grants and KEY= clears one
+          Features: usage (data scope IDs), segment_summary (segment IDs), employees_list,
+          crisis_management, intervention_catalog, intervention_tracking, communication_library
+          (enterprise IDs). IDs outside the employee's enterprise group are rejected (422).
+          hr_space_only can only be changed in the backoffice. Demo employees cannot be updated.
+          Piped JSON ({"features": {...}, "hr_manager": true}) is merged after flags; stdin wins.
+          Requires enterprise_manager or dev.
+
         Contracts:
           holivia contract index [--enterprise-id ID --status active|expiring_soon|low_remaining --page N --per-page N]
                                                 List contracts, most recent first
           holivia contract show <id>            Show every setting of one contract with its enterprise
 
+        Credit Consumption Alerts:
+          holivia credit-consumption-alert index [--enterprise-id ID --page N --per-page N]
+                                                List alerts, most recent first, with consumption
+          holivia credit-consumption-alert show <id>
+                                                Show one alert with its followed employee IDs
+          holivia credit-consumption-alert create --enterprise-id ID --name NAME --starts-on YYYY-MM-DD
+                                  [--ends-on YYYY-MM-DD] --threshold N --recipient-email EMAIL ...
+                                  (--employee-ids ID,ID ... | --employee-ids-file PATH)
+                                                Follow these employees of the enterprise; an email is sent
+                                                once when their consumed credits reach the threshold
+          holivia credit-consumption-alert delete <id>
+                                                Delete an alert (employees are kept)
+          IDs that are not employees of the enterprise are rejected (422).
+          Piped JSON is merged after flags; stdin wins. Requires enterprise_manager.
+
         Communication Items:
           holivia communication index [--page N --per-page N --query TEXT --locale LOCALE --document-type TYPE]
                                                 List communication library items
@@ -163,6 +196,8 @@ module Holivia
 
         Appointments:
           holivia appointment video-diagnostics <id>  Show video diagnostics for an appointment
+          holivia appointment logs <id> [--page N --per-page N]
+                                                Show an appointment's history, newest first
 
         Selfcare Content Objectives:
           holivia selfcare objective index [--page N --per-page N --selfcare-content-id ID --objective-id ID]

data/lib/holivia/cli.rb

@@ -17,7 +17,9 @@ require_relative "commands/intervention_item"
 require_relative "commands/hr_home_highlight"
 require_relative "commands/enterprise"
 require_relative "commands/employee"
+require_relative "commands/hr_access_grant"
 require_relative "commands/contract"
+require_relative "commands/credit_consumption_alert"
 require_relative "commands/crisis"
 require_relative "commands/collective_intervention"
 require_relative "commands/support_phone_number"
@@ -40,7 +42,9 @@ module Holivia
       when "highlight" then Commands::HrHomeHighlight.route(args)
       when "enterprise" then Commands::Enterprise.route(args)
       when "employee" then Commands::Employee.route(args)
+      when "hr-access-grant" then Commands::HrAccessGrant.route(args)
       when "contract" then Commands::Contract.route(args)
+      when "credit-consumption-alert" then Commands::CreditConsumptionAlert.route(args)
       when "crisis" then Commands::Crisis.route(args)
       when "collective-intervention", "collective_intervention", "collective" then Commands::CollectiveIntervention.route(args)
       when "support-phone-numbers" then Commands::SupportPhoneNumber.route(args)

data/lib/holivia/commands/appointment.rb

@@ -11,6 +11,7 @@ module Holivia
         subcommand = args.shift
         case subcommand
         when "video-diagnostics" then new.video_diagnostics(args)
+        when "logs" then new.logs(args)
         else warn "Unknown appointment command: #{subcommand}"
              exit 1
         end
@@ -22,6 +23,20 @@ module Holivia
 
         output(client.get("#{BASE_PATH}/#{id}/video_diagnostics"))
       end
+
+      def logs(args = [])
+        id = args.shift
+        abort "Usage: holivia appointment logs <id> [--page N --per-page N]" unless id
+
+        params = {}
+        OptionParser.new do |opts|
+          opts.banner = "Usage: holivia appointment logs <id> [options]"
+          opts.on("--page N", Integer) { |v| params[:page] = v }
+          opts.on("--per-page N", Integer) { |v| params[:per_page] = v }
+        end.parse!(args)
+
+        output(client.get("#{BASE_PATH}/#{id}/logs", params: params))
+      end
     end
   end
 end

data/lib/holivia/commands/credit_consumption_alert.rb

@@ -0,0 +1,90 @@
+# frozen_string_literal: true
+
+require_relative "base"
+
+module Holivia
+  module Commands
+    class CreditConsumptionAlert < Base
+      BASE_PATH = "/api/v1/backoffice/credit_consumption_alerts"
+      CREATE_BANNER = "Usage: holivia credit-consumption-alert create --enterprise-id ID --name NAME " \
+                      "--starts-on YYYY-MM-DD [--ends-on YYYY-MM-DD] --threshold N --recipient-email EMAIL " \
+                      "(--employee-ids ID,ID | --employee-ids-file PATH)"
+      EMPLOYEE_IDS_SEPARATOR = /[\s,]+/
+
+      def self.route(args)
+        subcommand = args.shift
+        case subcommand
+        when "index" then new.index(args)
+        when "show" then new.show(args)
+        when "create" then new.create(args)
+        when "delete" then new.delete(args)
+        else warn "Unknown credit-consumption-alert command: #{subcommand}"
+             exit 1
+        end
+      end
+
+      def index(args = [])
+        params = {}
+        OptionParser.new do |opts|
+          opts.banner = "Usage: holivia credit-consumption-alert index [options]"
+          opts.on("--enterprise-id ID", Integer) { |v| params[:enterprise_id] = v }
+          opts.on("--page N", Integer) { |v| params[:page] = v }
+          opts.on("--per-page N", Integer) { |v| params[:per_page] = v }
+        end.parse!(args)
+
+        output(client.get(BASE_PATH, params: params))
+      end
+
+      def show(args = [])
+        id = args.shift
+        abort "Usage: holivia credit-consumption-alert show <id>" unless id
+
+        output(client.get("#{BASE_PATH}/#{id}"))
+      end
+
+      def create(args = [])
+        options = parse_create_options(args).merge(piped_json)
+        abort "No options provided. Use --help for usage." if options.empty?
+
+        output(client.post(BASE_PATH, body: options))
+      end
+
+      def delete(args = [])
+        id = args.shift
+        abort "Usage: holivia credit-consumption-alert delete <id>" unless id
+
+        client.delete("#{BASE_PATH}/#{id}")
+        output(deleted: true, id: id.to_i)
+      end
+
+      private
+
+      def parse_create_options(args) # rubocop:disable Metrics/AbcSize,Metrics/MethodLength
+        options = {}
+        OptionParser.new do |opts|
+          opts.banner = CREATE_BANNER
+          opts.on("--enterprise-id ID", Integer) { |v| options[:enterprise_id] = v }
+          opts.on("--name NAME") { |v| options[:name] = v }
+          opts.on("--starts-on DATE") { |v| options[:starts_on] = v }
+          opts.on("--ends-on DATE") { |v| options[:ends_on] = v }
+          opts.on("--threshold N", Integer) { |v| options[:threshold] = v }
+          opts.on("--recipient-email EMAIL", "Repeatable") { |v| (options[:recipient_emails] ||= []) << v }
+          opts.on("--employee-ids IDS", "Comma separated employee IDs; repeatable") do |v|
+            (options[:employee_ids] ||= []).concat(parse_employee_ids(v))
+          end
+          opts.on("--employee-ids-file PATH", "One employee ID per line, or comma separated") do |v|
+            (options[:employee_ids] ||= []).concat(parse_employee_ids(File.read(v)))
+          end
+        end.parse!(args)
+        options[:employee_ids]&.uniq!
+        options
+      end
+
+      def parse_employee_ids(value)
+        value.split(EMPLOYEE_IDS_SEPARATOR).reject(&:empty?).map { |id| Integer(id, 10) }
+      rescue ArgumentError
+        raise OptionParser::InvalidArgument, value.strip
+      end
+    end
+  end
+end

data/lib/holivia/commands/hr_access_grant.rb

@@ -0,0 +1,69 @@
+# frozen_string_literal: true
+
+require_relative "base"
+
+module Holivia
+  module Commands
+    class HrAccessGrant < Base
+      EMPLOYEES_PATH = "/api/v1/backoffice/employees"
+      UPDATE_BANNER = "Usage: holivia hr-access-grant update <employee_id> [--feature KEY=ID,ID ...] " \
+                      "[--hr-manager true|false]"
+      BOOLEANS = { "true" => true, "false" => false }.freeze
+
+      def self.route(args)
+        subcommand = args.shift
+        case subcommand
+        when "show" then new.show(args)
+        when "update" then new.update(args)
+        else warn "Unknown hr-access-grant command: #{subcommand}"
+             exit 1
+        end
+      end
+
+      def show(args = [])
+        employee_id = args.shift
+        abort "Usage: holivia hr-access-grant show <employee_id>" unless employee_id
+
+        output(client.get(grants_path(employee_id)))
+      end
+
+      def update(args = [])
+        employee_id = args.shift
+        abort UPDATE_BANNER unless employee_id
+
+        options = parse_update_options(args).merge(piped_json)
+        abort "No options provided. Use --help for usage." if options.empty?
+
+        output(client.patch(grants_path(employee_id), body: options))
+      end
+
+      private
+
+      def parse_update_options(args)
+        options = {}
+        OptionParser.new do |opts|
+          opts.banner = UPDATE_BANNER
+          opts.on("--feature KEY=IDS", "Grant exactly these resource IDs for a feature; KEY= clears it") do |v|
+            key, ids = parse_feature(v)
+            (options[:features] ||= {})[key] = ids
+          end
+          opts.on("--hr-manager BOOL", BOOLEANS) { |v| options[:hr_manager] = v }
+        end.parse!(args)
+        options
+      end
+
+      def parse_feature(value)
+        key, ids = value.split("=", 2)
+        raise OptionParser::InvalidArgument, value if key.to_s.empty? || ids.nil?
+
+        [key.to_sym, ids.split(",").map { |id| Integer(id) }]
+      rescue ArgumentError
+        raise OptionParser::InvalidArgument, value
+      end
+
+      def grants_path(employee_id)
+        "#{EMPLOYEES_PATH}/#{employee_id}/hr_access_grants"
+      end
+    end
+  end
+end

data/lib/holivia/commands/selfcare.rb

@@ -5,8 +5,9 @@ require_relative "selfcare_objective"
 
 module Holivia
   module Commands
-    class Selfcare < Base
+    class Selfcare < Base # rubocop:disable Metrics/ClassLength
       BASE_PATH = "/api/v1/backoffice/selfcare_contents"
+      MAX_PER_PAGE = 100
       COMPOSE_EXAMPLE_PATH = Holivia.root.join("examples", "compose.json").to_s
       IMAGE_MIME_TYPES = {
         ".jpg" => "image/jpeg",
@@ -21,6 +22,7 @@ module Holivia
         case subcommand
         when "index"   then new.index(args)
         when "show"    then new.show(args)
+        when "text"    then new.text(args)
         when "create"  then new.create(args)
         when "update"  then new.update(args)
         when "compose" then new.compose(args)
@@ -34,8 +36,24 @@ module Holivia
         end
       end
 
-      def index(_args = [])
-        output(client.get(BASE_PATH))
+      def index(args = []) # rubocop:disable Metrics/AbcSize,Metrics/MethodLength
+        params = {}
+        all = false
+        OptionParser.new do |opts|
+          opts.banner = "Usage: holivia selfcare index [options]"
+          opts.on("--query TEXT") { |v| params[:query] = v }
+          opts.on("--locale LOCALE") { |v| params[:locale] = v }
+          opts.on("--state STATE") { |v| params[:state] = v }
+          opts.on("--content-type TYPE") { |v| params[:content_type] = v }
+          opts.on("--format-type TYPE", "Only contents with a format of this type (text, audio, video)") do |v|
+            params[:format_type] = v
+          end
+          opts.on("--page N", Integer) { |v| params[:page] = v }
+          opts.on("--per-page N", Integer) { |v| params[:per_page] = v }
+          opts.on("--all", "Fetch every page and print one JSON array (ignores --page and --per-page)") { all = true }
+        end.parse!(args)
+
+        output(all ? all_pages(params.except(:page, :per_page)) : client.get(BASE_PATH, params: params))
       end
 
       def show(args = [])
@@ -45,6 +63,13 @@ module Holivia
         output(client.get("#{BASE_PATH}/#{id}"))
       end
 
+      def text(args = [])
+        id = args.shift
+        abort "Usage: holivia selfcare text <id>" unless id
+
+        output(client.get("#{BASE_PATH}/#{id}/text"))
+      end
+
       def create(args = []) # rubocop:disable Metrics/AbcSize,Metrics/MethodLength
         options = {}
         OptionParser.new do |opts|
@@ -110,6 +135,19 @@ module Holivia
 
       private
 
+      def all_pages(params)
+        contents = []
+        page = 1
+        loop do
+          response = client.get(BASE_PATH, params: params.merge(page: page, per_page: MAX_PER_PAGE))
+          contents.concat(response.fetch("selfcare_contents"))
+          break if page >= response.dig("meta", "total_pages").to_i
+
+          page += 1
+        end
+        contents
+      end
+
       def build_body(options)
         image_path = options.delete(:image)
         return options unless image_path

data/lib/holivia/configuration.rb

@@ -58,6 +58,8 @@ module Holivia
       return default_config unless raw["environments"].is_a?(Hash)
       return default_config unless raw["current_env"].is_a?(String)
 
+      # Not a Rails view; raw is a local variable holding the parsed config.
+      # nosemgrep: ruby.rails.security.audit.xss.avoid-raw.avoid-raw
       raw
     end
 

data/lib/holivia/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Holivia
-  VERSION = "0.14.0"
+  VERSION = "0.19.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: holivia
 version: !ruby/object:Gem::Version
-  version: 0.14.0
+  version: 0.19.0
 platform: ruby
 authors:
 - Holivia
@@ -67,11 +67,13 @@ files:
 - lib/holivia/commands/collective_intervention.rb
 - lib/holivia/commands/communication_item.rb
 - lib/holivia/commands/contract.rb
+- lib/holivia/commands/credit_consumption_alert.rb
 - lib/holivia/commands/crisis.rb
 - lib/holivia/commands/employee.rb
 - lib/holivia/commands/enterprise.rb
 - lib/holivia/commands/env.rb
 - lib/holivia/commands/format.rb
+- lib/holivia/commands/hr_access_grant.rb
 - lib/holivia/commands/hr_home_highlight.rb
 - lib/holivia/commands/intervention_item.rb
 - lib/holivia/commands/item.rb
@@ -109,7 +111,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.10
+rubygems_version: 4.0.23
 specification_version: 4
 summary: Ruby client and CLI for the Holivia API
 test_files: []