@bussolabs/closeyourit-cli 0.22.0 → 0.23.1

package/dist/commands/vault/requests/list.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../../../base");
+const output_1 = require("../../../lib/output");
+const paginate_1 = require("../../../lib/paginate");
+const vault_requests_1 = require("../../../lib/vault-requests");
+class VaultRequestsList extends base_1.BaseCommand {
+    // No --project on purpose: the queue is org-level, exactly like the web vault page — the backend
+    // collects the pending requests across every visible project, and asking for one project would
+    // hide the review you were about to do on another.
+    static description = 'List the secret changes waiting for a second approval, across every visible project. Shows the name and the intent, never the proposed value.';
+    static examples = ['<%= config.bin %> vault requests list', '<%= config.bin %> vault requests list --json'];
+    async run() {
+        await this.parse(VaultRequestsList);
+        const data = (await (0, paginate_1.fetchAllPages)(this.api, vault_requests_1.CHANGE_REQUESTS_PATH)).map((row) => (0, vault_requests_1.withoutValue)(row));
+        if (!this.jsonEnabled()) {
+            // An empty queue is good news, not an empty result set: renderTable's "(no results)" under a
+            // header row reads like a failed search, and the reviewer needs the opposite reading.
+            if (data.length === 0) {
+                this.log('No secret change request is waiting for a decision.');
+            }
+            else {
+                this.log((0, output_1.renderTable)(vault_requests_1.CHANGE_REQUEST_HEADERS, data.map((row) => (0, vault_requests_1.changeRequestRow)(row))));
+            }
+        }
+        return { data, meta: (0, paginate_1.aggregatedMeta)(data.length) };
+    }
+}
+exports.default = VaultRequestsList;

package/dist/commands/vault/requests/reject.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../../base';
+export default class VaultRequestsReject extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        reason: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/vault/requests/reject.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../../base");
+const output_1 = require("../../../lib/output");
+const vault_requests_1 = require("../../../lib/vault-requests");
+class VaultRequestsReject extends base_1.BaseCommand {
+    static description = 'Reject a pending secret change request with a reason. Nothing changes in the vault: the request freezes as rejected and the reason reaches whoever asked.';
+    static examples = [
+        '<%= config.bin %> vault requests reject <id> --reason "rotate it on staging first"',
+        '<%= config.bin %> vault requests reject <id> -r "wrong key" --json',
+    ];
+    static args = {
+        id: core_1.Args.string({ description: 'Change request id (from "vault requests list")', required: true }),
+    };
+    static flags = {
+        reason: core_1.Flags.string({
+            char: 'r',
+            description: 'Why the change is refused — recorded for the audit and sent to whoever asked',
+            required: true,
+        }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(VaultRequestsReject);
+        // A rejection freezes the request for good: it cannot be decided again, and the only thing left
+        // to the person who asked is the reason. Whitespace would satisfy the required flag and be
+        // refused by the server anyway (R422-CHANGEREQUEST-001), so it is refused here, before the call.
+        const reason = flags.reason.trim();
+        if (reason === '') {
+            this.error('Refusing to reject with an empty --reason: say why, so whoever asked can fix it and ask again.', {
+                exit: 2,
+            });
+        }
+        let res;
+        try {
+            res = await this.api.post(`${vault_requests_1.CHANGE_REQUESTS_PATH}/${encodeURIComponent(args.id)}/reject`, { reason });
+        }
+        catch (error) {
+            throw (0, vault_requests_1.describeDecisionError)(error);
+        }
+        const decided = (0, vault_requests_1.withoutValue)(res.data ?? {});
+        if (!this.jsonEnabled()) {
+            const label = (0, vault_requests_1.changeRequestLabel)(decided);
+            this.log(label ? `Change request rejected: ${label} is unchanged.` : 'Change request rejected: nothing changed.');
+            const summary = (0, vault_requests_1.changeRequestSummary)(decided);
+            if (Object.keys(summary).length > 0)
+                this.log((0, output_1.renderRecord)(summary));
+        }
+        return { ...res, data: decided };
+    }
+}
+exports.default = VaultRequestsReject;

package/dist/commands/workload/create.d.ts

@@ -0,0 +1,15 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadCreate extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        status: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'scheduled-at': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'due-at': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        ticket: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        team: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+        title: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/create.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+const workload_1 = require("../../lib/workload");
+class WorkloadCreate extends base_1.BaseCommand {
+    static description = 'Create a workload action (non-dev activity: fair, meeting, call…) on one of your teams. Add the people with `workload participant add`.';
+    static examples = [
+        '<%= config.bin %> workload create --team Marketing --title "Fiera di Rimini"',
+        '<%= config.bin %> workload create --team Marketing --title "Riunione firma accordo" --scheduled-at 2026-09-01T09:00:00Z --due-at 2026-09-10T18:00:00Z',
+        '<%= config.bin %> workload create --team Marketing --title "Materiale stand" --status in_progress --ticket DRFL-3',
+    ];
+    static flags = {
+        team: core_1.Flags.string({
+            description: 'Team id (UUID) or name — the action belongs to it and cannot be moved later',
+            required: true,
+        }),
+        title: core_1.Flags.string({ description: 'What the activity is', required: true }),
+        ...workload_1.actionFieldFlags,
+    };
+    async run() {
+        const { flags } = await this.parse(WorkloadCreate);
+        const teamId = await this.resolveTeamId(flags.team);
+        const body = { team_id: teamId, title: flags.title };
+        (0, workload_1.applyActionBody)(body, flags);
+        // Il code umano ("DRFL-3") si risolve qui: il server accetta solo l'id, e uno che non può
+        // vedere lo scarta in silenzio invece di rifiutarlo.
+        const ticketId = flags.ticket ? await this.resolveTicketId(flags.ticket) : undefined;
+        if (flags.ticket !== undefined)
+            body.ticket_id = ticketId ?? null;
+        const res = await this.api.post(workload_1.WORKLOAD_ACTIONS_PATH, body);
+        const data = res.data ?? {};
+        if ((0, workload_1.ticketLinkMissing)(flags.ticket, ticketId, data)) {
+            this.warn(`Ticket ${flags.ticket} is not visible to you: the action was created without it.`);
+        }
+        if (!this.jsonEnabled()) {
+            this.log('Workload action created:');
+            this.log((0, output_1.renderRecord)(data));
+            this.log((0, workload_1.participantsLine)(data));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadCreate;

package/dist/commands/workload/delete.d.ts

@@ -0,0 +1,12 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadDelete extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        confirm: import("@oclif/core/lib/interfaces").BooleanFlag<boolean>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/delete.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const workload_1 = require("../../lib/workload");
+class WorkloadDelete extends base_1.BaseCommand {
+    static args = {
+        id: core_1.Args.string({ description: 'Workload action id', required: true }),
+    };
+    static description = 'Delete a workload action (irreversible; a linked ticket survives and only loses the link)';
+    static examples = ['<%= config.bin %> workload delete <action-id> --confirm'];
+    static flags = {
+        confirm: core_1.Flags.boolean({ description: 'Required: confirm the irreversible deletion' }),
+    };
+    async run() {
+        const { args, flags } = await this.parse(WorkloadDelete);
+        if (!flags.confirm) {
+            this.error('Refusing to delete without --confirm (the action is irreversible).', { exit: 2 });
+        }
+        await this.api.delete(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.id)}`);
+        if (!this.jsonEnabled())
+            this.log(`Deleted workload action ${args.id}`);
+        return { deleted: args.id };
+    }
+}
+exports.default = WorkloadDelete;

package/dist/commands/workload/list.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadList extends BaseCommand {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        page: import("@oclif/core/lib/interfaces").OptionFlag<number, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/list.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+const workload_1 = require("../../lib/workload");
+class WorkloadList extends base_1.BaseCommand {
+    static description = 'List the workload actions of the teams you belong to (newest first)';
+    static examples = ['<%= config.bin %> workload list', '<%= config.bin %> workload list --page 2 --json'];
+    static flags = { ...base_1.pageFlag };
+    async run() {
+        const { flags } = await this.parse(WorkloadList);
+        const res = await this.api.get(`${workload_1.WORKLOAD_ACTIONS_PATH}?page=${flags.page}`);
+        const actions = res.data ?? [];
+        if (!this.jsonEnabled()) {
+            this.log((0, output_1.renderTable)(['TITLE', 'STATUS', 'TEAM', 'PEOPLE', 'SCHEDULED', 'DUE', 'TICKET', 'ID'], actions.map((action) => [
+                String(action.title ?? ''),
+                (0, output_1.statusCell)(action.status),
+                String(action.team ?? ''),
+                String((Array.isArray(action.participants) ? action.participants : []).length),
+                String(action.scheduled_at ?? '-'),
+                String(action.due_at ?? '-'),
+                String(action.ticket_code ?? '-'),
+                String(action.id ?? ''),
+            ])));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadList;

package/dist/commands/workload/participant/add.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from '../../../base';
+export default class WorkloadParticipantAdd extends BaseCommand {
+    static args: {
+        action: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        member: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/participant/add.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../../base");
+const output_1 = require("../../../lib/output");
+const workload_1 = require("../../../lib/workload");
+class WorkloadParticipantAdd extends base_1.BaseCommand {
+    static args = {
+        action: core_1.Args.string({ description: 'Workload action id', required: true }),
+        member: core_1.Args.string({ description: 'Participant account id or email (must be on the action team)', required: true }),
+    };
+    static description = 'Add someone to a workload action (they must belong to the team that owns it)';
+    static examples = ['<%= config.bin %> workload participant add <action-id> ada@acme.com'];
+    async run() {
+        const { args } = await this.parse(WorkloadParticipantAdd);
+        const accountId = await this.resolveMemberId(args.member);
+        const res = await this.api.post(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.action)}/participants`, { account_id: accountId });
+        const data = res.data ?? {};
+        if (!this.jsonEnabled()) {
+            this.log(`Added ${args.member} to workload action ${args.action}:`);
+            this.log((0, output_1.renderRecord)(data));
+            this.log((0, workload_1.participantsLine)(data));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadParticipantAdd;

package/dist/commands/workload/participant/remove.d.ts

@@ -0,0 +1,10 @@
+import { BaseCommand } from '../../../base';
+export default class WorkloadParticipantRemove extends BaseCommand {
+    static args: {
+        action: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+        member: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/participant/remove.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../../base");
+const workload_1 = require("../../../lib/workload");
+class WorkloadParticipantRemove extends base_1.BaseCommand {
+    static args = {
+        action: core_1.Args.string({ description: 'Workload action id', required: true }),
+        member: core_1.Args.string({ description: 'Participant account id or email', required: true }),
+    };
+    static description = 'Remove someone from a workload action (idempotent: removing who is not there succeeds)';
+    static examples = ['<%= config.bin %> workload participant remove <action-id> ada@acme.com'];
+    async run() {
+        const { args } = await this.parse(WorkloadParticipantRemove);
+        const accountId = await this.resolveMemberId(args.member);
+        await this.api.delete(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.action)}/participants/${encodeURIComponent(accountId)}`);
+        if (!this.jsonEnabled()) {
+            this.log(`Removed ${args.member} from workload action ${args.action}`);
+        }
+        return { removed: accountId };
+    }
+}
+exports.default = WorkloadParticipantRemove;

package/dist/commands/workload/promote.d.ts

@@ -0,0 +1,17 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadPromote extends BaseCommand {
+    static args: {
+        action: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        status: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        priority: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        title: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        kind: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        project: import("@oclif/core/lib/interfaces").OptionFlag<string, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/promote.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const limits_1 = require("../../lib/limits");
+const output_1 = require("../../lib/output");
+const ticket_lookup_1 = require("../../lib/ticket-lookup");
+const workload_1 = require("../../lib/workload");
+class WorkloadPromote extends base_1.BaseCommand {
+    static args = {
+        action: core_1.Args.string({ description: 'Workload action id', required: true }),
+    };
+    static description = 'Generate a ticket from a workload action and link it back (the action keeps existing; an already linked action is refused)';
+    static examples = [
+        '<%= config.bin %> workload promote <action-id> --project acme-api',
+        '<%= config.bin %> workload promote <action-id> -p acme-api --title "Implement the partner API" --description "Agreed in the meeting" --kind story --priority High',
+    ];
+    static flags = {
+        ...base_1.projectFlag,
+        title: core_1.Flags.string({
+            description: `Ticket title (default: the action title, max ${limits_1.LENGTH_LIMITS.title} characters)`,
+        }),
+        description: core_1.Flags.string({ description: `Ticket description (max ${limits_1.LENGTH_LIMITS.description} characters)` }),
+        kind: core_1.Flags.string({ description: 'Ticket kind (default: task)', options: ['bug', 'story', 'task', 'epic'] }),
+        ...ticket_lookup_1.newTicketLookupFlags,
+    };
+    async run() {
+        const { args, flags } = await this.parse(WorkloadPromote);
+        // Il ticket nasce qui: valgono i tetti di `tickets create`, e si leggono tutti in un rifiuto
+        // solo, prima di qualunque chiamata (CYCL-32).
+        const tooLong = (0, limits_1.tooLongMessage)([
+            { flag: '--title', value: flags.title, max: limits_1.LENGTH_LIMITS.title, orthography: true },
+            { flag: '--description', value: flags.description, max: limits_1.LENGTH_LIMITS.description, orthography: true },
+        ]);
+        if (tooLong)
+            this.error(tooLong, { exit: 2 });
+        const projectId = await this.resolveProjectId(flags.project);
+        const body = { project_id: projectId };
+        if (flags.title !== undefined)
+            body.title = flags.title;
+        if (flags.description !== undefined)
+            body.description = flags.description;
+        if (flags.kind !== undefined)
+            body.kind = flags.kind;
+        if (flags.status !== undefined)
+            body.status_id = await this.resolveTicketLookupId(ticket_lookup_1.TICKET_STATUS, flags.status);
+        if (flags.priority !== undefined) {
+            body.priority_id = await this.resolveTicketLookupId(ticket_lookup_1.TICKET_PRIORITY, flags.priority);
+        }
+        const res = await this.api.post(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.action)}/promotion`, body);
+        if (!this.jsonEnabled()) {
+            this.log('Ticket created from the workload action:');
+            this.log((0, output_1.renderRecord)(res.data ?? {}));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadPromote;

package/dist/commands/workload/show.d.ts

@@ -0,0 +1,9 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadShow extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/show.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+const workload_1 = require("../../lib/workload");
+class WorkloadShow extends base_1.BaseCommand {
+    static args = {
+        id: core_1.Args.string({ description: 'Workload action id', required: true }),
+    };
+    static description = 'Show one workload action (an action of another team answers 404, never 403)';
+    static examples = ['<%= config.bin %> workload show <action-id>'];
+    async run() {
+        const { args } = await this.parse(WorkloadShow);
+        const res = await this.api.get(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.id)}`);
+        if (!this.jsonEnabled()) {
+            const data = res.data ?? {};
+            this.log((0, output_1.renderRecord)(data));
+            this.log((0, workload_1.participantsLine)(data));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadShow;

package/dist/commands/workload/update.d.ts

@@ -0,0 +1,17 @@
+import { BaseCommand } from '../../base';
+export default class WorkloadUpdate extends BaseCommand {
+    static args: {
+        id: import("@oclif/core/lib/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static description: string;
+    static examples: string[];
+    static flags: {
+        description: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        status: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'scheduled-at': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        'due-at': import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        ticket: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+        title: import("@oclif/core/lib/interfaces").OptionFlag<string | undefined, import("@oclif/core/lib/interfaces").CustomOptions>;
+    };
+    run(): Promise<unknown>;
+}

package/dist/commands/workload/update.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const core_1 = require("@oclif/core");
+const base_1 = require("../../base");
+const output_1 = require("../../lib/output");
+const workload_1 = require("../../lib/workload");
+class WorkloadUpdate extends base_1.BaseCommand {
+    static args = {
+        id: core_1.Args.string({ description: 'Workload action id', required: true }),
+    };
+    static description = 'Update a workload action (only the passed fields change). The team never changes: moving an action would change who can see it.';
+    static examples = [
+        '<%= config.bin %> workload update <action-id> --status done',
+        '<%= config.bin %> workload update <action-id> --title "Fiera 2027" --due-at 2027-09-10T18:00:00Z',
+        '<%= config.bin %> workload update <action-id> --ticket ""',
+    ];
+    static flags = {
+        title: core_1.Flags.string({ description: 'New title' }),
+        ...workload_1.actionFieldFlags,
+    };
+    async run() {
+        const { args, flags } = await this.parse(WorkloadUpdate);
+        const body = {};
+        if (flags.title !== undefined)
+            body.title = flags.title;
+        (0, workload_1.applyActionBody)(body, flags);
+        const ticketId = flags.ticket ? await this.resolveTicketId(flags.ticket) : undefined;
+        if (flags.ticket !== undefined)
+            body.ticket_id = ticketId ?? null;
+        const res = await this.api.put(`${workload_1.WORKLOAD_ACTIONS_PATH}/${encodeURIComponent(args.id)}`, body);
+        const data = res.data ?? {};
+        // Su una modifica il rifiuto silenzioso del server non lascia le cose come stavano: azzera il
+        // campo, quindi porta via anche il ticket che era collegato prima. Dirlo per intero.
+        if ((0, workload_1.ticketLinkMissing)(flags.ticket, ticketId, data)) {
+            this.warn(`Ticket ${flags.ticket} is not visible to you: the action now has no linked ticket at all, not even the one it had before.`);
+        }
+        if (!this.jsonEnabled()) {
+            this.log('Workload action updated:');
+            this.log((0, output_1.renderRecord)(data));
+            this.log((0, workload_1.participantsLine)(data));
+        }
+        return res;
+    }
+}
+exports.default = WorkloadUpdate;

package/dist/errors/error-codes.d.ts

@@ -22,9 +22,22 @@ export declare const ErrorCodes: {
     readonly Team: {
         readonly notFound: "C404-TEM-001";
     };
+    readonly ErrorGroup: {
+        readonly notFound: "C404-ERG-001";
+    };
+    readonly MetricGroup: {
+        readonly notFound: "C404-MTG-001";
+    };
     readonly Member: {
         readonly notFound: "C404-MBR-001";
     };
+    readonly ServiceAccount: {
+        readonly boundaryMismatch: "C404-SVA-001";
+        readonly restrictionNotApplied: "C500-SVA-002";
+    };
+    readonly Ticket: {
+        readonly notFound: "C404-TKT-001";
+    };
     readonly Knowledge: {
         readonly publishUnavailable: "C404-KNW-001";
     };
@@ -38,6 +51,10 @@ export declare const ErrorCodes: {
         readonly expired: "C408-DEV-001";
         readonly failed: "C400-DEV-002";
     };
+    readonly Ask: {
+        readonly timeout: "C408-ASK-001";
+        readonly failed: "C502-ASK-002";
+    };
     readonly Input: {
         readonly invalid: "C400-INP-001";
     };

package/dist/errors/error-codes.js

@@ -27,9 +27,37 @@ exports.ErrorCodes = {
     Team: {
         notFound: 'C404-TEM-001',
     },
+    // Gruppi di monitoring chiesti a un'operazione in massa e non ritrovati nella risposta. Il server
+    // filtra la selezione sul progetto e risponde 200 su ciò che resta (`scope.where(id:)`), quindi
+    // un id di un altro progetto — o di un dato ormai vecchio — sparisce senza una parola: chi ha
+    // chiesto di chiudere trenta gruppi ne vedrebbe chiusi ventotto e nessuno glielo direbbe (CYCL-44).
+    ErrorGroup: {
+        notFound: 'C404-ERG-001',
+    },
+    MetricGroup: {
+        notFound: 'C404-MTG-001',
+    },
     Member: {
         notFound: 'C404-MBR-001',
     },
+    // Il confine ambienti di un account di servizio, chiesto e non applicato (CYCL-46). Il server
+    // interseca i code ricevuti con quelli dell'organizzazione e risponde 200 su ciò che resta: un
+    // refuso non restringe niente, CANCELLA il confine — e una allow-list vuota vuol dire «ogni
+    // ambiente», cioè l'opposto di quello che si stava chiedendo, senza una parola. Il comando
+    // controlla i code prima di scrivere, ma leggere gli ambienti chiede un permesso che può mancare:
+    // il confronto fra chiesto e applicato resta la rete sotto, e vale in entrambi i versi (un code
+    // sparito, o uno comparso che nessuno aveva chiesto).
+    ServiceAccount: {
+        boundaryMismatch: 'C404-SVA-001',
+        restrictionNotApplied: 'C500-SVA-002',
+    },
+    // Un ticket indicato per collegarlo altrove (una attività del carico di lavoro) e non trovato: il
+    // riferimento non è né un id né un code leggibile ("DRFL-3"), oppure quel code non esiste tra i
+    // ticket visibili. Il server, ricevendo un id che non si può vedere, salverebbe «nessun ticket»
+    // senza dire niente (CYCL-42).
+    Ticket: {
+        notFound: 'C404-TKT-001',
+    },
     // Il backend risponde 404 senza codice applicativo sulla route della pubblicazione atomica:
     // non è il progetto a mancare, è il server a essere più vecchio del comando (CYCL-8).
     Knowledge: {
@@ -47,6 +75,14 @@ exports.ErrorCodes = {
         expired: 'C408-DEV-001',
         failed: 'C400-DEV-002',
     },
+    // Attesa di una risposta preparata altrove (l'assistente, «chiedi ai ticket»). `timeout` non è un
+    // guasto del server: la domanda è partita e la risposta sta ancora arrivando, è il comando che ha
+    // smesso di aspettare — il messaggio dice dove ritrovarla. `failed` copre il caso in cui il
+    // server dichiara fallita la risposta senza allegare un codice proprio (CYCL-43).
+    Ask: {
+        timeout: 'C408-ASK-001',
+        failed: 'C502-ASK-002',
+    },
     // The command line itself was rejected (missing/unknown flag or arg, value outside the allowed
     // options, a `this.error(...)` guard): the message says what to fix, and it never reached the
     // server — the opposite of System.unexpected, which stays for real failures (CYCL-33).

package/dist/lib/api.d.ts

@@ -22,7 +22,7 @@ export interface UploadFile {
     filename: string;
     data: Blob;
 }
-type HttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE';
+type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
 export declare class CliApi {
     private readonly config;
     /**
@@ -47,6 +47,12 @@ export declare class CliApi {
     get<T = unknown>(path: string, opts?: RequestOptions): Promise<Envelope<T>>;
     post<T = unknown>(path: string, body?: unknown, opts?: RequestOptions): Promise<Envelope<T>>;
     put<T = unknown>(path: string, body?: unknown, opts?: RequestOptions): Promise<Envelope<T>>;
+    /**
+     * PATCH. Rails routes a resourceful `update` under both PUT and PATCH, so most commands here use
+     * `put`; a custom member route declared with `patch` (error group assignment, CYCL-44) answers to
+     * PATCH alone, and sending PUT to it is a plain 404.
+     */
+    patch<T = unknown>(path: string, body?: unknown, opts?: RequestOptions): Promise<Envelope<T>>;
     delete<T = unknown>(path: string, opts?: RequestOptions): Promise<Envelope<T>>;
     /**
      * Download a binary payload (e.g. a ticket attachment). The endpoint redirects to a signed

package/dist/lib/api.js

@@ -117,6 +117,14 @@ class CliApi {
     put(path, body, opts) {
         return this.request('PUT', path, { ...opts, body });
     }
+    /**
+     * PATCH. Rails routes a resourceful `update` under both PUT and PATCH, so most commands here use
+     * `put`; a custom member route declared with `patch` (error group assignment, CYCL-44) answers to
+     * PATCH alone, and sending PUT to it is a plain 404.
+     */
+    patch(path, body, opts) {
+        return this.request('PATCH', path, { ...opts, body });
+    }
     delete(path, opts) {
         return this.request('DELETE', path, opts);
     }