@formigio/fazemos-cli 0.10.60 → 0.10.63

package/dist/commands/ingest.js

@@ -0,0 +1,655 @@
+/**
+ * F52 — Email Ingest Phase B: unified `ingest` CLI command group.
+ *
+ * Exports `registerIngestCommands(program)` which wires the following
+ * subcommand surface under `fazemos ingest`:
+ *
+ * ── Merged from F51 (formerly `email-ingest`, group renamed → `ingest`) ──────
+ *
+ *   sender-map  — ADD / LIST / REMOVE sender → project routing rules
+ *   personas    — LIST ingest personas (shared inbound addresses)
+ *   holds       — LIST / SHOW / RESOLVE / DROP held-ambiguous emails
+ *
+ *   fazemos ingest sender-map add <email> --project <slug> [--note <text>]
+ *   fazemos ingest sender-map list [--project <slug>]
+ *   fazemos ingest sender-map remove <id>
+ *   fazemos ingest personas list
+ *   fazemos ingest holds list [--persona <local-part>]
+ *   fazemos ingest holds show <id>
+ *   fazemos ingest holds resolve <id> --project <slug>
+ *   fazemos ingest holds drop <id> --reason <text>
+ *
+ * ── New in F52 ────────────────────────────────────────────────────────────────
+ *
+ *   project     — Per-project intake configuration (intake worksheet + status)
+ *
+ *   fazemos ingest project set-intake [--project <slug>] --worksheet <ws_id>
+ *     → PUT /api/email-ingest/projects/:projectId/intake  {worksheet_id}
+ *     Sets the intake worksheet destination for inbound email. Requires
+ *     owner/admin. Resolves project slug → UUID via the F15 resolution chain.
+ *
+ *   fazemos ingest project show [--project <slug>]
+ *     → GET /api/email-ingest/projects/:projectId/intake
+ *     Shows the current intake worksheet and known-sender count for the project.
+ *
+ * Note: the CLI group is renamed `ingest` (from F51's `email-ingest`). The
+ * underlying API route prefix `/api/email-ingest/…` is UNCHANGED — do NOT
+ * rename the API routes. Only the CLI verb changes.
+ *
+ * Auth: all commands require a valid Cognito session and org owner/admin role.
+ * Server enforces the role gate; the CLI surfaces 401/403 errors clearly.
+ * Agent identities (fzm_ / fzx_ API keys) are blocked server-side.
+ *
+ * Spec: F52-email-ingest-client-message-agent-triage-tech-spec.md §7, §10
+ * Merged: F51-email-ingest-mvp branch feature/F51-email-ingest-mvp@6a80015
+ */
+import chalk from 'chalk';
+import { api, ApiError, resolveProjectIdBySlug } from '../api.js';
+// ── Shared helpers ─────────────────────────────────────────────────────────────
+function formatDate(iso) {
+    if (!iso)
+        return '—';
+    return new Date(iso).toLocaleString();
+}
+/**
+ * Resolve a project slug to its UUID for org-scoped commands that take an
+ * explicit --project flag (sender-map, holds). Exits 1 with a clear message if
+ * the slug is unknown. Uses the standard F15 cache + refresh chain.
+ */
+async function resolveProjectIdOrExit(slug) {
+    let projectId;
+    try {
+        projectId = await resolveProjectIdBySlug(slug);
+    }
+    catch (err) {
+        console.error(chalk.red(err?.message ?? String(err)));
+        process.exit(1);
+    }
+    if (!projectId) {
+        console.error(chalk.red(`Error: Unknown project: ${slug}`));
+        console.error(chalk.gray('Run: fazemos projects list'));
+        process.exit(1);
+    }
+    return projectId;
+}
+/**
+ * Resolve the active project ID for project-scoped intake commands.
+ *
+ * Applies the standard F15 resolution chain:
+ *   --project <slug> override → resolveProjectIdBySlug (cache + refresh)
+ *   active project from config → getActiveProjectId() (via resolveProjectIdBySlug(undefined))
+ *
+ * Exits 1 with the uniform "requirement missing: project" block (KD9) if
+ * neither a slug override nor an active project can be found.
+ */
+async function requireProjectForIntake(slugOverride) {
+    let projectId;
+    try {
+        projectId = await resolveProjectIdBySlug(slugOverride);
+    }
+    catch (err) {
+        console.error(chalk.red(err?.message ?? String(err)));
+        process.exit(1);
+    }
+    if (!projectId) {
+        console.error(chalk.red('Error: requirement missing: project'));
+        console.error('');
+        console.error(chalk.gray('Set one with:  fazemos projects switch <slug>'));
+        console.error(chalk.gray('Or pass:       --project <slug>'));
+        process.exit(1);
+    }
+    return projectId;
+}
+// ── Persona resolution helper (for holds --persona filter) ────────────────────
+/**
+ * Resolve a persona local_part (e.g. "kate") to its UUID.
+ * Fetches GET /api/email-ingest/personas and looks up by local_part.
+ * Exits 1 with a clear message if the persona is not found.
+ */
+async function resolvePersonaIdOrExit(localPart) {
+    let data;
+    try {
+        data = await api('GET', '/api/email-ingest/personas', undefined, { noProjectHeader: true });
+    }
+    catch (err) {
+        console.error(chalk.red(err?.message ?? String(err)));
+        process.exit(1);
+    }
+    const persona = (data.personas ?? []).find((p) => p.local_part === localPart);
+    if (!persona) {
+        console.error(chalk.red(`Unknown persona: ${localPart}`));
+        console.error(chalk.gray('Run: fazemos ingest personas list'));
+        process.exit(1);
+    }
+    return persona.id;
+}
+// ── sender-map commands ────────────────────────────────────────────────────────
+function registerSenderMapCommands(parent) {
+    const senderMap = parent
+        .command('sender-map')
+        .description('Manage sender → project routing rules for email ingest');
+    // ── sender-map add ──────────────────────────────────────────────────────────
+    senderMap
+        .command('add')
+        .description('Add a sender → project mapping. Emails from <email> are routed to the given project ' +
+        'when the From header matches. Uses RFC 5322 header matching (not envelope-from).')
+        .argument('<email>', 'Sender email address to match against the RFC 5322 From header')
+        .requiredOption('--project <slug>', 'Target project slug (routing destination)')
+        .option('--note <text>', 'Optional note explaining why this mapping exists')
+        .action(async (email, opts) => {
+        try {
+            const projectId = await resolveProjectIdOrExit(opts.project);
+            const body = {
+                sender_email: email,
+                project_id: projectId,
+            };
+            if (opts.note !== undefined) {
+                body.note = opts.note;
+            }
+            const data = await api('POST', '/api/email-ingest/sender-map', body, { noProjectHeader: true });
+            console.log(chalk.green('Sender mapping created.'));
+            console.log(`  ID:         ${data.id}`);
+            console.log(`  Sender:     ${data.sender_email}`);
+            console.log(`  Project ID: ${data.project_id}`);
+            if (data.note)
+                console.log(`  Note:       ${data.note}`);
+            console.log(`  Created at: ${formatDate(data.created_at)}`);
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.code === 'DUPLICATE_SENDER_MAPPING') {
+                    console.error(chalk.red(`Error: A mapping for ${email} → that project already exists`));
+                }
+                else if (err.code === 'PROJECT_NOT_FOUND') {
+                    console.error(chalk.red('Error: Project not found — verify the slug with: fazemos projects list'));
+                }
+                else if (err.code === 'MISSING_SENDER_EMAIL') {
+                    console.error(chalk.red('Error: sender email is required'));
+                }
+                else if (err.code === 'MISSING_PROJECT_ID') {
+                    console.error(chalk.red('Error: --project is required'));
+                }
+                else if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can manage email ingest settings'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+    // ── sender-map list ─────────────────────────────────────────────────────────
+    senderMap
+        .command('list')
+        .description('List sender → project mappings. Optionally filter by project slug.')
+        .option('--project <slug>', 'Filter mappings by project slug')
+        .action(async (opts) => {
+        try {
+            let url = '/api/email-ingest/sender-map';
+            if (opts.project) {
+                const projectId = await resolveProjectIdOrExit(opts.project);
+                url += `?project_id=${encodeURIComponent(projectId)}`;
+            }
+            const data = await api('GET', url, undefined, { noProjectHeader: true });
+            const items = data.sender_mappings ?? [];
+            if (items.length === 0) {
+                console.log(chalk.yellow('No sender mappings'));
+                console.log(chalk.gray('Add one with: fazemos ingest sender-map add <email> --project <slug>'));
+                return;
+            }
+            const senderW = Math.max(6, ...items.map((m) => String(m.sender_email ?? '').length));
+            const projW = Math.max(10, ...items.map((m) => String(m.project_id ?? '').length));
+            const noteW = Math.max(4, ...items.map((m) => String(m.note ?? '').length));
+            const header = [
+                'SENDER'.padEnd(senderW),
+                'PROJECT ID'.padEnd(projW),
+                'NOTE'.padEnd(noteW),
+                'CREATED AT',
+            ].join('  ');
+            console.log(chalk.gray(header));
+            console.log(chalk.gray('─'.repeat(header.length)));
+            for (const m of items) {
+                console.log([
+                    String(m.sender_email ?? '').padEnd(senderW),
+                    String(m.project_id ?? '').padEnd(projW),
+                    String(m.note ?? '').padEnd(noteW),
+                    formatDate(m.created_at),
+                ].join('  '));
+            }
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can view email ingest settings'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+    // ── sender-map remove ───────────────────────────────────────────────────────
+    senderMap
+        .command('remove')
+        .description('Remove a sender → project mapping by ID')
+        .argument('<id>', 'Mapping ID (UUID — from: fazemos ingest sender-map list)')
+        .action(async (id) => {
+        try {
+            await api('DELETE', `/api/email-ingest/sender-map/${encodeURIComponent(id)}`, undefined, { noProjectHeader: true });
+            console.log(chalk.green(`Sender mapping ${id} removed.`));
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.code === 'SENDER_MAPPING_NOT_FOUND') {
+                    console.error(chalk.red(`Error: Sender mapping not found: ${id}`));
+                }
+                else if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can manage email ingest settings'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+}
+// ── personas commands ──────────────────────────────────────────────────────────
+function registerPersonasCommands(parent) {
+    const personas = parent
+        .command('personas')
+        .description('View email ingest personas (shared inbound addresses)');
+    // ── personas list ───────────────────────────────────────────────────────────
+    personas
+        .command('list')
+        .description('List all email ingest personas. ' +
+        'Returns [] in fresh environments until personas are seeded — see rollout step 6.')
+        .action(async () => {
+        try {
+            const data = await api('GET', '/api/email-ingest/personas', undefined, { noProjectHeader: true });
+            const items = data.personas ?? [];
+            if (items.length === 0) {
+                console.log(chalk.yellow('No personas configured'));
+                console.log(chalk.gray('Personas are seeded by an operator via the DB (rollout step 6).'));
+                return;
+            }
+            const localW = Math.max(10, ...items.map((p) => String(p.local_part ?? '').length));
+            const displayW = Math.max(12, ...items.map((p) => String(p.display_name ?? '').length));
+            const header = [
+                'LOCAL PART'.padEnd(localW),
+                'DISPLAY NAME'.padEnd(displayW),
+                'ACTIVE',
+            ].join('  ');
+            console.log(chalk.gray(header));
+            console.log(chalk.gray('─'.repeat(header.length)));
+            for (const p of items) {
+                const active = p.active ? chalk.green('yes') : chalk.gray('no');
+                console.log([
+                    String(p.local_part ?? '').padEnd(localW),
+                    String(p.display_name ?? '').padEnd(displayW),
+                    active,
+                ].join('  '));
+            }
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can view email ingest personas'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+}
+// ── holds commands ─────────────────────────────────────────────────────────────
+/**
+ * Print detailed information for a single hold record.
+ */
+function printHold(h) {
+    console.log(chalk.cyan(`Hold: ${h.id}`));
+    console.log(`  From:        ${h.from_header}`);
+    console.log(`  Subject:     ${h.subject ?? chalk.gray('(no subject)')}`);
+    console.log(`  Received:    ${formatDate(h.received_at)}`);
+    console.log(`  Persona ID:  ${h.persona_id}`);
+    const candidates = h.candidate_projects ?? [];
+    if (candidates.length > 0) {
+        console.log(`  Candidates:  ${candidates.join(', ')}`);
+    }
+}
+function registerHoldsCommands(parent) {
+    const holds = parent
+        .command('holds')
+        .description('Manage held-ambiguous email ingest events');
+    // ── holds list ──────────────────────────────────────────────────────────────
+    holds
+        .command('list')
+        .description('List held-ambiguous emails awaiting operator action. ' +
+        'Use --persona <local-part> to filter by ingest address (e.g. --persona kate).')
+        .option('--persona <local-part>', 'Filter by persona local part (e.g. kate)')
+        .action(async (opts) => {
+        try {
+            let url = '/api/email-ingest/holds';
+            if (opts.persona) {
+                const personaId = await resolvePersonaIdOrExit(opts.persona);
+                url += `?persona_id=${encodeURIComponent(personaId)}`;
+            }
+            const data = await api('GET', url, undefined, { noProjectHeader: true });
+            const items = data.holds ?? [];
+            if (items.length === 0) {
+                console.log(chalk.yellow('No held emails'));
+                if (opts.persona) {
+                    console.log(chalk.gray(`No holds for persona: ${opts.persona}`));
+                }
+                return;
+            }
+            const fromW = Math.max(4, ...items.map((h) => String(h.from_header ?? '').length));
+            const subjW = Math.max(7, ...items.map((h) => String(h.subject ?? '').length));
+            const header = [
+                'ID'.padEnd(36),
+                'FROM'.padEnd(fromW),
+                'SUBJECT'.padEnd(subjW),
+                'RECEIVED AT',
+            ].join('  ');
+            console.log(chalk.gray(header));
+            console.log(chalk.gray('─'.repeat(header.length)));
+            for (const h of items) {
+                console.log([
+                    String(h.id ?? '').padEnd(36),
+                    String(h.from_header ?? '').padEnd(fromW),
+                    String(h.subject ?? '').padEnd(subjW),
+                    formatDate(h.received_at),
+                ].join('  '));
+            }
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can view email ingest holds'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+    // ── holds show ──────────────────────────────────────────────────────────────
+    holds
+        .command('show')
+        .description('Show details of a held email by ID. ' +
+        'Note: fetches all current holds and filters client-side — ' +
+        'returns not-found if the hold has already been resolved or dropped.')
+        .argument('<id>', 'Hold ID (UUID — from: fazemos ingest holds list)')
+        .action(async (id) => {
+        try {
+            // No dedicated GET /holds/:id endpoint — fetch full list and filter.
+            const data = await api('GET', '/api/email-ingest/holds', undefined, { noProjectHeader: true });
+            const hold = (data.holds ?? []).find((h) => h.id === id);
+            if (!hold) {
+                console.error(chalk.red(`Hold not found: ${id}`));
+                console.error(chalk.gray('The hold may have been resolved or dropped already.'));
+                console.error(chalk.gray('Run: fazemos ingest holds list'));
+                process.exit(1);
+            }
+            printHold(hold);
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can view email ingest holds'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+    // ── holds resolve ───────────────────────────────────────────────────────────
+    holds
+        .command('resolve')
+        .description('Resolve a held email by routing it to a project. ' +
+        'Creates a worksheet and sends a retroactive persona-signed acknowledgement ' +
+        '(variant=resolved). Idempotent — safe to call twice for the same hold.')
+        .argument('<id>', 'Hold ID (UUID — from: fazemos ingest holds list)')
+        .requiredOption('--project <slug>', 'Project slug to route this email to')
+        .action(async (id, opts) => {
+        try {
+            const projectId = await resolveProjectIdOrExit(opts.project);
+            const data = await api('POST', `/api/email-ingest/holds/${encodeURIComponent(id)}/resolve`, { project_id: projectId }, { noProjectHeader: true });
+            console.log(chalk.green('Hold resolved.'));
+            console.log(`  Worksheet ID: ${data.worksheet_id}`);
+            console.log(`  Ack sent at:  ${formatDate(data.ack_sent_at)}`);
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.code === 'HOLD_NOT_FOUND') {
+                    console.error(chalk.red(`Error: Hold not found: ${id}`));
+                }
+                else if (err.code === 'HOLD_NOT_RESOLVABLE') {
+                    console.error(chalk.red(`Error: ${err.message}`));
+                }
+                else if (err.code === 'PROJECT_NOT_FOUND') {
+                    console.error(chalk.red('Error: Project not found — verify the slug with: fazemos projects list'));
+                }
+                else if (err.code === 'MISSING_PROJECT_ID') {
+                    console.error(chalk.red('Error: --project is required'));
+                }
+                else if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can resolve email ingest holds'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+    // ── holds drop ──────────────────────────────────────────────────────────────
+    holds
+        .command('drop')
+        .description('Drop a held email (terminal action — no worksheet created, no ack sent). ' +
+        'Provide a reason for the audit trail. Dropped state is final — cannot be reopened.')
+        .argument('<id>', 'Hold ID (UUID — from: fazemos ingest holds list)')
+        .requiredOption('--reason <text>', 'Reason for dropping (recorded in the audit trail)')
+        .action(async (id, opts) => {
+        try {
+            await api('POST', `/api/email-ingest/holds/${encodeURIComponent(id)}/drop`, { reason: opts.reason }, { noProjectHeader: true });
+            console.log(chalk.green(`Hold ${id} dropped.`));
+            console.log(chalk.gray('Dropped is a terminal state — this hold cannot be reopened.'));
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.code === 'HOLD_NOT_FOUND') {
+                    console.error(chalk.red(`Error: Hold not found: ${id}`));
+                }
+                else if (err.code === 'HOLD_NOT_DROPPABLE') {
+                    console.error(chalk.red(`Error: ${err.message}`));
+                }
+                else if (err.code === 'MISSING_REASON') {
+                    console.error(chalk.red('Error: --reason is required'));
+                }
+                else if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can drop email ingest holds'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+}
+// ── project commands (F52-native) ─────────────────────────────────────────────
+function registerProjectIntakeCommands(parent) {
+    const project = parent
+        .command('project')
+        .description('Per-project intake configuration — set and view the intake worksheet destination');
+    // ── project set-intake ──────────────────────────────────────────────────────
+    project
+        .command('set-intake')
+        .description('Set the intake worksheet destination for inbound email on this project. ' +
+        'Emails routed to this project will create child worksheets under <ws_id>. ' +
+        'Requires owner/admin.')
+        .option('--project <slug>', 'Project slug (defaults to the active project)')
+        .requiredOption('--worksheet <ws_id>', 'Worksheet ID (UUID) to use as the intake destination')
+        .action(async (opts) => {
+        try {
+            const projectId = await requireProjectForIntake(opts.project);
+            const data = await api('PUT', `/api/email-ingest/projects/${encodeURIComponent(projectId)}/intake`, { worksheet_id: opts.worksheet }, { noProjectHeader: true });
+            console.log(chalk.green('Intake worksheet set.'));
+            console.log(`  Intake worksheet ID:   ${data.intake_worksheet_id}`);
+            console.log(`  Worksheet name:        ${data.worksheet_name}`);
+            console.log(chalk.gray('Inbound email routed to this project will now create worksheets under that destination.'));
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.code === 'MISSING_WORKSHEET_ID') {
+                    console.error(chalk.red('Error: --worksheet is required'));
+                }
+                else if (err.code === 'WORKSHEET_WRONG_PROJECT') {
+                    console.error(chalk.red('Error: Worksheet does not belong to this project'));
+                    console.error(chalk.gray('Run: fazemos worksheets list to see worksheets for this project'));
+                }
+                else if (err.code === 'PROJECT_NOT_FOUND') {
+                    console.error(chalk.red('Error: Project not found — verify the slug with: fazemos projects list'));
+                }
+                else if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can configure email ingest'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+    // ── project show ────────────────────────────────────────────────────────────
+    project
+        .command('show')
+        .description('Show the intake configuration for this project: intake worksheet, ' +
+        'known-sender count, and current status.')
+        .option('--project <slug>', 'Project slug (defaults to the active project)')
+        .action(async (opts) => {
+        try {
+            const projectId = await requireProjectForIntake(opts.project);
+            const data = await api('GET', `/api/email-ingest/projects/${encodeURIComponent(projectId)}/intake`, undefined, { noProjectHeader: true });
+            console.log(chalk.cyan('Email Ingest — Project Intake'));
+            if (data.intake_worksheet_id) {
+                console.log(`  Intake worksheet ID:   ${data.intake_worksheet_id}`);
+                console.log(`  Worksheet name:        ${data.worksheet_name ?? chalk.gray('(unknown)')}`);
+            }
+            else {
+                console.log(`  Intake worksheet:      ${chalk.yellow('not set')}`);
+                console.log(chalk.gray('  Set one with: fazemos ingest project set-intake --worksheet <ws_id>'));
+                console.log(chalk.gray('  Without an intake worksheet, inbound email is held (held-no-intake) until one is set.'));
+            }
+            console.log(`  Known senders:         ${data.known_sender_count ?? 0}`);
+            if ((data.known_sender_count ?? 0) === 0) {
+                console.log(chalk.gray('  Add senders with: fazemos ingest sender-map add <email> --project <slug>'));
+            }
+        }
+        catch (err) {
+            if (err instanceof ApiError) {
+                if (err.code === 'PROJECT_NOT_FOUND') {
+                    console.error(chalk.red('Error: Project not found — verify the slug with: fazemos projects list'));
+                }
+                else if (err.status === 403) {
+                    console.error(chalk.red('Error: Only org owners and admins can view email ingest configuration'));
+                }
+                else if (err.status === 401) {
+                    console.error(chalk.red('Error: Not authenticated. Run: fazemos auth login'));
+                }
+                else {
+                    console.error(chalk.red(err.message));
+                }
+            }
+            else {
+                console.error(chalk.red(err?.message ?? String(err)));
+            }
+            process.exit(1);
+        }
+    });
+}
+// ── Top-level registration ─────────────────────────────────────────────────────
+/**
+ * Register the unified `ingest` command group under the root program.
+ *
+ * Sub-groups:
+ *   sender-map  (F51 merge-forward, renamed from email-ingest)
+ *   personas    (F51 merge-forward, renamed from email-ingest)
+ *   holds       (F51 merge-forward, renamed from email-ingest)
+ *   project     (F52-native: set-intake, show)
+ *
+ * Invoke from src/index.ts after the other registerXxxCommands() calls.
+ */
+export function registerIngestCommands(program) {
+    const ingest = program
+        .command('ingest')
+        .description('Email ingest management — sender routing, personas, held-mail resolution, ' +
+        'and per-project intake configuration (F51/F52)');
+    registerSenderMapCommands(ingest);
+    registerPersonasCommands(ingest);
+    registerHoldsCommands(ingest);
+    registerProjectIntakeCommands(ingest);
+}
+//# sourceMappingURL=ingest.js.map