feat(cli): add short aliases to every resource command

[mateuscardosodeveloper]

Summary

Gives every resource command a short alias on one scheme: a family prefix plus a two or three character verb. 77 aliases across 10 families, saving about seven characters per command.

tagoio en-ls                 tagoio entity-list
tagoio fl-up ./report.pdf    tagoio files-upload ./report.pdf
tagoio sq-run <id>           tagoio sql-execute <id>
tagoio dv-tkn <id>           tagoio device-token <id>

Family	Prefix	Count	Sample
actions	act-	7	act-ls, act-on, act-off
dictionaries	dc-	6	dc-ls, dc-lng
secrets	se-	5	se-ls, se-nf
run users	ru-	5	ru-ls, ru-crt
analysis	an-	5	an-ls, an-dlt
access management	am-	5	am-ls, am-crt
TagoSQL	sq-	8	sq-ls, sq-tbl, sq-rev
devices	dv-	7	dv-crt, dv-tkn
entities	en-	8	en-ls, en-dt, en-sch
files	fl-	9	fl-ls, fl-prm, fl-dl

Verbs: ls nf crt ed dlt cp dt sch on off lng tbl rev run tkn prm tp up dl url mv rn.

Why

Reviewing the stacked series, the tech lead noticed the new commands had no aliases while shipped ones did (device-list has dl). Only 11 of the 41 new commands carried one, and the gap was uneven inside the series itself: access-management aliased all five of its commands, analysis CRUD aliased none.

entity-* and files-* predate the series and had never had an alias, so they are included rather than left as a second gap.

Naming decisions that took a call:

• act- for actions, not ac-. The bare ac is analysis-console in the published package, so an ac-* family would put actions and analysis under one prefix. Costs one character on seven aliases.
• act-on / act-off instead of shortening enable and disable. An earlier draft had adis and adel, two characters apart, one reversible and one not.
• sq- for TagoSQL, replacing sql-ls and sql-run. Reusing the command's own sql- prefix saved almost nothing: sql-v against sql-version is one keystroke. The family now has one convention.
• Two suffixes look like collisions and are not. fl-dl is a different string from dl (device-list), and fl-prm shares its suffix with dv-prm only across families, never within one.

Not aliased: init, login, set-env, list-env, whoami, data, copy-tab, backup, and the four backup subcommands. They run 4 to 8 characters against a 12.5 average for the aliased set, and several already are the short form. data is the shorthand for device data.

Test plan

• npx vitest run: 1754 tests passing, 166 files
• npx tsc --noEmit clean, npm run linter clean, npx oxfmt no rewrites
• npm run build passes
• New guard in src/lib/alias-registry.test.ts: 80 tests covering no duplicate token per scope, no alias shadowing a command name, and every expected pair registered
• Guard proven by deliberate breakage: removed an alias (fails naming the command), added an undeclared alias to backup list (fails the table check). The non-recursive first version passed that second case
• All 12 published aliases still resolve: ac ad am at bkp deploy dl export info inspect nc run
• All 22 renamed aliases return unknown command
• 15 alias-to-command mappings spot-checked across every family, including en-dt, fl-prm, sq-rev, act-off
• Duplicate sweep, three independent ways: full tree walk including nested backup subcommands (178 tokens, 101 names, 77 aliases, 0 duplicates in any category), straight from the source files (77 aliases, no overlap with command names), and the CLI booting, since commander throws at registration on any duplicate
• EXPECTED_ALIASES matches the tree exactly: 77 declared, 77 registered, no difference in either direction
• Man snapshot moves 14 lines, all of them help example text; no command name or option shifted

Breaking changes

Eleven aliases are renamed: al, sl, rul, dl-list, sql-ls, sql-run, and the five am-* forms.

Every one exists only in this stack's open PRs. Checked master directly: none has been released, so no caller on npm can depend on them. The 12 aliases that do ship in 3.3.0 are untouched.

Keeping the old names would have shipped two competing formats, which is the inconsistency this PR exists to remove.

Risk (CIA)

Likelihood: 🟢 Low | Impact: 🟢 Low | Exposure: 🟢 Low

Additive alias registration plus 11 renames confined to unreleased branches. A duplicate cannot ship silently: commander throws at registration, so a collision fails the suite and the build. No command name, option, or handler changes.

Related

The README command table is rebuilt here as well. It listed roughly 20 of 89 commands, missing actions, dictionaries, secrets, run-users, access-management, sql, entities, and files entirely, so it was stale before this branch. Regenerated from the command tree in the existing shape.

That matters more than it looks: --help shows only the first alias per command (configure-help.ts calls help.alias(), singular), the man page records none, and there is no shell completion. The README table is the only complete inventory.

An independent design review argued for about 9 aliases instead of 77, on the grounds that the savings are thin and a uniform alias removes the signal al used to carry next to a bare action-info. The uniform scheme was chosen because consistency was the ask, and the short-verb format answers the strongest half of that objection: seven characters saved rather than the three the first draft managed. Recorded so the trade-off stays reversible.

Base is feat/tagosql-commands (#49). Merge that one first.