Improve error rendering and add required-args guardrails

src/commands/endpoint/mod.rs

@@ -224,6 +224,19 @@ async fn list(a: ListArgs, ctx: Ctx) -> Result<(), CliError> {
 }
 
 async fn create(a: CreateArgs, ctx: Ctx) -> Result<(), CliError> {
+    let missing: Vec<&str> = [
+        ("--chain", a.chain.is_none()),
+        ("--network", a.network.is_none()),
+    ]
+    .iter()
+    .filter_map(|(name, missing)| if *missing { Some(*name) } else { None })
+    .collect();
+    if !missing.is_empty() {
+        return Err(CliError::Arg(format!(
+            "'endpoint create' requires {}. Run 'qn chain list' to see available chains.",
+            missing.join(" and "),
+        )));
+    }
     let req = CreateEndpointRequest {
         chain: a.chain,
         network: a.network,
@@ -243,6 +256,9 @@ async fn show(id: &str, ctx: Ctx) -> Result<(), CliError> {
 }
 
 async fn update(a: UpdateArgs, ctx: Ctx) -> Result<(), CliError> {
+    if a.label.is_none() {
+        return Err(CliError::Arg("'endpoint update' requires --label.".into()));
+    }
     let req = UpdateEndpointRequest { label: a.label };
     ctx.sdk.admin.update_endpoint(&a.id, &req).await?;
     ctx.out.note(&format!("✓ Updated endpoint {}", a.id));

src/commands/endpoint/security.rs

@@ -216,6 +216,23 @@ async fn options_show(id: &str, ctx: Ctx) -> Result<(), CliError> {
 }
 
 async fn set_options(a: SetOptionsArgs, ctx: Ctx) -> Result<(), CliError> {
+    if a.tokens.is_none()
+        && a.referrers.is_none()
+        && a.jwts.is_none()
+        && a.ips.is_none()
+        && a.domain_masks.is_none()
+        && a.hsts.is_none()
+        && a.cors.is_none()
+        && a.request_filters.is_none()
+        && a.ip_custom_header.is_none()
+    {
+        return Err(CliError::Arg(
+            "'endpoint security set-options' requires at least one of: \
+             --tokens, --referrers, --jwts, --ips, --domain-masks, --hsts, \
+             --cors, --request-filters, --ip-custom-header."
+                .into(),
+        ));
+    }
     let options = SecurityOptionsUpdate {
         tokens: a.tokens.map(|t| t.as_str().to_string()),
         referrers: a.referrers.map(|t| t.as_str().to_string()),

src/commands/team.rs

@@ -165,6 +165,11 @@ async fn endpoints(id: i64, ctx: Ctx) -> Result<(), CliError> {
 }
 
 async fn set_endpoints(a: SetEndpointsArgs, ctx: Ctx) -> Result<(), CliError> {
+    if a.endpoint_ids.is_empty() {
+        return Err(CliError::Arg(
+            "'team set-endpoints' requires at least one endpoint id.".into(),
+        ));
+    }
     let req = UpdateTeamEndpointsRequest {
         endpoint_ids: a.endpoint_ids.clone(),
     };