@aderis-erp/cli 1.1.4 → 1.1.5

package/dist/commands/tenants.js

@@ -1,6 +1,7 @@
 import { Command, Args, Flags } from '@oclif/core';
 import { apiRequest, ApiError, isTextualMediaType, normalizeSortBy } from '../lib/api-client.js';
 import { getCurrentContext, getContext, getBaseUrls, hasCredentials, missingCredentialsMessage } from '../lib/config.js';
+import { resolveUserPath } from '../lib/paths.js';
 // 'upsert' loops create/update from the CLI, one request per record. It exists
 // only where the API has no import endpoint of its own; those keep the name
 // 'import' and are listed in SERVER_IMPORTS.
@@ -11,14 +12,14 @@ const SERVER_IMPORTS = [];
 const NESTED_UPSERTS = [];
 const SUBCOMMANDS = [...["list", "create", "get", "update", "delete", "logo", "icon", "update-identity-provider"], ...(HAS_UPSERT ? ['upsert'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_UPSERTS.map(n => `upsert-${n}`)];
 const ENDPOINTS = {
-    'list': { method: 'GET', path: '/v1/tenants', summary: 'Get all tenants with pagination (admin only)', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'create': { method: 'POST', path: '/v1/tenants', summary: 'Create a new tenant (admin only)', pathParams: [], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['supportedLocales', 'allowedSenders', 'salesInvoiceRecipientCc', 'salesInvoiceRecipientBcc', 'salesOrderRecipientCc', 'salesOrderRecipientBcc', 'deliveryNoteRecipientCc', 'deliveryNoteRecipientBcc'] },
-    'get': { method: 'GET', path: '/v1/tenants/{id}', summary: 'Get a tenant by ID (own tenant or admin)', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'update': { method: 'PATCH', path: '/v1/tenants/{id}', summary: 'Update a tenant (own tenant or admin)', pathParams: ['id'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['supportedLocales', 'allowedSenders', 'salesInvoiceRecipientCc', 'salesInvoiceRecipientBcc', 'salesOrderRecipientCc', 'salesOrderRecipientBcc', 'deliveryNoteRecipientCc', 'deliveryNoteRecipientBcc'] },
-    'delete': { method: 'DELETE', path: '/v1/tenants/{id}', summary: 'Delete a tenant (admin only)', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'logo': { method: 'POST', path: '/v1/tenants/{id}/logo', summary: 'Upload the tenant logo to the public bucket and set logoUrl (own tenant or admin)', pathParams: ['id'], hasBody: false, isMultipart: true, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'icon': { method: 'POST', path: '/v1/tenants/{id}/icon', summary: 'Upload the tenant icon to the public bucket and set iconUrl (own tenant or admin)', pathParams: ['id'], hasBody: false, isMultipart: true, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'update-identity-provider': { method: 'PUT', path: '/v1/tenants/{id}/identity-provider', summary: 'Synchronize a tenant with the identity provider (admin only)', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
+    'list': { method: 'GET', path: '/v1/tenants', summary: 'Get all tenants with pagination (admin only)', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'create': { method: 'POST', path: '/v1/tenants', summary: 'Create a new tenant (admin only)', pathParams: [], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['supportedLocales', 'allowedSenders', 'salesInvoiceRecipientCc', 'salesInvoiceRecipientBcc', 'salesOrderRecipientCc', 'salesOrderRecipientBcc', 'deliveryNoteRecipientCc', 'deliveryNoteRecipientBcc'], bodyMediaType: '', specParams: [] },
+    'get': { method: 'GET', path: '/v1/tenants/{id}', summary: 'Get a tenant by ID (own tenant or admin)', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'update': { method: 'PATCH', path: '/v1/tenants/{id}', summary: 'Update a tenant (own tenant or admin)', pathParams: ['id'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['supportedLocales', 'allowedSenders', 'salesInvoiceRecipientCc', 'salesInvoiceRecipientBcc', 'salesOrderRecipientCc', 'salesOrderRecipientBcc', 'deliveryNoteRecipientCc', 'deliveryNoteRecipientBcc'], bodyMediaType: '', specParams: [] },
+    'delete': { method: 'DELETE', path: '/v1/tenants/{id}', summary: 'Delete a tenant (admin only)', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'logo': { method: 'POST', path: '/v1/tenants/{id}/logo', summary: 'Upload the tenant logo to the public bucket and set logoUrl (own tenant or admin)', pathParams: ['id'], hasBody: false, isMultipart: true, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'icon': { method: 'POST', path: '/v1/tenants/{id}/icon', summary: 'Upload the tenant icon to the public bucket and set iconUrl (own tenant or admin)', pathParams: ['id'], hasBody: false, isMultipart: true, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'update-identity-provider': { method: 'PUT', path: '/v1/tenants/{id}/identity-provider', summary: 'Synchronize a tenant with the identity provider (admin only)', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
 };
 export default class Tenants extends Command {
     static description = 'Manage tenants';
@@ -40,7 +41,7 @@ export default class Tenants extends Command {
         table: Flags.boolean({ char: 't', description: 'Output as table (shortcut for --output table)' }),
         csv: Flags.boolean({ description: 'Output as CSV (shortcut for --output csv)' }),
         data: Flags.string({ char: 'd', description: 'JSON data for request body' }),
-        file: Flags.string({ char: 'f', description: 'Read request body from file' }),
+        file: Flags.string({ char: 'f', description: 'Read request body from file', parse: async (input) => resolveUserPath(input) }),
         set: Flags.string({ char: 's', description: 'Set individual field (e.g. --set firstName=John)', multiple: true }),
         page: Flags.string({ description: 'Page number' }),
         limit: Flags.string({ description: 'Items per page' }),
@@ -171,6 +172,17 @@ export default class Tenants extends Command {
                 }
             }
         }
+        // Flags generated from this endpoint's own parameters. Raw-body endpoints
+        // have them: their body is not JSON, so --set cannot carry a value there.
+        for (const param of endpoint.specParams) {
+            const value = flags[param.flag];
+            if (value === undefined || value === '') {
+                if (param.required)
+                    this.error(`Missing required flag: --${param.flag}`);
+                continue;
+            }
+            queryParams[param.name] = value;
+        }
         let data;
         if (endpoint.isMultipart) {
             if (!flags.file)
@@ -191,6 +203,25 @@ export default class Tenants extends Command {
             }
             data = form;
         }
+        else if (endpoint.bodyMediaType) {
+            // The body is not JSON (today only application/x-ndjson): it is sent
+            // verbatim, under the content type the endpoint asks for.
+            if (flags.file) {
+                const fsModule = await import('node:fs');
+                try {
+                    data = fsModule.readFileSync(flags.file, 'utf-8');
+                }
+                catch {
+                    this.error(`Failed to read file: ${flags.file}`);
+                }
+            }
+            else if (flags.data) {
+                data = flags.data;
+            }
+            else {
+                this.error(`This endpoint takes its body as ${endpoint.bodyMediaType}. Pass the file with -f / --file, or the text with --data.`);
+            }
+        }
         else if (endpoint.hasBody) {
             // For binary-response endpoints, --file is the output path, not a JSON
             // input file — skip the read-as-body branch.
@@ -286,7 +317,7 @@ export default class Tenants extends Command {
                 process.stderr.write(`Body: [multipart/form-data file upload]\n`);
             }
             else if (data) {
-                process.stderr.write(`Body: ${JSON.stringify(data, null, 2)}\n`);
+                process.stderr.write(`Body: ${typeof data === 'string' ? data : JSON.stringify(data, null, 2)}\n`);
             }
             process.stderr.write('\n');
         }
@@ -300,6 +331,7 @@ export default class Tenants extends Command {
                 const binResponse = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     binary: true,
                 });
@@ -325,6 +357,7 @@ export default class Tenants extends Command {
                 const raw = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     binary: true,
                 });
@@ -345,6 +378,7 @@ export default class Tenants extends Command {
                 response = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     acceptAny: true,
                 });

package/dist/commands/tools.js

@@ -1,6 +1,7 @@
 import { Command, Args, Flags } from '@oclif/core';
 import { apiRequest, ApiError, isTextualMediaType, normalizeSortBy } from '../lib/api-client.js';
 import { getCurrentContext, getContext, getBaseUrls, hasCredentials, missingCredentialsMessage } from '../lib/config.js';
+import { resolveUserPath } from '../lib/paths.js';
 // 'upsert' loops create/update from the CLI, one request per record. It exists
 // only where the API has no import endpoint of its own; those keep the name
 // 'import' and are listed in SERVER_IMPORTS.
@@ -11,8 +12,8 @@ const SERVER_IMPORTS = [];
 const NESTED_UPSERTS = [];
 const SUBCOMMANDS = [...["list", "find"], ...(HAS_UPSERT ? ['upsert'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_UPSERTS.map(n => `upsert-${n}`)];
 const ENDPOINTS = {
-    'list': { method: 'GET', path: '/v1/tools', summary: 'List all available tools', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'find': { method: 'GET', path: '/v1/tools/{name}', summary: 'Get a single tool by canonical name', pathParams: ['name'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
+    'list': { method: 'GET', path: '/v1/tools', summary: 'List all available tools', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'find': { method: 'GET', path: '/v1/tools/{name}', summary: 'Get a single tool by canonical name', pathParams: ['name'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
 };
 export default class Tools extends Command {
     static description = 'Manage tools';
@@ -30,7 +31,7 @@ export default class Tools extends Command {
         table: Flags.boolean({ char: 't', description: 'Output as table (shortcut for --output table)' }),
         csv: Flags.boolean({ description: 'Output as CSV (shortcut for --output csv)' }),
         data: Flags.string({ char: 'd', description: 'JSON data for request body' }),
-        file: Flags.string({ char: 'f', description: 'Read request body from file' }),
+        file: Flags.string({ char: 'f', description: 'Read request body from file', parse: async (input) => resolveUserPath(input) }),
         set: Flags.string({ char: 's', description: 'Set individual field (e.g. --set firstName=John)', multiple: true }),
         page: Flags.string({ description: 'Page number' }),
         limit: Flags.string({ description: 'Items per page' }),
@@ -161,6 +162,17 @@ export default class Tools extends Command {
                 }
             }
         }
+        // Flags generated from this endpoint's own parameters. Raw-body endpoints
+        // have them: their body is not JSON, so --set cannot carry a value there.
+        for (const param of endpoint.specParams) {
+            const value = flags[param.flag];
+            if (value === undefined || value === '') {
+                if (param.required)
+                    this.error(`Missing required flag: --${param.flag}`);
+                continue;
+            }
+            queryParams[param.name] = value;
+        }
         let data;
         if (endpoint.isMultipart) {
             if (!flags.file)
@@ -181,6 +193,25 @@ export default class Tools extends Command {
             }
             data = form;
         }
+        else if (endpoint.bodyMediaType) {
+            // The body is not JSON (today only application/x-ndjson): it is sent
+            // verbatim, under the content type the endpoint asks for.
+            if (flags.file) {
+                const fsModule = await import('node:fs');
+                try {
+                    data = fsModule.readFileSync(flags.file, 'utf-8');
+                }
+                catch {
+                    this.error(`Failed to read file: ${flags.file}`);
+                }
+            }
+            else if (flags.data) {
+                data = flags.data;
+            }
+            else {
+                this.error(`This endpoint takes its body as ${endpoint.bodyMediaType}. Pass the file with -f / --file, or the text with --data.`);
+            }
+        }
         else if (endpoint.hasBody) {
             // For binary-response endpoints, --file is the output path, not a JSON
             // input file — skip the read-as-body branch.
@@ -276,7 +307,7 @@ export default class Tools extends Command {
                 process.stderr.write(`Body: [multipart/form-data file upload]\n`);
             }
             else if (data) {
-                process.stderr.write(`Body: ${JSON.stringify(data, null, 2)}\n`);
+                process.stderr.write(`Body: ${typeof data === 'string' ? data : JSON.stringify(data, null, 2)}\n`);
             }
             process.stderr.write('\n');
         }
@@ -290,6 +321,7 @@ export default class Tools extends Command {
                 const binResponse = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     binary: true,
                 });
@@ -315,6 +347,7 @@ export default class Tools extends Command {
                 const raw = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     binary: true,
                 });
@@ -335,6 +368,7 @@ export default class Tools extends Command {
                 response = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     acceptAny: true,
                 });

package/dist/commands/users.js

@@ -1,6 +1,7 @@
 import { Command, Args, Flags } from '@oclif/core';
 import { apiRequest, ApiError, isTextualMediaType, normalizeSortBy } from '../lib/api-client.js';
 import { getCurrentContext, getContext, getBaseUrls, hasCredentials, missingCredentialsMessage } from '../lib/config.js';
+import { resolveUserPath } from '../lib/paths.js';
 // 'upsert' loops create/update from the CLI, one request per record. It exists
 // only where the API has no import endpoint of its own; those keep the name
 // 'import' and are listed in SERVER_IMPORTS.
@@ -11,28 +12,28 @@ const SERVER_IMPORTS = [];
 const NESTED_UPSERTS = ["roles"];
 const SUBCOMMANDS = [...["list-invitations", "create-invitations", "send-invitations-resend", "delete-invitations", "list", "create", "get", "update", "delete", "get-credentials", "password-reset", "delete-credentials-mfa", "delete-credentials-otp", "delete-credentials-passkeys", "delete-identity-providers", "permissions", "list-roles", "create-roles", "update-roles", "delete-roles", "disable", "enable"], ...(HAS_UPSERT ? ['upsert'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_UPSERTS.map(n => `upsert-${n}`)];
 const ENDPOINTS = {
-    'list-invitations': { method: 'GET', path: '/v1/users/invitations', summary: 'List the invitations still waiting to be accepted', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'create-invitations': { method: 'POST', path: '/v1/users/invitations', summary: 'Invite a person who has no Aderis login yet', pathParams: [], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'send-invitations-resend': { method: 'POST', path: '/v1/users/invitations/{invitationId}/resend', summary: 'Send the invitation mail again', pathParams: ['invitationId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'delete-invitations': { method: 'DELETE', path: '/v1/users/invitations/{invitationId}', summary: 'Withdraw an invitation', pathParams: ['invitationId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'list': { method: 'GET', path: '/v1/users', summary: 'List the people of the current tenant', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'create': { method: 'POST', path: '/v1/users', summary: 'Give an existing login access to this tenant', pathParams: [], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['roleIds'] },
-    'get': { method: 'GET', path: '/v1/users/{userId}', summary: 'Read one person', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'update': { method: 'PATCH', path: '/v1/users/{userId}', summary: 'Change one person', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'delete': { method: 'DELETE', path: '/v1/users/{userId}', summary: 'Remove one person from this tenant', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'get-credentials': { method: 'GET', path: '/v1/users/{userId}/credentials', summary: 'Read a tenant member’s sign-in methods', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'password-reset': { method: 'POST', path: '/v1/users/{userId}/password-reset', summary: 'Send a password-reset email', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'delete-credentials-mfa': { method: 'DELETE', path: '/v1/users/{userId}/credentials/mfa', summary: 'Reset a tenant member’s second factors', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'delete-credentials-otp': { method: 'DELETE', path: '/v1/users/{userId}/credentials/otp', summary: 'Reset a tenant member’s OTP factors', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'delete-credentials-passkeys': { method: 'DELETE', path: '/v1/users/{userId}/credentials/passkeys/{credentialId}', summary: 'Remove a tenant member’s passwordless passkey', pathParams: ['userId', 'credentialId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'delete-identity-providers': { method: 'DELETE', path: '/v1/users/{userId}/identity-providers/{provider}', summary: 'Unlink a tenant member’s external sign-in', pathParams: ['userId', 'provider'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'permissions': { method: 'GET', path: '/v1/users/{userId}/permissions', summary: 'Read what one person may do here', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'list-roles': { method: 'GET', path: '/v1/users/{userId}/roles', summary: 'Read the roles one person holds here', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'create-roles': { method: 'POST', path: '/v1/users/{userId}/roles', summary: 'Give one person one more role', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'update-roles': { method: 'PUT', path: '/v1/users/{userId}/roles', summary: 'Replace the roles one person holds here', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['roleIds'] },
-    'delete-roles': { method: 'DELETE', path: '/v1/users/{userId}/roles/{roleId}', summary: 'Take one role away from one person', pathParams: ['userId', 'roleId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'disable': { method: 'POST', path: '/v1/users/{userId}/disable', summary: 'Disable one person in this tenant', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'enable': { method: 'POST', path: '/v1/users/{userId}/enable', summary: 'Enable one person in this tenant', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
+    'list-invitations': { method: 'GET', path: '/v1/users/invitations', summary: 'List the invitations still waiting to be accepted', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'create-invitations': { method: 'POST', path: '/v1/users/invitations', summary: 'Invite a person who has no Aderis login yet', pathParams: [], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'send-invitations-resend': { method: 'POST', path: '/v1/users/invitations/{invitationId}/resend', summary: 'Send the invitation mail again', pathParams: ['invitationId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'delete-invitations': { method: 'DELETE', path: '/v1/users/invitations/{invitationId}', summary: 'Withdraw an invitation', pathParams: ['invitationId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'list': { method: 'GET', path: '/v1/users', summary: 'List the people of the current tenant', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'create': { method: 'POST', path: '/v1/users', summary: 'Give an existing login access to this tenant', pathParams: [], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['roleIds'], bodyMediaType: '', specParams: [] },
+    'get': { method: 'GET', path: '/v1/users/{userId}', summary: 'Read one person', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'update': { method: 'PATCH', path: '/v1/users/{userId}', summary: 'Change one person', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'delete': { method: 'DELETE', path: '/v1/users/{userId}', summary: 'Remove one person from this tenant', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'get-credentials': { method: 'GET', path: '/v1/users/{userId}/credentials', summary: 'Read a tenant member’s sign-in methods', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'password-reset': { method: 'POST', path: '/v1/users/{userId}/password-reset', summary: 'Send a password-reset email', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'delete-credentials-mfa': { method: 'DELETE', path: '/v1/users/{userId}/credentials/mfa', summary: 'Reset a tenant member’s second factors', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'delete-credentials-otp': { method: 'DELETE', path: '/v1/users/{userId}/credentials/otp', summary: 'Reset a tenant member’s OTP factors', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'delete-credentials-passkeys': { method: 'DELETE', path: '/v1/users/{userId}/credentials/passkeys/{credentialId}', summary: 'Remove a tenant member’s passwordless passkey', pathParams: ['userId', 'credentialId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'delete-identity-providers': { method: 'DELETE', path: '/v1/users/{userId}/identity-providers/{provider}', summary: 'Unlink a tenant member’s external sign-in', pathParams: ['userId', 'provider'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'permissions': { method: 'GET', path: '/v1/users/{userId}/permissions', summary: 'Read what one person may do here', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'list-roles': { method: 'GET', path: '/v1/users/{userId}/roles', summary: 'Read the roles one person holds here', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'create-roles': { method: 'POST', path: '/v1/users/{userId}/roles', summary: 'Give one person one more role', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'update-roles': { method: 'PUT', path: '/v1/users/{userId}/roles', summary: 'Replace the roles one person holds here', pathParams: ['userId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['roleIds'], bodyMediaType: '', specParams: [] },
+    'delete-roles': { method: 'DELETE', path: '/v1/users/{userId}/roles/{roleId}', summary: 'Take one role away from one person', pathParams: ['userId', 'roleId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'disable': { method: 'POST', path: '/v1/users/{userId}/disable', summary: 'Disable one person in this tenant', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'enable': { method: 'POST', path: '/v1/users/{userId}/enable', summary: 'Enable one person in this tenant', pathParams: ['userId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
 };
 export default class Users extends Command {
     static description = 'Manage users';
@@ -54,7 +55,7 @@ export default class Users extends Command {
         table: Flags.boolean({ char: 't', description: 'Output as table (shortcut for --output table)' }),
         csv: Flags.boolean({ description: 'Output as CSV (shortcut for --output csv)' }),
         data: Flags.string({ char: 'd', description: 'JSON data for request body' }),
-        file: Flags.string({ char: 'f', description: 'Read request body from file' }),
+        file: Flags.string({ char: 'f', description: 'Read request body from file', parse: async (input) => resolveUserPath(input) }),
         set: Flags.string({ char: 's', description: 'Set individual field (e.g. --set firstName=John)', multiple: true }),
         'credential-id': Flags.string({ description: 'Path param: credentialId' }),
         'provider': Flags.string({ description: 'Path param: provider' }),
@@ -188,6 +189,17 @@ export default class Users extends Command {
                 }
             }
         }
+        // Flags generated from this endpoint's own parameters. Raw-body endpoints
+        // have them: their body is not JSON, so --set cannot carry a value there.
+        for (const param of endpoint.specParams) {
+            const value = flags[param.flag];
+            if (value === undefined || value === '') {
+                if (param.required)
+                    this.error(`Missing required flag: --${param.flag}`);
+                continue;
+            }
+            queryParams[param.name] = value;
+        }
         let data;
         if (endpoint.isMultipart) {
             if (!flags.file)
@@ -208,6 +220,25 @@ export default class Users extends Command {
             }
             data = form;
         }
+        else if (endpoint.bodyMediaType) {
+            // The body is not JSON (today only application/x-ndjson): it is sent
+            // verbatim, under the content type the endpoint asks for.
+            if (flags.file) {
+                const fsModule = await import('node:fs');
+                try {
+                    data = fsModule.readFileSync(flags.file, 'utf-8');
+                }
+                catch {
+                    this.error(`Failed to read file: ${flags.file}`);
+                }
+            }
+            else if (flags.data) {
+                data = flags.data;
+            }
+            else {
+                this.error(`This endpoint takes its body as ${endpoint.bodyMediaType}. Pass the file with -f / --file, or the text with --data.`);
+            }
+        }
         else if (endpoint.hasBody) {
             // For binary-response endpoints, --file is the output path, not a JSON
             // input file — skip the read-as-body branch.
@@ -303,7 +334,7 @@ export default class Users extends Command {
                 process.stderr.write(`Body: [multipart/form-data file upload]\n`);
             }
             else if (data) {
-                process.stderr.write(`Body: ${JSON.stringify(data, null, 2)}\n`);
+                process.stderr.write(`Body: ${typeof data === 'string' ? data : JSON.stringify(data, null, 2)}\n`);
             }
             process.stderr.write('\n');
         }
@@ -317,6 +348,7 @@ export default class Users extends Command {
                 const binResponse = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     binary: true,
                 });
@@ -342,6 +374,7 @@ export default class Users extends Command {
                 const raw = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     binary: true,
                 });
@@ -362,6 +395,7 @@ export default class Users extends Command {
                 response = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     acceptAny: true,
                 });

package/dist/commands/vat-declarations.js

@@ -1,6 +1,7 @@
 import { Command, Args, Flags } from '@oclif/core';
 import { apiRequest, ApiError, isTextualMediaType, normalizeSortBy } from '../lib/api-client.js';
 import { getCurrentContext, getContext, getBaseUrls, hasCredentials, missingCredentialsMessage } from '../lib/config.js';
+import { resolveUserPath } from '../lib/paths.js';
 // 'upsert' loops create/update from the CLI, one request per record. It exists
 // only where the API has no import endpoint of its own; those keep the name
 // 'import' and are listed in SERVER_IMPORTS.
@@ -11,31 +12,31 @@ const SERVER_IMPORTS = [];
 const NESTED_UPSERTS = ["files"];
 const SUBCOMMANDS = [...["list", "create", "preview", "get", "update", "delete", "regenerate", "replace", "fields-contributions", "fields-contributions-export", "approve", "mark-as-filed", "xml", "notices-dismiss", "notices-restore", "list-files", "create-files", "get-files", "update-files", "delete-files", "files-download", "list-payments", "create-payments", "contributions-exclude", "exclusions-restore"], ...(HAS_UPSERT ? ['upsert'] : []), ...(HAS_EXPORT ? ['export'] : []), ...NESTED_UPSERTS.map(n => `upsert-${n}`)];
 const ENDPOINTS = {
-    'list': { method: 'GET', path: '/v1/vat-declarations', summary: 'List VAT reports (paginated)', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'create': { method: 'POST', path: '/v1/vat-declarations', summary: 'Create a VAT declaration report (always async-accepted)', pathParams: [], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'preview': { method: 'GET', path: '/v1/vat-declarations/preview', summary: 'Preview the in-scope counts and late entries for a candidate period', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'get': { method: 'GET', path: '/v1/vat-declarations/{id}', summary: 'Get a VAT report by id (this is the polling endpoint for async generation)', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'update': { method: 'PATCH', path: '/v1/vat-declarations/{id}', summary: 'Update manualAdjustments, submission type, or amount basis on a DRAFT report', pathParams: ['id'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['manualAdjustments'] },
-    'delete': { method: 'DELETE', path: '/v1/vat-declarations/{id}', summary: 'Delete a VAT declaration that is still in DRAFT status', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'regenerate': { method: 'POST', path: '/v1/vat-declarations/{id}/regenerate', summary: 'Re-run the full generation pipeline on a DRAFT report', pathParams: ['id'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'replace': { method: 'POST', path: '/v1/vat-declarations/{id}/replace', summary: 'Create a corrective DRAFT (Berichtigungsabrechnung) from a FILED report', pathParams: ['id'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'fields-contributions': { method: 'GET', path: '/v1/vat-declarations/{id}/fields/{fieldId}/contributions', summary: 'Drill into the contributions for a single Ziffer', pathParams: ['id', 'fieldId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'fields-contributions-export': { method: 'GET', path: '/v1/vat-declarations/{id}/fields/{fieldId}/contributions/export', summary: 'Export the drill-down result set as an Excel workbook', pathParams: ['id', 'fieldId'], hasBody: false, isMultipart: false, isBinaryResponse: true, hasBinaryVariant: false, bodyArrayFields: [] },
-    'approve': { method: 'POST', path: '/v1/vat-declarations/{id}/approve', summary: 'Approve a VAT report and produce the eCH-0217 XML submission file.', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'mark-as-filed': { method: 'POST', path: '/v1/vat-declarations/{id}/mark-as-filed', summary: 'Mark a FINALIZED VAT declaration as filed.', pathParams: ['id'], hasBody: true, isMultipart: true, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'xml': { method: 'GET', path: '/v1/vat-declarations/{id}/xml', summary: 'Download the eCH-0217 XML submission file for a FINALIZED or FILED VAT report.', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: true, hasBinaryVariant: false, bodyArrayFields: [] },
-    'notices-dismiss': { method: 'POST', path: '/v1/vat-declarations/{id}/notices/{noticeId}/dismiss', summary: 'Dismiss a generation notice with a mandatory reason.', pathParams: ['id', 'noticeId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'notices-restore': { method: 'POST', path: '/v1/vat-declarations/{id}/notices/{noticeId}/restore', summary: 'Restore a previously dismissed generation notice.', pathParams: ['id', 'noticeId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'list-files': { method: 'GET', path: '/v1/vat-declarations/{parentId}/files', summary: 'List file attachments for a VAT declaration', pathParams: ['parentId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'create-files': { method: 'POST', path: '/v1/vat-declarations/{parentId}/files', summary: 'Upload a file attachment to a VAT declaration', pathParams: ['parentId'], hasBody: false, isMultipart: true, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'get-files': { method: 'GET', path: '/v1/vat-declarations/{parentId}/files/{fileId}', summary: 'Get a file attachment for a VAT declaration', pathParams: ['parentId', 'fileId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'update-files': { method: 'PATCH', path: '/v1/vat-declarations/{parentId}/files/{fileId}', summary: 'Update file attachment metadata for a VAT declaration', pathParams: ['parentId', 'fileId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'delete-files': { method: 'DELETE', path: '/v1/vat-declarations/{parentId}/files/{fileId}', summary: 'Delete a file attachment from a VAT declaration', pathParams: ['parentId', 'fileId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'files-download': { method: 'GET', path: '/v1/vat-declarations/{parentId}/files/{fileId}/download', summary: 'Download a file attachment from a VAT declaration', pathParams: ['parentId', 'fileId'], hasBody: false, isMultipart: false, isBinaryResponse: true, hasBinaryVariant: false, bodyArrayFields: [] },
-    'list-payments': { method: 'GET', path: '/v1/vat-declarations/{vatDeclarationId}/payments', summary: 'Get all payments for a VAT declaration', pathParams: ['vatDeclarationId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'create-payments': { method: 'POST', path: '/v1/vat-declarations/{vatDeclarationId}/payments', summary: 'Create the payment for a filed VAT declaration', pathParams: ['vatDeclarationId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'contributions-exclude': { method: 'POST', path: '/v1/vat-declarations/{id}/contributions/{contributionId}/exclude', summary: 'Take the booking behind one contribution row out of a DRAFT declaration.', pathParams: ['id', 'contributionId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
-    'exclusions-restore': { method: 'POST', path: '/v1/vat-declarations/{id}/exclusions/{exclusionId}/restore', summary: 'Put an excluded booking back into a DRAFT declaration.', pathParams: ['id', 'exclusionId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [] },
+    'list': { method: 'GET', path: '/v1/vat-declarations', summary: 'List VAT reports (paginated)', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'create': { method: 'POST', path: '/v1/vat-declarations', summary: 'Create a VAT declaration report (always async-accepted)', pathParams: [], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'preview': { method: 'GET', path: '/v1/vat-declarations/preview', summary: 'Preview the in-scope counts and late entries for a candidate period', pathParams: [], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'get': { method: 'GET', path: '/v1/vat-declarations/{id}', summary: 'Get a VAT report by id (this is the polling endpoint for async generation)', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'update': { method: 'PATCH', path: '/v1/vat-declarations/{id}', summary: 'Update manualAdjustments, submission type, or amount basis on a DRAFT report', pathParams: ['id'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: ['manualAdjustments'], bodyMediaType: '', specParams: [] },
+    'delete': { method: 'DELETE', path: '/v1/vat-declarations/{id}', summary: 'Delete a VAT declaration that is still in DRAFT status', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'regenerate': { method: 'POST', path: '/v1/vat-declarations/{id}/regenerate', summary: 'Re-run the full generation pipeline on a DRAFT report', pathParams: ['id'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'replace': { method: 'POST', path: '/v1/vat-declarations/{id}/replace', summary: 'Create a corrective DRAFT (Berichtigungsabrechnung) from a FILED report', pathParams: ['id'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'fields-contributions': { method: 'GET', path: '/v1/vat-declarations/{id}/fields/{fieldId}/contributions', summary: 'Drill into the contributions for a single Ziffer', pathParams: ['id', 'fieldId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'fields-contributions-export': { method: 'GET', path: '/v1/vat-declarations/{id}/fields/{fieldId}/contributions/export', summary: 'Export the drill-down result set as an Excel workbook', pathParams: ['id', 'fieldId'], hasBody: false, isMultipart: false, isBinaryResponse: true, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'approve': { method: 'POST', path: '/v1/vat-declarations/{id}/approve', summary: 'Approve a VAT report and produce the eCH-0217 XML submission file.', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'mark-as-filed': { method: 'POST', path: '/v1/vat-declarations/{id}/mark-as-filed', summary: 'Mark a FINALIZED VAT declaration as filed.', pathParams: ['id'], hasBody: true, isMultipart: true, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'xml': { method: 'GET', path: '/v1/vat-declarations/{id}/xml', summary: 'Download the eCH-0217 XML submission file for a FINALIZED or FILED VAT report.', pathParams: ['id'], hasBody: false, isMultipart: false, isBinaryResponse: true, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'notices-dismiss': { method: 'POST', path: '/v1/vat-declarations/{id}/notices/{noticeId}/dismiss', summary: 'Dismiss a generation notice with a mandatory reason.', pathParams: ['id', 'noticeId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'notices-restore': { method: 'POST', path: '/v1/vat-declarations/{id}/notices/{noticeId}/restore', summary: 'Restore a previously dismissed generation notice.', pathParams: ['id', 'noticeId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'list-files': { method: 'GET', path: '/v1/vat-declarations/{parentId}/files', summary: 'List file attachments for a VAT declaration', pathParams: ['parentId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'create-files': { method: 'POST', path: '/v1/vat-declarations/{parentId}/files', summary: 'Upload a file attachment to a VAT declaration', pathParams: ['parentId'], hasBody: false, isMultipart: true, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'get-files': { method: 'GET', path: '/v1/vat-declarations/{parentId}/files/{fileId}', summary: 'Get a file attachment for a VAT declaration', pathParams: ['parentId', 'fileId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'update-files': { method: 'PATCH', path: '/v1/vat-declarations/{parentId}/files/{fileId}', summary: 'Update file attachment metadata for a VAT declaration', pathParams: ['parentId', 'fileId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'delete-files': { method: 'DELETE', path: '/v1/vat-declarations/{parentId}/files/{fileId}', summary: 'Delete a file attachment from a VAT declaration', pathParams: ['parentId', 'fileId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'files-download': { method: 'GET', path: '/v1/vat-declarations/{parentId}/files/{fileId}/download', summary: 'Download a file attachment from a VAT declaration', pathParams: ['parentId', 'fileId'], hasBody: false, isMultipart: false, isBinaryResponse: true, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'list-payments': { method: 'GET', path: '/v1/vat-declarations/{vatDeclarationId}/payments', summary: 'Get all payments for a VAT declaration', pathParams: ['vatDeclarationId'], hasBody: false, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'create-payments': { method: 'POST', path: '/v1/vat-declarations/{vatDeclarationId}/payments', summary: 'Create the payment for a filed VAT declaration', pathParams: ['vatDeclarationId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'contributions-exclude': { method: 'POST', path: '/v1/vat-declarations/{id}/contributions/{contributionId}/exclude', summary: 'Take the booking behind one contribution row out of a DRAFT declaration.', pathParams: ['id', 'contributionId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
+    'exclusions-restore': { method: 'POST', path: '/v1/vat-declarations/{id}/exclusions/{exclusionId}/restore', summary: 'Put an excluded booking back into a DRAFT declaration.', pathParams: ['id', 'exclusionId'], hasBody: true, isMultipart: false, isBinaryResponse: false, hasBinaryVariant: false, bodyArrayFields: [], bodyMediaType: '', specParams: [] },
 };
 export default class VatDeclarations extends Command {
     static description = 'Manage vat declarations';
@@ -57,7 +58,7 @@ export default class VatDeclarations extends Command {
         table: Flags.boolean({ char: 't', description: 'Output as table (shortcut for --output table)' }),
         csv: Flags.boolean({ description: 'Output as CSV (shortcut for --output csv)' }),
         data: Flags.string({ char: 'd', description: 'JSON data for request body' }),
-        file: Flags.string({ char: 'f', description: 'Read request body from file' }),
+        file: Flags.string({ char: 'f', description: 'Read request body from file', parse: async (input) => resolveUserPath(input) }),
         set: Flags.string({ char: 's', description: 'Set individual field (e.g. --set firstName=John)', multiple: true }),
         'field-id': Flags.string({ description: 'Path param: fieldId' }),
         'notice-id': Flags.string({ description: 'Path param: noticeId' }),
@@ -193,6 +194,17 @@ export default class VatDeclarations extends Command {
                 }
             }
         }
+        // Flags generated from this endpoint's own parameters. Raw-body endpoints
+        // have them: their body is not JSON, so --set cannot carry a value there.
+        for (const param of endpoint.specParams) {
+            const value = flags[param.flag];
+            if (value === undefined || value === '') {
+                if (param.required)
+                    this.error(`Missing required flag: --${param.flag}`);
+                continue;
+            }
+            queryParams[param.name] = value;
+        }
         let data;
         if (endpoint.isMultipart) {
             if (!flags.file)
@@ -213,6 +225,25 @@ export default class VatDeclarations extends Command {
             }
             data = form;
         }
+        else if (endpoint.bodyMediaType) {
+            // The body is not JSON (today only application/x-ndjson): it is sent
+            // verbatim, under the content type the endpoint asks for.
+            if (flags.file) {
+                const fsModule = await import('node:fs');
+                try {
+                    data = fsModule.readFileSync(flags.file, 'utf-8');
+                }
+                catch {
+                    this.error(`Failed to read file: ${flags.file}`);
+                }
+            }
+            else if (flags.data) {
+                data = flags.data;
+            }
+            else {
+                this.error(`This endpoint takes its body as ${endpoint.bodyMediaType}. Pass the file with -f / --file, or the text with --data.`);
+            }
+        }
         else if (endpoint.hasBody) {
             // For binary-response endpoints, --file is the output path, not a JSON
             // input file — skip the read-as-body branch.
@@ -308,7 +339,7 @@ export default class VatDeclarations extends Command {
                 process.stderr.write(`Body: [multipart/form-data file upload]\n`);
             }
             else if (data) {
-                process.stderr.write(`Body: ${JSON.stringify(data, null, 2)}\n`);
+                process.stderr.write(`Body: ${typeof data === 'string' ? data : JSON.stringify(data, null, 2)}\n`);
             }
             process.stderr.write('\n');
         }
@@ -322,6 +353,7 @@ export default class VatDeclarations extends Command {
                 const binResponse = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     binary: true,
                 });
@@ -347,6 +379,7 @@ export default class VatDeclarations extends Command {
                 const raw = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     binary: true,
                 });
@@ -367,6 +400,7 @@ export default class VatDeclarations extends Command {
                 response = await apiRequest(endpoint.method, apiPath, {
                     params: Object.keys(queryParams).length > 0 ? queryParams : undefined,
                     data,
+                    contentType: endpoint.bodyMediaType || undefined,
                     contextName: flags.context,
                     acceptAny: true,
                 });