nworks 0.4.0 → 0.6.1

package/dist/index.js

@@ -7,7 +7,7 @@ var __export = (target, all) => {
 
 // src/index.ts
 import { createRequire } from "module";
-import { Command as Command10 } from "commander";
+import { Command as Command11 } from "commander";
 
 // src/commands/login.ts
 import { Command } from "commander";
@@ -736,6 +736,9 @@ var directoryCommand = new Command5("directory").description("Directory (organiz
 // src/commands/calendar.ts
 import { Command as Command6 } from "commander";
 
+// src/api/calendar.ts
+import { randomUUID } from "crypto";
+
 // src/auth/token-user.ts
 async function getValidUserToken(profile = "default") {
   const cached2 = await loadUserToken(profile);
@@ -754,37 +757,164 @@ async function getValidUserToken(profile = "default") {
 
 // src/api/calendar.ts
 var BASE_URL2 = "https://www.worksapis.com/v1.0";
-async function listEvents(fromDateTime, untilDateTime, userId = "me", profile = "default") {
+async function authedFetch(url2, init, profile) {
   const token = await getValidUserToken(profile);
+  const headers = new Headers(init.headers);
+  headers.set("Authorization", `Bearer ${token}`);
+  return fetch(url2, { ...init, headers });
+}
+async function handleError(res) {
+  if (res.status === 401) {
+    throw new AuthError("User token expired. Run `nworks login --user --scope calendar` again.");
+  }
+  let code = "UNKNOWN";
+  let description = `HTTP ${res.status}`;
+  try {
+    const body = await res.json();
+    code = body.code ?? code;
+    description = body.description ?? description;
+  } catch {
+  }
+  throw new ApiError(code, description, res.status);
+}
+function generateEventId() {
+  return `event-${randomUUID()}`;
+}
+function normalizeDateTime(dt) {
+  const match = dt.match(/^(\d{4}-\d{2}-\d{2}T\d{2}:\d{2})([+-]\d{2}:\d{2}|Z)?$/);
+  if (match) {
+    return `${match[1]}:00${match[2] ?? ""}`;
+  }
+  return dt;
+}
+async function listEvents(fromDateTime, untilDateTime, userId = "me", profile = "default") {
   const from = encodeURIComponent(fromDateTime);
   const until = encodeURIComponent(untilDateTime);
   const url2 = `${BASE_URL2}/users/${userId}/calendar/events?fromDateTime=${from}&untilDateTime=${until}`;
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] GET ${url2}`);
   }
-  const res = await fetch(url2, {
-    method: "GET",
-    headers: {
-      Authorization: `Bearer ${token}`,
-      "Content-Type": "application/json"
-    }
-  });
-  if (res.status === 401) {
-    throw new AuthError("User token expired. Run `nworks login --user` again.");
+  const res = await authedFetch(url2, { method: "GET" }, profile);
+  if (!res.ok) return handleError(res);
+  const data = await res.json();
+  return { events: data.events ?? [] };
+}
+async function createEvent(opts) {
+  const userId = opts.userId ?? "me";
+  const profile = opts.profile ?? "default";
+  const timeZone = opts.timeZone ?? "Asia/Seoul";
+  const eventId = generateEventId();
+  const eventComponent = {
+    eventId,
+    summary: opts.summary,
+    start: { dateTime: normalizeDateTime(opts.start), timeZone },
+    end: { dateTime: normalizeDateTime(opts.end), timeZone }
+  };
+  if (opts.description) eventComponent.description = opts.description;
+  if (opts.location) eventComponent.location = opts.location;
+  if (opts.transparency) eventComponent.transparency = opts.transparency;
+  if (opts.visibility) eventComponent.visibility = opts.visibility;
+  if (opts.attendees) {
+    eventComponent.attendees = opts.attendees.map((a) => ({
+      email: a.email,
+      displayName: a.displayName ?? "",
+      partstat: "NEEDS-ACTION",
+      isOptional: false,
+      isResource: false
+    }));
   }
-  if (!res.ok) {
-    let code = "UNKNOWN";
-    let description = `HTTP ${res.status}`;
-    try {
-      const errorBody = await res.json();
-      code = errorBody.code ?? code;
-      description = errorBody.description ?? description;
-    } catch {
-    }
-    throw new ApiError(code, description, res.status);
+  const body = {
+    eventComponents: [eventComponent],
+    sendNotification: opts.sendNotification ?? false
+  };
+  const url2 = `${BASE_URL2}/users/${userId}/calendar/events`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] POST ${url2}`);
+    console.error(`[nworks] Body: ${JSON.stringify(body, null, 2)}`);
+  }
+  const res = await authedFetch(
+    url2,
+    {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    },
+    profile
+  );
+  if (res.status === 201) {
+    return await res.json();
   }
+  if (!res.ok) return handleError(res);
+  return await res.json();
+}
+async function getEvent(eventId, userId = "me", profile = "default") {
+  const url2 = `${BASE_URL2}/users/${userId}/calendar/events/${eventId}`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] GET ${url2}`);
+  }
+  const res = await authedFetch(url2, { method: "GET" }, profile);
+  if (!res.ok) return handleError(res);
   const data = await res.json();
-  return { events: data.events ?? [] };
+  return data.eventComponents[0];
+}
+async function updateEvent(opts) {
+  const userId = opts.userId ?? "me";
+  const profile = opts.profile ?? "default";
+  const timeZone = opts.timeZone ?? "Asia/Seoul";
+  const existing = await getEvent(opts.eventId, userId, profile);
+  const eventComponent = {
+    eventId: opts.eventId,
+    summary: opts.summary ?? existing.summary,
+    start: opts.start ? { dateTime: normalizeDateTime(opts.start), timeZone } : existing.start,
+    end: opts.end ? { dateTime: normalizeDateTime(opts.end), timeZone } : existing.end
+  };
+  if (opts.description !== void 0) eventComponent.description = opts.description;
+  else if (existing.description) eventComponent.description = existing.description;
+  if (opts.location !== void 0) eventComponent.location = opts.location;
+  else if (existing.location) eventComponent.location = existing.location;
+  if (opts.transparency !== void 0) eventComponent.transparency = opts.transparency;
+  if (opts.visibility !== void 0) eventComponent.visibility = opts.visibility;
+  if (opts.attendees !== void 0) {
+    eventComponent.attendees = opts.attendees.map((a) => ({
+      email: a.email,
+      displayName: a.displayName ?? "",
+      partstat: "NEEDS-ACTION",
+      isOptional: false,
+      isResource: false
+    }));
+  } else if (existing.attendees) {
+    eventComponent.attendees = existing.attendees;
+  }
+  const body = {
+    eventComponents: [eventComponent],
+    sendNotification: opts.sendNotification ?? false
+  };
+  const url2 = `${BASE_URL2}/users/${userId}/calendar/events/${opts.eventId}`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] PUT ${url2}`);
+    console.error(`[nworks] Body: ${JSON.stringify(body, null, 2)}`);
+  }
+  const res = await authedFetch(
+    url2,
+    {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    },
+    profile
+  );
+  if (!res.ok) return handleError(res);
+}
+async function deleteEvent(eventId, userId = "me", sendNotification = false, profile = "default") {
+  const params = new URLSearchParams();
+  params.set("sendNotification", String(sendNotification));
+  const url2 = `${BASE_URL2}/users/${userId}/calendar/events/${eventId}?${params.toString()}`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] DELETE ${url2}`);
+  }
+  const res = await authedFetch(url2, { method: "DELETE" }, profile);
+  if (res.status === 204) return;
+  if (!res.ok) return handleError(res);
 }
 
 // src/commands/calendar.ts
@@ -798,7 +928,7 @@ function todayRange() {
     until: `${yyyy}-${mm}-${dd}T23:59:59+09:00`
   };
 }
-var listCommand = new Command6("list").description("List calendar events (requires User OAuth with calendar.read scope)").option("--user <userId>", "Target user ID (default: me)").option("--from <dateTime>", "Start (YYYY-MM-DDThh:mm:ss+09:00, default: today 00:00)").option("--until <dateTime>", "End (YYYY-MM-DDThh:mm:ss+09:00, default: today 23:59)").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
+var listCommand = new Command6("list").description("List calendar events (requires User OAuth with calendar.read or calendar scope)").option("--user <userId>", "Target user ID (default: me)").option("--from <dateTime>", "Start (YYYY-MM-DDThh:mm:ss+09:00, default: today 00:00)").option("--until <dateTime>", "End (YYYY-MM-DDThh:mm:ss+09:00, default: today 23:59)").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
   try {
     const defaults = todayRange();
     const from = opts.from ?? defaults.from;
@@ -812,6 +942,7 @@ var listCommand = new Command6("list").description("List calendar events (requir
     );
     const events = result.events.flatMap(
       (e) => e.eventComponents.map((c) => ({
+        eventId: c.eventId,
         summary: c.summary,
         start: c.start.dateTime ? `${c.start.dateTime} (${c.start.timeZone ?? ""})` : c.start.date ?? "",
         end: c.end.dateTime ? `${c.end.dateTime} (${c.end.timeZone ?? ""})` : c.end.date ?? "",
@@ -825,7 +956,85 @@ var listCommand = new Command6("list").description("List calendar events (requir
     process.exitCode = 1;
   }
 });
-var calendarCommand = new Command6("calendar").description("Calendar operations (requires User OAuth)").addCommand(listCommand);
+var createCommand = new Command6("create").description("Create a calendar event (requires User OAuth with calendar scope)").requiredOption("--title <title>", "Event title (summary)").requiredOption("--start <dateTime>", "Start (YYYY-MM-DDThh:mm:ss)").requiredOption("--end <dateTime>", "End (YYYY-MM-DDThh:mm:ss)").option("--tz <timeZone>", "Time zone (default: Asia/Seoul)", "Asia/Seoul").option("--description <text>", "Event description").option("--location <place>", "Event location").option("--attendees <emails>", "Attendee emails (comma-separated)").option("--notify", "Send notification to attendees").option("--user <userId>", "Target user ID (default: me)").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
+  try {
+    const attendees = opts.attendees ? opts.attendees.split(",").map((e) => ({ email: e.trim() })) : void 0;
+    const result = await createEvent({
+      summary: opts.title,
+      start: opts.start,
+      end: opts.end,
+      timeZone: opts.tz,
+      description: opts.description,
+      location: opts.location,
+      attendees,
+      sendNotification: opts.notify ?? false,
+      userId: opts.user ?? "me",
+      profile: opts.profile
+    });
+    const event = result.eventComponents?.[0];
+    const fmt = (t) => t?.dateTime ? `${t.dateTime} (${t.timeZone ?? ""})` : "";
+    output(
+      {
+        success: true,
+        eventId: event?.eventId,
+        summary: event?.summary,
+        start: fmt(event?.start),
+        end: fmt(event?.end)
+      },
+      opts
+    );
+  } catch (err) {
+    const error48 = err;
+    errorOutput({ code: error48.code, message: error48.message }, opts);
+    process.exitCode = 1;
+  }
+});
+var updateCommand = new Command6("update").description("Update a calendar event (requires User OAuth with calendar scope)").requiredOption("--id <eventId>", "Event ID").option("--title <title>", "New title (summary)").option("--start <dateTime>", "New start (YYYY-MM-DDThh:mm:ss)").option("--end <dateTime>", "New end (YYYY-MM-DDThh:mm:ss)").option("--tz <timeZone>", "Time zone (default: Asia/Seoul)", "Asia/Seoul").option("--description <text>", "New description").option("--location <place>", "New location").option("--attendees <emails>", "Attendee emails (comma-separated)").option("--notify", "Send notification to attendees").option("--user <userId>", "Target user ID (default: me)").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
+  try {
+    const hasUpdate = opts.title || opts.start || opts.end || opts.description || opts.location || opts.attendees;
+    if (!hasUpdate) {
+      throw new Error("Specify at least one of: --title, --start, --end, --description, --location, --attendees");
+    }
+    const attendees = opts.attendees ? opts.attendees.split(",").map((e) => ({ email: e.trim() })) : void 0;
+    await updateEvent({
+      eventId: opts.id,
+      summary: opts.title,
+      start: opts.start,
+      end: opts.end,
+      timeZone: opts.tz,
+      description: opts.description,
+      location: opts.location,
+      attendees,
+      sendNotification: opts.notify ?? false,
+      userId: opts.user ?? "me",
+      profile: opts.profile
+    });
+    output(
+      { success: true, eventId: opts.id, message: "Event updated" },
+      opts
+    );
+  } catch (err) {
+    const error48 = err;
+    errorOutput({ code: error48.code, message: error48.message }, opts);
+    process.exitCode = 1;
+  }
+});
+var deleteCommand = new Command6("delete").description("Delete a calendar event (requires User OAuth with calendar scope)").requiredOption("--id <eventId>", "Event ID").option("--notify", "Send notification to attendees").option("--user <userId>", "Target user ID (default: me)").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
+  try {
+    await deleteEvent(
+      opts.id,
+      opts.user ?? "me",
+      opts.notify ?? false,
+      opts.profile
+    );
+    output({ success: true, eventId: opts.id, message: "Event deleted" }, opts);
+  } catch (err) {
+    const error48 = err;
+    errorOutput({ code: error48.code, message: error48.message }, opts);
+    process.exitCode = 1;
+  }
+});
+var calendarCommand = new Command6("calendar").description("Calendar operations (requires User OAuth)").addCommand(listCommand).addCommand(createCommand).addCommand(updateCommand).addCommand(deleteCommand);
 
 // src/commands/drive.ts
 import { writeFile as writeFile2 } from "fs/promises";
@@ -836,13 +1045,13 @@ import { Command as Command7 } from "commander";
 import { readFile as readFile4, stat } from "fs/promises";
 import { basename } from "path";
 var BASE_URL3 = "https://www.worksapis.com/v1.0";
-async function authedFetch(url2, init, profile) {
+async function authedFetch2(url2, init, profile) {
   const token = await getValidUserToken(profile);
   const headers = new Headers(init.headers);
   headers.set("Authorization", `Bearer ${token}`);
   return fetch(url2, { ...init, headers });
 }
-async function handleError(res) {
+async function handleError2(res) {
   if (res.status === 401) {
     throw new AuthError("User token expired. Run `nworks login --user --scope file` again.");
   }
@@ -866,8 +1075,8 @@ async function listFiles(userId = "me", folderId, count = 20, cursor, profile =
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] GET ${url2}`);
   }
-  const res = await authedFetch(url2, { method: "GET" }, profile);
-  if (!res.ok) return handleError(res);
+  const res = await authedFetch2(url2, { method: "GET" }, profile);
+  if (!res.ok) return handleError2(res);
   const data = await res.json();
   return { files: data.files ?? [], responseMetaData: data.responseMetaData };
 }
@@ -880,7 +1089,7 @@ async function uploadFile(localPath, userId = "me", folderId, overwrite = false,
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] POST ${createUrl} (create upload URL)`);
   }
-  const createRes = await authedFetch(
+  const createRes = await authedFetch2(
     createUrl,
     {
       method: "POST",
@@ -889,7 +1098,7 @@ async function uploadFile(localPath, userId = "me", folderId, overwrite = false,
     },
     profile
   );
-  if (!createRes.ok) return handleError(createRes);
+  if (!createRes.ok) return handleError2(createRes);
   const { uploadUrl } = await createRes.json();
   const fileBuffer = await readFile4(localPath);
   const boundary = `----nworks${Date.now()}`;
@@ -907,7 +1116,7 @@ Content-Type: application/octet-stream\r
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] POST ${uploadUrl} (upload content, ${fileSize} bytes)`);
   }
-  const uploadRes = await authedFetch(
+  const uploadRes = await authedFetch2(
     uploadUrl,
     {
       method: "POST",
@@ -916,7 +1125,7 @@ Content-Type: application/octet-stream\r
     },
     profile
   );
-  if (!uploadRes.ok) return handleError(uploadRes);
+  if (!uploadRes.ok) return handleError2(uploadRes);
   return await uploadRes.json();
 }
 async function uploadBuffer(fileBuffer, fileName, userId = "me", folderId, overwrite = false, profile = "default") {
@@ -926,7 +1135,7 @@ async function uploadBuffer(fileBuffer, fileName, userId = "me", folderId, overw
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] POST ${createUrl} (create upload URL for buffer)`);
   }
-  const createRes = await authedFetch(
+  const createRes = await authedFetch2(
     createUrl,
     {
       method: "POST",
@@ -935,7 +1144,7 @@ async function uploadBuffer(fileBuffer, fileName, userId = "me", folderId, overw
     },
     profile
   );
-  if (!createRes.ok) return handleError(createRes);
+  if (!createRes.ok) return handleError2(createRes);
   const { uploadUrl } = await createRes.json();
   const boundary = `----nworks${Date.now()}`;
   const header = Buffer.from(
@@ -952,7 +1161,7 @@ Content-Type: application/octet-stream\r
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] POST ${uploadUrl} (upload buffer, ${fileSize} bytes)`);
   }
-  const uploadRes = await authedFetch(
+  const uploadRes = await authedFetch2(
     uploadUrl,
     {
       method: "POST",
@@ -961,7 +1170,7 @@ Content-Type: application/octet-stream\r
     },
     profile
   );
-  if (!uploadRes.ok) return handleError(uploadRes);
+  if (!uploadRes.ok) return handleError2(uploadRes);
   return await uploadRes.json();
 }
 async function downloadFile(fileId, userId = "me", profile = "default") {
@@ -969,7 +1178,7 @@ async function downloadFile(fileId, userId = "me", profile = "default") {
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] GET ${url2} (get download URL)`);
   }
-  const redirectRes = await authedFetch(
+  const redirectRes = await authedFetch2(
     url2,
     { method: "GET", redirect: "manual" },
     profile
@@ -979,14 +1188,14 @@ async function downloadFile(fileId, userId = "me", profile = "default") {
   }
   const location = redirectRes.headers.get("location");
   if (!location) {
-    if (!redirectRes.ok) return handleError(redirectRes);
+    if (!redirectRes.ok) return handleError2(redirectRes);
     throw new ApiError("NO_REDIRECT", "No download URL returned", redirectRes.status);
   }
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] GET ${location} (download content)`);
   }
-  const downloadRes = await authedFetch(location, { method: "GET" }, profile);
-  if (!downloadRes.ok) return handleError(downloadRes);
+  const downloadRes = await authedFetch2(location, { method: "GET" }, profile);
+  if (!downloadRes.ok) return handleError2(downloadRes);
   const arrayBuffer = await downloadRes.arrayBuffer();
   const buffer = Buffer.from(arrayBuffer);
   const disposition = downloadRes.headers.get("content-disposition");
@@ -1105,13 +1314,13 @@ import { Command as Command8 } from "commander";
 
 // src/api/mail.ts
 var BASE_URL4 = "https://www.worksapis.com/v1.0";
-async function authedFetch2(url2, init, profile) {
+async function authedFetch3(url2, init, profile) {
   const token = await getValidUserToken(profile);
   const headers = new Headers(init.headers);
   headers.set("Authorization", `Bearer ${token}`);
   return fetch(url2, { ...init, headers });
 }
-async function handleError2(res) {
+async function handleError3(res) {
   if (res.status === 401) {
     throw new AuthError("User token expired. Run `nworks login --user --scope mail` again.");
   }
@@ -1140,7 +1349,7 @@ async function sendMail(opts) {
   if (opts.cc) body.cc = opts.cc;
   if (opts.bcc) body.bcc = opts.bcc;
   if (opts.contentType) body.contentType = opts.contentType;
-  const res = await authedFetch2(
+  const res = await authedFetch3(
     url2,
     {
       method: "POST",
@@ -1150,7 +1359,7 @@ async function sendMail(opts) {
     profile
   );
   if (res.status === 202) return;
-  if (!res.ok) return handleError2(res);
+  if (!res.ok) return handleError3(res);
 }
 async function listMails(folderId = 0, userId = "me", count = 30, cursor, isUnread, profile = "default") {
   const params = new URLSearchParams();
@@ -1161,8 +1370,8 @@ async function listMails(folderId = 0, userId = "me", count = 30, cursor, isUnre
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] GET ${url2}`);
   }
-  const res = await authedFetch2(url2, { method: "GET" }, profile);
-  if (!res.ok) return handleError2(res);
+  const res = await authedFetch3(url2, { method: "GET" }, profile);
+  if (!res.ok) return handleError3(res);
   const data = await res.json();
   return {
     mails: data.mails ?? [],
@@ -1177,8 +1386,8 @@ async function readMail(mailId, userId = "me", profile = "default") {
   if (process.env["NWORKS_VERBOSE"] === "1") {
     console.error(`[nworks] GET ${url2}`);
   }
-  const res = await authedFetch2(url2, { method: "GET" }, profile);
-  if (!res.ok) return handleError2(res);
+  const res = await authedFetch3(url2, { method: "GET" }, profile);
+  if (!res.ok) return handleError3(res);
   return await res.json();
 }
 
@@ -1276,9 +1485,280 @@ var readCommand = new Command8("read").description("Read a specific mail (requir
 });
 var mailCommand = new Command8("mail").description("Mail operations (requires User OAuth with mail scope)").addCommand(sendCommand2).addCommand(listCommand3).addCommand(readCommand);
 
-// src/commands/mcp-cmd.ts
+// src/commands/task.ts
 import { Command as Command9 } from "commander";
 
+// src/api/task.ts
+var BASE_URL5 = "https://www.worksapis.com/v1.0";
+async function authedFetch4(url2, init, profile) {
+  const token = await getValidUserToken(profile);
+  const headers = new Headers(init.headers);
+  headers.set("Authorization", `Bearer ${token}`);
+  return fetch(url2, { ...init, headers });
+}
+async function handleError4(res) {
+  if (res.status === 401) {
+    throw new AuthError("User token expired. Run `nworks login --user --scope task` again.");
+  }
+  let code = "UNKNOWN";
+  let description = `HTTP ${res.status}`;
+  try {
+    const body = await res.json();
+    code = body.code ?? code;
+    description = body.description ?? description;
+  } catch {
+  }
+  throw new ApiError(code, description, res.status);
+}
+async function resolveUserId(userId, profile) {
+  if (userId !== "me") return userId;
+  const url2 = `${BASE_URL5}/users/me`;
+  const res = await authedFetch4(url2, { method: "GET" }, profile);
+  if (!res.ok) return handleError4(res);
+  const data = await res.json();
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] Resolved "me" \u2192 ${data.userId}`);
+  }
+  return data.userId;
+}
+async function listTasks(categoryId = "default", userId = "me", count = 50, cursor, status = "ALL", profile = "default") {
+  const params = new URLSearchParams();
+  params.set("categoryId", categoryId);
+  params.set("count", String(count));
+  params.set("status", status);
+  if (cursor) params.set("cursor", cursor);
+  const url2 = `${BASE_URL5}/users/${userId}/tasks?${params.toString()}`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] GET ${url2}`);
+  }
+  const res = await authedFetch4(url2, { method: "GET" }, profile);
+  if (!res.ok) return handleError4(res);
+  const data = await res.json();
+  return { tasks: data.tasks ?? [], responseMetaData: data.responseMetaData };
+}
+async function createTask(opts) {
+  const userId = opts.userId ?? "me";
+  const profile = opts.profile ?? "default";
+  const resolvedUserId = await resolveUserId(userId, profile);
+  const assignorId = opts.assignorId ?? resolvedUserId;
+  const assigneeIds = opts.assigneeIds ?? [resolvedUserId];
+  const body = {
+    assignorId,
+    assignees: assigneeIds.map((id) => ({ assigneeId: id, status: "TODO" })),
+    title: opts.title,
+    content: opts.content ?? "",
+    completionCondition: "ANY_ONE"
+  };
+  if (opts.dueDate) body.dueDate = opts.dueDate;
+  if (opts.categoryId) body.categoryId = opts.categoryId;
+  const url2 = `${BASE_URL5}/users/${userId}/tasks`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] POST ${url2}`);
+    console.error(`[nworks] Body: ${JSON.stringify(body, null, 2)}`);
+  }
+  const res = await authedFetch4(
+    url2,
+    {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    },
+    profile
+  );
+  if (res.status === 201) {
+    return await res.json();
+  }
+  if (!res.ok) return handleError4(res);
+  return await res.json();
+}
+async function updateTask(opts) {
+  const profile = opts.profile ?? "default";
+  const body = {};
+  if (opts.title !== void 0) body.title = opts.title;
+  if (opts.content !== void 0) body.content = opts.content;
+  if (opts.dueDate !== void 0) body.dueDate = opts.dueDate;
+  const url2 = `${BASE_URL5}/tasks/${opts.taskId}`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] PATCH ${url2}`);
+  }
+  const res = await authedFetch4(
+    url2,
+    {
+      method: "PATCH",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    },
+    profile
+  );
+  if (!res.ok) return handleError4(res);
+  return await res.json();
+}
+async function completeTask(taskId, profile = "default") {
+  const url2 = `${BASE_URL5}/tasks/${taskId}/complete`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] POST ${url2}`);
+  }
+  const res = await authedFetch4(
+    url2,
+    { method: "POST" },
+    profile
+  );
+  if (res.status === 204) return;
+  if (!res.ok) return handleError4(res);
+}
+async function incompleteTask(taskId, profile = "default") {
+  const url2 = `${BASE_URL5}/tasks/${taskId}/incomplete`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] POST ${url2}`);
+  }
+  const res = await authedFetch4(
+    url2,
+    { method: "POST" },
+    profile
+  );
+  if (res.status === 204) return;
+  if (!res.ok) return handleError4(res);
+}
+async function deleteTask(taskId, profile = "default") {
+  const url2 = `${BASE_URL5}/tasks/${taskId}`;
+  if (process.env["NWORKS_VERBOSE"] === "1") {
+    console.error(`[nworks] DELETE ${url2}`);
+  }
+  const res = await authedFetch4(
+    url2,
+    { method: "DELETE" },
+    profile
+  );
+  if (res.status === 204) return;
+  if (!res.ok) return handleError4(res);
+}
+
+// src/commands/task.ts
+var listCommand4 = new Command9("list").description("List tasks (requires User OAuth with task or task.read scope)").option("--category <categoryId>", "Category ID (default: default)", "default").option("--status <status>", "Filter: TODO or ALL (default: ALL)", "ALL").option("--count <n>", "Items per page (default: 50)", "50").option("--cursor <cursor>", "Pagination cursor").option("--user <userId>", "Target user ID (default: me)").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
+  try {
+    const result = await listTasks(
+      opts.category,
+      opts.user ?? "me",
+      parseInt(opts.count, 10),
+      opts.cursor,
+      opts.status,
+      opts.profile
+    );
+    const tasks = result.tasks.map((t) => ({
+      taskId: t.taskId,
+      title: t.title,
+      status: t.status,
+      dueDate: t.dueDate ?? "",
+      assignor: t.assignorName ?? t.assignorId,
+      created: t.createdTime
+    }));
+    output(
+      {
+        tasks,
+        count: tasks.length,
+        nextCursor: result.responseMetaData?.nextCursor ?? null
+      },
+      opts
+    );
+  } catch (err) {
+    const error48 = err;
+    errorOutput({ code: error48.code, message: error48.message }, opts);
+    process.exitCode = 1;
+  }
+});
+var createCommand2 = new Command9("create").description("Create a task (requires User OAuth with task scope)").requiredOption("--title <title>", "Task title").option("--body <content>", "Task content/description").option("--due <date>", "Due date (YYYY-MM-DD)").option("--category <categoryId>", "Category ID").option("--assignee <userIds>", "Assignee user IDs (comma-separated)").option("--user <userId>", "Creator user ID (default: me)").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
+  try {
+    const assigneeIds = opts.assignee ? opts.assignee.split(",").map((s) => s.trim()) : void 0;
+    const result = await createTask({
+      title: opts.title,
+      content: opts.body,
+      dueDate: opts.due,
+      categoryId: opts.category,
+      assigneeIds,
+      userId: opts.user ?? "me",
+      profile: opts.profile
+    });
+    output(
+      {
+        success: true,
+        taskId: result.taskId,
+        title: result.title,
+        status: result.status,
+        dueDate: result.dueDate
+      },
+      opts
+    );
+  } catch (err) {
+    const error48 = err;
+    errorOutput({ code: error48.code, message: error48.message }, opts);
+    process.exitCode = 1;
+  }
+});
+var updateCommand2 = new Command9("update").description("Update a task (requires User OAuth with task scope)").requiredOption("--id <taskId>", "Task ID").option("--title <title>", "New title").option("--body <content>", "New content").option("--due <date>", "New due date (YYYY-MM-DD)").option("--status <status>", "Set status: done or todo").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
+  try {
+    const profile = opts.profile;
+    const taskId = opts.id;
+    const status = opts.status;
+    if (status) {
+      if (status.toLowerCase() === "done") {
+        await completeTask(taskId, profile);
+      } else if (status.toLowerCase() === "todo") {
+        await incompleteTask(taskId, profile);
+      } else {
+        throw new Error("Invalid status. Use 'done' or 'todo'.");
+      }
+    }
+    const hasFieldUpdate = opts.title || opts.body || opts.due;
+    if (hasFieldUpdate) {
+      const result = await updateTask({
+        taskId,
+        title: opts.title,
+        content: opts.body,
+        dueDate: opts.due,
+        profile
+      });
+      output(
+        {
+          success: true,
+          taskId: result.taskId,
+          title: result.title,
+          status: result.status,
+          dueDate: result.dueDate
+        },
+        opts
+      );
+    } else if (status) {
+      output(
+        { success: true, taskId, status: status.toLowerCase() === "done" ? "DONE" : "TODO" },
+        opts
+      );
+    } else {
+      throw new Error("Specify at least one of: --title, --body, --due, --status");
+    }
+  } catch (err) {
+    const error48 = err;
+    errorOutput({ code: error48.code, message: error48.message }, opts);
+    process.exitCode = 1;
+  }
+});
+var deleteCommand2 = new Command9("delete").description("Delete a task (requires User OAuth with task scope)").requiredOption("--id <taskId>", "Task ID").option("--profile <name>", "Profile name", "default").option("--json", "JSON output").action(async (opts) => {
+  try {
+    await deleteTask(
+      opts.id,
+      opts.profile
+    );
+    output({ success: true, taskId: opts.id, message: "Task deleted" }, opts);
+  } catch (err) {
+    const error48 = err;
+    errorOutput({ code: error48.code, message: error48.message }, opts);
+    process.exitCode = 1;
+  }
+});
+var taskCommand = new Command9("task").description("Task operations (requires User OAuth with task scope)").addCommand(listCommand4).addCommand(createCommand2).addCommand(updateCommand2).addCommand(deleteCommand2);
+
+// src/commands/mcp-cmd.ts
+import { Command as Command10 } from "commander";
+
 // src/mcp/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -15161,6 +15641,112 @@ function registerTools(server) {
       }
     }
   );
+  server.tool(
+    "nworks_calendar_create",
+    "\uCE98\uB9B0\uB354 \uC77C\uC815\uC744 \uC0DD\uC131\uD569\uB2C8\uB2E4 (User OAuth calendar scope \uD544\uC694)",
+    {
+      summary: external_exports.string().describe("\uC77C\uC815 \uC81C\uBAA9"),
+      start: external_exports.string().describe("\uC2DC\uC791 \uC77C\uC2DC (YYYY-MM-DDThh:mm:ss)"),
+      end: external_exports.string().describe("\uC885\uB8CC \uC77C\uC2DC (YYYY-MM-DDThh:mm:ss)"),
+      timeZone: external_exports.string().optional().describe("\uD0C0\uC784\uC874 (\uAE30\uBCF8: Asia/Seoul)"),
+      description: external_exports.string().optional().describe("\uC77C\uC815 \uC124\uBA85"),
+      location: external_exports.string().optional().describe("\uC7A5\uC18C"),
+      attendees: external_exports.array(external_exports.object({ email: external_exports.string(), displayName: external_exports.string().optional() })).optional().describe("\uCC38\uC11D\uC790 \uBAA9\uB85D"),
+      sendNotification: external_exports.boolean().optional().describe("\uCC38\uC11D\uC790\uC5D0\uAC8C \uC54C\uB9BC \uBC1C\uC1A1 (\uAE30\uBCF8: false)"),
+      userId: external_exports.string().optional().describe("\uB300\uC0C1 \uC0AC\uC6A9\uC790 ID (\uBBF8\uC9C0\uC815 \uC2DC me)")
+    },
+    async ({ summary, start, end, timeZone, description, location, attendees, sendNotification, userId }) => {
+      try {
+        const result = await createEvent({
+          summary,
+          start,
+          end,
+          timeZone,
+          description,
+          location,
+          attendees,
+          sendNotification,
+          userId: userId ?? "me"
+        });
+        const event = result.eventComponents?.[0];
+        return {
+          content: [{ type: "text", text: JSON.stringify({ success: true, eventId: event?.eventId, summary: event?.summary, start: event?.start, end: event?.end }) }]
+        };
+      } catch (err) {
+        const error48 = err;
+        return {
+          content: [{ type: "text", text: `Error: ${error48.message}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server.tool(
+    "nworks_calendar_update",
+    "\uCE98\uB9B0\uB354 \uC77C\uC815\uC744 \uC218\uC815\uD569\uB2C8\uB2E4 (User OAuth calendar scope \uD544\uC694)",
+    {
+      eventId: external_exports.string().describe("\uC77C\uC815 ID"),
+      summary: external_exports.string().optional().describe("\uC0C8 \uC81C\uBAA9"),
+      start: external_exports.string().optional().describe("\uC0C8 \uC2DC\uC791 \uC77C\uC2DC (YYYY-MM-DDThh:mm:ss)"),
+      end: external_exports.string().optional().describe("\uC0C8 \uC885\uB8CC \uC77C\uC2DC (YYYY-MM-DDThh:mm:ss)"),
+      timeZone: external_exports.string().optional().describe("\uD0C0\uC784\uC874 (\uAE30\uBCF8: Asia/Seoul)"),
+      description: external_exports.string().optional().describe("\uC0C8 \uC124\uBA85"),
+      location: external_exports.string().optional().describe("\uC0C8 \uC7A5\uC18C"),
+      sendNotification: external_exports.boolean().optional().describe("\uCC38\uC11D\uC790\uC5D0\uAC8C \uC54C\uB9BC \uBC1C\uC1A1 (\uAE30\uBCF8: false)"),
+      userId: external_exports.string().optional().describe("\uB300\uC0C1 \uC0AC\uC6A9\uC790 ID (\uBBF8\uC9C0\uC815 \uC2DC me)")
+    },
+    async ({ eventId, summary, start, end, timeZone, description, location, sendNotification, userId }) => {
+      try {
+        await updateEvent({
+          eventId,
+          summary,
+          start,
+          end,
+          timeZone,
+          description,
+          location,
+          sendNotification,
+          userId: userId ?? "me"
+        });
+        return {
+          content: [{ type: "text", text: JSON.stringify({ success: true, eventId, message: "Event updated" }) }]
+        };
+      } catch (err) {
+        const error48 = err;
+        return {
+          content: [{ type: "text", text: `Error: ${error48.message}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server.tool(
+    "nworks_calendar_delete",
+    "\uCE98\uB9B0\uB354 \uC77C\uC815\uC744 \uC0AD\uC81C\uD569\uB2C8\uB2E4 (User OAuth calendar scope \uD544\uC694)",
+    {
+      eventId: external_exports.string().describe("\uC0AD\uC81C\uD560 \uC77C\uC815 ID"),
+      sendNotification: external_exports.boolean().optional().describe("\uCC38\uC11D\uC790\uC5D0\uAC8C \uC54C\uB9BC \uBC1C\uC1A1 (\uAE30\uBCF8: false)"),
+      userId: external_exports.string().optional().describe("\uB300\uC0C1 \uC0AC\uC6A9\uC790 ID (\uBBF8\uC9C0\uC815 \uC2DC me)")
+    },
+    async ({ eventId, sendNotification, userId }) => {
+      try {
+        await deleteEvent(
+          eventId,
+          userId ?? "me",
+          sendNotification ?? false
+        );
+        return {
+          content: [{ type: "text", text: JSON.stringify({ success: true, eventId, message: "Event deleted" }) }]
+        };
+      } catch (err) {
+        const error48 = err;
+        return {
+          content: [{ type: "text", text: `Error: ${error48.message}` }],
+          isError: true
+        };
+      }
+    }
+  );
   server.tool(
     "nworks_drive_list",
     "\uB4DC\uB77C\uC774\uBE0C \uD30C\uC77C/\uD3F4\uB354 \uBAA9\uB85D\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4 (User OAuth file \uB610\uB294 file.read scope \uD544\uC694)",
@@ -15413,6 +15999,142 @@ function registerTools(server) {
       }
     }
   );
+  server.tool(
+    "nworks_task_list",
+    "\uD560 \uC77C \uBAA9\uB85D\uC744 \uC870\uD68C\uD569\uB2C8\uB2E4 (User OAuth task \uB610\uB294 task.read scope \uD544\uC694)",
+    {
+      categoryId: external_exports.string().optional().describe("\uCE74\uD14C\uACE0\uB9AC ID (\uAE30\uBCF8: default)"),
+      status: external_exports.enum(["TODO", "ALL"]).optional().describe("\uD544\uD130: TODO \uB610\uB294 ALL (\uAE30\uBCF8: ALL)"),
+      count: external_exports.number().optional().describe("\uD398\uC774\uC9C0\uB2F9 \uD56D\uBAA9 \uC218 (\uAE30\uBCF8: 50, \uCD5C\uB300: 100)"),
+      cursor: external_exports.string().optional().describe("\uD398\uC774\uC9C0\uB124\uC774\uC158 \uCEE4\uC11C"),
+      userId: external_exports.string().optional().describe("\uB300\uC0C1 \uC0AC\uC6A9\uC790 ID (\uBBF8\uC9C0\uC815 \uC2DC me)")
+    },
+    async ({ categoryId, status, count, cursor, userId }) => {
+      try {
+        const result = await listTasks(
+          categoryId ?? "default",
+          userId ?? "me",
+          count ?? 50,
+          cursor,
+          status ?? "ALL"
+        );
+        const tasks = result.tasks.map((t) => ({
+          taskId: t.taskId,
+          title: t.title,
+          status: t.status,
+          dueDate: t.dueDate,
+          assignor: t.assignorName ?? t.assignorId,
+          created: t.createdTime
+        }));
+        return {
+          content: [{ type: "text", text: JSON.stringify({ tasks, count: tasks.length, nextCursor: result.responseMetaData?.nextCursor ?? null }) }]
+        };
+      } catch (err) {
+        const error48 = err;
+        return {
+          content: [{ type: "text", text: `Error: ${error48.message}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server.tool(
+    "nworks_task_create",
+    "\uD560 \uC77C\uC744 \uC0DD\uC131\uD569\uB2C8\uB2E4 (User OAuth task scope \uD544\uC694). \uAE30\uBCF8\uC801\uC73C\uB85C \uC790\uAE30 \uC790\uC2E0\uC5D0\uAC8C \uD560\uB2F9\uB429\uB2C8\uB2E4.",
+    {
+      title: external_exports.string().describe("\uD560 \uC77C \uC81C\uBAA9"),
+      content: external_exports.string().optional().describe("\uD560 \uC77C \uB0B4\uC6A9"),
+      dueDate: external_exports.string().optional().describe("\uB9C8\uAC10\uC77C (YYYY-MM-DD)"),
+      categoryId: external_exports.string().optional().describe("\uCE74\uD14C\uACE0\uB9AC ID"),
+      assigneeIds: external_exports.array(external_exports.string()).optional().describe("\uB2F4\uB2F9\uC790 user ID \uBAA9\uB85D (\uBBF8\uC9C0\uC815 \uC2DC \uC790\uAE30 \uC790\uC2E0)"),
+      userId: external_exports.string().optional().describe("\uC0DD\uC131\uC790 user ID (\uBBF8\uC9C0\uC815 \uC2DC me)")
+    },
+    async ({ title, content, dueDate, categoryId, assigneeIds, userId }) => {
+      try {
+        const result = await createTask({
+          title,
+          content,
+          dueDate,
+          categoryId,
+          assigneeIds,
+          userId: userId ?? "me"
+        });
+        return {
+          content: [{ type: "text", text: JSON.stringify({ success: true, taskId: result.taskId, title: result.title, status: result.status, dueDate: result.dueDate }) }]
+        };
+      } catch (err) {
+        const error48 = err;
+        return {
+          content: [{ type: "text", text: `Error: ${error48.message}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server.tool(
+    "nworks_task_update",
+    "\uD560 \uC77C\uC744 \uC218\uC815\uD569\uB2C8\uB2E4 (User OAuth task scope \uD544\uC694). \uC0C1\uD0DC \uBCC0\uACBD(done/todo)\uACFC \uD544\uB4DC \uC218\uC815\uC744 \uBAA8\uB450 \uC9C0\uC6D0\uD569\uB2C8\uB2E4.",
+    {
+      taskId: external_exports.string().describe("\uD560 \uC77C ID"),
+      status: external_exports.enum(["done", "todo"]).optional().describe("\uC0C1\uD0DC \uBCC0\uACBD: done \uB610\uB294 todo"),
+      title: external_exports.string().optional().describe("\uC0C8 \uC81C\uBAA9"),
+      content: external_exports.string().optional().describe("\uC0C8 \uB0B4\uC6A9"),
+      dueDate: external_exports.string().optional().describe("\uC0C8 \uB9C8\uAC10\uC77C (YYYY-MM-DD)")
+    },
+    async ({ taskId, status, title, content, dueDate }) => {
+      try {
+        if (status) {
+          if (status === "done") {
+            await completeTask(taskId);
+          } else {
+            await incompleteTask(taskId);
+          }
+        }
+        if (title !== void 0 || content !== void 0 || dueDate !== void 0) {
+          const result = await updateTask({ taskId, title, content, dueDate });
+          return {
+            content: [{ type: "text", text: JSON.stringify({ success: true, taskId: result.taskId, title: result.title, status: result.status, dueDate: result.dueDate }) }]
+          };
+        }
+        if (status) {
+          return {
+            content: [{ type: "text", text: JSON.stringify({ success: true, taskId, status: status === "done" ? "DONE" : "TODO" }) }]
+          };
+        }
+        return {
+          content: [{ type: "text", text: "Error: status, title, content, dueDate \uC911 \uD558\uB098 \uC774\uC0C1\uC744 \uC9C0\uC815\uD558\uC138\uC694." }],
+          isError: true
+        };
+      } catch (err) {
+        const error48 = err;
+        return {
+          content: [{ type: "text", text: `Error: ${error48.message}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server.tool(
+    "nworks_task_delete",
+    "\uD560 \uC77C\uC744 \uC0AD\uC81C\uD569\uB2C8\uB2E4 (User OAuth task scope \uD544\uC694)",
+    {
+      taskId: external_exports.string().describe("\uC0AD\uC81C\uD560 \uD560 \uC77C ID")
+    },
+    async ({ taskId }) => {
+      try {
+        await deleteTask(taskId);
+        return {
+          content: [{ type: "text", text: JSON.stringify({ success: true, taskId, message: "Task deleted" }) }]
+        };
+      } catch (err) {
+        const error48 = err;
+        return {
+          content: [{ type: "text", text: `Error: ${error48.message}` }],
+          isError: true
+        };
+      }
+    }
+  );
   server.tool(
     "nworks_whoami",
     "\uD604\uC7AC \uC778\uC99D\uB41C NAVER WORKS \uACC4\uC815 \uC815\uBCF4\uB97C \uD655\uC778\uD569\uB2C8\uB2E4",
@@ -15454,7 +16176,7 @@ async function startMcpServer() {
 }
 
 // src/commands/mcp-cmd.ts
-var mcpCommand = new Command9("mcp").description("Start MCP server (stdio transport)").option("--list-tools", "List available MCP tools").action(async (opts) => {
+var mcpCommand = new Command10("mcp").description("Start MCP server (stdio transport)").option("--list-tools", "List available MCP tools").action(async (opts) => {
   if (opts.listTools) {
     console.log("nworks_message_send     \u2014 Send message to user or channel");
     console.log("nworks_message_members  \u2014 List channel members");
@@ -15469,7 +16191,7 @@ var mcpCommand = new Command9("mcp").description("Start MCP server (stdio transp
 // src/index.ts
 var require2 = createRequire(import.meta.url);
 var { version: version2 } = require2("../package.json");
-var program = new Command10().name("nworks").description("NAVER WORKS CLI \u2014 built for humans and AI agents").version(version2).option("--json", "Always output JSON").option("-v, --verbose", "Debug logging").option("--dry-run", "Print request without calling API").option("-p, --profile <name>", "Profile name", "default");
+var program = new Command11().name("nworks").description("NAVER WORKS CLI \u2014 built for humans and AI agents").version(version2).option("--json", "Always output JSON").option("-v, --verbose", "Debug logging").option("--dry-run", "Print request without calling API").option("-p, --profile <name>", "Profile name", "default");
 program.addCommand(loginCommand);
 program.addCommand(logoutCommand);
 program.addCommand(whoamiCommand);
@@ -15478,6 +16200,7 @@ program.addCommand(directoryCommand);
 program.addCommand(calendarCommand);
 program.addCommand(driveCommand);
 program.addCommand(mailCommand);
+program.addCommand(taskCommand);
 program.addCommand(mcpCommand);
 program.parse();
 //# sourceMappingURL=index.js.map