opctl 0.1.6 → 0.1.7

package/dist/cli.js

@@ -3,7 +3,7 @@ import { chmodSync, existsSync, mkdirSync, readFileSync, realpathSync, writeFile
 import { fileURLToPath } from "node:url";
 import { Command } from "commander";
 import createClient from "openapi-fetch";
-import { dirname, join, resolve } from "node:path";
+import { basename, dirname, join, resolve } from "node:path";
 import { homedir } from "node:os";
 import { mkdir, writeFile } from "node:fs/promises";
 //#region src/client/auth.ts
@@ -173,8 +173,10 @@ function normalizeWorkPackageSummary(resource) {
 		subject: stringField(object.subject),
 		status: getLink(object, "status")?.title,
 		assignee: getLink(object, "assignee")?.title,
+		responsible: getLink(object, "responsible")?.title,
 		project: getLink(object, "project")?.title,
 		type: getLink(object, "type")?.title,
+		priority: getLink(object, "priority")?.title,
 		href: getLink(object, "self")?.href,
 		updatedAt: stringField(object.updatedAt),
 		shortDescription: shortDescription(extractDescription(object.description)),
@@ -192,6 +194,21 @@ function normalizeWorkPackageDetail(resource) {
 		actions: actionLinks(object)
 	};
 }
+function normalizeAttachment(resource) {
+	const object = asObject(resource) ?? {};
+	return {
+		id: numberField(object.id),
+		fileName: stringField(object.fileName),
+		contentType: stringField(object.contentType),
+		fileSize: numberField(object.fileSize) ?? numberField(object.filesize),
+		description: extractDescription(object.description),
+		href: getLink(object, "self")?.href,
+		downloadHref: getLink(object, "staticDownloadLocation")?.href ?? getLink(object, "downloadLocation")?.href,
+		containerHref: getLink(object, "container")?.href,
+		author: getLink(object, "author")?.title,
+		createdAt: stringField(object.createdAt)
+	};
+}
 function actionLinks(resource) {
 	const links = asObject(asObject(resource)?._links) ?? {};
 	const actions = {};
@@ -235,6 +252,43 @@ function stringField(value) {
 function numberField(value) {
 	return typeof value === "number" ? value : void 0;
 }
+function normalizeType(resource) {
+	const object = asObject(resource) ?? {};
+	return {
+		id: numberField(object.id),
+		name: stringField(object.name),
+		href: requireLinkHref(resource, "self"),
+		position: numberField(object.position),
+		isDefault: booleanField(object.isDefault),
+		isMilestone: booleanField(object.isMilestone)
+	};
+}
+function normalizeStatus(resource) {
+	const object = asObject(resource) ?? {};
+	return {
+		id: numberField(object.id),
+		name: stringField(object.name),
+		href: requireLinkHref(resource, "self"),
+		position: numberField(object.position),
+		isClosed: booleanField(object.isClosed),
+		isDefault: booleanField(object.isDefault),
+		isReadonly: booleanField(object.isReadonly)
+	};
+}
+function normalizePriority(resource) {
+	const object = asObject(resource) ?? {};
+	return {
+		id: numberField(object.id),
+		name: stringField(object.name),
+		href: requireLinkHref(resource, "self"),
+		position: numberField(object.position),
+		isDefault: booleanField(object.isDefault),
+		isActive: booleanField(object.isActive)
+	};
+}
+function booleanField(value) {
+	return typeof value === "boolean" ? value : void 0;
+}
 //#endregion
 //#region src/output/text.ts
 function renderKeyValue(value) {
@@ -258,6 +312,20 @@ function normalizeCollection(resource, mapper) {
 	};
 }
 //#endregion
+//#region src/client/urls.ts
+/**
+* Convert an API href like `/api/v3/work_packages/23732` (or with instance
+* prefix `/openproject/api/v3/work_packages/23732`) into a browser-facing URL
+* by stripping the `/api/v3` segment and combining with the instance base URL.
+*/
+function apiHrefToBrowserUrl(baseUrl, href) {
+	if (!href) return void 0;
+	const markerIndex = href.indexOf("/api/v3/");
+	if (markerIndex === -1) return void 0;
+	const pathAfterApi = href.slice(markerIndex + 8).split("?")[0].split("#")[0];
+	return `${baseUrl.replace(/\/+$/, "")}/${pathAfterApi}`;
+}
+//#endregion
 //#region src/client/openProjectClient.ts
 var OpenProjectClient = class {
 	config;
@@ -285,15 +353,28 @@ var OpenProjectClient = class {
 		return this.request("GET", `/api/v3/work_packages/${encodeURIComponent(String(id))}`);
 	}
 	async getWorkPackage(id) {
-		return normalizeWorkPackageDetail(await this.getWorkPackageRaw(id));
+		const detail = normalizeWorkPackageDetail(await this.getWorkPackageRaw(id));
+		return {
+			...detail,
+			browserUrl: apiHrefToBrowserUrl(this.config.baseUrl, detail.href)
+		};
 	}
 	async searchWorkPackages(options) {
 		const effectiveProject = options.project ?? this.config.defaultProject;
 		const basePath = effectiveProject ? `/api/v3/projects/${encodeURIComponent(effectiveProject)}/work_packages` : "/api/v3/work_packages";
 		const params = new URLSearchParams({ pageSize: String(normalizePageSize(options.pageSize)) });
-		const filters = buildWorkPackageFilters(options);
+		const filters = await this.buildResolvedWorkPackageFilters(options);
 		if (filters.length > 0) params.set("filters", JSON.stringify(filters));
-		return normalizeCollection(await this.request("GET", `${basePath}?${params}`), normalizeWorkPackageSummary);
+		const sortBy = buildSortBy(options.sort);
+		if (sortBy.length > 0) params.set("sortBy", JSON.stringify(sortBy));
+		const baseUrl = this.config.baseUrl;
+		return normalizeCollection(await this.request("GET", `${basePath}?${params}`), (raw) => {
+			const wp = normalizeWorkPackageSummary(raw);
+			return {
+				...wp,
+				browserUrl: apiHrefToBrowserUrl(baseUrl, wp.href)
+			};
+		});
 	}
 	async mine(options) {
 		await this.getMe();
@@ -303,6 +384,21 @@ var OpenProjectClient = class {
 			open: true
 		});
 	}
+	async accountable(options) {
+		await this.getMe();
+		return this.searchWorkPackages({
+			...options,
+			responsibleMe: true,
+			open: true
+		});
+	}
+	async listWorkPackageAttachments(id) {
+		return normalizeCollection(await this.request("GET", `/api/v3/work_packages/${encodeURIComponent(String(id))}/attachments`), normalizeAttachment);
+	}
+	async downloadAttachment(attachment) {
+		if (!attachment.downloadHref) throw new OpctlError(`attachment ${attachment.id ?? attachment.fileName ?? "unknown"} has no download href`, EXIT_CODES.validation);
+		return (await this.fetchRaw("GET", attachment.downloadHref)).arrayBuffer();
+	}
 	async commentWorkPackage(id, message, dryRun) {
 		if (!this.config.allowWrite) throw new WriteBlockedError();
 		if (message.trim() === "") throw new OpctlError("comment message must not be empty", EXIT_CODES.validation);
@@ -329,8 +425,103 @@ var OpenProjectClient = class {
 			link: getLink(response, "self")?.href ?? requireLinkHref(raw, "self")
 		};
 	}
+	async listTypes(options = {}) {
+		const path = options.project ? `/api/v3/projects/${encodeURIComponent(options.project)}/types` : "/api/v3/types";
+		return normalizeCollection(await this.request("GET", path), normalizeType);
+	}
+	async listStatuses() {
+		return normalizeCollection(await this.request("GET", "/api/v3/statuses"), normalizeStatus);
+	}
+	async listPriorities() {
+		return normalizeCollection(await this.request("GET", "/api/v3/priorities"), normalizePriority);
+	}
+	async createWorkPackage(options) {
+		if (!this.config.allowWrite) throw new WriteBlockedError();
+		const project = options.project.trim();
+		const subject = options.subject.trim();
+		if (!project) throw new OpctlError("project must not be empty", EXIT_CODES.validation);
+		if (!options.type || !options.type.trim()) throw new OpctlError("type must not be empty", EXIT_CODES.validation);
+		if (!subject) throw new OpctlError("subject must not be empty", EXIT_CODES.validation);
+		const typeCollection = await this.listTypes({ project });
+		const resolvedTypeHref = resolveResourceHref("type", options.type, typeCollection.elements, "opctl types [--project <project>]");
+		let resolvedStatusHref;
+		if (options.status && options.status.trim()) {
+			const statusCollection = await this.listStatuses();
+			resolvedStatusHref = resolveResourceHref("status", options.status, statusCollection.elements, "opctl statuses");
+		}
+		let resolvedPriorityHref;
+		if (options.priority && options.priority.trim()) {
+			const priorityCollection = await this.listPriorities();
+			resolvedPriorityHref = resolveResourceHref("priority", options.priority, priorityCollection.elements, "opctl priorities");
+		}
+		const payload = {
+			subject,
+			...options.description !== void 0 ? { description: {
+				format: "markdown",
+				raw: options.description
+			} } : {},
+			_links: {
+				project: { href: `/api/v3/projects/${project}` },
+				type: { href: resolvedTypeHref },
+				...resolvedStatusHref ? { status: { href: resolvedStatusHref } } : {},
+				...resolvedPriorityHref ? { priority: { href: resolvedPriorityHref } } : {}
+			}
+		};
+		const validationErrors = extractFormValidationErrors(await this.request("POST", "/api/v3/work_packages/form", payload));
+		const errorKeys = Object.keys(validationErrors);
+		if (errorKeys.length > 0) throw new OpctlError(`work package create validation failed: ${errorKeys.map((key) => `${key}: ${validationErrors[key]}`).join("; ")}`, EXIT_CODES.validation, validationErrors);
+		if (options.dryRun) return {
+			subject,
+			status: "dry-run",
+			request: {
+				method: "POST",
+				path: "/api/v3/work_packages",
+				payload
+			}
+		};
+		const detail = normalizeWorkPackageDetail(await this.request("POST", "/api/v3/work_packages", payload));
+		return {
+			id: detail.id,
+			subject: detail.subject,
+			status: "created",
+			href: detail.href,
+			browserUrl: apiHrefToBrowserUrl(this.config.baseUrl, detail.href)
+		};
+	}
+	async buildResolvedWorkPackageFilters(options) {
+		const filters = [...buildWorkPackageFilters(options)];
+		if (options.notStatus) for (const status of options.notStatus) filters.push({ status: {
+			operator: "!",
+			values: [await this.resolveStatusFilterValue(status)]
+		} });
+		if (options.filters) for (const filter of options.filters) filters.push({ [filter.field]: {
+			operator: filter.operator,
+			values: filter.values
+		} });
+		return filters;
+	}
+	async resolveStatusFilterValue(raw) {
+		const trimmed = raw.trim();
+		if (!trimmed) throw new OpctlError("status filter value must not be empty", EXIT_CODES.validation);
+		const idFromHref = idFromApiHref(trimmed, "/api/v3/statuses/");
+		if (idFromHref) return idFromHref;
+		if (/^\d+$/.test(trimmed)) return trimmed;
+		const statuses = await this.listStatuses();
+		const lower = trimmed.toLowerCase();
+		const matches = statuses.elements.filter((status) => status.name?.toLowerCase() === lower);
+		if (matches.length === 0) throw new OpctlError(`unknown status '${trimmed}'; run opctl statuses to list valid values`, EXIT_CODES.validation);
+		if (matches.length > 1) throw new OpctlError(`ambiguous status '${trimmed}'; matches: ${matches.map((status) => `${status.name} (${status.href})`).join(", ")}`, EXIT_CODES.validation);
+		const href = matches[0]?.href;
+		const id = idFromApiHref(href, "/api/v3/statuses/");
+		if (!id) throw new OpctlError(`status '${trimmed}' has no usable href`, EXIT_CODES.validation);
+		return id;
+	}
 	async request(method, pathOrHref, body) {
+		return parseResponse(await this.fetchRaw(method, pathOrHref, body));
+	}
+	async fetchRaw(method, pathOrHref, body) {
 		const url = pathOrHref.startsWith("http://") || pathOrHref.startsWith("https://") ? pathOrHref : `${this.config.baseUrl}${pathOrHref.startsWith("/") ? "" : "/"}${pathOrHref}`;
+		const includeAuthorization = !pathOrHref.startsWith("http://") && !pathOrHref.startsWith("https://") || url.startsWith(`${this.config.baseUrl}/`) || url === this.config.baseUrl;
 		const controller = new AbortController();
 		const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
 		try {
@@ -340,13 +531,12 @@ var OpenProjectClient = class {
 				headers: {
 					Accept: "application/hal+json, application/json",
 					...body === void 0 ? {} : { "Content-Type": "application/json" },
-					Authorization: createAuthorizationHeader(this.config.authMode, this.config.token)
+					...includeAuthorization ? { Authorization: createAuthorizationHeader(this.config.authMode, this.config.token) } : {}
 				},
 				...body === void 0 ? {} : { body: JSON.stringify(body) }
 			});
-			const parsed = await parseResponse(response);
-			if (!response.ok) throw new OpenProjectHttpError(response.status, parsed);
-			return parsed;
+			if (!response.ok) throw new OpenProjectHttpError(response.status, await parseResponse(response));
+			return response;
 		} catch (error) {
 			if (error instanceof OpenProjectHttpError || error instanceof OpctlError) throw error;
 			if (error instanceof Error && error.name === "AbortError") throw new NetworkError("OpenProject request timed out");
@@ -366,6 +556,14 @@ function buildWorkPackageFilters(options) {
 		operator: "=",
 		values: ["me"]
 	} });
+	if (options.responsibleMe) filters.push({ responsible: {
+		operator: "=",
+		values: ["me"]
+	} });
+	if (options.responsible && options.responsible.trim() !== "") filters.push({ responsible: {
+		operator: "=",
+		values: [normalizeUserFilterValue(options.responsible)]
+	} });
 	const status = options.status?.trim();
 	if (options.open || status === "open") filters.push({ status: {
 		operator: "o",
@@ -377,6 +575,18 @@ function buildWorkPackageFilters(options) {
 	} });
 	return filters;
 }
+function buildSortBy(sort) {
+	return (sort ?? []).map((criterion) => [criterion.field, criterion.direction]);
+}
+function normalizeUserFilterValue(raw) {
+	const trimmed = raw.trim();
+	if (!trimmed) throw new OpctlError("user filter value must not be empty", EXIT_CODES.validation);
+	if (trimmed === "me") return "me";
+	const id = idFromApiHref(trimmed, "/api/v3/users/");
+	if (id) return id;
+	if (/^\d+$/.test(trimmed)) return trimmed;
+	throw new OpctlError("--responsible supports me, numeric user ids, or /api/v3/users/<id> hrefs", EXIT_CODES.validation);
+}
 function findCommentHref(resource) {
 	for (const name of [
 		"addComment",
@@ -400,6 +610,33 @@ async function parseResponse(response) {
 	}
 	return { message: text };
 }
+function resolveResourceHref(kind, raw, collection, commandHint) {
+	const trimmed = raw.trim();
+	if (!trimmed) throw new OpctlError(`${kind} must not be empty`, EXIT_CODES.validation);
+	if (trimmed.startsWith("/api/v3/") || trimmed.startsWith("http://") || trimmed.startsWith("https://")) return trimmed;
+	if (/^\d+$/.test(trimmed)) return `${kind === "type" ? "/api/v3/types" : kind === "status" ? "/api/v3/statuses" : "/api/v3/priorities"}/${trimmed}`;
+	const lowerName = trimmed.toLowerCase();
+	const matches = collection.filter((item) => item.name?.toLowerCase() === lowerName);
+	if (matches.length === 0) throw new OpctlError(`unknown ${kind} '${trimmed}'; run ${commandHint} to list valid values`, EXIT_CODES.validation);
+	if (matches.length > 1) throw new OpctlError(`ambiguous ${kind} '${trimmed}'; matches: ${matches.map((m) => `${m.name} (${m.href})`).join(", ")}`, EXIT_CODES.validation);
+	return matches[0].href;
+}
+function extractFormValidationErrors(form) {
+	const embedded = typeof form === "object" && form !== null ? form._embedded : void 0;
+	const raw = typeof embedded === "object" && embedded !== null ? embedded.validationErrors : void 0;
+	if (!raw || typeof raw !== "object") return {};
+	const result = {};
+	for (const [key, value] of Object.entries(raw)) if (typeof value === "object" && value !== null && "message" in value && typeof value.message === "string") result[key] = value.message;
+	else result[key] = JSON.stringify(value);
+	return result;
+}
+function idFromApiHref(value, prefix) {
+	if (!value) return void 0;
+	const index = value.indexOf(prefix);
+	if (index === -1) return void 0;
+	const rest = value.slice(index + prefix.length).split(/[/?#]/)[0];
+	return rest && /^\d+$/.test(rest) ? rest : void 0;
+}
 //#endregion
 //#region src/config/envFile.ts
 var ALLOWED_ENV_KEYS = {
@@ -672,14 +909,114 @@ function compactLinks(root) {
 	}
 	return output;
 }
+var package_default = {
+	name: "opctl",
+	version: "0.1.7",
+	description: "Conservative local CLI bridge for OpenProject API v3",
+	type: "module",
+	repository: {
+		"type": "git",
+		"url": "git+https://github.com/hewel/op-cli.git"
+	},
+	bin: { "opctl": "dist/cli.js" },
+	files: ["dist"],
+	scripts: {
+		"dev": "tsx src/cli.ts",
+		"build": "npm run typecheck && vite build",
+		"typecheck": "tsc --noEmit",
+		"test": "vitest run",
+		"openapi:pull": "tsx scripts/pull-openapi-spec.ts",
+		"openapi:generate": "tsx scripts/generate-openapi-types.ts",
+		"openapi:update": "npm run openapi:pull && npm run openapi:generate"
+	},
+	keywords: ["openproject", "cli"],
+	author: "",
+	license: "ISC",
+	dependencies: {
+		"commander": "latest",
+		"openapi-fetch": "latest"
+	},
+	devDependencies: {
+		"@types/node": "latest",
+		"openapi-typescript": "latest",
+		"tsx": "latest",
+		"typescript": "latest",
+		"vite": "latest",
+		"vitest": "latest",
+		"yaml": "^2.9.0"
+	},
+	packageManager: "pnpm@11.1.3"
+};
 //#endregion
-//#region src/commands/me.ts
-function registerMe(program, context) {
-	program.command("me").description("Show the authenticated OpenProject user").option("--json", "emit JSON").action(async (options, command) => {
-		const me = await createClient$1(context, command).getMe();
-		writeOutput(context, me, Boolean(options.json), () => renderKeyValue(me));
+//#region src/commands/doctor.ts
+function registerDoctor(program, context) {
+	program.command("doctor").description("Show redacted OpenProject and opctl diagnostics").option("--json", "emit JSON").action(async (options, command) => {
+		const configOptions = globalConfigOptions(command);
+		let currentUser;
+		let currentUserError;
+		let configSummary;
+		try {
+			const config = loadResolvedConfig(context.env, {
+				...configOptions,
+				...context.cwd ? { cwd: context.cwd } : {}
+			});
+			configSummary = {
+				url: config.baseUrl,
+				authMode: config.authMode,
+				defaultProject: config.defaultProject,
+				writeEnabled: config.allowWrite,
+				hasToken: true
+			};
+			try {
+				currentUser = await createClient$1(context, command).getMe();
+			} catch (error) {
+				currentUserError = (error instanceof OpctlError ? error : new OpctlError(error instanceof Error ? error.message : "current user lookup failed")).message;
+			}
+		} catch (error) {
+			configSummary = {
+				error: (error instanceof OpctlError ? error : new OpctlError(error instanceof Error ? error.message : "doctor failed")).message,
+				hasToken: Boolean(context.env.OPENPROJECT_TOKEN)
+			};
+		}
+		const payload = {
+			version: package_default.version,
+			config: configSummary,
+			currentUser,
+			currentUserError,
+			commands: listCommandNames(program),
+			wpCommands: listCommandNames(program.commands.find((child) => child.name() === "wp"))
+		};
+		if (options.json) {
+			context.stdout.write(stableJson(payload, context.env.OPENPROJECT_TOKEN));
+			return;
+		}
+		context.stdout.write(renderKeyValue({
+			version: payload.version,
+			url: payload.config.url,
+			authMode: payload.config.authMode,
+			defaultProject: payload.config.defaultProject,
+			writeEnabled: payload.config.writeEnabled,
+			hasToken: payload.config.hasToken,
+			currentUser: userLabel(currentUser),
+			currentUserError: payload.currentUserError,
+			commands: payload.commands.join(","),
+			wpCommands: payload.wpCommands.join(","),
+			error: payload.config.error
+		}));
 	});
 }
+function listCommandNames(command) {
+	return command?.commands.map((child) => child.name()).sort() ?? [];
+}
+function userLabel(value) {
+	if (!value || typeof value !== "object") return void 0;
+	const user = value;
+	return [
+		user.name,
+		user.login,
+		user.id
+	].filter((part) => part !== void 0).join(" ");
+}
 //#endregion
 //#region src/output/table.ts
 function renderTable(rows, columns) {
@@ -695,6 +1032,49 @@ function cell(value) {
 	return String(value);
 }
 //#endregion
+//#region src/commands/lookups.ts
+function registerLookups(program, context) {
+	program.command("types").description("List work package types").option("--project <identifier-or-id>", "project to scope types").option("--json", "emit JSON").action(async (options, command) => {
+		const result = await createClient$1(context, command).listTypes(options.project ? { project: options.project } : {});
+		writeOutput(context, result, Boolean(options.json), () => renderTable(result.elements, [
+			"id",
+			"name",
+			"href",
+			"isDefault",
+			"isMilestone"
+		]));
+	});
+	program.command("statuses").description("List work package statuses").option("--json", "emit JSON").action(async (options, command) => {
+		const result = await createClient$1(context, command).listStatuses();
+		writeOutput(context, result, Boolean(options.json), () => renderTable(result.elements, [
+			"id",
+			"name",
+			"href",
+			"isClosed",
+			"isDefault",
+			"isReadonly"
+		]));
+	});
+	program.command("priorities").description("List work package priorities").option("--json", "emit JSON").action(async (options, command) => {
+		const result = await createClient$1(context, command).listPriorities();
+		writeOutput(context, result, Boolean(options.json), () => renderTable(result.elements, [
+			"id",
+			"name",
+			"href",
+			"isDefault",
+			"isActive"
+		]));
+	});
+}
+//#endregion
+//#region src/commands/me.ts
+function registerMe(program, context) {
+	program.command("me").description("Show the authenticated OpenProject user").option("--json", "emit JSON").action(async (options, command) => {
+		const me = await createClient$1(context, command).getMe();
+		writeOutput(context, me, Boolean(options.json), () => renderKeyValue(me));
+	});
+}
+//#endregion
 //#region src/commands/projects.ts
 function registerProjects(program, context) {
 	program.command("projects").description("List visible OpenProject projects").option("--json", "emit JSON").option("--page-size <n>", "page size", Number).action(async (options, command) => {
@@ -799,6 +1179,7 @@ var DEFAULT_CHECK_FIELDS = [
 	"subject",
 	"status",
 	"assignee",
+	"responsible",
 	"shortDescription",
 	"attachmentsCount"
 ];
@@ -808,8 +1189,10 @@ var DETAIL_FIELDS = [
 	"status",
 	"type",
 	"assignee",
+	"responsible",
 	"project",
 	"href",
+	"browserUrl",
 	"updatedAt",
 	"description",
 	"shortDescription",
@@ -819,11 +1202,14 @@ var DETAIL_FIELDS = [
 var SUPPORTED_FIELDS = {
 	assignee: true,
 	attachmentsCount: true,
+	browserUrl: true,
 	description: true,
 	href: true,
 	id: true,
 	lockVersion: true,
+	priority: true,
 	project: true,
+	responsible: true,
 	shortDescription: true,
 	status: true,
 	subject: true,
@@ -877,16 +1263,18 @@ function isSupportedField(field) {
 //#region src/commands/workPackages.ts
 function registerWorkPackages(program, context) {
 	const wp = program.command("wp").description("Work package commands");
-	wp.command("get").description("Get one or more work packages").argument("[ids...]", "work package ids").option("--ids <csv>", "comma-separated work package ids").option("--fields <csv>", "comma-separated output fields").option("--table", "emit table output").option("--compact", "emit compact triage table output").option("--json", "emit normalized JSON").option("--jsonl", "emit one JSON object per line").option("--raw-json", "emit raw OpenProject JSON; single work package only").action(async (ids, options, command) => {
+	wp.command("get").description("Get one or more work packages").argument("[ids...]", "work package ids").option("--ids <csv>", "comma-separated work package ids").option("--fields <csv>", "comma-separated output fields").option("--table", "emit table output").option("--compact", "emit compact triage table output").option("--json", "emit normalized JSON").option("--jsonl", "emit one JSON object per line").option("--raw-json", "emit raw OpenProject JSON; JSONL for multiple ids").action(async (ids, options, command) => {
 		const numericIds = parseIds(ids, options.ids);
 		if (numericIds.length === 0) throw new OpctlError("at least one work package id is required", EXIT_CODES.validation);
 		const mode = parseOutputMode(options);
-		if (mode === "rawJson" && numericIds.length !== 1) throw new OpctlError("--raw-json supports exactly one work package id", EXIT_CODES.validation);
 		if (mode !== "rawJson") parseFields(options.fields, mode === "compact" ? DEFAULT_COMPACT_FIELDS : DETAIL_FIELDS);
 		const client = createClient$1(context, command);
 		const token = resolvedEnv(context, command).OPENPROJECT_TOKEN;
 		if (mode === "rawJson") {
-			context.stdout.write(stableJson(await client.getWorkPackageRaw(numericIds[0]), token));
+			const rawWorkPackages = [];
+			for (const id of numericIds) rawWorkPackages.push(await client.getWorkPackageRaw(id));
+			if (rawWorkPackages.length === 1) context.stdout.write(stableJson(rawWorkPackages[0], token));
+			else context.stdout.write(rawWorkPackages.map((wp) => redactSecrets(JSON.stringify(wp), token)).join("\n") + "\n");
 			return;
 		}
 		const workPackages = [];
@@ -903,12 +1291,113 @@ function registerWorkPackages(program, context) {
 		for (const id of numericIds) workPackages.push(await client.getWorkPackage(id));
 		writeWorkPackageOutput(context, workPackages, options, mode, false, DEFAULT_CHECK_FIELDS, resolvedEnv(context, command).OPENPROJECT_TOKEN);
 	});
-	wp.command("search").description("Search work packages").option("--json", "emit JSON").option("--jsonl", "emit one JSON object per line").option("--table", "emit table output").option("--compact", "emit compact table output").option("--fields <csv>", "comma-separated output fields").option("--project <identifier-or-id>", "project identifier or id").option("--subject <text>", "subject contains text").option("--assignee-me", "filter to current user").option("--status <id-or-open>", "status id, or open").option("--open", "filter to open work packages").option("--page-size <n>", "page size", Number).action(async (options, command) => {
-		writeCollectionOutput(context, await createClient$1(context, command).searchWorkPackages(options), options, resolvedEnv(context, command).OPENPROJECT_TOKEN);
+	wp.command("search").description("Search work packages").option("--json", "emit JSON").option("--jsonl", "emit one JSON object per line").option("--table", "emit table output").option("--compact", "emit compact table output").option("--fields <csv>", "comma-separated output fields").option("--project <identifier-or-id>", "project identifier or id").option("--subject <text>", "subject contains text").option("--assignee-me", "filter to current user").option("--responsible-me", "filter to work packages responsible to current user").option("--responsible <me-or-id-or-href>", "filter by responsible user; supports me, numeric ids, or /api/v3/users/<id>").option("--status <id-or-open>", "status id, or open").option("--not-status <name-or-id-or-href>", "exclude status by name, id, or href", collect).option("--open", "filter to open work packages").option("--filter <field=operator:value>", "generic OpenProject filter; field=value means equals, field=o means unary operator o", collect).option("--sort <field:asc|desc>", "sort criterion, repeatable", collect).option("--page-size <n>", "page size", Number).action(async (options, command) => {
+		writeCollectionOutput(context, await createClient$1(context, command).searchWorkPackages(resolveSearchOptions(options)), options, resolvedEnv(context, command).OPENPROJECT_TOKEN);
 	});
 	wp.command("mine").description("List open work packages assigned to the authenticated user").option("--json", "emit JSON").option("--jsonl", "emit one JSON object per line").option("--table", "emit table output").option("--compact", "emit compact table output").option("--fields <csv>", "comma-separated output fields").option("--project <identifier-or-id>", "project identifier or id").option("--open", "filter to open work packages").option("--page-size <n>", "page size", Number).action(async (options, command) => {
 		writeCollectionOutput(context, await createClient$1(context, command).mine(options), options, resolvedEnv(context, command).OPENPROJECT_TOKEN);
 	});
+	wp.command("accountable").description("List open work packages responsible to the authenticated user").option("--json", "emit JSON").option("--jsonl", "emit one JSON object per line").option("--table", "emit table output").option("--compact", "emit compact table output").option("--fields <csv>", "comma-separated output fields").option("--project <identifier-or-id>", "project identifier or id").option("--open", "filter to open work packages").option("--page-size <n>", "page size", Number).action(async (options, command) => {
+		writeCollectionOutput(context, await createClient$1(context, command).accountable(options), options, resolvedEnv(context, command).OPENPROJECT_TOKEN);
+	});
+	wp.command("attachments").description("List attachment metadata for a work package").argument("<id>", "work package id").option("--json", "emit JSON").option("--jsonl", "emit one JSON object per line").option("--table", "emit table output").action(async (id, options, command) => {
+		const mode = parseAttachmentOutputMode(options);
+		writeAttachmentOutput(context, (await createClient$1(context, command).listWorkPackageAttachments(parseId(id))).elements, mode, resolvedEnv(context, command).OPENPROJECT_TOKEN);
+	});
+	wp.command("download-attachments").description("Download all attachments for a work package").argument("<id>", "work package id").requiredOption("--dir <path>", "directory to save attachments into").option("--overwrite", "replace files that already exist").option("--json", "emit JSON").action(async (id, options, command) => {
+		if (!options.dir || options.dir.trim() === "") throw new OpctlError("--dir is required", EXIT_CODES.validation);
+		const client = createClient$1(context, command);
+		const outputDir = resolve(context.cwd ?? process.cwd(), options.dir);
+		mkdirSync(outputDir, { recursive: true });
+		const attachments = (await client.listWorkPackageAttachments(parseId(id))).elements;
+		const saved = [];
+		for (const attachment of attachments) {
+			const savedPath = uniqueAttachmentPath(outputDir, safeAttachmentFileName(attachment, saved.length + 1), Boolean(options.overwrite));
+			const content = await client.downloadAttachment(attachment);
+			writeFileSync(savedPath, Buffer.from(content));
+			saved.push({
+				...attachment,
+				savedPath
+			});
+		}
+		if (options.json) {
+			context.stdout.write(stableJson({
+				workPackageId: parseId(id),
+				directory: outputDir,
+				attachments: saved
+			}, resolvedEnv(context, command).OPENPROJECT_TOKEN));
+			return;
+		}
+		context.stdout.write(renderTable(saved, [
+			"id",
+			"fileName",
+			"contentType",
+			"fileSize",
+			"savedPath"
+		]));
+	});
+	wp.command("create").description("Create a work package; requires OPENPROJECT_ALLOW_WRITE=1").option("--project <identifier-or-id>", "project identifier or id; defaults to OPENPROJECT_DEFAULT_PROJECT").option("--type <name-or-id-or-href>", "work package type name, id, or href").option("--subject <text>", "work package subject").option("--description <text>", "inline multiline description").option("--description-file <path>", "read description from UTF-8 file; - for stdin").option("--status <name-or-id-or-href>", "status name, id, or href").option("--priority <name-or-id-or-href>", "priority name, id, or href").option("--template <name>", "use a description template (user-story)").option("--dry-run", "validate and print intended mutation without creating").option("--json", "emit JSON").action(async (options, command) => {
+		const template = options.template?.trim();
+		if (template && template !== "user-story") throw new OpctlError(`unknown template '${template}'. Supported templates: user-story`, EXIT_CODES.validation);
+		const templateText = `# User story\n\nAs a <user>\nI want <capability>\nSo that <outcome>\n\n## Acceptance criteria\n\n- [ ]`;
+		const hasCreateFields = options.project || options.type || options.subject || options.description || options.descriptionFile || options.status || options.priority;
+		if (template === "user-story" && !hasCreateFields) {
+			context.stdout.write(`${templateText}\n`);
+			return;
+		}
+		let description;
+		if (options.description !== void 0 && options.descriptionFile !== void 0) throw new OpctlError("--description and --description-file cannot both be provided", EXIT_CODES.validation);
+		if (template && (options.description !== void 0 || options.descriptionFile !== void 0)) throw new OpctlError("--template cannot be combined with --description or --description-file", EXIT_CODES.validation);
+		if (options.description !== void 0) description = options.description;
+		else if (options.descriptionFile !== void 0) if (options.descriptionFile === "-") description = await readStdin(context);
+		else {
+			const filePath = resolve(context.cwd ?? process.cwd(), options.descriptionFile);
+			try {
+				description = readFileSync(filePath, "utf-8");
+			} catch (err) {
+				throw new OpctlError(`unable to read --description-file '${options.descriptionFile}': ${err.message}`, EXIT_CODES.validation);
+			}
+		}
+		else if (template === "user-story") description = templateText;
+		else if (context.stdin && context.stdin.isTTY === false) description = await readStdin(context);
+		const env = resolvedEnv(context, command);
+		const project = options.project?.trim() || env.OPENPROJECT_DEFAULT_PROJECT?.trim();
+		if (!project) throw new OpctlError("--project is required when OPENPROJECT_DEFAULT_PROJECT is not set", EXIT_CODES.validation);
+		if (!options.type || !options.type.trim()) throw new OpctlError("--type is required", EXIT_CODES.validation);
+		if (!options.subject || !options.subject.trim()) throw new OpctlError("--subject is required", EXIT_CODES.validation);
+		const token = env.OPENPROJECT_TOKEN;
+		const result = await createClient$1(context, command).createWorkPackage({
+			project,
+			type: options.type,
+			subject: options.subject,
+			description,
+			status: options.status,
+			priority: options.priority,
+			dryRun: Boolean(options.dryRun)
+		});
+		if (options.json) {
+			context.stdout.write(stableJson(result, token));
+			return;
+		}
+		if (result.status === "dry-run") {
+			const lines = [
+				`status: dry-run`,
+				`method: POST`,
+				`path: /api/v3/work_packages`,
+				`payload: ${JSON.stringify(result.request?.payload)}`
+			];
+			if (result.subject) lines.splice(1, 0, `subject: ${result.subject}`);
+			context.stdout.write(`${lines.join("\n")}\n`);
+			return;
+		}
+		const output = {};
+		if (result.id !== void 0) output.id = result.id;
+		if (result.subject !== void 0) output.subject = result.subject;
+		output.status = result.status;
+		if (result.href !== void 0) output.href = result.href;
+		if (result.browserUrl !== void 0) output.browserUrl = result.browserUrl;
+		context.stdout.write(renderKeyValue(output));
+	});
 	wp.command("comment").description("Add a comment to a work package; requires OPENPROJECT_ALLOW_WRITE=1").argument("<id>", "work package id").argument("[message...]", "comment message").option("--dry-run", "print intended mutation without posting").option("--json", "emit JSON").action(async (id, messageParts, options, command) => {
 		const result = await createClient$1(context, command).commentWorkPackage(parseId(id), messageParts.join(" "), Boolean(options.dryRun));
 		writeOutput(context, result, Boolean(options.json), () => renderKeyValue(result), resolvedEnv(context, command).OPENPROJECT_TOKEN);
@@ -933,6 +1422,122 @@ function writeCollectionOutput(context, result, options, token) {
 	}
 	context.stdout.write(renderTable(elements, fields));
 }
+function writeAttachmentOutput(context, attachments, mode, token) {
+	const fields = [
+		"id",
+		"fileName",
+		"contentType",
+		"fileSize",
+		"description",
+		"downloadHref"
+	];
+	if (mode === "json") {
+		context.stdout.write(stableJson({
+			total: attachments.length,
+			elements: attachments
+		}, token));
+		return;
+	}
+	if (mode === "jsonl") {
+		context.stdout.write(attachments.map((attachment) => redactSecrets(JSON.stringify(attachment), token)).join("\n") + (attachments.length > 0 ? "\n" : ""));
+		return;
+	}
+	context.stdout.write(renderTable(attachments, fields));
+}
+function parseAttachmentOutputMode(options) {
+	if ([
+		options.json,
+		options.jsonl,
+		options.table
+	].filter(Boolean).length > 1) throw new OpctlError("choose only one output mode flag", EXIT_CODES.validation);
+	if (options.json) return "json";
+	if (options.jsonl) return "jsonl";
+	return "table";
+}
+function resolveSearchOptions(options) {
+	const filters = parseGenericFilters(options.filter);
+	const sort = parseSortCriteria(options.sort);
+	return {
+		...options.project !== void 0 ? { project: options.project } : {},
+		...options.subject !== void 0 ? { subject: options.subject } : {},
+		...options.assigneeMe !== void 0 ? { assigneeMe: options.assigneeMe } : {},
+		...options.responsibleMe !== void 0 ? { responsibleMe: options.responsibleMe } : {},
+		...options.responsible !== void 0 ? { responsible: options.responsible } : {},
+		...options.status !== void 0 ? { status: options.status } : {},
+		...options.notStatus !== void 0 ? { notStatus: options.notStatus } : {},
+		...options.open !== void 0 ? { open: options.open } : {},
+		...filters.length > 0 ? { filters } : {},
+		...sort.length > 0 ? { sort } : {},
+		...options.pageSize !== void 0 ? { pageSize: options.pageSize } : {}
+	};
+}
+var UNARY_FILTER_OPERATORS = new Set([
+	"o",
+	"c",
+	"*",
+	"!*"
+]);
+function parseGenericFilters(rawFilters) {
+	return (rawFilters ?? []).map((raw) => {
+		const eqIndex = raw.indexOf("=");
+		if (eqIndex <= 0) throw new OpctlError(`invalid --filter '${raw}'. Expected field=value or field=operator:value`, EXIT_CODES.validation);
+		const field = raw.slice(0, eqIndex).trim();
+		const expression = raw.slice(eqIndex + 1).trim();
+		if (!field || !/^[A-Za-z][A-Za-z0-9_]*$/.test(field)) throw new OpctlError(`invalid --filter field '${field}'`, EXIT_CODES.validation);
+		if (!expression) throw new OpctlError(`invalid --filter '${raw}'. Filter value must not be empty`, EXIT_CODES.validation);
+		const colonIndex = expression.indexOf(":");
+		if (colonIndex > 0) return {
+			field,
+			operator: expression.slice(0, colonIndex).trim(),
+			values: splitCsv(expression.slice(colonIndex + 1)).map((value) => normalizeFilterValue(field, value))
+		};
+		if (UNARY_FILTER_OPERATORS.has(expression)) return {
+			field,
+			operator: expression,
+			values: []
+		};
+		return {
+			field,
+			operator: "=",
+			values: [normalizeFilterValue(field, expression)]
+		};
+	});
+}
+function normalizeFilterValue(field, value) {
+	return field === "responsible" || field === "assignee" ? normalizeUserFilterValue(value) : value;
+}
+function parseSortCriteria(rawSort) {
+	return (rawSort ?? []).map((raw) => {
+		const [field, direction, extra] = raw.split(":");
+		if (!field || !direction || extra !== void 0) throw new OpctlError(`invalid --sort '${raw}'. Expected field:asc or field:desc`, EXIT_CODES.validation);
+		const normalizedDirection = direction.toLowerCase();
+		if (normalizedDirection !== "asc" && normalizedDirection !== "desc") throw new OpctlError(`invalid --sort direction '${direction}'. Expected asc or desc`, EXIT_CODES.validation);
+		if (!/^[A-Za-z][A-Za-z0-9_]*$/.test(field)) throw new OpctlError(`invalid --sort field '${field}'`, EXIT_CODES.validation);
+		return {
+			field,
+			direction: normalizedDirection
+		};
+	});
+}
+function safeAttachmentFileName(attachment, index) {
+	const fallback = attachment.id ? `attachment-${attachment.id}` : `attachment-${index}`;
+	return basename(attachment.fileName || fallback).replace(/[\\/:*?"<>|\u0000-\u001F]/g, "_").trim() || fallback;
+}
+function uniqueAttachmentPath(dir, fileName, overwrite) {
+	const first = join(dir, fileName);
+	if (overwrite || !existsSync(first)) return first;
+	const dot = fileName.lastIndexOf(".");
+	const stem = dot > 0 ? fileName.slice(0, dot) : fileName;
+	const ext = dot > 0 ? fileName.slice(dot) : "";
+	for (let i = 2; i < 1e4; i += 1) {
+		const candidate = join(dir, `${stem}-${i}${ext}`);
+		if (!existsSync(candidate)) return candidate;
+	}
+	throw new OpctlError(`unable to choose a unique filename for '${fileName}'`, EXIT_CODES.validation);
+}
+function collect(value, previous) {
+	return [...previous ?? [], value];
+}
 function writeWorkPackageOutput(context, workPackages, options, mode, singleObject, defaultFields, token) {
 	const fields = parseFields(options.fields, mode === "compact" ? DEFAULT_COMPACT_FIELDS : defaultFields);
 	const projected = options.fields || mode === "table" || mode === "compact" || mode === "jsonl" ? projectRows(workPackages, fields) : workPackages;
@@ -971,6 +1576,11 @@ function parseId(id) {
 	if (!Number.isInteger(parsed) || parsed < 1) throw new OpctlError("work package id must be a positive integer", EXIT_CODES.validation);
 	return parsed;
 }
+async function readStdin(context) {
+	const chunks = [];
+	for await (const chunk of context.stdin) chunks.push(typeof chunk === "string" ? chunk : new TextDecoder().decode(chunk));
+	return chunks.join("");
+}
 //#endregion
 //#region src/commands/profile.ts
 function registerProfile(program, context) {
@@ -1023,44 +1633,6 @@ function registerProfile(program, context) {
 		context.stdout.write(options.json ? stableJson(output) : `unset profile: ${name}\n`);
 	});
 }
-var package_default = {
-	name: "opctl",
-	version: "0.1.6",
-	description: "Conservative local CLI bridge for OpenProject API v3",
-	type: "module",
-	repository: {
-		"type": "git",
-		"url": "git+https://github.com/hewel/op-cli.git"
-	},
-	bin: { "opctl": "dist/cli.js" },
-	files: ["dist"],
-	scripts: {
-		"dev": "tsx src/cli.ts",
-		"build": "npm run typecheck && vite build",
-		"typecheck": "tsc --noEmit",
-		"test": "vitest run",
-		"openapi:pull": "tsx scripts/pull-openapi-spec.ts",
-		"openapi:generate": "tsx scripts/generate-openapi-types.ts",
-		"openapi:update": "npm run openapi:pull && npm run openapi:generate"
-	},
-	keywords: ["openproject", "cli"],
-	author: "",
-	license: "ISC",
-	dependencies: {
-		"commander": "latest",
-		"openapi-fetch": "latest"
-	},
-	devDependencies: {
-		"@types/node": "latest",
-		"openapi-typescript": "latest",
-		"tsx": "latest",
-		"typescript": "latest",
-		"vite": "latest",
-		"vitest": "latest",
-		"yaml": "^2.9.0"
-	},
-	packageManager: "pnpm@11.1.3"
-};
 //#endregion
 //#region src/cli.ts
 function buildProgram(context) {
@@ -1073,8 +1645,10 @@ function buildProgram(context) {
 	registerApiRoot(program, context);
 	registerProjects(program, context);
 	registerWorkPackages(program, context);
+	registerLookups(program, context);
 	registerProfile(program, context);
 	registerSpec(program, context);
+	registerDoctor(program, context);
 	return program;
 }
 async function run(argv, context) {
@@ -1083,11 +1657,14 @@ async function run(argv, context) {
 		return EXIT_CODES.success;
 	} catch (error) {
 		const opctlError = toOpctlError(error);
-		if (argv.includes("--json")) context.stderr.write(stableJson({
-			error: opctlError.message,
-			exitCode: opctlError.exitCode
-		}, context.env.OPENPROJECT_TOKEN));
-		else context.stderr.write(`${redactSecrets(opctlError.message, context.env.OPENPROJECT_TOKEN)}\n`);
+		if (argv.includes("--json")) {
+			const payload = {
+				error: opctlError.message,
+				exitCode: opctlError.exitCode
+			};
+			if (opctlError.details !== void 0) payload.details = opctlError.details;
+			context.stderr.write(stableJson(payload, context.env.OPENPROJECT_TOKEN));
+		} else context.stderr.write(`${redactSecrets(opctlError.message, context.env.OPENPROJECT_TOKEN)}\n`);
 		return opctlError.exitCode;
 	}
 }
@@ -1103,7 +1680,8 @@ if (isCliEntrypoint(import.meta.url)) {
 	const exitCode = await run(process.argv, {
 		stdout: process.stdout,
 		stderr: process.stderr,
-		env: process.env
+		env: process.env,
+		stdin: process.stdin
 	});
 	process.exitCode = exitCode;
 }