clickup-cli 1.4.0__tar.gz → 1.6.0__tar.gz

{clickup_cli-1.4.0 → clickup_cli-1.6.0}/.claude/skills/clickup-cli.md

@@ -48,6 +48,29 @@ clickup --dry-run tasks create --space <space_name> --name "Fix auth" --desc "De
 clickup tasks create --space <space_name> --name "Fix auth" --desc "Details"
 ```
 
+### Update a task (including tags, assignees, custom fields)
+```bash
+clickup tasks update <task_id> --status "in progress"
+clickup tasks update <task_id> --add-tag urgent --remove-tag draft
+clickup tasks update <task_id> --add-assignee <user_id>
+clickup tasks update <task_id> --custom-field <field_uuid>=high
+clickup --dry-run tasks update <task_id> --add-tag urgent  # returns a plan
+```
+
+### Manage task dependencies
+```bash
+clickup tasks depend add <task_id> --depends-on <blocker_task_id>
+clickup tasks depend add <task_id> --depended-on-by <blocked_task_id>
+clickup tasks depend list <task_id>
+clickup tasks depend remove <task_id> --depends-on <blocker_task_id>
+```
+
+### See archived tasks alongside live ones
+```bash
+clickup tasks list --space <space_name> --include-archived
+clickup tasks search "bug" --include-archived
+```
+
 ### Add a comment
 ```bash
 clickup comments add <task_id> --text "Work complete"
@@ -71,6 +94,17 @@ clickup lists list --folder <folder_id>
 clickup spaces statuses <space_name>
 ```
 
+### Toggle privacy on a space, folder, or list
+```bash
+clickup spaces privacy <space_name> --private
+clickup folders privacy <folder_id> --public
+clickup lists privacy <list_id> --private
+clickup --dry-run lists privacy <list_id> --private  # preview body
+```
+Each command requires exactly one of `--private` / `--public`. This flips the
+private/public boolean only — granular member or guest grants must be done in
+the ClickUp UI. Hits the v3 ACLs endpoint.
+
 ## Configuration
 
 The CLI loads config from (in order):

clickup_cli-1.6.0/.claude/skills/release/SKILL.md

@@ -0,0 +1,105 @@
+---
+name: release
+description: Bump version, validate, tag, and build for PyPI release
+disable-model-invocation: true
+---
+
+# Release Workflow
+
+Follow these steps to publish a new release of clickup-cli.
+
+## 1. Pre-flight checks
+
+```bash
+ruff check src/ tests/
+pytest -v
+clickup --help                          # smoke test
+bash scripts/validate-cli-output.sh     # JSON stdout contract
+```
+
+All must pass before proceeding.
+
+Also verify the tag for the current `__version__` doesn't already exist on git or PyPI — previous releases were shipped to PyPI without a matching git tag once, which left a gap. If a gap exists, backfill the missing tag at the correct commit (`git tag v<missing> <sha> && git push origin v<missing>`) and add a CHANGELOG entry for it before the new version.
+
+## 2. Bump version
+
+The version is dynamic (read by Hatch from `src/clickup_cli/__init__.py`). Update it following semver:
+- **patch** (1.x.Y): bug fixes
+- **minor** (1.X.0): new commands or features
+- **major** (X.0.0): breaking changes
+
+Also update `tests/test_cli.py::test_version_flag` — the assertion string must match.
+
+## 3. Update CHANGELOG
+
+Summarize changes since the last tag. Start from:
+
+```bash
+git log $(git describe --tags --abbrev=0)..HEAD --oneline
+```
+
+Group entries into Features / Fixes / Internal. Keep the top of `CHANGELOG.md` the same format as prior entries (one dated section per version, newest first).
+
+## 4. Commit and tag
+
+```bash
+git add -A
+git commit -m "release: v<version>"
+git tag v<version>
+```
+
+Do NOT push yet — everything local until the build is verified.
+
+## 5. Build
+
+```bash
+pip install build
+rm -rf dist/ build/
+python -m build
+python -m twine check dist/*
+```
+
+Verify both the sdist and the wheel are present, file sizes look sane, and the version number is in the filenames.
+
+## 6. Publish to PyPI (requires user confirmation)
+
+**Ask Efe before running this step.**
+
+Claude Code's `!` bash prompt cannot allocate a tty, so `twine upload` run inline will `EOFError` on the getpass prompt. Use one of these two paths:
+
+```bash
+# Option A — separate real terminal (safest):
+#   Efe runs `python3 -m twine upload dist/*` in a new terminal tab.
+# Option B — inline with env token (exposes token in shell history):
+#   TWINE_USERNAME=__token__ TWINE_PASSWORD='pypi-...' python3 -m twine upload dist/*
+```
+
+Wait for confirmation that PyPI shows the new version before moving on. Verify with:
+
+```bash
+curl -s https://pypi.org/pypi/clickup-cli/json | python3 -c "import json,sys; print(json.load(sys.stdin)['info']['version'])"
+```
+
+## 7. Push main + tag
+
+```bash
+git push origin main
+git push origin v<version>
+```
+
+## 8. Create the GitHub Release
+
+Pushing a tag does NOT create a GitHub Release — Releases are a separate object layered on top of tags. Without this step, `github.com/<repo>/releases` still shows the previous version as "Latest" even though the tag is live.
+
+```bash
+gh release create v<version> \
+  dist/clickup_cli-<version>-py3-none-any.whl \
+  dist/clickup_cli-<version>.tar.gz \
+  --title "v<version>" \
+  --notes "$(...release notes from CHANGELOG...)"
+```
+
+Attach both dist artifacts. Use the CHANGELOG entry for the notes (or inline them if the CHANGELOG entry is too terse).
+
+Verify `gh release list` shows the new version with the `Latest` marker.
+

{clickup_cli-1.4.0 → clickup_cli-1.6.0}/.github/workflows/ci.yml

@@ -24,6 +24,10 @@ jobs:
       - name: Install dependencies
         run: pip install -e ".[dev]"
 
+      - name: Validate CLI output contract
+        if: matrix.python-version == '3.11'
+        run: bash scripts/validate-cli-output.sh
+
       - name: Lint
         run: ruff check src/ tests/
 

{clickup_cli-1.4.0 → clickup_cli-1.6.0}/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 1.6.0 (2026-04-18)
+
+- **Space-scoped task search and docs filtering now match the requested scope.** `tasks search --space <alias-or-id>` expands to every list in the resolved space, preserves explicit `--list` / `--folder` overrides, handles archived-only and empty-space edge cases without widening scope, and keeps the existing dry-run envelope intact. `docs list` and `docs create` now resolve `--space` through the shared alias-or-raw-ID path and fail fast on bad non-numeric space names.
+- **Task payloads are bounded by default, with explicit exhaustive flags when you need everything.** `tasks get` now returns bounded comments by default with `--all-comments` as the exhaustive opt-in, while `tasks list` and `tasks search` share a default page budget and expose `--all-pages` as the explicit escape hatch. Each command adds machine-readable completeness metadata inside the existing JSON response envelope.
+- **Task create/update request shaping is stricter and more predictable.** Repeated `--tag` values on `tasks list` are preserved, update/edit flows now accept explicit empty-string clears for descriptions, doc page content, and comment text, and `tasks create` still omits empty descriptions instead of sending empty strings by accident.
+- **Config and runtime identity handling are cleaner.** `clickup init` now persists canonical `space_id` values without eager per-space list discovery, runtime workspace context flows through the client instead of ambient globals, and alias-based task flows lazily resolve default lists only when needed.
+- **The CLI contract is enforced more aggressively in automation and local config writes are hardened.** CI now runs the JSON stdout/stderr contract validator on Python 3.11, init/config rewrite paths enforce owner-only file permissions, and existing config directories are re-hardened on write.
+- **Internal command wiring is easier to maintain without changing how users invoke the CLI.** Privacy handlers now share one helper, command registration is manifest-driven, task internals are split behind a compatibility facade, and the large command-handler test module is split by command family.
+
+## 1.5.0 (2026-04-12)
+
+- **New `privacy` subcommand on `spaces`, `folders`, and `lists`.** Toggle the privacy of a space, folder, or list via the v3 ACLs endpoint without leaving the terminal. Each subcommand takes a positional ID (or its `--<id>` flag form) plus a required mutually exclusive `--private` / `--public` flag. Hits `PATCH /v3/workspaces/{wid}/{space|folder|list}/{id}/acls` with a minimal `{"private": true|false}` body. Granular ACL entries (member or guest grants) are intentionally not exposed — use the ClickUp UI for that.
+- **`--dry-run` support** on every privacy command. Returns a structured plan (`{"dry_run": true, "action": "set_privacy", "object_type": ..., "object_id": ..., "body": ...}`) with zero API calls.
+- **Consistent return shape across all three groups.** On success: `{"status": "ok", "action": "set_privacy", "object_type": "space"|"folder"|"list", "object_id": "...", "private": true|false}`. Same keys regardless of which group invoked it — agent scripts can parse one shape.
+- **Client: `patch_v3` method** added to `ClickUpClient` for v3 PATCH endpoints (used by the new privacy commands; first PATCH consumer in the codebase).
+- Test suite: 332 → 356 tests. Added coverage for `patch_v3` (real + dry-run), the three new privacy handlers (private/public/dry-run, plus raw-ID resolution on spaces), and parser-level mutex tests for each group.
+
 ## 1.4.0 (2026-04-11)
 
 - **`tasks update` now handles tags, assignees, and custom fields.** Five new repeatable flags: `--add-assignee` / `--remove-assignee` (packed into the PUT body), `--add-tag` / `--remove-tag` (issues one POST/DELETE per tag), and `--custom-field FIELD_ID=VALUE` (issues one POST per field). When no PUT body is needed, the task is re-fetched at the end so the returned JSON always reflects final state. `--dry-run` returns a structured plan with no API calls.

{clickup_cli-1.4.0 → clickup_cli-1.6.0}/CLAUDE.md

@@ -14,12 +14,12 @@ src/clickup_cli/
 ├── helpers.py       # output(), error(), compact_task(), etc.
 └── commands/
     ├── __init__.py  # HANDLERS dict
-    ├── tasks.py     # tasks parser + handlers (list/get/create/update/search/delete/move/merge)
+    ├── tasks.py     # tasks parser + handlers (list/get/create/update/search/delete/move/merge/depend)
     ├── comments.py  # comments parser + handlers (list/add/update/delete/thread/reply)
     ├── docs.py      # docs parser + handlers (list/get/create/pages/get-page/edit-page/create-page)
-    ├── folders.py   # folders parser + handlers (list/get/create/update/delete)
-    ├── lists.py     # lists parser + handlers (list/get/create/update/delete)
-    ├── spaces.py    # spaces parser + handlers (list/get/statuses)
+    ├── folders.py   # folders parser + handlers (list/get/create/update/delete/privacy)
+    ├── lists.py     # lists parser + handlers (list/get/create/update/delete/privacy)
+    ├── spaces.py    # spaces parser + handlers (list/get/statuses/privacy)
     ├── tags.py      # tags parser + handlers (list/add/remove)
     ├── team.py      # team parser + handlers (whoami/members)
     └── init.py      # clickup init setup command

{clickup_cli-1.4.0 → clickup_cli-1.6.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: clickup-cli
-Version: 1.4.0
+Version: 1.6.0
 Summary: The missing ClickUp CLI. Built for developers and AI agents.
 Project-URL: Homepage, https://github.com/efetoker/clickup-cli
 Project-URL: Repository, https://github.com/efetoker/clickup-cli
@@ -54,6 +54,8 @@ clickup init
 
 This prompts for your API token, discovers your workspaces and spaces, identifies your user, and writes a config file to `~/.config/clickup-cli/config.json`.
 
+`clickup init` stores each configured space alias with its canonical `space_id`. It does not preload one list per space during setup. Add `list_id` later only if you want a cached default list for list-bound commands.
+
 If you have a single workspace, it's selected automatically. Same for user detection in single-member workspaces.
 
 Get your API token at [app.clickup.com/settings/apps](https://app.clickup.com/settings/apps).
@@ -98,12 +100,12 @@ Output is JSON on stdout; errors go to stderr.
 | Group | Subcommands | Description |
 |-------|-------------|-------------|
 | `init` | — | Interactive workspace setup |
-| `tasks` | list, get, create, update, search, delete, move, merge | Full task CRUD |
+| `tasks` | list, get, create, update, search, delete, move, merge, depend | Full task CRUD + dependencies |
 | `comments` | list, add, update, delete, thread, reply | Full comment CRUD with threading |
 | `docs` | list, get, create, pages, get-page, edit-page, create-page | Docs and page management |
-| `folders` | list, get, create, update, delete | Folder CRUD |
-| `lists` | list, get, create, update, delete | List CRUD |
-| `spaces` | list, get, statuses | Space inspection |
+| `folders` | list, get, create, update, delete, privacy | Folder CRUD + privacy toggle |
+| `lists` | list, get, create, update, delete, privacy | List CRUD + privacy toggle |
+| `spaces` | list, get, statuses, privacy | Space inspection + privacy toggle |
 | `team` | whoami, members | Workspace and member info |
 | `tags` | list, add, remove | Tag management |
 
@@ -128,7 +130,12 @@ clickup tasks list --space <name> --pretty
 ## Key Behaviors
 
 - **Flag aliases** — every positional argument also accepts a `--flag` form. `tasks get abc123` and `tasks get --task-id abc123` are equivalent. Same for `--query`, `--doc-id`, `--page-id`, `--folder-id`, `--list-id`, `--comment-id`, `--space`.
+- **Raw numeric IDs** on `--space` and `--folder` flags are accepted transparently alongside config aliases. On tasks commands, list-bound commands may resolve a raw space ID to its first folderless list via one API call.
 - **`tasks create`** auto-infers `--space` from `--list` via API lookup. You can omit `--space` if `--list` is provided.
+- **`tasks update`** handles core fields, assignee diffs (`--add-assignee` / `--remove-assignee`), tag diffs (`--add-tag` / `--remove-tag`), and custom fields (`--custom-field FIELD_ID=VALUE`) in one call. All flags are repeatable; `--dry-run` returns a structured plan.
+- **`tasks depend`** — `add`, `remove`, and `list` for task dependencies. Direction required on add/remove via `--depends-on` or `--depended-on-by`.
+- **`tasks list` / `tasks search --include-archived`** — second paginated call with `archived=true`, merged into the default results. Since ClickUp's `archived` param is a filter, this is the only way to see both in one command.
+- **`tasks list --full`** returns `status` as a consistent dict shape (`{status, color, type, orderindex}`). Compact mode and `--fields` continue returning a flat string — one contract per output mode.
 - **`tasks get`** auto-fetches comments and appends them to the output. Use `--no-comments` to skip.
 - **`tasks search`** auto-detects task ID patterns like `PROJ-39` and applies prefix filtering.
 - **`docs edit-page --append`** reads the current page content, appends your new content, and sends one update.
@@ -147,11 +154,14 @@ clickup tasks list --space <name> --pretty
   "workspace_id": "12345",
   "user_id": "67890",
   "spaces": {
-    "myspace": {"space_id": "111", "list_id": "222"}
+    "myspace": {"space_id": "111"},
+    "myspace-with-default-list": {"space_id": "111", "list_id": "222"}
   }
 }
 ```
 
+`space_id` is the identity of a configured alias. `list_id` is optional convenience for commands that need a default list; space-scoped commands should still target the full space. Reverting Phase 3 restores the older eager list caching setup and example shape.
+
 ### Config resolution order
 
 1. `CLICKUP_CONFIG_PATH` env var → exact file path
@@ -171,9 +181,9 @@ You can run without a config file by setting just `CLICKUP_API_TOKEN` — the wo
 
 ## Coverage and Gaps
 
-**Covered:** tasks, comments, docs/pages, folders, lists, spaces, tags, team/workspace info.
+**Covered:** tasks (including dependencies and custom field writes), comments, docs/pages, folders, lists, spaces, tags, team/workspace info.
 
-**Not yet covered:** checklists, time tracking, custom fields, task relationships, attachments, goals, webhooks, automations.
+**Not yet covered:** checklists, time tracking, attachments, goals, webhooks, automations.
 
 ## Development Tools
 

{clickup_cli-1.4.0 → clickup_cli-1.6.0}/README.md

@@ -22,6 +22,8 @@ clickup init
 
 This prompts for your API token, discovers your workspaces and spaces, identifies your user, and writes a config file to `~/.config/clickup-cli/config.json`.
 
+`clickup init` stores each configured space alias with its canonical `space_id`. It does not preload one list per space during setup. Add `list_id` later only if you want a cached default list for list-bound commands.
+
 If you have a single workspace, it's selected automatically. Same for user detection in single-member workspaces.
 
 Get your API token at [app.clickup.com/settings/apps](https://app.clickup.com/settings/apps).
@@ -66,12 +68,12 @@ Output is JSON on stdout; errors go to stderr.
 | Group | Subcommands | Description |
 |-------|-------------|-------------|
 | `init` | — | Interactive workspace setup |
-| `tasks` | list, get, create, update, search, delete, move, merge | Full task CRUD |
+| `tasks` | list, get, create, update, search, delete, move, merge, depend | Full task CRUD + dependencies |
 | `comments` | list, add, update, delete, thread, reply | Full comment CRUD with threading |
 | `docs` | list, get, create, pages, get-page, edit-page, create-page | Docs and page management |
-| `folders` | list, get, create, update, delete | Folder CRUD |
-| `lists` | list, get, create, update, delete | List CRUD |
-| `spaces` | list, get, statuses | Space inspection |
+| `folders` | list, get, create, update, delete, privacy | Folder CRUD + privacy toggle |
+| `lists` | list, get, create, update, delete, privacy | List CRUD + privacy toggle |
+| `spaces` | list, get, statuses, privacy | Space inspection + privacy toggle |
 | `team` | whoami, members | Workspace and member info |
 | `tags` | list, add, remove | Tag management |
 
@@ -96,7 +98,12 @@ clickup tasks list --space <name> --pretty
 ## Key Behaviors
 
 - **Flag aliases** — every positional argument also accepts a `--flag` form. `tasks get abc123` and `tasks get --task-id abc123` are equivalent. Same for `--query`, `--doc-id`, `--page-id`, `--folder-id`, `--list-id`, `--comment-id`, `--space`.
+- **Raw numeric IDs** on `--space` and `--folder` flags are accepted transparently alongside config aliases. On tasks commands, list-bound commands may resolve a raw space ID to its first folderless list via one API call.
 - **`tasks create`** auto-infers `--space` from `--list` via API lookup. You can omit `--space` if `--list` is provided.
+- **`tasks update`** handles core fields, assignee diffs (`--add-assignee` / `--remove-assignee`), tag diffs (`--add-tag` / `--remove-tag`), and custom fields (`--custom-field FIELD_ID=VALUE`) in one call. All flags are repeatable; `--dry-run` returns a structured plan.
+- **`tasks depend`** — `add`, `remove`, and `list` for task dependencies. Direction required on add/remove via `--depends-on` or `--depended-on-by`.
+- **`tasks list` / `tasks search --include-archived`** — second paginated call with `archived=true`, merged into the default results. Since ClickUp's `archived` param is a filter, this is the only way to see both in one command.
+- **`tasks list --full`** returns `status` as a consistent dict shape (`{status, color, type, orderindex}`). Compact mode and `--fields` continue returning a flat string — one contract per output mode.
 - **`tasks get`** auto-fetches comments and appends them to the output. Use `--no-comments` to skip.
 - **`tasks search`** auto-detects task ID patterns like `PROJ-39` and applies prefix filtering.
 - **`docs edit-page --append`** reads the current page content, appends your new content, and sends one update.
@@ -115,11 +122,14 @@ clickup tasks list --space <name> --pretty
   "workspace_id": "12345",
   "user_id": "67890",
   "spaces": {
-    "myspace": {"space_id": "111", "list_id": "222"}
+    "myspace": {"space_id": "111"},
+    "myspace-with-default-list": {"space_id": "111", "list_id": "222"}
   }
 }
 ```
 
+`space_id` is the identity of a configured alias. `list_id` is optional convenience for commands that need a default list; space-scoped commands should still target the full space. Reverting Phase 3 restores the older eager list caching setup and example shape.
+
 ### Config resolution order
 
 1. `CLICKUP_CONFIG_PATH` env var → exact file path
@@ -139,9 +149,9 @@ You can run without a config file by setting just `CLICKUP_API_TOKEN` — the wo
 
 ## Coverage and Gaps
 
-**Covered:** tasks, comments, docs/pages, folders, lists, spaces, tags, team/workspace info.
+**Covered:** tasks (including dependencies and custom field writes), comments, docs/pages, folders, lists, spaces, tags, team/workspace info.
 
-**Not yet covered:** checklists, time tracking, custom fields, task relationships, attachments, goals, webhooks, automations.
+**Not yet covered:** checklists, time tracking, attachments, goals, webhooks, automations.
 
 ## Development Tools
 

clickup_cli-1.6.0/clickup-config.example.json

@@ -0,0 +1,12 @@
+{
+  "api_token": "YOUR_CLICKUP_API_TOKEN_HERE",
+  "workspace_id": "YOUR_WORKSPACE_ID",
+  "user_id": "YOUR_USER_ID",
+  "spaces": {
+    "myspace": {"space_id": "SPACE_ID"},
+    "myspace-with-default-list": {
+      "space_id": "SPACE_ID",
+      "list_id": "OPTIONAL_DEFAULT_LIST_ID"
+    }
+  }
+}