dailybot-cli 3.20.0__tar.gz → 3.21.0__tar.gz

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dailybot-cli
-Version: 3.20.0
+Version: 3.21.0
 Summary: Dailybot CLI - The command-line bridge between humans and agents. Progress reports, observability, and workflow automation for modern teams across Slack, Google Chat, Discord, MS Teams, and more.
 Author-email: Dailybot <support@dailybot.com>
 License: MIT
@@ -992,6 +992,8 @@ humans who own them.
 | `dailybot project get <uuid>` | Show one project |
 | `dailybot project updates [<project>]` | Batched update digest, or one project's feed |
 | `dailybot project update-post <uuid> <body>` | **Post a project update** — how the team sees what was done (`--health`; sends an idempotency key) |
+| `dailybot project update-get\|update-edit\|update-delete <project> <update>` | Read one update (author, `via <agent>`, health, files); edit its text or health (author only); delete it (author or org admin; `--dry-run`) |
+| `dailybot project update-attach\|update-attachments <project> <update>` · `update-attachment get\|rename\|delete` | Files on an update (≤5 MiB). Attach and rename: author only; delete: author or an organization admin. For an inline image, attach it, then `update-edit` the body with `attachment:<uuid>` |
 | `dailybot project milestones [<uuid>]` | List milestones |
 | `dailybot project milestone-complete <p> <m>` | Complete a milestone. **Its open tasks stay open** |
 | `dailybot project milestone-reopen <p> <m>` | Reopen a milestone |
@@ -1001,6 +1003,7 @@ humans who own them.
 | `dailybot project members <uuid>` · `project member add\|remove` | Who can see the project — people or whole teams (`--team`) — `members` works with a personal API key; `member add\|remove` **needs a person: `dailybot login` or a personal API key** |
 | `dailybot project views <uuid>` · `project view save` | Your saved views; save replaces the list and requires the ETag — **needs a person: `dailybot login` or a personal API key** |
 | `dailybot project milestone-create\|milestone-update\|milestone-delete` | Dated milestones; delete retires it (tasks keep pointing at it) |
+| `dailybot project milestone-attach\|milestone-attachments <project> <milestone>` · `milestone-attachment get\|rename\|delete` | Files on a milestone (≤5 MiB); reference one in the description with `attachment:<uuid>`. `project milestone-restore` brings a retired milestone back |
 | `dailybot project archive <uuid>` | Archive a project |
 | `dailybot project attach <uuid> <file>` · `project attachments` · `project attachment get\|delete` | Files on a project (≤5 MiB, one request). Attaching and deleting need a person (`dailybot login` or a personal API key) |
 | `dailybot goal list` | List goals (`--include` is repeatable: `--include progress --include projects`) |

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/README.md

@@ -953,6 +953,8 @@ humans who own them.
 | `dailybot project get <uuid>` | Show one project |
 | `dailybot project updates [<project>]` | Batched update digest, or one project's feed |
 | `dailybot project update-post <uuid> <body>` | **Post a project update** — how the team sees what was done (`--health`; sends an idempotency key) |
+| `dailybot project update-get\|update-edit\|update-delete <project> <update>` | Read one update (author, `via <agent>`, health, files); edit its text or health (author only); delete it (author or org admin; `--dry-run`) |
+| `dailybot project update-attach\|update-attachments <project> <update>` · `update-attachment get\|rename\|delete` | Files on an update (≤5 MiB). Attach and rename: author only; delete: author or an organization admin. For an inline image, attach it, then `update-edit` the body with `attachment:<uuid>` |
 | `dailybot project milestones [<uuid>]` | List milestones |
 | `dailybot project milestone-complete <p> <m>` | Complete a milestone. **Its open tasks stay open** |
 | `dailybot project milestone-reopen <p> <m>` | Reopen a milestone |
@@ -962,6 +964,7 @@ humans who own them.
 | `dailybot project members <uuid>` · `project member add\|remove` | Who can see the project — people or whole teams (`--team`) — `members` works with a personal API key; `member add\|remove` **needs a person: `dailybot login` or a personal API key** |
 | `dailybot project views <uuid>` · `project view save` | Your saved views; save replaces the list and requires the ETag — **needs a person: `dailybot login` or a personal API key** |
 | `dailybot project milestone-create\|milestone-update\|milestone-delete` | Dated milestones; delete retires it (tasks keep pointing at it) |
+| `dailybot project milestone-attach\|milestone-attachments <project> <milestone>` · `milestone-attachment get\|rename\|delete` | Files on a milestone (≤5 MiB); reference one in the description with `attachment:<uuid>`. `project milestone-restore` brings a retired milestone back |
 | `dailybot project archive <uuid>` | Archive a project |
 | `dailybot project attach <uuid> <file>` · `project attachments` · `project attachment get\|delete` | Files on a project (≤5 MiB, one request). Attaching and deleting need a person (`dailybot login` or a personal API key) |
 | `dailybot goal list` | List goals (`--include` is repeatable: `--include progress --include projects`) |

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/dailybot_cli/api_client.py

@@ -100,6 +100,8 @@ SAME_ORIGIN_UPLOAD_METHODS: frozenset[str] = frozenset({"PUT", "POST"})
 # BLAST_RADIUS.md records this as THE volume guard for unattended destructive
 # loops — the CLI adds no second ceiling of its own.
 TASKS_BULK_MAX_ITEMS: int = 100
+# Body field an attachment rename (PATCH …/attachments/<uuid>/) carries.
+ATTACHMENT_RENAME_FIELD: str = "filename"
 # Collections the task detail door can embed in one read (first page each).
 TASK_BRIEFING_INCLUDES: tuple[str, ...] = (
     "relations",
@@ -3321,6 +3323,143 @@ class DailyBotClient:
         """GET /v1/tasks/projects/<p>/attachments/<a>/content/."""
         return self._download_attachment_of(self._project_parent(project_uuid), attachment_uuid)
 
+    # Milestone and project-update attachments: the same row shape as project ones.
+    @staticmethod
+    def _milestone_parent(project_uuid: str, milestone_uuid: str) -> str:
+        return f"projects/{_path_segment(project_uuid)}/milestones/{_path_segment(milestone_uuid)}"
+
+    @staticmethod
+    def _update_parent(project_uuid: str, update_uuid: str) -> str:
+        return f"projects/{_path_segment(project_uuid)}/updates/{_path_segment(update_uuid)}"
+
+    def _rename_attachment_of(self, parent: str, attachment_uuid: str, *, filename: str) -> Any:
+        """PATCH <parent>/attachments/<uuid>/ — rename the file."""
+        return self._tasks_write(
+            "PATCH",
+            f"{parent}/attachments/{_path_segment(attachment_uuid)}/",
+            json={ATTACHMENT_RENAME_FIELD: filename},
+        )
+
+    def upload_milestone_attachment(
+        self,
+        project_uuid: str,
+        milestone_uuid: str,
+        *,
+        filename: str,
+        content_type: str,
+        data: bytes,
+        caption: str | None = None,
+    ) -> dict[str, Any]:
+        """POST …/milestones/<m>/attachments/ as multipart (≤5 MiB)."""
+        return self._upload_attachment_to(
+            self._milestone_parent(project_uuid, milestone_uuid),
+            filename=filename,
+            content_type=content_type,
+            data=data,
+            caption=caption,
+        )
+
+    def list_milestone_attachments(self, project_uuid: str, milestone_uuid: str) -> Any:
+        """GET …/milestones/<m>/attachments/."""
+        return self._list_attachments_of(self._milestone_parent(project_uuid, milestone_uuid))
+
+    def download_milestone_attachment(
+        self, project_uuid: str, milestone_uuid: str, attachment_uuid: str
+    ) -> bytes:
+        """GET …/milestones/<m>/attachments/<a>/content/."""
+        return self._download_attachment_of(
+            self._milestone_parent(project_uuid, milestone_uuid), attachment_uuid
+        )
+
+    def rename_milestone_attachment(
+        self, project_uuid: str, milestone_uuid: str, attachment_uuid: str, *, filename: str
+    ) -> Any:
+        """PATCH …/milestones/<m>/attachments/<a>/."""
+        return self._rename_attachment_of(
+            self._milestone_parent(project_uuid, milestone_uuid), attachment_uuid, filename=filename
+        )
+
+    def delete_milestone_attachment(
+        self, project_uuid: str, milestone_uuid: str, attachment_uuid: str
+    ) -> Any:
+        """DELETE …/milestones/<m>/attachments/<a>/."""
+        return self._delete_attachment_of(
+            self._milestone_parent(project_uuid, milestone_uuid), attachment_uuid
+        )
+
+    def get_project_update(self, project_uuid: str, update_uuid: str) -> dict[str, Any]:
+        """GET /v1/tasks/projects/<p>/updates/<u>/."""
+        return self._tasks_read(f"{self._update_parent(project_uuid, update_uuid)}/")
+
+    def edit_project_update(
+        self,
+        project_uuid: str,
+        update_uuid: str,
+        *,
+        body: str | None = None,
+        health: str | None = None,
+    ) -> Any:
+        """PATCH /v1/tasks/projects/<p>/updates/<u>/ — author only (`update_not_author`)."""
+        payload: dict[str, Any] = {}
+        if body is not None:
+            payload["body"] = body
+        if health is not None:
+            payload["health"] = health
+        return self._tasks_write(
+            "PATCH", f"{self._update_parent(project_uuid, update_uuid)}/", json=payload
+        )
+
+    def delete_project_update(self, project_uuid: str, update_uuid: str) -> Any:
+        """DELETE /v1/tasks/projects/<p>/updates/<u>/ — the author or an org admin."""
+        return self._tasks_write("DELETE", f"{self._update_parent(project_uuid, update_uuid)}/")
+
+    def upload_update_attachment(
+        self,
+        project_uuid: str,
+        update_uuid: str,
+        *,
+        filename: str,
+        content_type: str,
+        data: bytes,
+        caption: str | None = None,
+    ) -> dict[str, Any]:
+        """POST …/updates/<u>/attachments/ as multipart (≤5 MiB) — author only."""
+        return self._upload_attachment_to(
+            self._update_parent(project_uuid, update_uuid),
+            filename=filename,
+            content_type=content_type,
+            data=data,
+            caption=caption,
+        )
+
+    def list_update_attachments(self, project_uuid: str, update_uuid: str) -> Any:
+        """GET …/updates/<u>/attachments/."""
+        return self._list_attachments_of(self._update_parent(project_uuid, update_uuid))
+
+    def download_update_attachment(
+        self, project_uuid: str, update_uuid: str, attachment_uuid: str
+    ) -> bytes:
+        """GET …/updates/<u>/attachments/<a>/content/."""
+        return self._download_attachment_of(
+            self._update_parent(project_uuid, update_uuid), attachment_uuid
+        )
+
+    def rename_update_attachment(
+        self, project_uuid: str, update_uuid: str, attachment_uuid: str, *, filename: str
+    ) -> Any:
+        """PATCH …/updates/<u>/attachments/<a>/."""
+        return self._rename_attachment_of(
+            self._update_parent(project_uuid, update_uuid), attachment_uuid, filename=filename
+        )
+
+    def delete_update_attachment(
+        self, project_uuid: str, update_uuid: str, attachment_uuid: str
+    ) -> Any:
+        """DELETE …/updates/<u>/attachments/<a>/."""
+        return self._delete_attachment_of(
+            self._update_parent(project_uuid, update_uuid), attachment_uuid
+        )
+
     # Goal attachments (POST / DELETE: signed-in person; reads: anyone who can see it)
     def upload_goal_attachment(
         self,
@@ -3599,6 +3738,14 @@ class DailyBotClient:
             json={k: v for k, v in fields.items() if v is not None},
         )
 
+    def restore_milestone(self, project_uuid: str, milestone_uuid: str) -> dict[str, Any]:
+        """POST …/milestones/<uuid>/restore/ — bring a retired milestone back (idempotent)."""
+        return self._tasks_write(
+            "POST",
+            f"projects/{_path_segment(project_uuid)}/milestones/{_path_segment(milestone_uuid)}/"
+            "restore/",
+        )
+
     def delete_milestone(self, project_uuid: str, milestone_uuid: str) -> Any:
         """DELETE …/milestones/<uuid>/ — retires (archives); tasks keep pointing at it."""
         return self._tasks_write(

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/dailybot_cli/commands/_attachments.py

@@ -1,9 +1,10 @@
-"""Shared attachment flows for tasks, comments, projects and goals.
+"""Shared attachment flows for tasks, comments, projects, goals, milestones and updates.
 
-Four parents own an `attachments/` collection with the same row shape, so the
+Six parents own an `attachments/` collection with the same row shape, so the
 commands share one implementation of each step: read the local file under a
 hard limit, upload, list, download to a path that is never overwritten by
-surprise, and delete with a stated consequence. Each command supplies only the
+surprise, rename within the server's bounds, and delete with a stated
+consequence. Each command supplies only the
 client call for its parent.
 """
 
@@ -190,6 +191,34 @@ def run_get(
     print_success(f"Saved {len(content)} bytes to {output}.")
 
 
+ATTACHMENT_NAME_MAX_CHARS: int = 255
+
+
+def run_rename(
+    rename: Callable[[Any, str], Any],
+    filename: str,
+    *,
+    json_mode: bool,
+    require_auth: Callable[[], Any],
+) -> None:
+    """Rename one attachment. The name is checked locally against the server's bounds."""
+    cleaned: str = filename.strip()
+    if not cleaned or len(cleaned) > ATTACHMENT_NAME_MAX_CHARS:
+        raise click.UsageError(
+            f"The new name must be 1 to {ATTACHMENT_NAME_MAX_CHARS} characters. Nothing was sent."
+        )
+    client: Any = require_auth()
+    try:
+        with console.status("Renaming the attachment..."):
+            data: Any = rename(client, cleaned)
+    except APIError as exc:
+        exit_for_tasks_error(exc, json_mode)
+    if json_mode:
+        emit_json(data)
+        return
+    print_success(f"Attachment renamed to {cleaned}.")
+
+
 def run_delete(
     delete: Callable[[Any], Any],
     consequence: str,

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/dailybot_cli/commands/project.py

@@ -7,7 +7,13 @@ from typing import Any
 import click
 
 from dailybot_cli.api_client import ATTACHMENT_MULTIPART_MAX_BYTES, APIError, PaginatedResult
-from dailybot_cli.commands._attachments import run_attach, run_delete, run_get, run_list
+from dailybot_cli.commands._attachments import (
+    run_attach,
+    run_delete,
+    run_get,
+    run_list,
+    run_rename,
+)
 from dailybot_cli.commands._beta import mark_beta
 from dailybot_cli.commands._destructive import confirm_without_preview, preview_then_confirm
 from dailybot_cli.commands._rollups import render_rollup
@@ -22,16 +28,15 @@ from dailybot_cli.commands.public_api_helpers import (
 from dailybot_cli.commands.query_options import build_query_params, query_options, resolve_fetch_all
 from dailybot_cli.display import (
     console,
-    present_untrusted,
     print_info,
     print_milestones_table,
     print_pagination_footer,
+    print_project_updates,
     print_projects_table,
     print_raw_value,
     print_success,
     print_tasks_detail_panel,
     print_tasks_rows,
-    safe_text,
 )
 
 # Split deliberately. `projects` is a goal-shaped selector: a project has no
@@ -193,11 +198,7 @@ def project_updates(project_uuid: str | None, json_mode: bool, **flags: Any) ->
     if json_mode:
         emit_json(_envelope(result))
         return
-    for update in result.results:
-        console.print(
-            f"[dim]{safe_text(update.get('created_at', ''))}[/dim] "
-            f"{present_untrusted(update.get('body'), limit=160)}"
-        )
+    print_project_updates(result.results)
     print_pagination_footer(len(result.results), result.count, has_more=bool(result.next))
 
 
@@ -928,9 +929,32 @@ def project_milestone_delete(
     print_success("Milestone retired.")
 
 
+@project.command("milestone-restore")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("milestone_uuid", metavar="MILESTONE")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_milestone_restore(project_uuid: str, milestone_uuid: str, json_mode: bool) -> None:
+    """Bring a retired milestone back. Safe to repeat.
+
+    \b
+    Examples:
+      dailybot project milestone-restore <project-uuid> <milestone-uuid>
+    """
+    client = require_auth()
+    try:
+        with console.status("Restoring the milestone..."):
+            data: dict[str, Any] = client.restore_milestone(project_uuid, milestone_uuid)
+    except APIError as exc:
+        exit_for_tasks_error(exc, json_mode)
+    if json_mode:
+        emit_json(data)
+        return
+    print_success("Milestone restored.")
+
+
 # ---------------------------------------------------------------------------
-# Attachments. Reading needs only visibility; attaching and deleting are
-# Structure doors: refuse an organization API key before any request (keys lack tasks:admin).
+# Attachments. Reading needs only visibility; attaching and deleting need a
+# person (a login or a personal API key) who can change the project.
 # ---------------------------------------------------------------------------
 
 
@@ -1053,3 +1077,445 @@ def project_attachment_delete(
         json_mode=json_mode,
         require_auth=require_auth,
     )
+
+
+# ---------------------------------------------------------------------------
+# Milestone attachments. Anyone who can see the project and edit its milestones
+# (a login or a personal API key) can attach, rename and delete.
+# ---------------------------------------------------------------------------
+
+_OUTPUT_OPTION = click.option(
+    "-o",
+    "--output",
+    "output",
+    type=click.Path(dir_okay=False, writable=True, path_type=Path),
+    required=True,
+    help="Where to write the file.",
+)
+
+
+@project.command("milestone-attach")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("milestone_uuid", metavar="MILESTONE")
+@click.argument(
+    "file_path",
+    metavar="FILE",
+    type=click.Path(exists=True, dir_okay=False, readable=True, path_type=Path),
+)
+@click.option("--caption", default=None, help="Short caption shown with the file.")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_milestone_attach(
+    project_uuid: str, milestone_uuid: str, file_path: Path, caption: str | None, json_mode: bool
+) -> None:
+    """Attach a file to a milestone. Needs a person: `dailybot login` or a personal API key.
+
+    \b
+    One request, up to 5 MiB. Reference it in the milestone description with
+    `attachment:<uuid>` to show it inline.
+
+    \b
+    Examples:
+      dailybot project milestone-attach <project-uuid> <milestone-uuid> ./spec.pdf
+    """
+    run_attach(
+        lambda client, **file: client.upload_milestone_attachment(
+            project_uuid, milestone_uuid, **file
+        ),
+        file_path,
+        caption=caption,
+        limit=ATTACHMENT_MULTIPART_MAX_BYTES,
+        where="per file on a milestone",
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+@project.command("milestone-attachments")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("milestone_uuid", metavar="MILESTONE")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_milestone_attachments(project_uuid: str, milestone_uuid: str, json_mode: bool) -> None:
+    """List a milestone's attachments.
+
+    \b
+    Examples:
+      dailybot project milestone-attachments <project-uuid> <milestone-uuid> --json
+    """
+    run_list(
+        lambda client: client.list_milestone_attachments(project_uuid, milestone_uuid),
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+@project.group("milestone-attachment")
+def project_milestone_attachment() -> None:
+    """Download, rename or delete one attachment on a milestone.
+
+    \b
+    Examples:
+      dailybot project milestone-attachment get <project> <milestone> <attachment> -o ./spec.pdf
+      dailybot project milestone-attachment rename <project> <milestone> <attachment> spec-v2.pdf
+      dailybot project milestone-attachment delete <project> <milestone> <attachment> --dry-run
+    """
+
+
+@project_milestone_attachment.command("get")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("milestone_uuid", metavar="MILESTONE")
+@click.argument("attachment_uuid", metavar="ATTACHMENT")
+@_OUTPUT_OPTION
+@click.option("--force", is_flag=True, help="Overwrite the output file if it exists.")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_milestone_attachment_get(
+    project_uuid: str,
+    milestone_uuid: str,
+    attachment_uuid: str,
+    output: Path,
+    force: bool,
+    json_mode: bool,
+) -> None:
+    """Download a milestone's attachment to a file. Never overwrites without --force.
+
+    \b
+    Examples:
+      dailybot project milestone-attachment get <project> <milestone> <attachment> -o ./spec.pdf
+    """
+    run_get(
+        lambda client: client.download_milestone_attachment(
+            project_uuid, milestone_uuid, attachment_uuid
+        ),
+        output,
+        attachment_uuid=attachment_uuid,
+        force=force,
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+@project_milestone_attachment.command("rename")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("milestone_uuid", metavar="MILESTONE")
+@click.argument("attachment_uuid", metavar="ATTACHMENT")
+@click.argument("filename")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_milestone_attachment_rename(
+    project_uuid: str, milestone_uuid: str, attachment_uuid: str, filename: str, json_mode: bool
+) -> None:
+    """Rename a milestone's attachment (1 to 255 characters).
+
+    \b
+    Examples:
+      dailybot project milestone-attachment rename <project> <milestone> <attachment> spec-v2.pdf
+    """
+    run_rename(
+        lambda client, name: client.rename_milestone_attachment(
+            project_uuid, milestone_uuid, attachment_uuid, filename=name
+        ),
+        filename,
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+@project_milestone_attachment.command("delete")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("milestone_uuid", metavar="MILESTONE")
+@click.argument("attachment_uuid", metavar="ATTACHMENT")
+@click.option("--dry-run", is_flag=True, help="Say what would happen and send nothing.")
+@click.option("-y", "--yes", "assume_yes", is_flag=True, help="Skip the confirmation.")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_milestone_attachment_delete(
+    project_uuid: str,
+    milestone_uuid: str,
+    attachment_uuid: str,
+    dry_run: bool,
+    assume_yes: bool,
+    json_mode: bool,
+) -> None:
+    """Remove an attachment from a milestone. This cannot be undone.
+
+    \b
+    Examples:
+      dailybot project milestone-attachment delete <project> <milestone> <attachment> --dry-run
+      dailybot project milestone-attachment delete <project> <milestone> <attachment> --yes
+    """
+    run_delete(
+        lambda client: client.delete_milestone_attachment(
+            project_uuid, milestone_uuid, attachment_uuid
+        ),
+        f"delete attachment {attachment_uuid} from milestone {milestone_uuid}.",
+        receipt={
+            "project": project_uuid,
+            "milestone": milestone_uuid,
+            "attachment": attachment_uuid,
+        },
+        dry_run=dry_run,
+        assume_yes=assume_yes,
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+# ---------------------------------------------------------------------------
+# One project update: read, edit (author only), delete (author or org admin),
+# and its attachments (attach and rename: author only; delete: author or org
+# admin). `--agent-name` stamps every write.
+# ---------------------------------------------------------------------------
+
+
+@project.command("update-get")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("update_uuid", metavar="UPDATE")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_update_get(project_uuid: str, update_uuid: str, json_mode: bool) -> None:
+    """Show one project update, with its author, agent, health and attachments.
+
+    \b
+    Examples:
+      dailybot project update-get <project-uuid> <update-uuid> --json
+    """
+    client = require_auth()
+    try:
+        with console.status("Reading the update..."):
+            data: dict[str, Any] = client.get_project_update(project_uuid, update_uuid)
+    except APIError as exc:
+        exit_for_tasks_error(exc, json_mode)
+    if json_mode:
+        emit_json(data)
+        return
+    print_project_updates([data])
+
+
+@project.command("update-edit")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("update_uuid", metavar="UPDATE")
+@click.argument("body", required=False)
+@click.option(
+    "--health",
+    type=click.Choice(PROJECT_HEALTH),
+    default=None,
+    help="Change the health this update claims.",
+)
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_update_edit(
+    project_uuid: str, update_uuid: str, body: str | None, health: str | None, json_mode: bool
+) -> None:
+    """Edit your project update's text and/or health. Only its author can.
+
+    \b
+    Pass `-` as the body to read it from stdin. To show an attached image inline,
+    put `attachment:<uuid>` in the body.
+
+    \b
+    Examples:
+      dailybot project update-edit <project-uuid> <update-uuid> "Shipped, with the fix"
+      dailybot project update-edit <project-uuid> <update-uuid> --health at_risk
+    """
+    if body is None and health is None:
+        raise click.UsageError("Pass a new BODY, --health, or both. Nothing was sent.")
+    client = require_auth()
+    try:
+        with console.status("Editing the update..."):
+            data: Any = client.edit_project_update(
+                project_uuid,
+                update_uuid,
+                body=_read_body(body) if body is not None else None,
+                health=health,
+            )
+    except APIError as exc:
+        exit_for_tasks_error(exc, json_mode)
+    if json_mode:
+        emit_json(data)
+        return
+    report_write(data, "Project update edited")
+
+
+@project.command("update-delete")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("update_uuid", metavar="UPDATE")
+@click.option("--dry-run", is_flag=True, help="Say what would happen and send nothing.")
+@click.option("-y", "--yes", "assume_yes", is_flag=True, help="Skip the confirmation.")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_update_delete(
+    project_uuid: str, update_uuid: str, dry_run: bool, assume_yes: bool, json_mode: bool
+) -> None:
+    """Delete a project update. Its author or an organization admin can. Cannot be undone.
+
+    \b
+    Examples:
+      dailybot project update-delete <project-uuid> <update-uuid> --dry-run
+      dailybot project update-delete <project-uuid> <update-uuid> --yes
+    """
+    if not confirm_without_preview(
+        f"delete project update {update_uuid} and its attachments.",
+        assume_yes=assume_yes,
+        dry_run=dry_run,
+        json_mode=json_mode,
+    ):
+        return
+    client = require_auth()
+    try:
+        with console.status("Deleting the update..."):
+            client.delete_project_update(project_uuid, update_uuid)
+    except APIError as exc:
+        exit_for_tasks_error(exc, json_mode)
+    if json_mode:
+        emit_json({"deleted": True, "project": project_uuid, "update": update_uuid})
+        return
+    print_success("Project update deleted.")
+
+
+@project.command("update-attach")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("update_uuid", metavar="UPDATE")
+@click.argument(
+    "file_path",
+    metavar="FILE",
+    type=click.Path(exists=True, dir_okay=False, readable=True, path_type=Path),
+)
+@click.option("--caption", default=None, help="Short caption shown with the file.")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_update_attach(
+    project_uuid: str, update_uuid: str, file_path: Path, caption: str | None, json_mode: bool
+) -> None:
+    """Attach a file to your project update. Only its author can.
+
+    \b
+    One request, up to 5 MiB. For an inline image: post the update, attach the
+    file, then `update-edit` the body with `attachment:<uuid>`.
+
+    \b
+    Examples:
+      dailybot project update-attach <project-uuid> <update-uuid> ./chart.png
+    """
+    run_attach(
+        lambda client, **file: client.upload_update_attachment(project_uuid, update_uuid, **file),
+        file_path,
+        caption=caption,
+        limit=ATTACHMENT_MULTIPART_MAX_BYTES,
+        where="per file on a project update",
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+@project.command("update-attachments")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("update_uuid", metavar="UPDATE")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_update_attachments(project_uuid: str, update_uuid: str, json_mode: bool) -> None:
+    """List a project update's attachments.
+
+    \b
+    Examples:
+      dailybot project update-attachments <project-uuid> <update-uuid> --json
+    """
+    run_list(
+        lambda client: client.list_update_attachments(project_uuid, update_uuid),
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+@project.group("update-attachment")
+def project_update_attachment() -> None:
+    """Download, rename or delete one attachment on a project update.
+
+    \b
+    Examples:
+      dailybot project update-attachment get <project> <update> <attachment> -o ./chart.png
+      dailybot project update-attachment rename <project> <update> <attachment> chart-q4.png
+      dailybot project update-attachment delete <project> <update> <attachment> --yes
+    """
+
+
+@project_update_attachment.command("get")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("update_uuid", metavar="UPDATE")
+@click.argument("attachment_uuid", metavar="ATTACHMENT")
+@_OUTPUT_OPTION
+@click.option("--force", is_flag=True, help="Overwrite the output file if it exists.")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_update_attachment_get(
+    project_uuid: str,
+    update_uuid: str,
+    attachment_uuid: str,
+    output: Path,
+    force: bool,
+    json_mode: bool,
+) -> None:
+    """Download a project update's attachment. Never overwrites without --force.
+
+    \b
+    Examples:
+      dailybot project update-attachment get <project> <update> <attachment> -o ./chart.png
+    """
+    run_get(
+        lambda client: client.download_update_attachment(
+            project_uuid, update_uuid, attachment_uuid
+        ),
+        output,
+        attachment_uuid=attachment_uuid,
+        force=force,
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+@project_update_attachment.command("rename")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("update_uuid", metavar="UPDATE")
+@click.argument("attachment_uuid", metavar="ATTACHMENT")
+@click.argument("filename")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_update_attachment_rename(
+    project_uuid: str, update_uuid: str, attachment_uuid: str, filename: str, json_mode: bool
+) -> None:
+    """Rename a project update's attachment (author only; 1 to 255 characters).
+
+    \b
+    Examples:
+      dailybot project update-attachment rename <project> <update> <attachment> chart-q4.png
+    """
+    run_rename(
+        lambda client, name: client.rename_update_attachment(
+            project_uuid, update_uuid, attachment_uuid, filename=name
+        ),
+        filename,
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )
+
+
+@project_update_attachment.command("delete")
+@click.argument("project_uuid", metavar="PROJECT")
+@click.argument("update_uuid", metavar="UPDATE")
+@click.argument("attachment_uuid", metavar="ATTACHMENT")
+@click.option("--dry-run", is_flag=True, help="Say what would happen and send nothing.")
+@click.option("-y", "--yes", "assume_yes", is_flag=True, help="Skip the confirmation.")
+@click.option("--json", "json_mode", is_flag=True, help="Emit machine-readable JSON to stdout.")
+def project_update_attachment_delete(
+    project_uuid: str,
+    update_uuid: str,
+    attachment_uuid: str,
+    dry_run: bool,
+    assume_yes: bool,
+    json_mode: bool,
+) -> None:
+    """Remove an attachment from a project update. Its author, or an organization admin. Cannot be undone.
+
+    \b
+    Examples:
+      dailybot project update-attachment delete <project> <update> <attachment> --dry-run
+      dailybot project update-attachment delete <project> <update> <attachment> --yes
+    """
+    run_delete(
+        lambda client: client.delete_update_attachment(project_uuid, update_uuid, attachment_uuid),
+        f"delete attachment {attachment_uuid} from project update {update_uuid}.",
+        receipt={"project": project_uuid, "update": update_uuid, "attachment": attachment_uuid},
+        dry_run=dry_run,
+        assume_yes=assume_yes,
+        json_mode=json_mode,
+        require_auth=require_auth,
+    )

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/dailybot_cli/commands/public_api_helpers.py

@@ -56,6 +56,11 @@ ERROR_CODE_MESSAGES: dict[str, str] = {
     # Written against what the server actually returned in the live probe
     # recorded in the plan's PERMISSION_MATRIX_OBSERVED.md, not against prose.
     #
+    # Project update authorship
+    "update_not_author": (
+        "Only the person who posted this project update can edit it or change its "
+        "attachments (an organization admin can delete it). Post a new update instead."
+    ),
     # Agent attribution (--agent-name / DAILYBOT_AGENT_NAME)
     "invalid_agent_attribution": (
         "The agent name was refused. Use a plain name of 128 characters or fewer: "

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/dailybot_cli/display.py

@@ -2062,17 +2062,54 @@ def print_milestones_table(milestones: list[dict[str, Any]], *, rollup: Any = No
     table.add_column("Name")
     table.add_column("Status", no_wrap=True)
     table.add_column("Open", no_wrap=True)
+    table.add_column("Files", no_wrap=True)
     table.add_column("UUID", no_wrap=True)
     for row in milestones:
+        files: Any = row.get("attachment_count")
         table.add_row(
             present_untrusted(row.get("name")),
             present_untrusted(row.get("status"), limit=16),
             rollup(row, "open_task_count") if rollup else "",
+            str(files) if isinstance(files, int) else "",
             safe_text(row.get("uuid") or ""),
         )
     console.print(table)
 
 
+def print_project_updates(updates: list[dict[str, Any]]) -> None:
+    """Render project updates: the person, the agent companion, health, and files.
+
+    The body is user-authored text and is quoted as data. The person who posted
+    stays primary; `via <agent>` names the agent that executed the post.
+    """
+    if not updates:
+        print_info("No updates.")
+        return
+    for update in updates:
+        author: Any = update.get("created_by") or update.get("author") or {}
+        who: str = present_untrusted(
+            _person_name(author) if isinstance(author, dict) else author, limit=40
+        )
+        agent: Any = update.get("executed_by_agent")
+        if isinstance(agent, dict) and agent.get("name"):
+            who += f" [dim]via {present_untrusted(agent.get('name'), limit=40)}[/dim]"
+        meta: list[str] = [safe_text(update.get("created_at") or "")]
+        if update.get("health"):
+            meta.append(safe_text(update.get("health")))
+        if update.get("edited_at"):
+            meta.append("edited")
+        attachments: Any = update.get("attachments")
+        count: Any = update.get("attachment_count")
+        if isinstance(attachments, list) and attachments:
+            meta.append(f"{len(attachments)} file(s)")
+        elif isinstance(count, int) and count > 0:
+            meta.append(f"{count} file(s)")
+        console.print(f"[dim]{' · '.join(m for m in meta if m)}[/dim] {who}")
+        console.print(f"  {present_untrusted(update.get('body'), limit=400)}")
+        if update.get("uuid"):
+            console.print(f"  [dim]{safe_text(update.get('uuid'))}[/dim]")
+
+
 def _threaded(comments: list[dict[str, Any]]) -> list[dict[str, Any]]:
     """Each root comment followed by its replies, in list order.
 

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/dailybot_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dailybot-cli
-Version: 3.20.0
+Version: 3.21.0
 Summary: Dailybot CLI - The command-line bridge between humans and agents. Progress reports, observability, and workflow automation for modern teams across Slack, Google Chat, Discord, MS Teams, and more.
 Author-email: Dailybot <support@dailybot.com>
 License: MIT
@@ -992,6 +992,8 @@ humans who own them.
 | `dailybot project get <uuid>` | Show one project |
 | `dailybot project updates [<project>]` | Batched update digest, or one project's feed |
 | `dailybot project update-post <uuid> <body>` | **Post a project update** — how the team sees what was done (`--health`; sends an idempotency key) |
+| `dailybot project update-get\|update-edit\|update-delete <project> <update>` | Read one update (author, `via <agent>`, health, files); edit its text or health (author only); delete it (author or org admin; `--dry-run`) |
+| `dailybot project update-attach\|update-attachments <project> <update>` · `update-attachment get\|rename\|delete` | Files on an update (≤5 MiB). Attach and rename: author only; delete: author or an organization admin. For an inline image, attach it, then `update-edit` the body with `attachment:<uuid>` |
 | `dailybot project milestones [<uuid>]` | List milestones |
 | `dailybot project milestone-complete <p> <m>` | Complete a milestone. **Its open tasks stay open** |
 | `dailybot project milestone-reopen <p> <m>` | Reopen a milestone |
@@ -1001,6 +1003,7 @@ humans who own them.
 | `dailybot project members <uuid>` · `project member add\|remove` | Who can see the project — people or whole teams (`--team`) — `members` works with a personal API key; `member add\|remove` **needs a person: `dailybot login` or a personal API key** |
 | `dailybot project views <uuid>` · `project view save` | Your saved views; save replaces the list and requires the ETag — **needs a person: `dailybot login` or a personal API key** |
 | `dailybot project milestone-create\|milestone-update\|milestone-delete` | Dated milestones; delete retires it (tasks keep pointing at it) |
+| `dailybot project milestone-attach\|milestone-attachments <project> <milestone>` · `milestone-attachment get\|rename\|delete` | Files on a milestone (≤5 MiB); reference one in the description with `attachment:<uuid>`. `project milestone-restore` brings a retired milestone back |
 | `dailybot project archive <uuid>` | Archive a project |
 | `dailybot project attach <uuid> <file>` · `project attachments` · `project attachment get\|delete` | Files on a project (≤5 MiB, one request). Attaching and deleting need a person (`dailybot login` or a personal API key) |
 | `dailybot goal list` | List goals (`--include` is repeatable: `--include progress --include projects`) |

{dailybot_cli-3.20.0 → dailybot_cli-3.21.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "dailybot-cli"
-version = "3.20.0"
+version = "3.21.0"
 description = "Dailybot CLI - The command-line bridge between humans and agents. Progress reports, observability, and workflow automation for modern teams across Slack, Google Chat, Discord, MS Teams, and more."
 readme = "README.md"
 license = {text = "MIT"}