go-onlyoffice/CHANGELOG.md

# Changelog

All notable changes to this project are documented here. The format is based on
[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [Unreleased]

### Added — library

- **CRM dedupe & cleanup** — `crm_normalize.go`, `crm_dedupe_plan.go`, `crm_dedupe.go`:
  merge duplicate companies/persons/deals by normalized name; remove duplicate
  contact-info rows and opportunity members (including same `displayName` with
  different ids); fix malformed deal titles (` @ Company` → `Company`).
  `MergeContacts`, `UpdateOpportunityTitle`, `ListAllContacts`,
  `ListAllOpportunities`, `DeleteContactInfo`, `RemoveOpportunityMember`,
  `IsOpportunityMember`, `HasContactInfo`, `CleanupCRM`.
- Slogan-aware grouping: `StripSloganSuffix`, `CompanyGroupingKey` merge names
  like `Affirm` and `Affirm — Fraud Engineering` (companies, deals, members).
- **Workspace mail** — [`mails.go`](mails.go): `ListMailAccounts`, `ListMailFolders`,
  `ListMailMessages`, `GetMailMessage`, `RemoveMailMessages` against OnlyOffice
  Mail addon (`/api/2.0/mail/*`).
- [`crm_integration_test.go`](crm_integration_test.go) — live merge, rename,
  dedupe smoke tests.

### Added — CLI

- `oo mails accounts|folders|list|get|delete` — OnlyOffice Workspace mail (same `ONLYOFFICE_*` creds).
- `oo companies dedupe|dedupe-persons`, `oo persons dedupe`, `oo contacts dedupe-info`,
  `oo opportunities dedupe|dedupe-members|fix-titles`, `oo crm cleanup`.

### Changed — CLI

- `oo applications sync` — empty position uses company-only deal title; skips
  duplicate opportunity members; paginated find-or-create lookups.
- `oo` now loads OnlyOffice credentials only from `.env` in the current
  working directory.
- Produktor.io shorthand env names are accepted by the CLI dotenv loader:
  `OO_URL` → `ONLYOFFICE_URL`, `OO_USER` → `ONLYOFFICE_USER`, and
  `OO_PASS` → `ONLYOFFICE_PASS`. Canonical `ONLYOFFICE_*` values still win
  when already set in the process environment.

## [0.6.0] - 2026-04-24

### Added — library

- **Project & task Documents API** in [`files.go`](files.go):
  - `FileEntry`, `FolderEntry`, `ProjectFilesResponse` types.
  - `GetProjectFiles`, `GetTaskFiles`, `GetFile`.
  - `UploadProjectFile` — `POST /api/2.0/files/{folderId}/upload` into the
    project's `projectFolder` (resolved via `GetProjectByID` or first folder
    from `GetProjectFiles`).
  - `AttachFilesToTask` — `POST .../project/task/{id}/files` with form
    `files=<id>` (OnlyOffice expects **existing** file ids, not multipart).
  - `UploadTaskFile` — uploads via `UploadProjectFile` using the task's
    `projectOwner.id`, then attaches.
  - `DetachTaskFile` — `DELETE .../files?fileid=`.
  - `RenameFile` — `PUT /api/2.0/files/file/{id}.json` with JSON body.
  - `DeleteFiles` — `PUT /api/2.0/files/fileops/delete.json` with `fileIds`.
  - `DownloadFile` — `GetFile` then `GET` on `viewUrl` with `Authorization`.
  - Helpers: `FileEntryNumericID`, `FileEntryTitle`, `SafeLocalFileName`.
- **`putJSON`** on `*Client` in [`http.go`](http.go) for JSON PUT bodies.

### Added — CLI

- `oo projects files list|upload|download|rename|delete` — see
  [`cmd/oo/projects_files.go`](cmd/oo/projects_files.go); `list` supports
  `--folders`.
- `oo tasks files list|upload|detach` — see [`cmd/oo/tasks_files.go`](cmd/oo/tasks_files.go).

### Added — tests

- [`files_integration_test.go`](files_integration_test.go) — live roundtrip
  against OnlyOffice (same credential rules as `client_test.go`).
- [`files_test.go`](files_test.go) + `testdata/*.json` — envelope decode unit
  tests (no network).

## [0.5.0] - 2026-04-24

### Changed — CLI **BREAKING**

- **Subject-based command tree** (`tea`-style). The flat `oo verb-noun`
  layout is replaced with `oo <subject> <verb>`:

  | Old | New |
  |---|---|
  | `oo cal-list` | `oo calendar list` |
  | `oo cal-events` | `oo calendar events` |
  | `oo cal-add` / `cal-delete` | `oo calendar add` / `calendar delete` |
  | `oo task-list` | `oo tasks list` |
  | `oo task-add` | `oo tasks create` |
  | `oo task-update` | `oo tasks update` (deletion moved to `oo tasks delete`) |
  | `oo subtask-add` | `oo tasks subtask add` |
  | `oo crm-contacts` | `oo contacts list` (plus filtered `oo persons list` / `oo companies list`) |
  | `oo crm-add-contact --company …` | `oo companies create --name …` |
  | `oo crm-add-contact --person-first …` | `oo persons create --first …` |
  | `oo crm-deals` | `oo opportunities list` |
  | `oo crm-deals --stages` | `oo opportunities stages` |
  | `oo crm-add-deal` | `oo opportunities create` |
  | `oo crm-cases` | `oo cases list` |
  | `oo applications-sync` | `oo applications sync` |

- **New subjects**: `oo projects {list,get,milestones,create,update,delete}`,
  `oo users {list,self}` (plus top-level `oo whoami`), `oo crm-tasks
  {list,create,delete,categories}`, `oo cases {create,delete,member-add}`,
  `oo contacts {get,info-add}`.

- **Global `--output/-o` flag**: all list-like commands now support
  `--output table` (default; tabwriter-aligned, truncated to 80 chars
  per cell) and `--output json`. Nested `bidCurrency` flattened to its
  `abbreviation` in the table view.

- **Module aliases**: `oo calendar|cal`, `oo projects|prj`, `oo tasks|task`,
  `oo persons|person`, `oo companies|company`, `oo opportunities|deals|deal`,
  `oo cases|case`, `oo applications|apps`. `delete|rm` on every leaf that
  removes things.

### Added

- `cmd/oo/common.go` — shared `printTable(headers, rows)` and
  `printObject(v)` helpers that dispatch on the `--output` flag.
- `cmd/oo/users.go` — exposes `oo users list`, `oo users self`, `oo whoami`
  via the library's `GetUsers` + `SelfUserID`.
- `cmd/oo/projects.go` — full CRUD for projects backed by `CreateProject`,
  `UpdateProject`, `DeleteProject`, `GetProjectByID`, `GetProjectMilestones`.
- `cmd/oo/crm_tasks.go` — dedicated `oo crm-tasks` subject (distinct from
  project `oo tasks`).
- `cmd/oo/contacts.go` — unified contacts/persons/companies with shared
  list/filter implementation.

### Changed — library (minor)

- `newOO` in `cmd/oo/common.go` now calls `AuthenticateContext(cmd.Context())`
  so CLI aborts propagate to the auth request.

## [0.4.0] - 2026-04-24

### Changed — project structure

- **Library files reorganised by domain** (mechanical split; zero API surface
  change). The former monolithic `onlyoffice.go` (687 LOC) is now split into:
  - `client.go` — `Client`, `Credentials`, `Defaults`, env helpers, `NewClient`.
  - `request.go` — `Request`, `Query`, `Time`, `Token`, `MetaResponse`,
    `Permissions`, `requestBodyReader`.
  - `auth.go` — `Authenticate`, `AuthenticateContext`, `InvalidateToken`,
    `Auth`, `ensureToken`, `authHeader`, `tokenValid`.
  - `http.go` — transport helpers and DRY response decoders
    (`ResponseArray`, `ResponseObject`, `postFormObject`, `putFormObject`,
    `deleteObject`, `unmarshalResponseObject`).
  - `projects.go` — `Project`, `Projects`, `Milestone`, `ProjectOwner` +
    `GetProjects` / `CreateProject` / `UpdateProject` / `DeleteProject` /
    `GetProjectByID` / `GetProjectMilestones`.
  - `tasks.go` — `Task`, `ProjectTaskStatus`, `TaskPriority`,
    `ProjectGetTasksRequest` et al. **plus** the form-encoded helpers
    formerly in `tasks_extra.go` (`ListTasks`, `AddTask`, `AddSubtask`,
    `UpdateTaskStatus`, `DeleteTask`, `GetTaskByID`).
  - `users.go` — `User`, `Contact`, `Group`, `GetUsers`, `SelfUserID`.
  - `calendar.go`, `crm.go`, `files.go` — unchanged in scope, refactored
    through the new DRY helpers.
  - `httpx.go` → **renamed** `http.go`.
  - `onlyoffice.go` and `tasks_extra.go` — **deleted** (content redistributed).

### Changed — CLI **BREAKING**

- **Binary renamed `oo-cli` → `oo`.** Install with
  `go install github.com/eslider/go-onlyoffice/cmd/oo@latest`.
- **Package path `cmd/oo-cli` → `cmd/oo`.** The old path is removed.
- **`internal/cli` is gone.** Cobra commands now live directly under
  `cmd/oo/` as `package main`, split by domain: `calendar.go`, `crm.go`,
  `tasks.go`, `apps.go`, `common.go`. Rationale: cobra wiring is a CLI-only
  concern and does not belong inside a `pkg-level internal/`.
- **`internal/applications` → `cmd/oo/applications/`.** This is a
  CV-specific CRM workflow — not a general OnlyOffice feature — and is only
  consumed by the `oo` CLI. Keeping it under `cmd/oo/` prevents accidental
  external adoption and makes the coupling explicit.
- **`examples/applications/` removed.** It imported an internal package,
  which was a policy smell. Remaining examples (`basic`, `calendar`, `crm`,
  `subtasks`) use only the exported library surface.

### Added

- `(*Client).ResponseObject` — GET-and-decode-object counterpart to the
  existing `ResponseArray`.
- `(*Client).postFormObject` / `putFormObject` / `deleteObject` — eliminate
  the ~15 identical "form request → `responseField` → `json.Unmarshal`"
  blocks previously duplicated across `crm.go` / `tasks_extra.go` /
  `calendar.go` / `files.go`.

### Migration

External library consumers: **no changes required**. The module path
(`github.com/eslider/go-onlyoffice`), the `onlyoffice` package name, and
every exported symbol are unchanged.

CLI users: replace `oo-cli` with `oo` in scripts and CI. The command set
and flags are identical.

## [0.3.2] - 2026-04-24

### Fixed

- `Project.String()` no longer interprets the title as a format string
  (`fmt.Sprintf(*p.Title)`) and is now nil-safe on a zero-value `Project`.
- `internal/applications.buildSummary` no longer panics at regex compile time
  on Go 1.23+ — the previous `(?= ...)` lookahead is replaced with an RE2-safe
  non-capturing trailing delimiter.

### Changed

- `Client.Query` now routes token acquisition through the shared
  `ensureToken` path instead of duplicating the auth-expiry check inline.
- Request body marshalling is consolidated into an unexported
  `requestBodyReader` helper (DRY; no change to the public surface).
- The `Request.Debug` field is preserved for backwards compatibility but no
  longer changes behaviour — both branches used to unmarshal into the same
  target value. We'll remove the field in a future major release.

### Tests

- Deleted `httptest.NewServer` fixtures that emulated OnlyOffice protocol
  endpoints. Replaced them with:
  - pure-Go unit tests in `unit_test.go` (no network);
  - real integration tests in `client_test.go` guarded by
    `//go:build integration`. Run with
    `go test -tags=integration ./...`. Tests skip cleanly when
    `ONLYOFFICE_URL/USER/PASS` (or aliases) are absent.
- New policy documented in `AGENTS.md` and
  `.cursor/rules/no-synthetic-mocks.mdc`.

## [0.3.1] - 2026-04-24

### Added

- `AuthenticateContext(ctx)` — context-aware auth that honours cancellation and
  deadlines. Preferred entry point for long-running syncs (cron, watchers).
- `InvalidateToken()` — clears the cached token to force re-auth on the next
  request. Use this to recover from a mid-sync 401 when the server has revoked
  the session while the local `Expires` timestamp still looks fresh.

### Notes

- Plain `Authenticate()` is unchanged and remains a convenience wrapper around
  `AuthenticateContext(context.Background())`.
- No breaking changes; a patch release.

## [0.3.0] - 2026-04-24

### Added

- Calendar helpers: `ListCalendars`, `ListEvents`, `AddEvent`, `DeleteEvent`.
- CRM helpers: contacts (`ListContacts`, `GetContact`, `FindCompany`, `FindPerson`,
  `CreateCompany`, `CreatePerson`, `AddContactInfo`, `DeleteContact`), deals
  (`ListOpportunities`, `GetOpportunity`, `CreateOpportunity`,
  `AddOpportunityMember`, `ListDealStages`, `DeleteOpportunity`), cases
  (`ListCases`, `CreateCase`, `AddCaseMember`, `DeleteCase`), CRM tasks
  (`ListCRMTasks`, `CreateCRMTask`, `DeleteCRMTask`, `ListTaskCategories`), and
  history notes (`AddHistoryNote`).
- Project task extras: `GetProjectByID`, `ListTasks`, `ListAllTasks`,
  `GetTaskByID`, `AddTask`, `AddSubtask`, `UpdateTaskStatus`, `DeleteTask`.
- File upload: `UploadOpportunityFile` (multipart).
- `SelfUserID` cached lookup of `people/@self`.
- `Defaults` struct + `SetDefaults` + `GetEnvironmentDefaults` for optional
  calendar/project fallbacks.
- Alias env vars accepted by `GetEnvironmentCredentials`:
  `ONLYOFFICE_HOST` / `ONLYOFFICE_NAME` / `ONLYOFFICE_PASSWORD`.
- Public `Authenticate()` that primes the token eagerly.
- Bundled CLI: `cmd/oo-cli` (Cobra) with commands `cal-list`, `cal-events`,
  `cal-add`, `cal-delete`, `task-list`, `task-add`, `subtask-add`,
  `task-update`, `crm-contacts`, `crm-add-contact`, `crm-deals`,
  `crm-add-deal`, `crm-cases`, `applications-sync`.
- httptest-based unit tests for form / multipart / CRM helpers.

### Changed

- The `onlyoffice.Client` struct gained unexported fields (`defaults`, `selfID`,
  `noteCatID`); the public API is unchanged and remains backwards compatible.

## [0.2.0] - earlier

- Badges, docs expansion (Gitea sync use case, Gantt/PM workflows).

## [0.1.0] - earlier

- Initial release: OnlyOffice Project Management API client.