From 495276f654955d23909e2ba274574cb40c70219a Mon Sep 17 00:00:00 2001
From: Stephen Way <stephen@rasterstate.com>
Date: Wed, 13 May 2026 07:56:28 -0700
Subject: [PATCH] initial: fj, a CLI for Forgejo

Multi-host auth (tokens in OS keychain), repo/issue/pr CRUD, and a
gh-style `api` escape hatch with -f/-F/-X/-q. Targets Forgejo 7.x via
the Gitea-compatible /api/v1 surface.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .gitignore               |    8 +
 Cargo.lock               | 2478 ++++++++++++++++++++++++++++++++++++++
 Cargo.toml               |   47 +
 README.md                |   44 +
 src/api/issue.rs         |  190 +++
 src/api/mod.rs           |   13 +
 src/api/pull.rs          |  173 +++
 src/api/repo.rs          |  125 ++
 src/api/user.rs          |   23 +
 src/auth/mod.rs          |   40 +
 src/cli/api.rs           |  144 +++
 src/cli/auth.rs          |  248 ++++
 src/cli/issue.rs         |  274 +++++
 src/cli/mod.rs           |   72 ++
 src/cli/pr.rs            |  317 +++++
 src/cli/repo.rs          |  196 +++
 src/client/error.rs      |   13 +
 src/client/mod.rs        |  222 ++++
 src/client/pagination.rs |   79 ++
 src/config/hosts.rs      |  111 ++
 src/config/mod.rs        |   17 +
 src/git/mod.rs           |   32 +
 src/main.rs              |   28 +
 src/output/mod.rs        |  106 ++
 24 files changed, 5000 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 Cargo.lock
 create mode 100644 Cargo.toml
 create mode 100644 README.md
 create mode 100644 src/api/issue.rs
 create mode 100644 src/api/mod.rs
 create mode 100644 src/api/pull.rs
 create mode 100644 src/api/repo.rs
 create mode 100644 src/api/user.rs
 create mode 100644 src/auth/mod.rs
 create mode 100644 src/cli/api.rs
 create mode 100644 src/cli/auth.rs
 create mode 100644 src/cli/issue.rs
 create mode 100644 src/cli/mod.rs
 create mode 100644 src/cli/pr.rs
 create mode 100644 src/cli/repo.rs
 create mode 100644 src/client/error.rs
 create mode 100644 src/client/mod.rs
 create mode 100644 src/client/pagination.rs
 create mode 100644 src/config/hosts.rs
 create mode 100644 src/config/mod.rs
 create mode 100644 src/git/mod.rs
 create mode 100644 src/main.rs
 create mode 100644 src/output/mod.rs

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..f8ef83f
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,8 @@
+/target
+**/*.rs.bk
+Cargo.lock.bak
+.DS_Store
+.idea/
+.vscode/
+*.swp
+*.swo
diff --git a/Cargo.lock b/Cargo.lock
new file mode 100644
index 0000000..3fa187e
--- /dev/null
+++ b/Cargo.lock
@@ -0,0 +1,2478 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 3
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "alloc-no-stdlib"
+version = "2.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc7bb162ec39d46ab1ca8c77bf72e890535becd1751bb45f64c597edb4c8c6b3"
+
+[[package]]
+name = "alloc-stdlib"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94fb8275041c72129eb51b7d0322c29b8387a0386127718b096429201a5d6ece"
+dependencies = [
+ "alloc-no-stdlib",
+]
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "ansi-str"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1cf4578926a981ab0ca955dc023541d19de37112bc24c1a197bd806d3d86ad1d"
+dependencies = [
+ "ansitok",
+]
+
+[[package]]
+name = "ansitok"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "220044e6a1bb31ddee4e3db724d29767f352de47445a6cd75e1a173142136c83"
+dependencies = [
+ "nom",
+ "vte",
+]
+
+[[package]]
+name = "anstream"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
+
+[[package]]
+name = "anstyle-parse"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+
+[[package]]
+name = "arrayvec"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b62fc65de8e4e7f52534fb52b0f3ed04746ae267519eef2a83941e8085068b"
+
+[[package]]
+name = "async-compression"
+version = "0.4.42"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e79b3f8a79cccc2898f31920fc69f304859b3bd567490f75ebf51ae1c792a9ac"
+dependencies = [
+ "compression-codecs",
+ "compression-core",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "bitflags"
+version = "2.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4512299f36f043ab09a583e57bceb5a5aab7a73db1805848e8fef3c9e8c78b3"
+
+[[package]]
+name = "brotli"
+version = "8.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4bd8b9603c7aa97359dbd97ecf258968c95f3adddd6db2f7e7a5bef101c84560"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+ "brotli-decompressor",
+]
+
+[[package]]
+name = "brotli-decompressor"
+version = "5.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "874bb8112abecc98cbd6d81ea4fa7e94fb9449648c93cc89aa40c81c24d7de03"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
+
+[[package]]
+name = "bytecount"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175812e0be2bccb6abe50bb8d566126198344f707e304f45c648fd8f2cc0365e"
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
+
+[[package]]
+name = "cc"
+version = "1.2.62"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1dce859f0832a7d088c4f1119888ab94ef4b5d6795d1ce05afb7fe159d79f98"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "chrono"
+version = "0.4.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c673075a2e0e5f4a1dde27ce9dee1ea4558c7ffe648f576438a20ca1d2acc4b0"
+dependencies = [
+ "iana-time-zone",
+ "num-traits",
+ "serde",
+ "windows-link",
+]
+
+[[package]]
+name = "clap"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ddb117e43bbf7dacf0a4190fef4d345b9bad68dfc649cb349e7d17d28428e51"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+ "terminal_size",
+]
+
+[[package]]
+name = "clap_complete"
+version = "4.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0a7a9bfdb35811f9e59832f0f05975114d2251b415fb534108e6f34060fd772"
+dependencies = [
+ "clap",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2ce8604710f6733aa641a2b3731eaa1e8b3d9973d5e3565da11800813f997a9"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "compression-codecs"
+version = "0.4.38"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce2548391e9c1929c21bf6aa2680af86fe4c1b33e6cea9ac1cfeec0bd11218cf"
+dependencies = [
+ "brotli",
+ "compression-core",
+ "flate2",
+ "memchr",
+]
+
+[[package]]
+name = "compression-core"
+version = "0.4.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc14f565cf027a105f7a44ccf9e5b424348421a1d8952a8fc9d499d313107789"
+
+[[package]]
+name = "console"
+version = "0.15.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "054ccb5b10f9f2cbf51eb355ca1d05c2d279ce1804688d0db74b4733a5aeafd8"
+dependencies = [
+ "encode_unicode",
+ "libc",
+ "once_cell",
+ "unicode-width 0.2.2",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "dialoguer"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "658bce805d770f407bc62102fca7c2c64ceef2fbcb2b8bd19d2765ce093980de"
+dependencies = [
+ "console",
+ "shell-words",
+ "thiserror 1.0.69",
+ "zeroize",
+]
+
+[[package]]
+name = "directories"
+version = "5.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a49173b84e034382284f27f1af4dcbbd231ffa358c0fe316541a7337f376a35"
+dependencies = [
+ "dirs-sys",
+]
+
+[[package]]
+name = "dirs-sys"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "520f05a5cbd335fae5a99ff7a6ab8627577660ee5cfd6a94a6a929b52ff0321c"
+dependencies = [
+ "libc",
+ "option-ext",
+ "redox_users",
+ "windows-sys 0.48.0",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "encode_unicode"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34aa73646ffb006b8f5147f3dc182bd4bcb190227ce861fc4a4844bf8e3cb2c0"
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "fj"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "chrono",
+ "clap",
+ "clap_complete",
+ "dialoguer",
+ "directories",
+ "futures-util",
+ "indicatif",
+ "is-terminal",
+ "keyring",
+ "owo-colors",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "supports-color 3.0.2",
+ "tabled",
+ "textwrap",
+ "thiserror 2.0.18",
+ "tokio",
+ "toml",
+ "url",
+]
+
+[[package]]
+name = "flate2"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+
+[[package]]
+name = "futures-io"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+
+[[package]]
+name = "futures-task"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+
+[[package]]
+name = "futures-util"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+dependencies = [
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
+
+[[package]]
+name = "heck"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8"
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hermit-abi"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "hyper"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6299f016b246a94207e63da54dbe807655bf9e00044f73ded42c3ac5305fbcca"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "http",
+ "http-body",
+ "httparse",
+ "itoa",
+ "pin-project-lite",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33ca68d021ef39cf6463ab54c1d0f5daf03377b70561305bb89a8f83aab66e0f"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.65"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2984d1cd16c883d7935b9e07e44071dca8d917fd52ecc02c04d5fa0b5a3f191c"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "utf8_iter",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92219b62b3e2b4d88ac5119f8904c10f8f61bf7e95b640d25ba3075e6cac2c29"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c56e5ee99d6e3d33bd91c5d85458b6005a22140021cc324cea84dd0e72cff3b4"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da3be0ae77ea334f4da67c12f149704f19f81d1adf7c51cf482943e84a2bad38"
+
+[[package]]
+name = "icu_properties"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bee3b67d0ea5c2cca5003417989af8996f8604e34fb9ddf96208a033901e70de"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e2bbb201e0c04f7b4b3e14382af113e17ba4f63e2c9d2ee626b720cbce54a14"
+
+[[package]]
+name = "icu_provider"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "139c4cf31c8b5f33d7e199446eff9c1e02decfc2f0eec2c8d71f65befa45b421"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d466e9454f08e4a911e14806c24e16fba1b4c121d1ea474396f396069cf949d9"
+dependencies = [
+ "equivalent",
+ "hashbrown",
+]
+
+[[package]]
+name = "indicatif"
+version = "0.17.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "183b3088984b400f4cfac3620d5e076c84da5364016b4f49473de574b2586235"
+dependencies = [
+ "console",
+ "number_prefix",
+ "portable-atomic",
+ "unicode-width 0.2.2",
+ "web-time",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d98f6fed1fde3f8c21bc40a1abb88dd75e67924f9cffc3ef95607bad8017f8e2"
+
+[[package]]
+name = "is-terminal"
+version = "0.4.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3640c1c38b8e4e43584d8df18be5fc6b0aa314ce6ebf51b53313d4306cca8e46"
+dependencies = [
+ "hermit-abi",
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "is_ci"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7655c9839580ee829dfacba1d1278c2b7883e50a277ff7541299489d6bdfdc45"
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "js-sys"
+version = "0.3.98"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67df7112613f8bfd9150013a0314e196f4800d3201ae742489d999db2f979f08"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "keyring"
+version = "3.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eebcc3aff044e5944a8fbaf69eb277d11986064cba30c468730e8b9909fb551c"
+dependencies = [
+ "byteorder",
+ "linux-keyutils",
+ "log",
+ "security-framework 2.11.1",
+ "security-framework 3.7.0",
+ "windows-sys 0.60.2",
+ "zeroize",
+]
+
+[[package]]
+name = "libc"
+version = "0.2.186"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
+
+[[package]]
+name = "libredox"
+version = "0.1.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e02f3bb43d335493c96bf3fd3a321600bf6bd07ed34bc64118e9293bdffea46c"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "linux-keyutils"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83270a18e9f90d0707c41e9f35efada77b64c0e6f3f1810e71c8368a864d5590"
+dependencies = [
+ "bitflags",
+ "libc",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92daf443525c4cce67b150400bc2316076100ce0b3686209eb8cf3c31612e6f0"
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "memchr"
+version = "2.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50b7e5b27aa02a74bac8c3f23f448f8d87ff11f92d3aac1a6ed369ee08cc56c1"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "number_prefix"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "830b246a0e5f20af87141b25c173cd1b609bd7779a4617d6ec582abaf90870f3"
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "option-ext"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
+
+[[package]]
+name = "owo-colors"
+version = "4.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d211803b9b6b570f68772237e415a029d5a50c65d382910b879fb19d3271f94d"
+dependencies = [
+ "supports-color 2.1.0",
+ "supports-color 3.0.2",
+]
+
+[[package]]
+name = "papergrid"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7419ad52a7de9b60d33e11085a0fe3df1fbd5926aa3f93d3dd53afbc9e86725"
+dependencies = [
+ "ansi-str",
+ "ansitok",
+ "bytecount",
+ "fnv",
+ "unicode-width 0.1.11",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "portable-atomic"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
+
+[[package]]
+name = "potential_utf"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0103b1cef7ec0cf76490e969665504990193874ea05c85ff9bab8b911d0a0564"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "proc-macro-error"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c"
+dependencies = [
+ "proc-macro-error-attr",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro-error-attr"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash",
+ "rustls",
+ "socket2",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2",
+ "tracing",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "rand"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44c5af06bb1b7d3216d91932aed5265164bf384dc89cd6ba05cf59a35f5f76ea"
+dependencies = [
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "redox_users"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba009ff324d1fc1b900bd1fdb31564febe58a8ccc8a6fdbb93b543d33b13ca43"
+dependencies = [
+ "getrandom 0.2.17",
+ "libredox",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+ "webpki-roots",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94300abf3f1ae2e2b8ffb7b58043de3d399c73fa6f4b73826402a5c457614dbe"
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef86cd5876211988985292b91c96a8f2d298df24e75989a43a3c73f2d4d8168b"
+dependencies = [
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30a7197ae7eb376e574fe940d068c30fe0462554a3ddbe4eca7838e049c937a9"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ryu"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
+
+[[package]]
+name = "security-framework"
+version = "2.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "897b2245f0b511c87893af39b033e5ca9cce68824c4d7e7630b5a1d339658d02"
+dependencies = [
+ "bitflags",
+ "core-foundation 0.9.4",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework"
+version = "3.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
+dependencies = [
+ "bitflags",
+ "core-foundation 0.10.1",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "shell-words"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc6fe69c597f9c37bfeeeeeb33da3530379845f10be461a66d16d03eca2ded77"
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "703d5c7ef118737c72f1af64ad2f6f8c5e1921f818cdcb97b8fe6fc69bf66214"
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "smawk"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c388c1b5e93756d0c740965c41e8822f866621d41acbdf6336a6a168f8840c"
+
+[[package]]
+name = "socket2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "supports-color"
+version = "2.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6398cde53adc3c4557306a96ce67b302968513830a77a95b2b17305d9719a89"
+dependencies = [
+ "is-terminal",
+ "is_ci",
+]
+
+[[package]]
+name = "supports-color"
+version = "3.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c64fc7232dd8d2e4ac5ce4ef302b1d81e0b80d055b9d77c7c4f51f6aa4c867d6"
+dependencies = [
+ "is_ci",
+]
+
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.117"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "tabled"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77c9303ee60b9bedf722012ea29ae3711ba13a67c9b9ae28993838b63057cb1b"
+dependencies = [
+ "ansi-str",
+ "ansitok",
+ "papergrid",
+ "tabled_derive",
+]
+
+[[package]]
+name = "tabled_derive"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf0fb8bfdc709786c154e24a66777493fb63ae97e3036d914c8666774c477069"
+dependencies = [
+ "heck 0.4.1",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "terminal_size"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "230a1b821ccbd75b185820a1f1ff7b14d21da1e442e22c0863ea5f08771a8874"
+dependencies = [
+ "rustix",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "textwrap"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c13547615a44dc9c452a8a534638acdf07120d4b6847c8178705da06306a3057"
+dependencies = [
+ "smawk",
+ "unicode-linebreak",
+ "unicode-width 0.2.2",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl 2.0.18",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8323304221c2a851516f22236c5722a72eaa19749016521d6dff0824447d96d"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e61e67053d25a4e82c844e8424039d9745781b3fc4f32b8d55ed50f5f667ef3"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.52.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fc7f01b389ac15039e4dc9531aa973a135d7a4135281b12d7c1bc79fd57fffe"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "385a6cb71ab9ab790c5fe8d67f1645e6c450a7ce006a33de03daa956cf70a496"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "toml"
+version = "0.8.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362"
+dependencies = [
+ "serde",
+ "serde_spanned",
+ "toml_datetime",
+ "toml_edit",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.22.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a"
+dependencies = [
+ "indexmap",
+ "serde",
+ "serde_spanned",
+ "toml_datetime",
+ "toml_write",
+ "winnow",
+]
+
+[[package]]
+name = "toml_write"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801"
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68d6fdd9f81c2819c9a8b0e0cd91660e7746a8e6ea2ba7c6b2b057985f6bcb51"
+dependencies = [
+ "async-compression",
+ "bitflags",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "pin-project-lite",
+ "tokio",
+ "tokio-util",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "url",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "pin-project-lite",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-linebreak"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b09c83c3c29d37506a3e260c08c03743a6bb66a9cd432c6934ab501a190571f"
+
+[[package]]
+name = "unicode-width"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e51733f11c9c4f72aa0c160008246859e340b00807569a0da0e7a1079b27ba85"
+
+[[package]]
+name = "unicode-width"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "vte"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6cbce692ab4ca2f1f3047fcf732430249c0e971bfdd2b234cf2c47ad93af5983"
+dependencies = [
+ "arrayvec",
+ "utf8parse",
+ "vte_generate_state_changes",
+]
+
+[[package]]
+name = "vte_generate_state_changes"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e369bee1b05d510a7b4ed645f5faa90619e05437111783ea5848f28d97d3c2e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.3+wasi-0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20064672db26d7cdc89c7798c48a0fdfac8213434a1186e5ef29fd560ae223d6"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.121"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49ace1d07c165b0864824eee619580c4689389afa9dc9ed3a4c75040d82e6790"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.71"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96492d0d3ffba25305a7dc88720d250b1401d7edca02cc3bcd50633b424673b8"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.121"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e68e6f4afd367a562002c05637acb8578ff2dea1943df76afb9e83d177c8578"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.121"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d95a9ec35c64b2a7cb35d3fead40c4238d0940c86d107136999567a4703259f2"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.121"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4e0100b01e9f0d03189a92b96772a1fb998639d981193d7dbab487302513441"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15053d8d85c7eccdbefef60f06769760a563c7f0a9d6902a13d35c7800b0ad65"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.98"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b572dff8bcf38bad0fa19729c89bb5748b2b9b1d8be70cf90df697e3a8f32aa"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52f5ee44c96cf55f1b349600768e3ece3a8f26010c05265ab73f945bb1a2eb9d"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link",
+ "windows-result",
+ "windows-strings",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
+dependencies = [
+ "windows-targets 0.48.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c"
+dependencies = [
+ "windows_aarch64_gnullvm 0.48.5",
+ "windows_aarch64_msvc 0.48.5",
+ "windows_i686_gnu 0.48.5",
+ "windows_i686_msvc 0.48.5",
+ "windows_x86_64_gnu 0.48.5",
+ "windows_x86_64_gnullvm 0.48.5",
+ "windows_x86_64_msvc 0.48.5",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "winnow"
+version = "0.7.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "writeable"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ffae5123b2d3fc086436f8834ae3ab053a283cfac8fe0a0b8eaae044768a4c4"
+
+[[package]]
+name = "yoke"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "abe8c5fda708d9ca3df187cae8bfb9ceda00dd96231bed36e445a1a48e66f9ca"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de844c262c8848816172cef550288e7dc6c7b7814b4ee56b3e1553f275f1858e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+ "synstructure",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.48"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eed437bf9d6692032087e337407a86f04cd8d6a16a37199ed57949d415bd68e9"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.48"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70e3cd084b1788766f53af483dd21f93881ff30d7320490ec3ef7526d203bad4"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11532158c46691caf0f2593ea8358fed6bbf68a0315e80aae9bd41fbade684a1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+
+[[package]]
+name = "zerotrie"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f9152d31db0792fa83f70fb2f83148effb5c1f5b8c7686c3459e361d9bc20bf"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90f911cbc359ab6af17377d242225f4d75119aec87ea711a880987b18cd7b239"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625dc425cab0dca6dc3c3319506e6593dcb08a9f387ea3b284dbd52a92c40555"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.117",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/Cargo.toml b/Cargo.toml
new file mode 100644
index 0000000..0883b41
--- /dev/null
+++ b/Cargo.toml
@@ -0,0 +1,47 @@
+[package]
+name = "fj"
+version = "0.1.0"
+edition = "2021"
+rust-version = "1.80"
+description = "Command-line tool for Forgejo, in the spirit of gh"
+authors = ["Stephen Way <stephen@rasterstate.com>"]
+license = "MIT"
+repository = "https://rasterhub.com/rasterstate/fj"
+readme = "README.md"
+
+[[bin]]
+name = "fj"
+path = "src/main.rs"
+
+[dependencies]
+anyhow = "1"
+thiserror = "2"
+clap = { version = "4.5", features = ["derive", "env", "wrap_help"] }
+clap_complete = "4.5"
+tokio = { version = "1", features = ["rt-multi-thread", "macros", "fs", "process", "io-util", "io-std", "signal"] }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "stream", "gzip", "brotli"] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+toml = "0.8"
+directories = "5"
+keyring = { version = "3", features = ["apple-native", "linux-native", "windows-native"] }
+url = "2"
+chrono = { version = "0.4", default-features = false, features = ["serde", "clock"] }
+tabled = { version = "0.16", features = ["ansi"] }
+owo-colors = { version = "4", features = ["supports-colors"] }
+supports-color = "3"
+indicatif = "0.17"
+dialoguer = { version = "0.11", default-features = false, features = ["password"] }
+is-terminal = "0.4"
+textwrap = "0.16"
+futures-util = "0.3"
+
+[profile.release]
+lto = "thin"
+codegen-units = 1
+strip = "symbols"
+opt-level = 3
+
+[profile.dist]
+inherits = "release"
+lto = "fat"
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..9de526d
--- /dev/null
+++ b/README.md
@@ -0,0 +1,44 @@
+# fj
+
+A command-line tool for [Forgejo](https://forgejo.org) instances, in the spirit of GitHub's `gh`.
+
+Multi-host from day one. Tokens are stored in your OS keychain.
+
+## Install
+
+```sh
+cargo install --path .
+```
+
+## Quick start
+
+```sh
+fj auth login                          # add a host and token
+fj auth status                         # show signed-in hosts
+fj repo list                           # repos you own on the default host
+fj repo view owner/name                # repo overview
+fj issue list -R owner/name            # issues
+fj pr list -R owner/name --state open  # pull requests
+fj api /repos/search?q=foo             # raw API escape hatch
+```
+
+Use `--host <hostname>` on any command to target a specific host.
+
+## Commands
+
+| Group   | Commands                                          |
+| ------- | ------------------------------------------------- |
+| `auth`  | `login`, `status`, `logout`, `list`, `switch`     |
+| `repo`  | `list`, `view`, `clone`, `create`                 |
+| `issue` | `list`, `view`, `create`, `close`, `reopen`, `comment` |
+| `pr`    | `list`, `view`, `create`, `checkout`, `merge`, `close` |
+| `api`   | raw HTTP against `/api/v1` with optional fields and jq-style field selection |
+
+## Config
+
+- Hosts and the current host live in `$XDG_CONFIG_HOME/fj/hosts.toml` (`~/Library/Application Support/fj/hosts.toml` on macOS).
+- Tokens live in the OS keychain under service `fj` keyed by hostname.
+
+## License
+
+MIT
diff --git a/src/api/issue.rs b/src/api/issue.rs
new file mode 100644
index 0000000..bb1ec5a
--- /dev/null
+++ b/src/api/issue.rs
@@ -0,0 +1,190 @@
+use anyhow::Result;
+use chrono::{DateTime, Utc};
+use reqwest::Method;
+use serde::{Deserialize, Serialize};
+
+use crate::client::{Client, Page};
+
+use super::user::User;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Issue {
+    pub id: u64,
+    pub number: u64,
+    pub title: String,
+    #[serde(default)]
+    pub body: String,
+    pub state: String,
+    pub user: User,
+    #[serde(default)]
+    pub labels: Vec<Label>,
+    #[serde(default)]
+    pub assignees: Vec<User>,
+    pub html_url: String,
+    pub created_at: DateTime<Utc>,
+    pub updated_at: DateTime<Utc>,
+    #[serde(default)]
+    pub comments: u64,
+    /// Present only when the issue is actually a pull request.
+    #[serde(default)]
+    pub pull_request: Option<serde_json::Value>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Label {
+    pub id: u64,
+    pub name: String,
+    pub color: String,
+    #[serde(default)]
+    pub description: String,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum State {
+    Open,
+    Closed,
+    All,
+}
+
+impl State {
+    pub fn as_str(&self) -> &'static str {
+        match self {
+            State::Open => "open",
+            State::Closed => "closed",
+            State::All => "all",
+        }
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct ListOptions<'a> {
+    pub state: State,
+    pub limit: u32,
+    pub page: u32,
+    pub labels: Option<&'a str>,
+    pub assignee: Option<&'a str>,
+    pub query: Option<&'a str>,
+}
+
+impl Default for ListOptions<'_> {
+    fn default() -> Self {
+        Self {
+            state: State::Open,
+            limit: 30,
+            page: 1,
+            labels: None,
+            assignee: None,
+            query: None,
+        }
+    }
+}
+
+pub async fn list(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    opts: ListOptions<'_>,
+) -> Result<Page<Issue>> {
+    let path = format!("/api/v1/repos/{owner}/{name}/issues");
+    let mut query: Vec<(String, String)> = vec![
+        ("state".into(), opts.state.as_str().into()),
+        ("limit".into(), opts.limit.clamp(1, 50).to_string()),
+        ("page".into(), opts.page.max(1).to_string()),
+        ("type".into(), "issues".into()),
+    ];
+    if let Some(l) = opts.labels {
+        query.push(("labels".into(), l.into()));
+    }
+    if let Some(a) = opts.assignee {
+        query.push(("assigned_by".into(), a.into()));
+    }
+    if let Some(q) = opts.query {
+        query.push(("q".into(), q.into()));
+    }
+    client.get_page::<Issue>(&path, &query).await
+}
+
+pub async fn get(client: &Client, owner: &str, name: &str, number: u64) -> Result<Issue> {
+    let path = format!("/api/v1/repos/{owner}/{name}/issues/{number}");
+    client.json(Method::GET, &path, &[], None::<&()>).await
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct CreateIssue<'a> {
+    pub title: &'a str,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub body: Option<&'a str>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub assignees: Option<Vec<String>>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub labels: Option<Vec<u64>>,
+}
+
+pub async fn create(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    body: &CreateIssue<'_>,
+) -> Result<Issue> {
+    let path = format!("/api/v1/repos/{owner}/{name}/issues");
+    client.json(Method::POST, &path, &[], Some(body)).await
+}
+
+#[derive(Debug, Clone, Serialize, Default)]
+pub struct EditIssue<'a> {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub title: Option<&'a str>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub body: Option<&'a str>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub state: Option<&'a str>,
+}
+
+pub async fn edit(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    number: u64,
+    body: &EditIssue<'_>,
+) -> Result<Issue> {
+    let path = format!("/api/v1/repos/{owner}/{name}/issues/{number}");
+    client.json(Method::PATCH, &path, &[], Some(body)).await
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Comment {
+    pub id: u64,
+    pub body: String,
+    pub user: User,
+    pub html_url: String,
+    pub created_at: DateTime<Utc>,
+}
+
+#[derive(Debug, Clone, Serialize)]
+struct CreateComment<'a> {
+    body: &'a str,
+}
+
+pub async fn comment(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    number: u64,
+    body: &str,
+) -> Result<Comment> {
+    let path = format!("/api/v1/repos/{owner}/{name}/issues/{number}/comments");
+    let payload = CreateComment { body };
+    client
+        .json(Method::POST, &path, &[], Some(&payload))
+        .await
+}
+
+pub async fn list_comments(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    number: u64,
+) -> Result<Vec<Comment>> {
+    let path = format!("/api/v1/repos/{owner}/{name}/issues/{number}/comments");
+    client.json(Method::GET, &path, &[], None::<&()>).await
+}
diff --git a/src/api/mod.rs b/src/api/mod.rs
new file mode 100644
index 0000000..180cfba
--- /dev/null
+++ b/src/api/mod.rs
@@ -0,0 +1,13 @@
+pub mod issue;
+pub mod pull;
+pub mod repo;
+pub mod user;
+
+use anyhow::{anyhow, Result};
+
+/// Split an `owner/name` slug. Returns a helpful error if the form is wrong.
+pub fn split_repo(repo: &str) -> Result<(&str, &str)> {
+    repo.split_once('/')
+        .filter(|(o, n)| !o.is_empty() && !n.is_empty())
+        .ok_or_else(|| anyhow!("expected '<owner>/<name>', got '{repo}'"))
+}
diff --git a/src/api/pull.rs b/src/api/pull.rs
new file mode 100644
index 0000000..9904924
--- /dev/null
+++ b/src/api/pull.rs
@@ -0,0 +1,173 @@
+use anyhow::Result;
+use chrono::{DateTime, Utc};
+use reqwest::Method;
+use serde::{Deserialize, Serialize};
+
+use crate::client::{Client, Page};
+
+use super::issue::{Label, State};
+use super::user::User;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Pull {
+    pub id: u64,
+    pub number: u64,
+    pub title: String,
+    #[serde(default)]
+    pub body: String,
+    pub state: String,
+    pub user: User,
+    #[serde(default)]
+    pub labels: Vec<Label>,
+    pub html_url: String,
+    pub head: Branch,
+    pub base: Branch,
+    #[serde(default)]
+    pub draft: bool,
+    #[serde(default)]
+    pub mergeable: bool,
+    #[serde(default)]
+    pub merged: bool,
+    pub created_at: DateTime<Utc>,
+    pub updated_at: DateTime<Utc>,
+    #[serde(default)]
+    pub comments: u64,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Branch {
+    #[serde(default)]
+    pub label: String,
+    #[serde(default, rename = "ref")]
+    pub ref_: String,
+    #[serde(default)]
+    pub sha: String,
+}
+
+#[derive(Debug, Clone)]
+pub struct ListOptions {
+    pub state: State,
+    pub limit: u32,
+    pub page: u32,
+}
+
+impl Default for ListOptions {
+    fn default() -> Self {
+        Self {
+            state: State::Open,
+            limit: 30,
+            page: 1,
+        }
+    }
+}
+
+pub async fn list(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    opts: ListOptions,
+) -> Result<Page<Pull>> {
+    let path = format!("/api/v1/repos/{owner}/{name}/pulls");
+    let query: Vec<(String, String)> = vec![
+        ("state".into(), opts.state.as_str().into()),
+        ("limit".into(), opts.limit.clamp(1, 50).to_string()),
+        ("page".into(), opts.page.max(1).to_string()),
+    ];
+    client.get_page::<Pull>(&path, &query).await
+}
+
+pub async fn get(client: &Client, owner: &str, name: &str, number: u64) -> Result<Pull> {
+    let path = format!("/api/v1/repos/{owner}/{name}/pulls/{number}");
+    client.json(Method::GET, &path, &[], None::<&()>).await
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct CreatePull<'a> {
+    pub title: &'a str,
+    pub head: &'a str,
+    pub base: &'a str,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub body: Option<&'a str>,
+}
+
+pub async fn create(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    body: &CreatePull<'_>,
+) -> Result<Pull> {
+    let path = format!("/api/v1/repos/{owner}/{name}/pulls");
+    client.json(Method::POST, &path, &[], Some(body)).await
+}
+
+#[derive(Debug, Clone, Serialize, Default)]
+pub struct EditPull<'a> {
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub title: Option<&'a str>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub body: Option<&'a str>,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub state: Option<&'a str>,
+}
+
+pub async fn edit(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    number: u64,
+    body: &EditPull<'_>,
+) -> Result<Pull> {
+    let path = format!("/api/v1/repos/{owner}/{name}/pulls/{number}");
+    client.json(Method::PATCH, &path, &[], Some(body)).await
+}
+
+#[derive(Debug, Clone, Copy)]
+pub enum MergeStyle {
+    Merge,
+    Rebase,
+    RebaseMerge,
+    Squash,
+}
+
+impl MergeStyle {
+    fn as_str(self) -> &'static str {
+        match self {
+            MergeStyle::Merge => "merge",
+            MergeStyle::Rebase => "rebase",
+            MergeStyle::RebaseMerge => "rebase-merge",
+            MergeStyle::Squash => "squash",
+        }
+    }
+}
+
+#[derive(Debug, Clone, Serialize)]
+struct MergeBody<'a> {
+    #[serde(rename = "Do")]
+    do_: &'a str,
+    #[serde(skip_serializing_if = "Option::is_none", rename = "MergeTitleField")]
+    title: Option<&'a str>,
+    #[serde(skip_serializing_if = "Option::is_none", rename = "MergeMessageField")]
+    message: Option<&'a str>,
+}
+
+pub async fn merge(
+    client: &Client,
+    owner: &str,
+    name: &str,
+    number: u64,
+    style: MergeStyle,
+    title: Option<&str>,
+    message: Option<&str>,
+) -> Result<()> {
+    let path = format!("/api/v1/repos/{owner}/{name}/pulls/{number}/merge");
+    let body = MergeBody {
+        do_: style.as_str(),
+        title,
+        message,
+    };
+    let res = client
+        .request(Method::POST, &path, &[], Some(&serde_json::to_value(&body)?))
+        .await?;
+    res.error_for_status()?;
+    Ok(())
+}
diff --git a/src/api/repo.rs b/src/api/repo.rs
new file mode 100644
index 0000000..e0f7007
--- /dev/null
+++ b/src/api/repo.rs
@@ -0,0 +1,125 @@
+use anyhow::Result;
+use chrono::{DateTime, Utc};
+use reqwest::Method;
+use serde::{Deserialize, Serialize};
+
+use crate::client::{Client, Page};
+
+use super::user::User;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Repo {
+    pub id: u64,
+    pub name: String,
+    pub full_name: String,
+    pub owner: User,
+    #[serde(default)]
+    pub description: String,
+    #[serde(default)]
+    pub private: bool,
+    #[serde(default)]
+    pub fork: bool,
+    #[serde(default)]
+    pub archived: bool,
+    pub html_url: String,
+    pub clone_url: String,
+    pub ssh_url: String,
+    #[serde(default)]
+    pub default_branch: String,
+    #[serde(default)]
+    pub stars_count: u64,
+    #[serde(default)]
+    pub forks_count: u64,
+    #[serde(default)]
+    pub open_issues_count: u64,
+    pub updated_at: DateTime<Utc>,
+}
+
+#[derive(Debug, Clone, Serialize, Default)]
+pub struct ListOptions<'a> {
+    pub limit: u32,
+    pub page: u32,
+    pub query: Option<&'a str>,
+}
+
+pub async fn list_for_user(client: &Client, opts: ListOptions<'_>) -> Result<Page<Repo>> {
+    let limit = opts.limit.clamp(1, 50);
+    let page = opts.page.max(1);
+    let query: Vec<(String, String)> = vec![
+        ("limit".into(), limit.to_string()),
+        ("page".into(), page.to_string()),
+    ];
+    client.get_page::<Repo>("/api/v1/user/repos", &query).await
+}
+
+pub async fn search(client: &Client, opts: ListOptions<'_>) -> Result<Page<SearchHit>> {
+    let limit = opts.limit.clamp(1, 50);
+    let page = opts.page.max(1);
+    let mut query: Vec<(String, String)> = vec![
+        ("limit".into(), limit.to_string()),
+        ("page".into(), page.to_string()),
+    ];
+    if let Some(q) = opts.query {
+        query.push(("q".into(), q.into()));
+    }
+    let res = client
+        .request(
+            Method::GET,
+            "/api/v1/repos/search",
+            &query,
+            None,
+        )
+        .await?;
+    let headers = res.headers().clone();
+    let body: SearchResponse = res.error_for_status()?.json().await?;
+    Ok(Page::from_headers(body.data, &headers).also_total(body.ok))
+}
+
+#[derive(Debug, Deserialize)]
+struct SearchResponse {
+    #[serde(default)]
+    data: Vec<SearchHit>,
+    #[serde(default)]
+    ok: bool,
+}
+
+impl<T> Page<T> {
+    fn also_total(self, _ok: bool) -> Self {
+        self
+    }
+}
+
+pub type SearchHit = Repo;
+
+pub async fn get(client: &Client, owner: &str, name: &str) -> Result<Repo> {
+    let path = format!("/api/v1/repos/{owner}/{name}");
+    client.json(Method::GET, &path, &[], None::<&()>).await
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct CreateRepo<'a> {
+    pub name: &'a str,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub description: Option<&'a str>,
+    #[serde(default)]
+    pub private: bool,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub default_branch: Option<&'a str>,
+    #[serde(default)]
+    pub auto_init: bool,
+}
+
+pub async fn create_for_current_user(client: &Client, body: &CreateRepo<'_>) -> Result<Repo> {
+    client
+        .json(Method::POST, "/api/v1/user/repos", &[], Some(body))
+        .await
+}
+
+pub async fn create_for_org(
+    client: &Client,
+    org: &str,
+    body: &CreateRepo<'_>,
+) -> Result<Repo> {
+    let path = format!("/api/v1/orgs/{org}/repos");
+    client.json(Method::POST, &path, &[], Some(body)).await
+}
diff --git a/src/api/user.rs b/src/api/user.rs
new file mode 100644
index 0000000..5656f3b
--- /dev/null
+++ b/src/api/user.rs
@@ -0,0 +1,23 @@
+use anyhow::Result;
+use reqwest::Method;
+use serde::{Deserialize, Serialize};
+
+use crate::client::Client;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct User {
+    pub id: u64,
+    pub login: String,
+    #[serde(default)]
+    pub full_name: String,
+    #[serde(default)]
+    pub email: String,
+    #[serde(default)]
+    pub avatar_url: String,
+    #[serde(default)]
+    pub is_admin: bool,
+}
+
+pub async fn current(client: &Client) -> Result<User> {
+    client.json(Method::GET, "/api/v1/user", &[], None::<&()>).await
+}
diff --git a/src/auth/mod.rs b/src/auth/mod.rs
new file mode 100644
index 0000000..986e3ac
--- /dev/null
+++ b/src/auth/mod.rs
@@ -0,0 +1,40 @@
+//! Token storage. Tokens live in the OS keychain under service `fj`, keyed by
+//! hostname. We deliberately do not write tokens to disk.
+
+use anyhow::{Context, Result};
+use keyring::Entry;
+
+const SERVICE: &str = "fj";
+
+fn entry(host: &str) -> Result<Entry> {
+    Entry::new(SERVICE, host).with_context(|| format!("opening keychain entry for {host}"))
+}
+
+/// Save a token for `host`. Replaces any existing entry.
+pub fn store_token(host: &str, token: &str) -> Result<()> {
+    let entry = entry(host)?;
+    entry
+        .set_password(token)
+        .with_context(|| format!("writing token for {host} to keychain"))?;
+    Ok(())
+}
+
+/// Look up the stored token for `host`. Returns `Ok(None)` when not present
+/// rather than an error so callers can prompt for login.
+pub fn load_token(host: &str) -> Result<Option<String>> {
+    let entry = entry(host)?;
+    match entry.get_password() {
+        Ok(token) => Ok(Some(token)),
+        Err(keyring::Error::NoEntry) => Ok(None),
+        Err(e) => Err(e).with_context(|| format!("reading token for {host} from keychain")),
+    }
+}
+
+pub fn delete_token(host: &str) -> Result<()> {
+    let entry = entry(host)?;
+    match entry.delete_credential() {
+        Ok(()) => Ok(()),
+        Err(keyring::Error::NoEntry) => Ok(()),
+        Err(e) => Err(e).with_context(|| format!("removing token for {host} from keychain")),
+    }
+}
diff --git a/src/cli/api.rs b/src/cli/api.rs
new file mode 100644
index 0000000..691ec78
--- /dev/null
+++ b/src/cli/api.rs
@@ -0,0 +1,144 @@
+use anyhow::{anyhow, Context, Result};
+use clap::Args;
+use reqwest::Method;
+use serde_json::Value;
+
+use crate::client::Client;
+use crate::output;
+
+#[derive(Debug, Args)]
+pub struct ApiArgs {
+    /// API path, e.g. `/repos/owner/name` or `repos/owner/name`. Absolute URLs
+    /// are also accepted.
+    pub endpoint: String,
+
+    /// HTTP method. Defaults to GET, or POST when fields are supplied.
+    #[arg(short = 'X', long = "method")]
+    pub method: Option<String>,
+
+    /// Add a query parameter (`-f key=value`). For GET; for non-GET methods these
+    /// are sent as a JSON body field instead. Repeatable.
+    #[arg(short = 'f', long = "field", value_name = "KEY=VALUE")]
+    pub fields: Vec<String>,
+
+    /// Like `-f` but interprets the value as raw JSON (numbers, bools, arrays, objects).
+    #[arg(short = 'F', long = "raw-field", value_name = "KEY=VALUE")]
+    pub raw_fields: Vec<String>,
+
+    /// Output a specific JSON path (very small jq-ish subset, e.g. `.items.0.title`).
+    #[arg(short = 'q', long = "jq")]
+    pub jq: Option<String>,
+
+    /// Send a literal JSON request body. Conflicts with `-f` / `-F`.
+    #[arg(long, conflicts_with_all = ["fields", "raw_fields"])]
+    pub input: Option<String>,
+}
+
+pub async fn run(args: ApiArgs, host: Option<&str>) -> Result<()> {
+    let client = Client::connect(host)?;
+
+    let method = pick_method(&args)?;
+    let (query, body) = build_query_or_body(&args, &method)?;
+
+    let res = client
+        .request(method.clone(), &args.endpoint, &query, body.as_ref())
+        .await?;
+    let status = res.status();
+    let text = res.text().await.context("reading response body")?;
+
+    let parsed: Value = if text.is_empty() {
+        Value::Null
+    } else {
+        serde_json::from_str(&text).unwrap_or_else(|_| Value::String(text.clone()))
+    };
+
+    if !status.is_success() {
+        eprintln!("HTTP {status}");
+        output::print_json(&parsed)?;
+        return Err(anyhow!("request failed"));
+    }
+
+    let projected = match &args.jq {
+        Some(path) => extract_path(&parsed, path)?,
+        None => parsed,
+    };
+    output::print_json(&projected)
+}
+
+fn pick_method(args: &ApiArgs) -> Result<Method> {
+    if let Some(m) = &args.method {
+        return Method::from_bytes(m.to_uppercase().as_bytes())
+            .with_context(|| format!("invalid HTTP method '{m}'"));
+    }
+    // Only `--input` (a literal JSON body) implies POST. `-f` / `-F` on a GET
+    // are sent as query params, which is what users hit search endpoints for.
+    // To send a write request, pass `-X POST` (or PATCH/PUT/DELETE) explicitly.
+    if args.input.is_some() {
+        return Ok(Method::POST);
+    }
+    Ok(Method::GET)
+}
+
+fn build_query_or_body(
+    args: &ApiArgs,
+    method: &Method,
+) -> Result<(Vec<(String, String)>, Option<Value>)> {
+    if let Some(input) = &args.input {
+        let body: Value =
+            serde_json::from_str(input).context("--input must be valid JSON")?;
+        return Ok((Vec::new(), Some(body)));
+    }
+
+    if method == Method::GET || method == Method::DELETE {
+        let mut q = Vec::new();
+        for f in &args.fields {
+            let (k, v) = split_kv(f)?;
+            q.push((k.to_string(), v.to_string()));
+        }
+        for f in &args.raw_fields {
+            let (k, v) = split_kv(f)?;
+            q.push((k.to_string(), v.to_string()));
+        }
+        return Ok((q, None));
+    }
+
+    let mut obj = serde_json::Map::new();
+    for f in &args.fields {
+        let (k, v) = split_kv(f)?;
+        obj.insert(k.to_string(), Value::String(v.to_string()));
+    }
+    for f in &args.raw_fields {
+        let (k, v) = split_kv(f)?;
+        let parsed: Value = serde_json::from_str(v)
+            .with_context(|| format!("--raw-field {k}: value '{v}' is not valid JSON"))?;
+        obj.insert(k.to_string(), parsed);
+    }
+    Ok((Vec::new(), Some(Value::Object(obj))))
+}
+
+fn split_kv(s: &str) -> Result<(&str, &str)> {
+    s.split_once('=')
+        .ok_or_else(|| anyhow!("expected KEY=VALUE, got '{s}'"))
+}
+
+/// Very small jq-ish projector: dot-separated keys + numeric indices.
+/// e.g. `.data.0.name`, `.message`.
+fn extract_path(value: &Value, path: &str) -> Result<Value> {
+    let path = path.trim_start_matches('.');
+    if path.is_empty() {
+        return Ok(value.clone());
+    }
+    let mut current = value;
+    for segment in path.split('.') {
+        if let Ok(idx) = segment.parse::<usize>() {
+            current = current
+                .get(idx)
+                .ok_or_else(|| anyhow!("index {idx} out of range at '{segment}'"))?;
+        } else {
+            current = current
+                .get(segment)
+                .ok_or_else(|| anyhow!("no field '{segment}'"))?;
+        }
+    }
+    Ok(current.clone())
+}
diff --git a/src/cli/auth.rs b/src/cli/auth.rs
new file mode 100644
index 0000000..c99bd39
--- /dev/null
+++ b/src/cli/auth.rs
@@ -0,0 +1,248 @@
+use anyhow::{anyhow, Context, Result};
+use clap::{Args, Subcommand};
+use dialoguer::Password;
+
+use crate::api;
+use crate::auth as token_store;
+use crate::client::Client;
+use crate::config::hosts::{Host, Hosts};
+use crate::output;
+
+#[derive(Debug, Args)]
+pub struct AuthCmd {
+    #[command(subcommand)]
+    pub command: AuthSub,
+}
+
+#[derive(Debug, Subcommand)]
+pub enum AuthSub {
+    /// Authenticate with a Forgejo host. Stores the token in your OS keychain.
+    Login(LoginArgs),
+    /// Show which hosts you're signed in to.
+    Status(StatusArgs),
+    /// Forget the token for a host.
+    Logout(LogoutArgs),
+    /// List configured hosts.
+    List,
+    /// Set the default host for commands that omit `--host`.
+    Switch(SwitchArgs),
+}
+
+#[derive(Debug, Args)]
+pub struct LoginArgs {
+    /// Hostname to log in to (e.g. `rasterhub.com`).
+    #[arg(long)]
+    pub host: Option<String>,
+    /// Pass the token as a flag instead of through stdin / interactive prompt.
+    #[arg(long, env = "FJ_TOKEN", hide_env_values = true)]
+    pub token: Option<String>,
+    /// Read the token from stdin (useful for piping `cat token.txt | fj auth login --with-token`).
+    #[arg(long, conflicts_with = "token")]
+    pub with_token: bool,
+    /// Git protocol to use when cloning from this host.
+    #[arg(long, value_parser = ["https", "ssh"], default_value = "https")]
+    pub git_protocol: String,
+}
+
+#[derive(Debug, Args)]
+pub struct StatusArgs {
+    /// Show the token (still doesn't read it from disk; pulled from keychain).
+    #[arg(long)]
+    pub show_token: bool,
+}
+
+#[derive(Debug, Args)]
+pub struct LogoutArgs {
+    /// Hostname to remove. Required when more than one host is configured.
+    #[arg(long)]
+    pub host: Option<String>,
+}
+
+#[derive(Debug, Args)]
+pub struct SwitchArgs {
+    /// Hostname to make the new default.
+    pub host: String,
+}
+
+pub async fn run(cmd: AuthCmd) -> Result<()> {
+    match cmd.command {
+        AuthSub::Login(args) => login(args).await,
+        AuthSub::Status(args) => status(args).await,
+        AuthSub::Logout(args) => logout(args),
+        AuthSub::List => list(),
+        AuthSub::Switch(args) => switch(args),
+    }
+}
+
+async fn login(args: LoginArgs) -> Result<()> {
+    let hostname = match args.host.clone() {
+        Some(h) => h,
+        None => prompt_hostname()?,
+    };
+    let hostname = hostname.trim().to_string();
+    if hostname.is_empty() {
+        return Err(anyhow!("hostname is required"));
+    }
+
+    let token = read_token(&args)?;
+    if token.trim().is_empty() {
+        return Err(anyhow!("token is required"));
+    }
+
+    let git_protocol = args.git_protocol.clone();
+
+    // Verify before persisting: never store a token we can't actually use.
+    let provisional = Host {
+        user: None,
+        git_protocol: git_protocol.clone(),
+        api_base_path: None,
+    };
+    let probe_client = build_probe_client(&hostname, &provisional, &token)?;
+    let me = api::user::current(&probe_client)
+        .await
+        .context("verifying token against /api/v1/user")?;
+
+    // Persist host + token.
+    let mut hosts = Hosts::load()?;
+    let host = Host {
+        user: Some(me.login.clone()),
+        git_protocol,
+        api_base_path: None,
+    };
+    hosts.upsert(&hostname, host);
+    hosts.save()?;
+    token_store::store_token(&hostname, &token)?;
+
+    println!(
+        "{} Logged in to {} as {}",
+        output::bold("✓"),
+        output::bold(&hostname),
+        output::bold(&me.login)
+    );
+    Ok(())
+}
+
+fn build_probe_client(host: &str, cfg: &Host, token: &str) -> Result<Client> {
+    let resolved = crate::client::ResolvedHost {
+        name: host.to_string(),
+        host: cfg.clone(),
+        token: token.to_string(),
+    };
+    Client::new(resolved)
+}
+
+fn read_token(args: &LoginArgs) -> Result<String> {
+    if let Some(t) = &args.token {
+        return Ok(t.clone());
+    }
+    if args.with_token {
+        use std::io::Read;
+        let mut buf = String::new();
+        std::io::stdin().read_to_string(&mut buf)?;
+        return Ok(buf.trim().to_string());
+    }
+    let t = Password::new()
+        .with_prompt("Paste a Forgejo access token")
+        .interact()
+        .context("reading token")?;
+    Ok(t)
+}
+
+fn prompt_hostname() -> Result<String> {
+    eprint!("Hostname (e.g. rasterhub.com): ");
+    use std::io::{stderr, stdin, Write};
+    stderr().flush().ok();
+    let mut buf = String::new();
+    stdin().read_line(&mut buf).context("reading hostname")?;
+    Ok(buf)
+}
+
+async fn status(args: StatusArgs) -> Result<()> {
+    let hosts = Hosts::load()?;
+    if hosts.hosts.is_empty() {
+        println!("You are not signed in to any Forgejo hosts. Run `fj auth login`.");
+        return Ok(());
+    }
+    for (name, host) in &hosts.hosts {
+        let current_marker = if hosts.current.as_deref() == Some(name) {
+            output::bold(" (current)")
+        } else {
+            String::new()
+        };
+        println!("{}{current_marker}", output::bold(name));
+        let token_present = token_store::load_token(name)?.is_some();
+        match host.user.as_deref() {
+            Some(u) => println!("  ✓ Logged in as {u}"),
+            None => println!("  ✓ Host configured"),
+        }
+        println!(
+            "  ✓ Token: {}",
+            if token_present { "present in keychain" } else { "missing" }
+        );
+        if args.show_token {
+            if let Some(t) = token_store::load_token(name)? {
+                println!("  Token value: {t}");
+            }
+        }
+        println!("  Git protocol: {}", host.git_protocol);
+    }
+    Ok(())
+}
+
+fn logout(args: LogoutArgs) -> Result<()> {
+    let mut hosts = Hosts::load()?;
+    let target = match args.host {
+        Some(h) => h,
+        None => {
+            if hosts.hosts.len() != 1 {
+                return Err(anyhow!(
+                    "multiple hosts configured; pass `--host <hostname>`"
+                ));
+            }
+            hosts.hosts.keys().next().cloned().unwrap()
+        }
+    };
+    if hosts.remove(&target).is_none() {
+        return Err(anyhow!("no entry for host '{target}'"));
+    }
+    hosts.save()?;
+    token_store::delete_token(&target)?;
+    println!("✓ Logged out of {target}");
+    Ok(())
+}
+
+fn list() -> Result<()> {
+    let hosts = Hosts::load()?;
+    if hosts.hosts.is_empty() {
+        println!("(no hosts configured)");
+        return Ok(());
+    }
+    let rows: Vec<Vec<String>> = hosts
+        .hosts
+        .iter()
+        .map(|(name, h)| {
+            let current = if hosts.current.as_deref() == Some(name) {
+                "*"
+            } else {
+                ""
+            };
+            vec![
+                current.into(),
+                name.clone(),
+                h.user.clone().unwrap_or_default(),
+                h.git_protocol.clone(),
+            ]
+        })
+        .collect();
+    let table = output::render_table(&["", "HOST", "USER", "PROTOCOL"], &rows);
+    print!("{table}");
+    Ok(())
+}
+
+fn switch(args: SwitchArgs) -> Result<()> {
+    let mut hosts = Hosts::load()?;
+    hosts.set_current(&args.host)?;
+    hosts.save()?;
+    println!("✓ Default host is now {}", args.host);
+    Ok(())
+}
diff --git a/src/cli/issue.rs b/src/cli/issue.rs
new file mode 100644
index 0000000..5778146
--- /dev/null
+++ b/src/cli/issue.rs
@@ -0,0 +1,274 @@
+use std::io::Read;
+
+use anyhow::{anyhow, Result};
+use clap::{Args, Subcommand, ValueEnum};
+
+use crate::api;
+use crate::api::issue::{CreateIssue, EditIssue, ListOptions, State};
+use crate::client::Client;
+use crate::output;
+
+#[derive(Debug, Args)]
+pub struct IssueCmd {
+    #[command(subcommand)]
+    pub command: IssueSub,
+}
+
+#[derive(Debug, Subcommand)]
+pub enum IssueSub {
+    /// List issues in a repo.
+    List(ListArgs),
+    /// View an issue by number.
+    View(ViewArgs),
+    /// Create an issue.
+    Create(CreateArgs),
+    /// Close an issue.
+    Close(NumberOnly),
+    /// Reopen a closed issue.
+    Reopen(NumberOnly),
+    /// Add a comment.
+    Comment(CommentArgs),
+}
+
+#[derive(Debug, Clone, Copy, ValueEnum)]
+pub enum StateFilter {
+    Open,
+    Closed,
+    All,
+}
+
+impl From<StateFilter> for State {
+    fn from(value: StateFilter) -> Self {
+        match value {
+            StateFilter::Open => State::Open,
+            StateFilter::Closed => State::Closed,
+            StateFilter::All => State::All,
+        }
+    }
+}
+
+#[derive(Debug, Args)]
+pub struct ListArgs {
+    /// Repository slug `owner/name`.
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    #[arg(short = 's', long, value_enum, default_value_t = StateFilter::Open)]
+    pub state: StateFilter,
+    #[arg(short = 'L', long, default_value_t = 30)]
+    pub limit: u32,
+    #[arg(long, default_value_t = 1)]
+    pub page: u32,
+    #[arg(short = 'l', long)]
+    pub label: Option<String>,
+    #[arg(short = 'a', long)]
+    pub assignee: Option<String>,
+    #[arg(short = 'S', long = "search")]
+    pub query: Option<String>,
+    #[arg(long)]
+    pub json: bool,
+}
+
+#[derive(Debug, Args)]
+pub struct ViewArgs {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    pub number: u64,
+    #[arg(long, default_value_t = false)]
+    pub comments: bool,
+    #[arg(long)]
+    pub json: bool,
+}
+
+#[derive(Debug, Args)]
+pub struct CreateArgs {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    #[arg(short = 't', long)]
+    pub title: String,
+    /// Body. Use `-` to read from stdin.
+    #[arg(short = 'b', long)]
+    pub body: Option<String>,
+}
+
+#[derive(Debug, Args)]
+pub struct NumberOnly {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    pub number: u64,
+}
+
+#[derive(Debug, Args)]
+pub struct CommentArgs {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    pub number: u64,
+    /// Comment body. Use `-` to read from stdin.
+    #[arg(short = 'b', long)]
+    pub body: String,
+}
+
+pub async fn run(cmd: IssueCmd, host: Option<&str>) -> Result<()> {
+    let client = Client::connect(host)?;
+    match cmd.command {
+        IssueSub::List(args) => list(&client, args).await,
+        IssueSub::View(args) => view(&client, args).await,
+        IssueSub::Create(args) => create(&client, args).await,
+        IssueSub::Close(args) => set_state(&client, args, "closed").await,
+        IssueSub::Reopen(args) => set_state(&client, args, "open").await,
+        IssueSub::Comment(args) => comment(&client, args).await,
+    }
+}
+
+async fn list(client: &Client, args: ListArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let opts = ListOptions {
+        state: args.state.into(),
+        limit: args.limit,
+        page: args.page,
+        labels: args.label.as_deref(),
+        assignee: args.assignee.as_deref(),
+        query: args.query.as_deref(),
+    };
+    let page = api::issue::list(client, owner, name, opts).await?;
+    if args.json {
+        return output::print_json(&serde_json::to_value(&page.items)?);
+    }
+    if page.items.is_empty() {
+        println!("(no issues)");
+        return Ok(());
+    }
+    let rows: Vec<Vec<String>> = page
+        .items
+        .iter()
+        .map(|i| {
+            vec![
+                format!("#{}", i.number),
+                output::state_pill(&i.state, false),
+                truncate(&i.title, 70),
+                output::dim(&output::relative_time(i.updated_at)),
+            ]
+        })
+        .collect();
+    print!(
+        "{}",
+        output::render_table(&["", "STATE", "TITLE", "UPDATED"], &rows)
+    );
+    Ok(())
+}
+
+async fn view(client: &Client, args: ViewArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let issue = api::issue::get(client, owner, name, args.number).await?;
+    if args.json {
+        let mut v = serde_json::to_value(&issue)?;
+        if args.comments {
+            let comments = api::issue::list_comments(client, owner, name, args.number).await?;
+            v["comments_list"] = serde_json::to_value(comments)?;
+        }
+        return output::print_json(&v);
+    }
+
+    println!(
+        "{}  {}  {}",
+        output::bold(&format!("#{} {}", issue.number, issue.title)),
+        output::state_pill(&issue.state, false),
+        output::dim(&output::relative_time(issue.updated_at)),
+    );
+    println!("{}", output::dim(&issue.html_url));
+    println!();
+    if !issue.body.is_empty() {
+        println!("{}", issue.body);
+        println!();
+    }
+    if args.comments {
+        let comments = api::issue::list_comments(client, owner, name, args.number).await?;
+        if comments.is_empty() {
+            println!("{}", output::dim("(no comments)"));
+        } else {
+            for c in comments {
+                println!(
+                    "── {} {}",
+                    output::bold(&c.user.login),
+                    output::dim(&output::relative_time(c.created_at)),
+                );
+                println!("{}", c.body);
+                println!();
+            }
+        }
+    }
+    Ok(())
+}
+
+async fn create(client: &Client, args: CreateArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let body = read_body(args.body.as_deref())?;
+    let payload = CreateIssue {
+        title: &args.title,
+        body: body.as_deref(),
+        assignees: None,
+        labels: None,
+    };
+    let issue = api::issue::create(client, owner, name, &payload).await?;
+    println!("✓ Created issue #{}: {}", issue.number, issue.title);
+    println!("{}", issue.html_url);
+    Ok(())
+}
+
+async fn set_state(client: &Client, args: NumberOnly, state: &str) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let issue = api::issue::edit(
+        client,
+        owner,
+        name,
+        args.number,
+        &EditIssue {
+            state: Some(state),
+            ..Default::default()
+        },
+    )
+    .await?;
+    println!(
+        "✓ Issue #{} is now {}",
+        issue.number,
+        output::state_pill(&issue.state, false)
+    );
+    Ok(())
+}
+
+async fn comment(client: &Client, args: CommentArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let body = if args.body == "-" {
+        let mut buf = String::new();
+        std::io::stdin().read_to_string(&mut buf)?;
+        buf
+    } else {
+        args.body
+    };
+    if body.trim().is_empty() {
+        return Err(anyhow!("comment body is empty"));
+    }
+    let c = api::issue::comment(client, owner, name, args.number, &body).await?;
+    println!("✓ Commented on #{} ({})", args.number, c.html_url);
+    Ok(())
+}
+
+fn read_body(arg: Option<&str>) -> Result<Option<String>> {
+    match arg {
+        None => Ok(None),
+        Some("-") => {
+            let mut buf = String::new();
+            std::io::stdin().read_to_string(&mut buf)?;
+            Ok(Some(buf))
+        }
+        Some(s) => Ok(Some(s.to_string())),
+    }
+}
+
+fn truncate(s: &str, max: usize) -> String {
+    if s.chars().count() <= max {
+        return s.to_string();
+    }
+    let mut out: String = s.chars().take(max.saturating_sub(1)).collect();
+    out.push('…');
+    out
+}
diff --git a/src/cli/mod.rs b/src/cli/mod.rs
new file mode 100644
index 0000000..ce3e84e
--- /dev/null
+++ b/src/cli/mod.rs
@@ -0,0 +1,72 @@
+pub mod api;
+pub mod auth;
+pub mod issue;
+pub mod pr;
+pub mod repo;
+
+use anyhow::Result;
+use clap::{Parser, Subcommand};
+
+/// `fj` — command-line tool for Forgejo.
+#[derive(Debug, Parser)]
+#[command(
+    name = "fj",
+    version,
+    about = "Command-line tool for Forgejo",
+    long_about = None,
+    propagate_version = true,
+    arg_required_else_help = true,
+)]
+pub struct Cli {
+    /// Override the host for this command (otherwise the current host from
+    /// `fj auth login` is used).
+    #[arg(long, global = true, env = "FJ_HOST")]
+    pub host: Option<String>,
+
+    #[command(subcommand)]
+    pub command: Command,
+}
+
+#[derive(Debug, Subcommand)]
+pub enum Command {
+    /// Manage authentication against Forgejo hosts.
+    Auth(auth::AuthCmd),
+    /// Work with repositories.
+    Repo(repo::RepoCmd),
+    /// Work with issues.
+    Issue(issue::IssueCmd),
+    /// Work with pull requests.
+    Pr(pr::PrCmd),
+    /// Make a raw API request (like `gh api`).
+    Api(api::ApiArgs),
+    /// Print shell completions to stdout.
+    Completion(CompletionArgs),
+}
+
+#[derive(Debug, clap::Args)]
+pub struct CompletionArgs {
+    /// Shell to generate completions for.
+    #[arg(value_enum)]
+    pub shell: clap_complete::Shell,
+}
+
+pub async fn run(cli: Cli) -> Result<()> {
+    match cli.command {
+        Command::Auth(cmd) => auth::run(cmd).await,
+        Command::Repo(cmd) => repo::run(cmd, cli.host.as_deref()).await,
+        Command::Issue(cmd) => issue::run(cmd, cli.host.as_deref()).await,
+        Command::Pr(cmd) => pr::run(cmd, cli.host.as_deref()).await,
+        Command::Api(args) => api::run(args, cli.host.as_deref()).await,
+        Command::Completion(args) => {
+            use clap::CommandFactory;
+            let mut cmd = Cli::command();
+            clap_complete::generate(
+                args.shell,
+                &mut cmd,
+                "fj",
+                &mut std::io::stdout(),
+            );
+            Ok(())
+        }
+    }
+}
diff --git a/src/cli/pr.rs b/src/cli/pr.rs
new file mode 100644
index 0000000..468897c
--- /dev/null
+++ b/src/cli/pr.rs
@@ -0,0 +1,317 @@
+use std::io::Read;
+
+use anyhow::Result;
+use clap::{Args, Subcommand, ValueEnum};
+
+use crate::api;
+use crate::api::issue::State;
+use crate::api::pull::{CreatePull, EditPull, ListOptions, MergeStyle};
+use crate::client::Client;
+use crate::git;
+use crate::output;
+
+#[derive(Debug, Args)]
+pub struct PrCmd {
+    #[command(subcommand)]
+    pub command: PrSub,
+}
+
+#[derive(Debug, Subcommand)]
+pub enum PrSub {
+    /// List pull requests.
+    List(ListArgs),
+    /// View a pull request.
+    View(ViewArgs),
+    /// Create a pull request.
+    Create(CreateArgs),
+    /// Check out a pull request locally.
+    Checkout(CheckoutArgs),
+    /// Merge a pull request.
+    Merge(MergeArgs),
+    /// Close a pull request without merging.
+    Close(NumberOnly),
+}
+
+#[derive(Debug, Clone, Copy, ValueEnum)]
+pub enum StateFilter {
+    Open,
+    Closed,
+    All,
+}
+
+impl From<StateFilter> for State {
+    fn from(value: StateFilter) -> Self {
+        match value {
+            StateFilter::Open => State::Open,
+            StateFilter::Closed => State::Closed,
+            StateFilter::All => State::All,
+        }
+    }
+}
+
+#[derive(Debug, Clone, Copy, ValueEnum)]
+pub enum MergeStyleArg {
+    Merge,
+    Rebase,
+    RebaseMerge,
+    Squash,
+}
+
+impl From<MergeStyleArg> for MergeStyle {
+    fn from(value: MergeStyleArg) -> Self {
+        match value {
+            MergeStyleArg::Merge => MergeStyle::Merge,
+            MergeStyleArg::Rebase => MergeStyle::Rebase,
+            MergeStyleArg::RebaseMerge => MergeStyle::RebaseMerge,
+            MergeStyleArg::Squash => MergeStyle::Squash,
+        }
+    }
+}
+
+#[derive(Debug, Args)]
+pub struct ListArgs {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    #[arg(short = 's', long, value_enum, default_value_t = StateFilter::Open)]
+    pub state: StateFilter,
+    #[arg(short = 'L', long, default_value_t = 30)]
+    pub limit: u32,
+    #[arg(long, default_value_t = 1)]
+    pub page: u32,
+    #[arg(long)]
+    pub json: bool,
+}
+
+#[derive(Debug, Args)]
+pub struct ViewArgs {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    pub number: u64,
+    #[arg(long)]
+    pub json: bool,
+}
+
+#[derive(Debug, Args)]
+pub struct CreateArgs {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    #[arg(short = 't', long)]
+    pub title: String,
+    #[arg(short = 'B', long, default_value = "main")]
+    pub base: String,
+    /// Head branch. Either a branch name on the same repo, or `owner:branch`.
+    #[arg(short = 'H', long)]
+    pub head: String,
+    /// Body. Use `-` to read from stdin.
+    #[arg(short = 'b', long)]
+    pub body: Option<String>,
+}
+
+#[derive(Debug, Args)]
+pub struct CheckoutArgs {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    pub number: u64,
+    /// Override the local branch name.
+    #[arg(short = 'b', long)]
+    pub branch: Option<String>,
+    /// Git remote to fetch from.
+    #[arg(long, default_value = "origin")]
+    pub remote: String,
+}
+
+#[derive(Debug, Args)]
+pub struct MergeArgs {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    pub number: u64,
+    #[arg(long, value_enum, default_value_t = MergeStyleArg::Merge)]
+    pub style: MergeStyleArg,
+    #[arg(long)]
+    pub title: Option<String>,
+    #[arg(long)]
+    pub message: Option<String>,
+}
+
+#[derive(Debug, Args)]
+pub struct NumberOnly {
+    #[arg(short = 'R', long = "repo")]
+    pub repo: String,
+    pub number: u64,
+}
+
+pub async fn run(cmd: PrCmd, host: Option<&str>) -> Result<()> {
+    let client = Client::connect(host)?;
+    match cmd.command {
+        PrSub::List(args) => list(&client, args).await,
+        PrSub::View(args) => view(&client, args).await,
+        PrSub::Create(args) => create(&client, args).await,
+        PrSub::Checkout(args) => checkout(&client, args).await,
+        PrSub::Merge(args) => merge(&client, args).await,
+        PrSub::Close(args) => close(&client, args).await,
+    }
+}
+
+async fn list(client: &Client, args: ListArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let page = api::pull::list(
+        client,
+        owner,
+        name,
+        ListOptions {
+            state: args.state.into(),
+            limit: args.limit,
+            page: args.page,
+        },
+    )
+    .await?;
+    if args.json {
+        return output::print_json(&serde_json::to_value(&page.items)?);
+    }
+    if page.items.is_empty() {
+        println!("(no pull requests)");
+        return Ok(());
+    }
+    let rows: Vec<Vec<String>> = page
+        .items
+        .iter()
+        .map(|p| {
+            vec![
+                format!("#{}", p.number),
+                output::state_pill(&p.state, p.merged),
+                truncate(&p.title, 60),
+                output::dim(&format!("{} → {}", branch_label(&p.head), branch_label(&p.base))),
+                output::dim(&output::relative_time(p.updated_at)),
+            ]
+        })
+        .collect();
+    print!(
+        "{}",
+        output::render_table(&["", "STATE", "TITLE", "BRANCHES", "UPDATED"], &rows)
+    );
+    Ok(())
+}
+
+async fn view(client: &Client, args: ViewArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let pr = api::pull::get(client, owner, name, args.number).await?;
+    if args.json {
+        return output::print_json(&serde_json::to_value(&pr)?);
+    }
+    println!(
+        "{}  {}  {}",
+        output::bold(&format!("#{} {}", pr.number, pr.title)),
+        output::state_pill(&pr.state, pr.merged),
+        output::dim(&output::relative_time(pr.updated_at)),
+    );
+    println!("{}", output::dim(&pr.html_url));
+    println!();
+    println!(
+        "Branches: {} → {}",
+        branch_label(&pr.head),
+        branch_label(&pr.base)
+    );
+    if pr.draft {
+        println!("Draft:    yes");
+    }
+    if !pr.body.is_empty() {
+        println!();
+        println!("{}", pr.body);
+    }
+    Ok(())
+}
+
+async fn create(client: &Client, args: CreateArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let body = match args.body.as_deref() {
+        Some("-") => {
+            let mut buf = String::new();
+            std::io::stdin().read_to_string(&mut buf)?;
+            Some(buf)
+        }
+        other => other.map(|s| s.to_string()),
+    };
+    let pr = api::pull::create(
+        client,
+        owner,
+        name,
+        &CreatePull {
+            title: &args.title,
+            head: &args.head,
+            base: &args.base,
+            body: body.as_deref(),
+        },
+    )
+    .await?;
+    println!("✓ Created PR #{}: {}", pr.number, pr.title);
+    println!("{}", pr.html_url);
+    Ok(())
+}
+
+async fn checkout(client: &Client, args: CheckoutArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let pr = api::pull::get(client, owner, name, args.number).await?;
+    let branch = args.branch.unwrap_or_else(|| format!("pr-{}", pr.number));
+    git::fetch_pr(&args.remote, pr.number, &branch)?;
+    git::checkout(&branch)?;
+    println!("✓ Checked out #{} into {branch}", pr.number);
+    Ok(())
+}
+
+async fn merge(client: &Client, args: MergeArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    api::pull::merge(
+        client,
+        owner,
+        name,
+        args.number,
+        args.style.into(),
+        args.title.as_deref(),
+        args.message.as_deref(),
+    )
+    .await?;
+    println!("✓ Merged PR #{}", args.number);
+    Ok(())
+}
+
+async fn close(client: &Client, args: NumberOnly) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    api::pull::edit(
+        client,
+        owner,
+        name,
+        args.number,
+        &EditPull {
+            state: Some("closed"),
+            ..Default::default()
+        },
+    )
+    .await?;
+    println!("✓ Closed PR #{}", args.number);
+    Ok(())
+}
+
+/// Render a branch name for display. Forgejo populates `head.ref` with
+/// `refs/pull/<n>/head` (the synthetic PR ref) when the source branch is gone
+/// or the PR comes from a fork; in that case the real name is in `label`.
+/// For same-repo PRs `ref` is `refs/heads/<branch>` and `label` is the bare
+/// branch name. Prefer `label` whenever it's non-empty.
+fn branch_label(b: &crate::api::pull::Branch) -> String {
+    if !b.label.is_empty() {
+        return b.label.clone();
+    }
+    b.ref_
+        .strip_prefix("refs/heads/")
+        .unwrap_or(&b.ref_)
+        .to_string()
+}
+
+fn truncate(s: &str, max: usize) -> String {
+    if s.chars().count() <= max {
+        return s.to_string();
+    }
+    let mut out: String = s.chars().take(max.saturating_sub(1)).collect();
+    out.push('…');
+    out
+}
+
diff --git a/src/cli/repo.rs b/src/cli/repo.rs
new file mode 100644
index 0000000..af06ed8
--- /dev/null
+++ b/src/cli/repo.rs
@@ -0,0 +1,196 @@
+use anyhow::Result;
+use clap::{Args, Subcommand};
+
+use crate::api;
+use crate::client::Client;
+use crate::config::hosts::Hosts;
+use crate::git;
+use crate::output;
+
+#[derive(Debug, Args)]
+pub struct RepoCmd {
+    #[command(subcommand)]
+    pub command: RepoSub,
+}
+
+#[derive(Debug, Subcommand)]
+pub enum RepoSub {
+    /// List repositories you have access to on the current host.
+    List(ListArgs),
+    /// View a repository.
+    View(ViewArgs),
+    /// Clone a repository over git.
+    Clone(CloneArgs),
+    /// Create a new repository.
+    Create(CreateArgs),
+}
+
+#[derive(Debug, Args)]
+pub struct ListArgs {
+    #[arg(short = 'L', long, default_value_t = 30)]
+    pub limit: u32,
+    #[arg(long, default_value_t = 1)]
+    pub page: u32,
+    /// Search query (uses `/repos/search`).
+    #[arg(short, long)]
+    pub search: Option<String>,
+    /// Emit raw JSON instead of a table.
+    #[arg(long)]
+    pub json: bool,
+}
+
+#[derive(Debug, Args)]
+pub struct ViewArgs {
+    /// `owner/name` slug.
+    pub repo: String,
+    #[arg(long)]
+    pub json: bool,
+}
+
+#[derive(Debug, Args)]
+pub struct CloneArgs {
+    /// `owner/name` slug.
+    pub repo: String,
+    /// Optional destination directory.
+    pub dir: Option<String>,
+}
+
+#[derive(Debug, Args)]
+pub struct CreateArgs {
+    /// `[owner/]name`. Without an owner, the authenticated user is used.
+    pub repo: String,
+    #[arg(short, long)]
+    pub description: Option<String>,
+    #[arg(long, default_value_t = false)]
+    pub private: bool,
+    #[arg(long, default_value_t = false)]
+    pub init: bool,
+}
+
+pub async fn run(cmd: RepoCmd, host: Option<&str>) -> Result<()> {
+    let client = Client::connect(host)?;
+    match cmd.command {
+        RepoSub::List(args) => list(&client, args).await,
+        RepoSub::View(args) => view(&client, args).await,
+        RepoSub::Clone(args) => clone(&client, host, args).await,
+        RepoSub::Create(args) => create(&client, args).await,
+    }
+}
+
+async fn list(client: &Client, args: ListArgs) -> Result<()> {
+    let opts = api::repo::ListOptions {
+        limit: args.limit,
+        page: args.page,
+        query: args.search.as_deref(),
+    };
+    let page = if args.search.is_some() {
+        api::repo::search(client, opts).await?
+    } else {
+        api::repo::list_for_user(client, opts).await?
+    };
+    if args.json {
+        let v = serde_json::to_value(&page.items)?;
+        return output::print_json(&v);
+    }
+    if page.items.is_empty() {
+        println!("(no repositories)");
+        return Ok(());
+    }
+    let rows: Vec<Vec<String>> = page
+        .items
+        .iter()
+        .map(|r| {
+            let visibility = if r.private { "private" } else { "public" };
+            vec![
+                r.full_name.clone(),
+                truncate(&r.description, 60),
+                visibility.into(),
+                output::dim(&output::relative_time(r.updated_at)),
+            ]
+        })
+        .collect();
+    print!(
+        "{}",
+        output::render_table(&["NAME", "DESCRIPTION", "VISIBILITY", "UPDATED"], &rows)
+    );
+    Ok(())
+}
+
+async fn view(client: &Client, args: ViewArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let repo = api::repo::get(client, owner, name).await?;
+    if args.json {
+        return output::print_json(&serde_json::to_value(&repo)?);
+    }
+    let header = output::bold(&repo.full_name);
+    let vis = if repo.private { "private" } else { "public" };
+    println!("{header}  {}", output::dim(vis));
+    if !repo.description.is_empty() {
+        println!("{}", repo.description);
+    }
+    println!();
+    println!("Default branch:  {}", repo.default_branch);
+    println!("Stars:           {}", repo.stars_count);
+    println!("Forks:           {}", repo.forks_count);
+    println!("Open issues:     {}", repo.open_issues_count);
+    println!("Updated:         {}", output::relative_time(repo.updated_at));
+    println!();
+    println!("URL:        {}", repo.html_url);
+    println!("Clone URL:  {}", repo.clone_url);
+    println!("SSH URL:    {}", repo.ssh_url);
+    Ok(())
+}
+
+async fn clone(client: &Client, host_flag: Option<&str>, args: CloneArgs) -> Result<()> {
+    let (owner, name) = api::split_repo(&args.repo)?;
+    let repo = api::repo::get(client, owner, name).await?;
+    let hosts = Hosts::load()?;
+    let hostname = hosts.resolve_host(host_flag)?;
+    let proto = hosts
+        .hosts
+        .get(hostname)
+        .map(|h| h.git_protocol.clone())
+        .unwrap_or_else(|| "https".into());
+    let url = if proto == "ssh" {
+        repo.ssh_url
+    } else {
+        repo.clone_url
+    };
+    git::clone(&url, args.dir.as_deref())
+}
+
+async fn create(client: &Client, args: CreateArgs) -> Result<()> {
+    let (owner, name) = match args.repo.split_once('/') {
+        Some((o, n)) => (Some(o.to_string()), n.to_string()),
+        None => (None, args.repo.clone()),
+    };
+    let body = api::repo::CreateRepo {
+        name: &name,
+        description: args.description.as_deref(),
+        private: args.private,
+        default_branch: None,
+        auto_init: args.init,
+    };
+    let repo = match owner {
+        Some(o) => {
+            // Try as org first; if 404, fall through to user-namespaced.
+            match api::repo::create_for_org(client, &o, &body).await {
+                Ok(r) => r,
+                Err(_) => api::repo::create_for_current_user(client, &body).await?,
+            }
+        }
+        None => api::repo::create_for_current_user(client, &body).await?,
+    };
+    println!("✓ Created {}", repo.full_name);
+    println!("{}", repo.html_url);
+    Ok(())
+}
+
+fn truncate(s: &str, max: usize) -> String {
+    if s.chars().count() <= max {
+        return s.to_string();
+    }
+    let mut out: String = s.chars().take(max.saturating_sub(1)).collect();
+    out.push('…');
+    out
+}
diff --git a/src/client/error.rs b/src/client/error.rs
new file mode 100644
index 0000000..a769ef8
--- /dev/null
+++ b/src/client/error.rs
@@ -0,0 +1,13 @@
+use reqwest::StatusCode;
+use thiserror::Error;
+
+/// A non-2xx response from the Forgejo API. We surface the parsed `message`
+/// when one is available and keep the raw body for `--debug` style output.
+#[derive(Debug, Error)]
+#[error("HTTP {status} from {url}: {message}")]
+pub struct ApiError {
+    pub status: StatusCode,
+    pub url: String,
+    pub message: String,
+    pub body: String,
+}
diff --git a/src/client/mod.rs b/src/client/mod.rs
new file mode 100644
index 0000000..7f9ff9a
--- /dev/null
+++ b/src/client/mod.rs
@@ -0,0 +1,222 @@
+pub mod error;
+pub mod pagination;
+
+use std::time::Duration;
+
+use anyhow::{anyhow, Context, Result};
+use reqwest::header::{HeaderMap, HeaderValue, ACCEPT, AUTHORIZATION, USER_AGENT};
+use reqwest::{Method, Response, StatusCode};
+use serde::de::DeserializeOwned;
+use serde::Serialize;
+use url::Url;
+
+use crate::auth;
+use crate::config::hosts::{api_base_path, Host, Hosts};
+
+pub use error::ApiError;
+pub use pagination::Page;
+
+/// Convenience handle for talking to a single Forgejo host.
+#[derive(Clone)]
+pub struct Client {
+    http: reqwest::Client,
+    #[allow(dead_code)]
+    host: String,
+    base: Url,
+    token: String,
+}
+
+pub struct ResolvedHost {
+    pub name: String,
+    pub host: Host,
+    pub token: String,
+}
+
+/// Look up the host config and token for the host the user is targeting.
+pub fn resolve(host_flag: Option<&str>) -> Result<ResolvedHost> {
+    let hosts = Hosts::load()?;
+    let name = hosts.resolve_host(host_flag)?.to_string();
+    let host_cfg = hosts
+        .hosts
+        .get(&name)
+        .cloned()
+        .ok_or_else(|| anyhow!("host '{name}' not configured"))?;
+    let token = auth::load_token(&name)?.ok_or_else(|| {
+        anyhow!("no token stored for host '{name}'. Run `fj auth login --host {name}`.")
+    })?;
+    Ok(ResolvedHost {
+        name,
+        host: host_cfg,
+        token,
+    })
+}
+
+impl Client {
+    pub fn new(resolved: ResolvedHost) -> Result<Self> {
+        let base = build_base_url(&resolved.name, &resolved.host)?;
+        let http = reqwest::Client::builder()
+            .user_agent(default_user_agent())
+            .connect_timeout(Duration::from_secs(15))
+            .timeout(Duration::from_secs(60))
+            .build()
+            .context("building HTTP client")?;
+        Ok(Self {
+            http,
+            host: resolved.name,
+            base,
+            token: resolved.token,
+        })
+    }
+
+    /// Construct a client from an explicit host flag, loading config + token.
+    pub fn connect(host_flag: Option<&str>) -> Result<Self> {
+        Self::new(resolve(host_flag)?)
+    }
+
+    #[allow(dead_code)]
+    pub fn host(&self) -> &str {
+        &self.host
+    }
+
+    #[allow(dead_code)]
+    pub fn base(&self) -> &Url {
+        &self.base
+    }
+
+    fn auth_headers(&self) -> HeaderMap {
+        let mut headers = HeaderMap::new();
+        headers.insert(
+            AUTHORIZATION,
+            HeaderValue::from_str(&format!("token {}", self.token))
+                .expect("token contains invalid header chars"),
+        );
+        headers.insert(ACCEPT, HeaderValue::from_static("application/json"));
+        headers.insert(
+            USER_AGENT,
+            HeaderValue::from_static(default_user_agent_static()),
+        );
+        headers
+    }
+
+    /// Build an absolute URL for an API path. Accepts any of: a full URL
+    /// (`https://…`), an absolute path that already includes the API base
+    /// (`/api/v1/user`), or a path relative to the API base (`user`, `/user`).
+    /// All forms anchor at `<host>/api/v1/` unless an explicit URL is given.
+    pub fn url(&self, path: &str) -> Result<Url> {
+        if path.starts_with("http://") || path.starts_with("https://") {
+            return Ok(Url::parse(path)?);
+        }
+        let trimmed = path
+            .strip_prefix("/api/v1/")
+            .or_else(|| path.strip_prefix("api/v1/"))
+            .or_else(|| path.strip_prefix('/'))
+            .unwrap_or(path);
+        Ok(self.base.join(trimmed)?)
+    }
+
+    pub async fn request(
+        &self,
+        method: Method,
+        path: &str,
+        query: &[(String, String)],
+        body: Option<&serde_json::Value>,
+    ) -> Result<Response> {
+        let url = self.url(path)?;
+        let mut req = self
+            .http
+            .request(method, url)
+            .headers(self.auth_headers())
+            .query(query);
+        if let Some(body) = body {
+            req = req.json(body);
+        }
+        let res = req.send().await.context("sending HTTP request")?;
+        Ok(res)
+    }
+
+    /// Issue a request and decode a JSON body, mapping non-2xx to a typed
+    /// `ApiError`.
+    pub async fn json<T, B>(
+        &self,
+        method: Method,
+        path: &str,
+        query: &[(String, String)],
+        body: Option<&B>,
+    ) -> Result<T>
+    where
+        T: DeserializeOwned,
+        B: Serialize + ?Sized,
+    {
+        let body_value = match body {
+            Some(b) => Some(serde_json::to_value(b).context("serializing request body")?),
+            None => None,
+        };
+        let res = self
+            .request(method, path, query, body_value.as_ref())
+            .await?;
+        ensure_success(res).await?.json().await.context("decoding JSON response")
+    }
+
+    /// GET that returns a single page along with pagination metadata.
+    pub async fn get_page<T: DeserializeOwned>(
+        &self,
+        path: &str,
+        query: &[(String, String)],
+    ) -> Result<Page<T>> {
+        let res = self.request(Method::GET, path, query, None).await?;
+        let res = ensure_success(res).await?;
+        let headers = res.headers().clone();
+        let items: Vec<T> = res.json().await.context("decoding JSON list response")?;
+        Ok(Page::from_headers(items, &headers))
+    }
+}
+
+fn build_base_url(hostname: &str, host: &Host) -> Result<Url> {
+    let scheme = "https";
+    let mut url = Url::parse(&format!("{scheme}://{hostname}"))
+        .with_context(|| format!("constructing URL for {hostname}"))?;
+    let path = api_base_path(host).trim_end_matches('/');
+    url.set_path(&format!("{path}/"));
+    Ok(url)
+}
+
+async fn ensure_success(res: Response) -> Result<Response> {
+    let status = res.status();
+    if status.is_success() {
+        return Ok(res);
+    }
+    let url = res.url().clone();
+    let text = res.text().await.unwrap_or_default();
+    let message = parse_error_message(&text).unwrap_or_else(|| text.clone());
+    let err = ApiError {
+        status,
+        url: url.to_string(),
+        message,
+        body: text,
+    };
+    if status == StatusCode::UNAUTHORIZED {
+        Err(anyhow::Error::new(err).context("authentication failed (HTTP 401). Token may be invalid or revoked"))
+    } else {
+        Err(anyhow::Error::new(err))
+    }
+}
+
+fn parse_error_message(text: &str) -> Option<String> {
+    let v: serde_json::Value = serde_json::from_str(text).ok()?;
+    v.get("message")
+        .and_then(|m| m.as_str())
+        .map(|s| s.to_string())
+        .or_else(|| {
+            v.get("error")
+                .and_then(|m| m.as_str())
+                .map(|s| s.to_string())
+        })
+}
+
+fn default_user_agent() -> String {
+    default_user_agent_static().to_string()
+}
+
+const fn default_user_agent_static() -> &'static str {
+    concat!("fj/", env!("CARGO_PKG_VERSION"))
+}
diff --git a/src/client/pagination.rs b/src/client/pagination.rs
new file mode 100644
index 0000000..719c2cf
--- /dev/null
+++ b/src/client/pagination.rs
@@ -0,0 +1,79 @@
+use reqwest::header::HeaderMap;
+
+/// A single page of items along with parsed pagination headers. Forgejo
+/// follows Gitea's convention: `Link` header in RFC 5988 style plus
+/// `X-Total-Count`.
+pub struct Page<T> {
+    pub items: Vec<T>,
+    #[allow(dead_code)]
+    pub next: Option<String>,
+    #[allow(dead_code)]
+    pub prev: Option<String>,
+    #[allow(dead_code)]
+    pub last: Option<String>,
+    #[allow(dead_code)]
+    pub first: Option<String>,
+    #[allow(dead_code)]
+    pub total: Option<u64>,
+}
+
+impl<T> Page<T> {
+    pub fn from_headers(items: Vec<T>, headers: &HeaderMap) -> Self {
+        let mut next = None;
+        let mut prev = None;
+        let mut last = None;
+        let mut first = None;
+        if let Some(link) = headers.get(reqwest::header::LINK) {
+            if let Ok(link_str) = link.to_str() {
+                for (url, rel) in parse_link_header(link_str) {
+                    match rel.as_str() {
+                        "next" => next = Some(url),
+                        "prev" => prev = Some(url),
+                        "last" => last = Some(url),
+                        "first" => first = Some(url),
+                        _ => {}
+                    }
+                }
+            }
+        }
+        let total = headers
+            .get("x-total-count")
+            .and_then(|v| v.to_str().ok())
+            .and_then(|v| v.parse().ok());
+        Self {
+            items,
+            next,
+            prev,
+            last,
+            first,
+            total,
+        }
+    }
+}
+
+fn parse_link_header(value: &str) -> Vec<(String, String)> {
+    let mut out = Vec::new();
+    for part in value.split(',') {
+        let part = part.trim();
+        // `<url>; rel="name"`
+        let Some((url_part, params)) = part.split_once(';') else {
+            continue;
+        };
+        let url = url_part.trim().trim_start_matches('<').trim_end_matches('>');
+        let rel = params
+            .split(';')
+            .map(str::trim)
+            .find_map(|p| {
+                let (k, v) = p.split_once('=')?;
+                if k.trim().eq_ignore_ascii_case("rel") {
+                    Some(v.trim().trim_matches('"').to_string())
+                } else {
+                    None
+                }
+            });
+        if let Some(rel) = rel {
+            out.push((url.to_string(), rel));
+        }
+    }
+    out
+}
diff --git a/src/config/hosts.rs b/src/config/hosts.rs
new file mode 100644
index 0000000..ec4f13c
--- /dev/null
+++ b/src/config/hosts.rs
@@ -0,0 +1,111 @@
+use std::collections::BTreeMap;
+use std::fs;
+
+use anyhow::{anyhow, Context, Result};
+use serde::{Deserialize, Serialize};
+
+use super::hosts_path;
+
+/// A single Forgejo host entry. The auth token is intentionally NOT serialized
+/// here: tokens live in the OS keychain via the `auth` module.
+#[derive(Debug, Clone, Serialize, Deserialize, Default)]
+pub struct Host {
+    /// Username (login) of the authenticated user on this host.
+    pub user: Option<String>,
+    /// Protocol used for git operations (`https` or `ssh`).
+    #[serde(default = "default_git_protocol")]
+    pub git_protocol: String,
+    /// Optional API base path. Defaults to `/api/v1` when absent.
+    pub api_base_path: Option<String>,
+}
+
+fn default_git_protocol() -> String {
+    "https".into()
+}
+
+/// Top-level shape of `hosts.toml`.
+#[derive(Debug, Clone, Default, Serialize, Deserialize)]
+pub struct Hosts {
+    /// Hostname currently selected as the default for commands that don't pass `--host`.
+    pub current: Option<String>,
+    /// Map of hostname -> host config.
+    #[serde(default)]
+    pub hosts: BTreeMap<String, Host>,
+}
+
+impl Hosts {
+    pub fn load() -> Result<Self> {
+        let path = hosts_path()?;
+        if !path.exists() {
+            return Ok(Self::default());
+        }
+        let text = fs::read_to_string(&path)
+            .with_context(|| format!("reading {}", path.display()))?;
+        let parsed: Self = toml::from_str(&text)
+            .with_context(|| format!("parsing {}", path.display()))?;
+        Ok(parsed)
+    }
+
+    pub fn save(&self) -> Result<()> {
+        let path = hosts_path()?;
+        if let Some(parent) = path.parent() {
+            fs::create_dir_all(parent)
+                .with_context(|| format!("creating {}", parent.display()))?;
+        }
+        let text = toml::to_string_pretty(self).context("serializing hosts.toml")?;
+        fs::write(&path, text).with_context(|| format!("writing {}", path.display()))?;
+        Ok(())
+    }
+
+    /// Resolve which hostname to use given an explicit override (e.g. from `--host`).
+    pub fn resolve_host<'a>(&'a self, explicit: Option<&'a str>) -> Result<&'a str> {
+        if let Some(h) = explicit {
+            if !self.hosts.contains_key(h) {
+                return Err(anyhow!(
+                    "no auth entry for host '{h}'. Run `fj auth login --host {h}` first."
+                ));
+            }
+            return Ok(h);
+        }
+        if let Some(current) = self.current.as_deref() {
+            if self.hosts.contains_key(current) {
+                return Ok(current);
+            }
+        }
+        // Fall back to the only host configured, if there is exactly one.
+        if self.hosts.len() == 1 {
+            return Ok(self.hosts.keys().next().unwrap());
+        }
+        Err(anyhow!(
+            "no host selected. Run `fj auth login` first, or pass `--host <hostname>`."
+        ))
+    }
+
+    pub fn upsert(&mut self, hostname: &str, host: Host) {
+        self.hosts.insert(hostname.to_string(), host);
+        if self.current.is_none() {
+            self.current = Some(hostname.to_string());
+        }
+    }
+
+    pub fn remove(&mut self, hostname: &str) -> Option<Host> {
+        let removed = self.hosts.remove(hostname);
+        if self.current.as_deref() == Some(hostname) {
+            self.current = self.hosts.keys().next().cloned();
+        }
+        removed
+    }
+
+    pub fn set_current(&mut self, hostname: &str) -> Result<()> {
+        if !self.hosts.contains_key(hostname) {
+            return Err(anyhow!("host '{hostname}' is not configured"));
+        }
+        self.current = Some(hostname.to_string());
+        Ok(())
+    }
+}
+
+/// Returns the `/api/v1` base path for a host, honoring per-host overrides.
+pub fn api_base_path(host: &Host) -> &str {
+    host.api_base_path.as_deref().unwrap_or("/api/v1")
+}
diff --git a/src/config/mod.rs b/src/config/mod.rs
new file mode 100644
index 0000000..ed79883
--- /dev/null
+++ b/src/config/mod.rs
@@ -0,0 +1,17 @@
+pub mod hosts;
+
+use std::path::PathBuf;
+
+use anyhow::{Context, Result};
+use directories::ProjectDirs;
+
+/// Returns the directory where fj stores its configuration files.
+pub fn config_dir() -> Result<PathBuf> {
+    let dirs = ProjectDirs::from("com", "rasterstate", "fj")
+        .context("could not determine a platform config directory for fj")?;
+    Ok(dirs.config_dir().to_path_buf())
+}
+
+pub fn hosts_path() -> Result<PathBuf> {
+    Ok(config_dir()?.join("hosts.toml"))
+}
diff --git a/src/git/mod.rs b/src/git/mod.rs
new file mode 100644
index 0000000..f763dac
--- /dev/null
+++ b/src/git/mod.rs
@@ -0,0 +1,32 @@
+use std::process::Command;
+
+use anyhow::{bail, Context, Result};
+
+/// Spawn `git` synchronously and surface the exit status as an error.
+pub fn run(args: &[&str]) -> Result<()> {
+    let status = Command::new("git")
+        .args(args)
+        .status()
+        .with_context(|| "spawning git (is it installed and on PATH?)")?;
+    if !status.success() {
+        bail!("git {} exited with status {}", args.join(" "), status);
+    }
+    Ok(())
+}
+
+pub fn clone(url: &str, dest: Option<&str>) -> Result<()> {
+    let mut args = vec!["clone", url];
+    if let Some(d) = dest {
+        args.push(d);
+    }
+    run(&args)
+}
+
+pub fn fetch_pr(remote: &str, number: u64, local_branch: &str) -> Result<()> {
+    let refspec = format!("pull/{number}/head:{local_branch}");
+    run(&["fetch", remote, &refspec])
+}
+
+pub fn checkout(branch: &str) -> Result<()> {
+    run(&["checkout", branch])
+}
diff --git a/src/main.rs b/src/main.rs
new file mode 100644
index 0000000..ed1e6ae
--- /dev/null
+++ b/src/main.rs
@@ -0,0 +1,28 @@
+mod api;
+mod auth;
+mod cli;
+mod client;
+mod config;
+mod git;
+mod output;
+
+use std::process::ExitCode;
+
+use clap::Parser;
+
+#[tokio::main]
+async fn main() -> ExitCode {
+    let cli = cli::Cli::parse();
+
+    if let Err(err) = cli::run(cli).await {
+        // Print the full chain of causes, matching the gh-style error output.
+        eprintln!("{} {err}", owo_colors::OwoColorize::red(&"error:"));
+        let mut source = err.source();
+        while let Some(cause) = source {
+            eprintln!("  caused by: {cause}");
+            source = cause.source();
+        }
+        return ExitCode::from(1);
+    }
+    ExitCode::SUCCESS
+}
diff --git a/src/output/mod.rs b/src/output/mod.rs
new file mode 100644
index 0000000..b1700f8
--- /dev/null
+++ b/src/output/mod.rs
@@ -0,0 +1,106 @@
+use std::io::IsTerminal;
+
+use anyhow::Result;
+use owo_colors::{OwoColorize, Style};
+use tabled::settings::{object::Columns, Alignment, Modify, Padding, Style as TStyle};
+use tabled::{builder::Builder, Table};
+
+#[allow(dead_code)]
+pub fn stdout_is_tty() -> bool {
+    std::io::stdout().is_terminal()
+}
+
+pub fn supports_color() -> bool {
+    supports_color::on(supports_color::Stream::Stdout).is_some()
+}
+
+/// Pretty-print a list as a borderless gh-style table. Header row is
+/// rendered bold when color is supported.
+pub fn render_table(headers: &[&str], rows: &[Vec<String>]) -> String {
+    let mut builder = Builder::default();
+    let header_row: Vec<String> = if supports_color() {
+        headers
+            .iter()
+            .map(|h| h.style(Style::new().bold()).to_string())
+            .collect()
+    } else {
+        headers.iter().map(|h| h.to_string()).collect()
+    };
+    builder.push_record(header_row);
+    for row in rows {
+        builder.push_record(row.clone());
+    }
+    let mut table: Table = builder.build();
+    table
+        .with(TStyle::empty())
+        .with(Padding::new(0, 2, 0, 0))
+        .with(Modify::new(Columns::new(0..)).with(Alignment::left()));
+    table.to_string()
+}
+
+/// Print JSON pretty-formatted to stdout.
+pub fn print_json(value: &serde_json::Value) -> Result<()> {
+    let text = serde_json::to_string_pretty(value)?;
+    println!("{text}");
+    Ok(())
+}
+
+/// gh-style state pill: green for open, magenta for merged, red for closed.
+/// Always returns the capitalized label; color is applied only when the
+/// terminal supports it. `merged=true` overrides `state` (which is `closed`
+/// for merged PRs on the Forgejo API).
+pub fn state_pill(state: &str, merged: bool) -> String {
+    let (label, style) = match (state, merged) {
+        (_, true) => ("Merged", Style::new().magenta().bold()),
+        ("open", _) => ("Open", Style::new().green().bold()),
+        ("closed", _) => ("Closed", Style::new().red().bold()),
+        (other, _) => return other.to_string(),
+    };
+    if supports_color() {
+        label.style(style).to_string()
+    } else {
+        label.to_string()
+    }
+}
+
+pub fn dim(s: &str) -> String {
+    if supports_color() {
+        s.dimmed().to_string()
+    } else {
+        s.to_string()
+    }
+}
+
+pub fn bold(s: &str) -> String {
+    if supports_color() {
+        s.bold().to_string()
+    } else {
+        s.to_string()
+    }
+}
+
+/// Approximate "2h ago" / "3d ago" rendering. Forgejo timestamps are UTC.
+pub fn relative_time(t: chrono::DateTime<chrono::Utc>) -> String {
+    let now = chrono::Utc::now();
+    let delta = now.signed_duration_since(t);
+    let secs = delta.num_seconds();
+    let abs = secs.abs();
+    let label = if abs < 60 {
+        format!("{abs}s")
+    } else if abs < 3600 {
+        format!("{}m", abs / 60)
+    } else if abs < 86_400 {
+        format!("{}h", abs / 3600)
+    } else if abs < 86_400 * 30 {
+        format!("{}d", abs / 86_400)
+    } else if abs < 86_400 * 365 {
+        format!("{}mo", abs / (86_400 * 30))
+    } else {
+        format!("{}y", abs / (86_400 * 365))
+    };
+    if secs >= 0 {
+        format!("{label} ago")
+    } else {
+        format!("in {label}")
+    }
+}