@bty/customer-service-cli 0.6.6 → 0.6.7

package/CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog
 
-## 0.6.6 (2026-07-17)
+## Unreleased
 
 - 新增 `media upload` 命令与 `product supplement` 子命令组，支持商品「补充知识」图片/视频维护，与前端上传行为一致：
   - `media upload --file <path> --type image|video [--path-prefix /ai/knowledge/supplement] [--dry-run]`：本地图片/视频先经 `/v1/upload_sts` 取 STS 凭证上传到公开 OSS（`resource_bucket`），返回公网 URL；已是 http(s) URL 直接拒绝（无需上传）。上传 key 与前端一致：`${prefix}/${timestamp}_${filename}`。图片上限 10MB、视频上限 200MB，超限/类型不符在发起上传请求前直接失败。
@@ -9,6 +9,20 @@
   - `product supplement append-media --agent <id> --product-id <id> --index <n> [--image ...] [--video ...] [--dry-run] [--backup <path>]`：仅向目标下标条目追加媒体，其它条目原样保留；去重合并，未提供任何媒体时报错。
 - Dashboard 命令使用客服 API 原域名下的 `/observability` 网关前缀，无需新增地址配置。
 
+## 0.6.7 (2026-07-30)
+
+> 版本号说明：registry 实际发布序列 0.6.2 → 0.6.4 → 0.6.5 → 0.6.6（0.6.3 从未发布，0.6.4–0.6.6 由其它分支占用），故本条目落 0.6.7。
+
+- `tool workflow` 子组新增 `create` / `update` / `delete` / `describe`，直连 BetterYeah 平台（`ai-api`）程序化管理工作流（flow）本体（既有 `list` / `detail` 走 servhub 代理不变）。CODE 节点只支持 JavaScript：
+  - `tool workflow create --name <名称> --code <code|@file> [--description] [--input-vars <json|@file>] [--no-publish] [--code-node-name]`：程序生成固定 START→CODE→END 三节点骨架（`POST /v1/applications`，`config` 以 JSON 字符串提交），把 JavaScript 代码写进 CODE 节点，默认自动发布；返回 `flow_id` / `version_id` 供 `tool create --source-id` 绑定。骨架结构以真实生产 flow 实测为准（dashed-UUID 节点 id、CODE 节点默认名 `javascript_1`）。
+  - `tool workflow update <flow_id> --code <code|@file> [--no-publish]`：先 `GET /v1/applications/{id}` 取 config，定位唯一 CODE 节点替换其代码（`config` 以对象提交，与 create 的字符串相反），默认取草稿后发布；非唯一 CODE 节点 / config 形状异常在发更新前报清晰错误，不发请求。
+  - `tool workflow run <flow_id> [--input <json|@file>]`：HTTP 同步运行已发布 flow——自动 `GET /v1/workspaces/getKey/{ws}`（登录态）换应用态 Access-Key，再 `POST /v1/public_api/rest_api/{flow_id}/execute_flow`，返回 `task_id` / `status` / `run_result`；替代平台画布的 wss 执行通道（`ws_execute_flow`），实测两通道 `run_result` 一致。
+  - `tool workflow delete <flow_id> --yes`：硬删除（`DELETE /v1/applications/{id}`），缺 `--yes` 拒绝并提示。
+  - `tool workflow describe`：输出 CODE 节点（JavaScript）使用文档，依据官方「JavaScript&Python 节点」文档整理——入口 `async main()`、变量注入（START formConfig 的 `dialogue` 等）、返回值约定（裸对象、可序列化、勿套 `{data:{...}}` 信封）、内置包（CommonJS `require`：axios/dayjs/crypto）、`betteryeah` SDK（llm/knowledge/database/plugin/subFlow）与 `betterAI` 运行时对象。
+- `tool workflow create/update` 新增 `--version-desc <text>`：发布时透传平台 `version_desc`（版本历史可见，便于区分 CLI 改动）；不传则不带该键，`--no-publish` 时忽略。
+- `--code` / `--input-vars` 的值支持 `@文件路径` 读取；文件不存在时给出指向 `@` 前缀语义的可操作报错，不发请求。
+- 新增 `flow-skeleton`（纯函数骨架生成器）+ `flow-api` 客户端封装；URL path 段的 `flow_id` 统一 `encodeURIComponent`（对齐本仓既有防注入约定）。CLI 不改任何后端，不复刻 servhub 受保护模板名单——受保护 flow 由平台在 update/delete 时拒绝，CLI 如实透传。
+
 ## 0.6.5 (2026-07-14)
 
 - `debug ask` / `debug reproduce` 新增 `--mock <json|@file>`（工具结果 mock，形如 `[{ tool_name, result }]`）与 `--data-overlay <json|@file>`（本轮 `debug_data_overlay` 数据覆盖），发送时透传给 `/v1/debug/chat/agent_message`；`reproduce --dry-run` 输出中同步包含 mock 与 overlay。
@@ -23,6 +37,17 @@
 
 - 修复 `product update` / `product update-sku` 在商品数超过 100 时，对位置靠后的商品报「未找到商品 product_id=xxx」的问题：`findProduct` 由只取第一页（`page:1, pageSize:100`）改为翻页查找，直到命中目标商品或翻完所有页。
 
+## 0.6.3 (2026-06-24 · 未发布，tool 命令组实际随 0.6.7 发布)
+
+- 新增 `tool` 命令组，包装 customer-servhub-api 现有 `/v1/tool` 接口管理 Agent 的自定义/覆盖工具（增删改查）：
+  - `tool list --agent <id>`：列出该 Agent 配置已绑定的工具（custom + system）。
+  - `tool create --agent <id> --name <名称> --key <标识> --source-id <flow_id> [--description] [--source-type] [--invocation-mode] [--input-vars <json>]`：创建绑定工作流（flow）的自定义工具；`source_type` 默认 `flow`、`invocation_mode` 默认 `on_demand`、`workspace_id` 由当前工作空间回填。
+  - `tool update <tool_id> [...]`：局部更新，仅透传实际提供的字段（蛇形键名映射，未提供字段不进请求体）。
+  - `tool delete <tool_id>`：软删除工具。
+  - `tool workflow list [--keyword]` / `tool workflow detail <flow_id>`：发现可绑定工作流及其入参，辅助 `create` 取 `source_id` / 填 `--input-vars`。
+- 非法 `--invocation-mode` 在发请求前本地报错（可选值 `must_invoke` / `on_demand` / `on_demand_async`）。
+- 新增 `tool-api` 客户端封装，仅消费现有接口；CLI 不改变服务端工具表或 sop-engine 的工具执行逻辑。
+
 ## 0.6.2 (2026-06-15)
 
 - `workspace` 新增 `points-consumes` 子命令：分页查询当前工作空间的积分账户消耗流水（`POST /v1/workspace/points_consumes`），支持 `--page` / `--page-size`，CLI 固定传 `debug: true`，返回中包含服务端 `extra` 调试字段。

package/README.md

@@ -217,6 +217,26 @@ cs-cli workspace points-consumes-daily --start 2026-04-01 --end 2026-04-23
 | `sa delete --agent <id> --id <SA_ID> --first-label <一级标签> --second-label <二级标签>` | 删除场景动作 |
 | `sa versions --agent <id> --id <SA_ID>` | 查看修改记录 |
 
+### 工具 (`tool`)
+
+| 命令 | 说明 |
+| --- | --- |
+| `tool list --agent <id>` | 列出该 Agent 配置已绑定的工具（custom + system） |
+| `tool create --agent <id> --name <名称> --key <标识> --source-id <flow_id> [--description <描述>] [--source-type <类型>] [--invocation-mode <模式>] [--input-vars <json>]` | 创建绑定工作流（flow）的自定义工具 |
+| `tool update <tool_id> [--name <名称>] [--key <标识>] [--description <描述>] [--source-id <flow_id>] [--invocation-mode <模式>] [--input-vars <json>]` | 更新工具（仅透传实际提供的字段） |
+| `tool delete <tool_id>` | 删除（软删除）指定工具 |
+| `tool workflow list [--keyword <关键词>]` | 搜索可绑定的工作流（flow），取 `source_id` |
+| `tool workflow detail <flow_id>` | 查看工作流入参，辅助填 `--input-vars` |
+| `tool workflow create --name <名称> --code <code\|@file> [--description <描述>] [--input-vars <json\|@file>] [--no-publish] [--code-node-name <名称>] [--version-desc <描述>]` | 创建 START→CODE→END 骨架工作流，CODE 节点承载工具代码（仅 JavaScript），默认自动发布 |
+| `tool workflow update <flow_id> --code <code\|@file> [--no-publish] [--version-desc <描述>]` | 只更新工作流唯一 CODE 节点的代码（其它节点原样保留），默认自动发布 |
+| `tool workflow run <flow_id> [--input <json\|@file>]` | 运行已发布的工作流（HTTP 同步执行），返回 `task_id` / `status` / `run_result` |
+| `tool workflow delete <flow_id> --yes` | 硬删除工作流（不可恢复）；缺 `--yes` 拒绝执行 |
+| `tool workflow describe` | 输出 CODE 节点（JavaScript）使用文档：入口/变量注入/返回值/内置包/SDK，依据官方文档整理 |
+
+`tool` 命令组包装 customer-servhub-api 现有 `/v1/tool` 接口，管理 Agent 的自定义/覆盖工具；CLI 不改变服务端工具表或 sop-engine 的工具执行逻辑。`--invocation-mode` 取值 `must_invoke` / `on_demand`（默认）/ `on_demand_async`，非法值在发请求前本地报错；`tool create --input-vars` 接受 JSON 字符串，形如 `{"order_id":{"description":"订单号","type":"string","required":true}}`，对应工作流入参描述；`workspace_id` 由当前工作空间自动回填。
+
+`tool workflow create/update/run/delete` 直连 BetterYeah 平台（`ai-api`）程序化管理工作流本体：`create` 生成固定 START→CODE→END 三节点骨架并把代码写进 CODE 节点、默认发布，返回 `flow_id` 供 `tool create --source-id` 绑定；`update` 只暴露 CODE 节点代码的修改；`run` 是 HTTP 同步执行（自动经 `GET /v1/workspaces/getKey/{ws}` 用登录态换应用态 Access-Key 再调 `execute_flow`，替代平台画布的 wss 通道），`--input` 的键对应 START `formConfig` 的 `variableName`（默认 `{}`）；`delete` 是硬删除、必须显式 `--yes`。create/update 发布时可用 `--version-desc` 附版本描述（平台版本历史里可见，便于区分 CLI 改动；`--no-publish` 时忽略）。CODE 节点只支持 JavaScript（CommonJS `require`，不支持 ES Module）。`--code` / `--input-vars` 的值以 `@` 开头时按文件路径读取（如 `@./tool.js`）。注意 `tool workflow create --input-vars` 覆盖的是 START 节点的 `formConfig` 入参声明，与 `tool create --input-vars`（工具记录的 `input_var_descriptions`）是不同字段。`tool workflow describe` 输出依据[官方 JavaScript&Python 节点文档](https://ai-docs.betteryeah.com/Flow/节点介绍与配置/JavaScript&Python节点.html)整理的 CODE 节点使用文档（入口 `main()`、变量注入、返回值约定、内置包、BetterYeah SDK），AI 编写工具代码前应先读。
+
 ### 商品管理 (`product`)
 
 | 命令 | 说明 |

package/dist/bin.js

@@ -6781,6 +6781,563 @@ function registerTestsetCommand(program2) {
   registerExportCommand(program2, testset);
 }
 
+// src/commands/tool.ts
+import fs14 from "fs";
+
+// src/client/flow-api.ts
+import { randomUUID as randomUUID2 } from "crypto";
+
+// src/client/flow-skeleton.ts
+import { randomUUID } from "crypto";
+var DEFAULT_FORM_CONFIG = [
+  {
+    type: "json",
+    label: "\u4E0A\u4E0B\u6587",
+    required: true,
+    placeholder: "\u8BF7\u8F93\u5165",
+    variableName: "dialogue",
+    cascadeFields: [],
+    isCascadeField: false
+  }
+];
+function buildEdge(source, target) {
+  return {
+    id: `${source}-${target}`,
+    type: "insert",
+    source,
+    target,
+    interactionWidth: 80,
+    style: {
+      stroke: "#C0C3D1",
+      strokeWidth: 2,
+      strokeLinecap: "round",
+      strokeLinejoin: "round"
+    }
+  };
+}
+function buildFlowSkeleton(opts) {
+  const startId = randomUUID();
+  const codeId = randomUUID();
+  const endId = randomUUID();
+  const codeName = opts.codeNodeName ?? "javascript_1";
+  const startNode = {
+    id: startId,
+    type: "START",
+    actionType: "TRIGGER",
+    name: "start",
+    relation: null,
+    isEnable: true,
+    layout: { width: 420, height: 311, position: { x: 0, y: 0 } },
+    data: {
+      name: "start",
+      type: "form",
+      actionType: "TRIGGER",
+      inputs: {},
+      isEnable: true,
+      relation: null,
+      conditions: [],
+      packageName: "",
+      sortCopyIndex: -1,
+      formConfig: opts.inputVars ?? DEFAULT_FORM_CONFIG
+    }
+  };
+  const codeNode = {
+    id: codeId,
+    type: "CODE",
+    actionType: "CODE",
+    name: codeName,
+    relation: null,
+    isEnable: true,
+    layout: { width: 420, height: 435, position: { x: 544, y: 0 } },
+    data: {
+      name: codeName,
+      type: null,
+      actionType: "CODE",
+      inputs: {
+        code: opts.code,
+        desc: opts.description ?? "",
+        version: 1,
+        language: "javascript"
+      },
+      isEnable: true,
+      relation: null,
+      conditions: [],
+      packageName: "",
+      formConfig: null,
+      sortCopyIndex: 1
+    }
+  };
+  const endNode = {
+    id: endId,
+    type: "END",
+    actionType: "END",
+    name: "output",
+    relation: null,
+    isEnable: true,
+    layout: { width: 420, height: 98, position: { x: 1088, y: 0 } },
+    data: {
+      name: "output",
+      type: null,
+      actionType: "END",
+      inputs: {},
+      isEnable: true,
+      relation: null,
+      conditions: [],
+      packageName: "",
+      formConfig: null,
+      sortCopyIndex: -1
+    }
+  };
+  return {
+    nodes: [startNode, codeNode, endNode],
+    edges: [buildEdge(startId, codeId), buildEdge(codeId, endId)]
+  };
+}
+
+// src/client/flow-api.ts
+var CODE_NODE_GUIDE = `# CODE \u8282\u70B9\u7F16\u5199\u6307\u5357\uFF08JavaScript\uFF09
+
+\u81EA\u5B9A\u4E49\u5DE5\u5177 = \u4E00\u4E2A flow\uFF0C\u6838\u5FC3\u662F\u5176\u4E2D\u7684 CODE \u8282\u70B9\u3002\u672C CLI \u521B\u5EFA/\u66F4\u65B0\u7684 CODE \u8282\u70B9\u53EA\u652F\u6301 JavaScript\u3002
+\u5B98\u65B9\u6587\u6863\uFF1Ahttps://ai-docs.betteryeah.com/Flow/\u8282\u70B9\u4ECB\u7ECD\u4E0E\u914D\u7F6E/JavaScript&Python\u8282\u70B9.html
+
+## 1. \u5165\u53E3\uFF1Aasync function main()
+
+\u5FC5\u987B\u7F16\u5199\u540D\u4E3A main \u7684\u5F02\u6B65\u5165\u53E3\u51FD\u6570\uFF08\u9876\u5C42 async function main()\uFF09\u3002
+main() \u7684\u8FD4\u56DE\u503C\u5373\u5DE5\u5177\u4EA7\u51FA\uFF08\u4E1A\u52A1\u7ED3\u679C\uFF09\uFF0C\u4F1A\u88AB\u5E73\u53F0\u56DE\u586B\u7ED9 Agent \u4F5C\u4E3A\u8BE5\u5DE5\u5177\u7684\u8F93\u51FA\uFF1B
+\u6CA1\u6709 return \u5219\u8F93\u51FA\u4E3A null\u3002
+
+## 2. \u5165\u53C2\u4E0E\u53D8\u91CF\u6CE8\u5165
+
+\u524D\u7F6E\u8282\u70B9\u7684\u53D8\u91CF\u5DF2\u5185\u7F6E\u5728\u4EE3\u7801\u6267\u884C\u73AF\u5883\u4E2D\uFF0C\u76F4\u63A5\u4EE5\u540C\u540D\u5168\u5C40\u53D8\u91CF\u4F7F\u7528\u3001\u65E0\u9700\u58F0\u660E\uFF1A
+- START \u8282\u70B9 formConfig \u58F0\u660E\u7684\u6BCF\u4E2A variableName \u90FD\u4F1A\u6CE8\u5165\u4E3A\u540C\u540D\u5168\u5C40\u53D8\u91CF\u3002
+  \u9ED8\u8BA4\u53EA\u58F0\u660E\u4E00\u4E2A dialogue\uFF08\u4E0A\u4E0B\u6587\uFF0C\u7C7B\u578B json\uFF09\u2014\u2014\u5373\u6574\u6BB5\u5BF9\u8BDD\u4E0A\u4E0B\u6587\uFF0C\u76F4\u63A5\u5F15\u7528 dialogue \u5373\u53EF\u3002
+  \u8981\u52A0\u5165\u53C2\u5C31\u6539 formConfig\uFF08\u521B\u5EFA\u65F6\u7528 --input-vars \u8986\u76D6\uFF09\u3002
+- \u4E0A\u6E38\u5176\u5B83\u8282\u70B9\u7684\u8F93\u51FA\u540C\u6837\u6309\u8282\u70B9\u540D\u6CE8\u5165\uFF08\u5982 llm_1\uFF09\u3002\u672C CLI \u751F\u6210\u7684\u9AA8\u67B6\u53EA\u6709 START\u2192CODE\u2192END\uFF0C
+  \u6240\u4EE5\u901A\u5E38\u53EA\u7528\u5F97\u5230 formConfig \u91CC\u7684\u53D8\u91CF\u3002
+
+## 3. \u8FD4\u56DE\u503C
+
+\u8FD4\u56DE**\u88F8\u7684** object / list \u5373\u53EF\uFF0C**\u4E0D\u8981\u518D\u5957\u4E00\u5C42 {data:{...}} \u6216 {data:{run_result:[...]}} \u4FE1\u5C01**\u3002
+\u5E73\u53F0\u6309\u88F8\u8FD4\u56DE\u503C\u6D88\u8D39\uFF1B\u591A\u5957\u7684\u4FE1\u5C01\u4F1A\u8BA9\u4E0B\u6E38\u5BCC\u5316/\u89E3\u6790\u6309\u5B57\u9762 key \u53D6\u503C\u800C\u9759\u9ED8\u5931\u8D25\uFF08\u5DF2\u53D1\u751F\u8FC7\u7EBF\u4E0A\u4E8B\u6545\uFF09\u3002
+\u8FD4\u56DE\u503C\u5FC5\u987B\u53EF\u5E8F\u5217\u5316\u2014\u2014\u4E0D\u80FD\u662F\u6B63\u5219\u3001\u51FD\u6570\u7B49\u4E0D\u53EF\u5E8F\u5217\u5316\u5BF9\u8C61\u3002
+
+## 4. \u5185\u7F6E\u5305\uFF08CommonJS\uFF09
+
+\u73AF\u5883\u5185\u7F6E\u5E38\u7528\u5305\uFF0C\u7528 require \u5BFC\u5165\uFF08\u4E0D\u652F\u6301 ES Module \u7684 import\uFF09\uFF1A
+
+  const axios = require('axios');    // HTTP \u8BF7\u6C42
+  const dayjs = require('dayjs');    // \u65E5\u671F\u5904\u7406
+  const crypto = require('crypto');  // \u52A0\u5BC6/\u6458\u8981
+
+## 5. BetterYeah SDK
+
+  const Betteryeah = require('betteryeah').default;
+  const betteryeah = new Betteryeah();
+
+\u6838\u5FC3\u6A21\u5757\uFF08\u5168\u90E8 await \u8C03\u7528\uFF09\uFF1A
+- betteryeah.llm.chat({ systemPrompt, model, jsonMode, temperature, messages })\uFF1A\u8C03\u5927\u6A21\u578B
+- betteryeah.knowledge.searchKnowledge / insertKnowledge\uFF1A\u77E5\u8BC6\u5E93\u67E5\u8BE2/\u63D2\u5165
+- betteryeah.database.executeDatabase({ databaseId, executableSql })\uFF1A\u6267\u884C SQL
+- betteryeah.plugin.*\uFF1A\u641C\u7D22\uFF08search.googleSearch/bingSearch/aiSearch\uFF09\u3001\u89E3\u6790\uFF08parsing.web/excel/pdf/...\uFF09\u3001
+  \u8BC6\u56FE\u751F\u56FE\uFF08image.vision/generate/ocr\uFF09\u7B49
+- betteryeah.subFlow.execute(flowId, parameter)\uFF1A\u8C03\u7528\u5176\u5B83\u5DF2\u53D1\u5E03\u5DE5\u4F5C\u6D41
+
+SDK \u7EDF\u4E00\u54CD\u5E94\u5F62\u72B6 { code, success, message, data, usage }\uFF0C\u52A1\u5FC5\u68C0\u67E5 success\uFF1A
+
+  if (!result.success) throw new Error(result.message ?? '\u6267\u884C\u51FA\u9519');
+
+## 6. betterAI \u8FD0\u884C\u65F6\u5BF9\u8C61
+
+- betterAI.store.set(key, value) / betterAI.store.get(key)\uFF1Aflow \u751F\u547D\u5468\u671F\u5185\u5171\u4EAB\u6570\u636E
+- betterAI.session.*\uFF1A\u4F1A\u8BDD\u5143\u4FE1\u606F\u4E0E\u6301\u4E45\u5316\u8BB0\u5FC6\uFF08sessionId / conversationId / metaData / \u804A\u5929\u8BB0\u5F55\uFF09
+- betterAI.agent.chat.*\uFF1A\u5411 Agent \u4F1A\u8BDD\u63A8\u9001\u6D88\u606F/\u901A\u77E5
+
+## 7. \u5B8C\u6574\u793A\u4F8B
+
+  async function main() {
+    const ctx = dialogue;        // \u6765\u81EA START formConfig \u7684\u5168\u5C40\u53D8\u91CF
+    // ...\u4F60\u7684\u4E1A\u52A1\u903B\u8F91...
+    return { ok: true };         // main \u7684\u8FD4\u56DE\u503C\u5373\u5DE5\u5177\u4EA7\u51FA\uFF08\u88F8\u5BF9\u8C61\uFF0C\u52FF\u5957\u4FE1\u5C01\uFF09
+  }
+
+## 8. \u6CE8\u610F\u4E8B\u9879
+
+- \u77E5\u8BC6\u5E93 ID / \u6587\u4EF6 ID / \u6570\u636E\u5E93 ID \u7B49\u5728\u5E73\u53F0\u5DE6\u4FA7\u8D44\u6E90\u6811\u7528\u590D\u5236\u6309\u94AE\u83B7\u53D6\u3002
+- SDK \u5404\u6A21\u5757\u5B8C\u6574\u53C2\u6570\u4E0E\u66F4\u591A\u793A\u4F8B\u4EE5\u4E0A\u65B9\u5B98\u65B9\u6587\u6863\u4E3A\u51C6\u3002
+`;
+async function createFlow(opts) {
+  const { nodes, edges } = buildFlowSkeleton({
+    code: opts.code,
+    description: opts.description,
+    inputVars: opts.inputVars,
+    codeNodeName: opts.codeNodeName
+  });
+  const request = createRequest();
+  const res = await request(
+    getAiApiUrl(),
+    "/v1/applications",
+    {
+      method: "POST",
+      query: { workspaceId: getWorkspaceId() },
+      headers: {
+        accept: "application/json",
+        "application-id": randomUUID2().replace(/-/g, "")
+      },
+      body: {
+        icon: "\u{1F33C}",
+        color: "#ADE9CE",
+        description: opts.description ?? "\u6682\u65E0\u63CF\u8FF0",
+        name: opts.name,
+        applicationType: "AI",
+        config: JSON.stringify({ nodes, edges }),
+        channel_type: "flow"
+      }
+    }
+  );
+  const flowId = res.flowId;
+  const versionId = res.versionId;
+  const publish = opts.publish !== false;
+  if (publish) {
+    await request(getAiApiUrl(), "/v1/flow/publish", {
+      method: "POST",
+      body: {
+        draftVersionId: versionId,
+        ...opts.versionDesc ? { version_desc: opts.versionDesc } : {}
+      }
+    });
+  }
+  return { flow_id: flowId, version_id: versionId, published: publish };
+}
+async function getFlowConfig(opts) {
+  const request = createRequest();
+  return request(getAiApiUrl(), `/v1/applications/${encodeURIComponent(opts.flowId)}`, {
+    method: "GET"
+  });
+}
+async function updateFlowCode(opts) {
+  const data = await getFlowConfig({ flowId: opts.flowId });
+  const config = data.config;
+  if (!config || typeof config !== "object" || !Array.isArray(config.nodes)) {
+    throw new APIError(1, "flow config \u5F62\u72B6\u5F02\u5E38\uFF1A\u7F3A nodes \u6570\u7EC4\uFF0C\u65E0\u6CD5\u5B9A\u4F4D CODE \u8282\u70B9");
+  }
+  const codeNodes = config.nodes.filter(
+    // biome-ignore lint/suspicious/noExplicitAny: 同上
+    (n) => n.type === "CODE"
+  );
+  if (codeNodes.length !== 1) {
+    throw new APIError(1, `\u672A\u627E\u5230\u552F\u4E00 CODE \u8282\u70B9\uFF08\u627E\u5230 ${codeNodes.length} \u4E2A\uFF09`);
+  }
+  codeNodes[0].data.inputs.code = opts.code;
+  const request = createRequest();
+  await request(getAiApiUrl(), "/v1/flow/update", {
+    method: "POST",
+    body: { appId: opts.flowId, config, flowId: opts.flowId }
+  });
+  const publish = opts.publish !== false;
+  if (publish) {
+    const draft = await request(
+      getAiApiUrl(),
+      `/v1/flow/draft/${encodeURIComponent(opts.flowId)}`,
+      { method: "GET" }
+    );
+    await request(getAiApiUrl(), "/v1/flow/publish", {
+      method: "POST",
+      body: {
+        draftVersionId: draft.version_id,
+        ...opts.versionDesc ? { version_desc: opts.versionDesc } : {}
+      }
+    });
+  }
+  return { flow_id: opts.flowId, published: publish };
+}
+async function getWorkspaceAccessKey() {
+  const request = createRequest();
+  const workspaceId = getWorkspaceId();
+  return request(
+    getAiApiUrl(),
+    `/v1/workspaces/getKey/${encodeURIComponent(workspaceId)}`,
+    { method: "GET" }
+  );
+}
+async function runFlow(opts) {
+  const accessKey = await getWorkspaceAccessKey();
+  const request = createRequest();
+  return request(
+    getAiApiUrl(),
+    `/v1/public_api/rest_api/${encodeURIComponent(opts.flowId)}/execute_flow`,
+    {
+      method: "POST",
+      headers: { "Access-Key": accessKey },
+      body: { inputs: opts.inputs ?? {}, async_execute: false }
+    }
+  );
+}
+async function deleteFlow(opts) {
+  const request = createRequest();
+  await request(getAiApiUrl(), `/v1/applications/${encodeURIComponent(opts.flowId)}`, {
+    method: "DELETE"
+  });
+  return { flow_id: opts.flowId };
+}
+
+// src/client/tool-api.ts
+var VALID_INVOCATION_MODES = ["must_invoke", "on_demand", "on_demand_async"];
+function assertInvocationMode(mode) {
+  if (!VALID_INVOCATION_MODES.includes(mode)) {
+    throw new APIError(
+      1,
+      "invocation_mode \u975E\u6CD5\uFF0C\u53EF\u9009\u503C\uFF1Amust_invoke / on_demand / on_demand_async"
+    );
+  }
+}
+async function listToolsByConfig(opts) {
+  const request = createRequest();
+  return request(getCustomerServiceUrl(), "/v1/tool/by-config", {
+    method: "GET",
+    query: { customer_agent_config_id: opts.agentConfigId }
+  });
+}
+async function createCustomTool(opts) {
+  if (opts.invocationMode !== void 0) {
+    assertInvocationMode(opts.invocationMode);
+  }
+  const request = createRequest();
+  return request(getCustomerServiceUrl(), "/v1/tool/custom", {
+    method: "POST",
+    body: {
+      name: opts.name,
+      key: opts.key,
+      workspace_id: getWorkspaceId(),
+      customer_agent_config_id: opts.agentConfigId,
+      source_id: opts.sourceId,
+      source_type: opts.sourceType ?? "flow",
+      description: opts.description ?? "",
+      invocation_mode: opts.invocationMode ?? "on_demand",
+      input_var_descriptions: opts.inputVarDescriptions ?? {}
+    }
+  });
+}
+async function updateTool(opts) {
+  if (opts.invocationMode !== void 0) {
+    assertInvocationMode(opts.invocationMode);
+  }
+  const body = {};
+  if (opts.name !== void 0) body.name = opts.name;
+  if (opts.key !== void 0) body.key = opts.key;
+  if (opts.description !== void 0) body.description = opts.description;
+  if (opts.sourceId !== void 0) body.source_id = opts.sourceId;
+  if (opts.invocationMode !== void 0) body.invocation_mode = opts.invocationMode;
+  if (opts.inputVarDescriptions !== void 0) {
+    body.input_var_descriptions = opts.inputVarDescriptions;
+  }
+  const request = createRequest();
+  return request(getCustomerServiceUrl(), `/v1/tool/${opts.toolId}`, {
+    method: "PUT",
+    body
+  });
+}
+async function deleteTool(opts) {
+  const request = createRequest();
+  return request(getCustomerServiceUrl(), `/v1/tool/${opts.toolId}`, {
+    method: "DELETE"
+  });
+}
+async function listWorkflows(opts) {
+  const request = createRequest();
+  return request(getCustomerServiceUrl(), "/v1/tool/workflow/list", {
+    method: "GET",
+    query: { workspace_id: getWorkspaceId(), keyword: opts.keyword ?? "" }
+  });
+}
+async function getWorkflowDetail(opts) {
+  const request = createRequest();
+  return request(
+    getCustomerServiceUrl(),
+    `/v1/tool/workflow/${encodeURIComponent(opts.flowId)}/detail`,
+    {
+      method: "GET",
+      query: { workspace_id: getWorkspaceId() }
+    }
+  );
+}
+
+// src/commands/tool.ts
+function readArgMaybeFile(value) {
+  if (value.startsWith("@")) {
+    const filePath = value.slice(1);
+    try {
+      return fs14.readFileSync(filePath, "utf8");
+    } catch {
+      throw new APIError(
+        1,
+        `\u8BFB\u53D6\u6587\u4EF6\u5931\u8D25\uFF1A${filePath}\uFF08@ \u524D\u7F00\u8868\u793A\u6587\u4EF6\u8DEF\u5F84\uFF1B\u8981\u4F20\u5B57\u9762\u5185\u5BB9\u8BF7\u53BB\u6389 @\uFF09`
+      );
+    }
+  }
+  return value;
+}
+function registerToolCommand(program2) {
+  const tool = program2.command("tool").description(
+    "\u81EA\u5B9A\u4E49/\u8986\u76D6\u5DE5\u5177\uFF08agent tool\uFF09\u7BA1\u7406 \u2014\u2014 \u5BF9\u67D0\u4E2A Agent \u914D\u7F6E\u7ED1\u5B9A\u7684\u81EA\u5B9A\u4E49\u5DE5\u5177\u505A\u589E\u5220\u6539\u67E5\uFF0C\u5E76\u53D1\u73B0\u53EF\u7ED1\u5B9A\u7684\u5DE5\u4F5C\u6D41\uFF08flow\uFF09\u3002\u5305\u88C5 servhub /v1/tool API"
+  );
+  tool.command("list").description("\u5217\u51FA\u8BE5 Agent \u914D\u7F6E\u5DF2\u7ED1\u5B9A\u7684\u5DE5\u5177\uFF08custom + system\uFF09").requiredOption("--agent <config_id>", "Agent \u914D\u7F6E ID\uFF08\u4ECE agent list \u83B7\u53D6\uFF09").action(async (opts) => {
+    try {
+      const data = await listToolsByConfig({ agentConfigId: opts.agent });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  tool.command("create").description("\u521B\u5EFA\u81EA\u5B9A\u4E49\u5DE5\u5177\uFF0C\u7ED1\u5B9A\u4E00\u4E2A\u5DE5\u4F5C\u6D41\uFF08flow\uFF09\u4F5C\u4E3A\u5DE5\u5177\u5B9E\u73B0").requiredOption("--agent <config_id>", "Agent \u914D\u7F6E ID\uFF08\u4ECE agent list \u83B7\u53D6\uFF09").requiredOption("--name <name>", "\u5DE5\u5177\u663E\u793A\u540D\u79F0").requiredOption("--key <key>", "\u5DE5\u5177 key\uFF08\u552F\u4E00\u6807\u8BC6\uFF09").requiredOption("--source-id <flow_id>", "\u7ED1\u5B9A\u7684\u5DE5\u4F5C\u6D41 ID\uFF08\u4ECE tool workflow list \u83B7\u53D6\uFF09").option("--description <text>", "\u5DE5\u5177\u63CF\u8FF0").option("--source-type <type>", "\u5DE5\u5177\u6765\u6E90\u7C7B\u578B\uFF08\u9ED8\u8BA4 flow\uFF09").option(
+    "--invocation-mode <mode>",
+    "\u8C03\u7528\u6A21\u5F0F\uFF1Amust_invoke / on_demand / on_demand_async\uFF08\u9ED8\u8BA4 on_demand\uFF09"
+  ).option("--input-vars <json>", "\u5165\u53C2\u63CF\u8FF0\uFF08JSON \u5B57\u7B26\u4E32\uFF09\uFF0C\u89E3\u6790\u4E3A input_var_descriptions").action(async (opts) => {
+    try {
+      const inputVarDescriptions = opts.inputVars !== void 0 ? JSON.parse(opts.inputVars) : void 0;
+      const data = await createCustomTool({
+        agentConfigId: opts.agent,
+        name: opts.name,
+        key: opts.key,
+        sourceId: opts.sourceId,
+        description: opts.description,
+        sourceType: opts.sourceType,
+        invocationMode: opts.invocationMode,
+        inputVarDescriptions
+      });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  tool.command("update <tool_id>").description("\u66F4\u65B0\u5DE5\u5177\u7684\u4EFB\u610F\u5B50\u96C6\u5B57\u6BB5\uFF08\u4EC5\u900F\u4F20\u5B9E\u9645\u63D0\u4F9B\u7684 flag\uFF09").option("--name <name>", "\u5DE5\u5177\u663E\u793A\u540D\u79F0").option("--key <key>", "\u5DE5\u5177 key\uFF08\u552F\u4E00\u6807\u8BC6\uFF09").option("--description <text>", "\u5DE5\u5177\u63CF\u8FF0").option("--source-id <flow_id>", "\u7ED1\u5B9A\u7684\u5DE5\u4F5C\u6D41 ID").option("--invocation-mode <mode>", "\u8C03\u7528\u6A21\u5F0F\uFF1Amust_invoke / on_demand / on_demand_async").option("--input-vars <json>", "\u5165\u53C2\u63CF\u8FF0\uFF08JSON \u5B57\u7B26\u4E32\uFF09\uFF0C\u89E3\u6790\u4E3A input_var_descriptions").action(async (toolId, opts) => {
+    try {
+      const inputVarDescriptions = opts.inputVars !== void 0 ? JSON.parse(opts.inputVars) : void 0;
+      const data = await updateTool({
+        toolId,
+        name: opts.name,
+        key: opts.key,
+        description: opts.description,
+        sourceId: opts.sourceId,
+        invocationMode: opts.invocationMode,
+        inputVarDescriptions
+      });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  tool.command("delete <tool_id>").description("\u5220\u9664\uFF08\u8F6F\u5220\u9664\uFF09\u6307\u5B9A\u5DE5\u5177").action(async (toolId) => {
+    try {
+      const data = await deleteTool({ toolId });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  const workflow = tool.command("workflow").description(
+    "\u5DE5\u4F5C\u6D41\uFF08flow\uFF09\u7BA1\u7406\uFF1Alist / detail\uFF08\u53D1\u73B0\uFF09+ create / update / run / delete / describe\uFF08\u589E\u6539\u8DD1\u5220 + \u8BF4\u660E\uFF09"
+  );
+  workflow.command("list").description("\u5217\u51FA\u5F53\u524D\u5DE5\u4F5C\u7A7A\u95F4\u53EF\u7ED1\u5B9A\u7684\u5DE5\u4F5C\u6D41\uFF08flow\uFF09").option("--keyword <kw>", "\u6309\u5173\u952E\u8BCD\u6A21\u7CCA\u7B5B\u9009").action(async (opts) => {
+    try {
+      const data = await listWorkflows({ keyword: opts.keyword });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  workflow.command("detail <flow_id>").description("\u67E5\u770B\u6307\u5B9A\u5DE5\u4F5C\u6D41\u7684\u5165\u53C2\u5217\u8868\uFF08\u7528\u4E8E\u6784\u9020 input_var_descriptions\uFF09").action(async (flowId) => {
+    try {
+      const data = await getWorkflowDetail({ flowId });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  workflow.command("create").description(
+    "\u521B\u5EFA\u5DE5\u4F5C\u6D41\uFF08flow\uFF09\uFF1ASTART \u2192 CODE \u2192 END \u9AA8\u67B6\uFF0CCODE \u8282\u70B9\u627F\u8F7D\u5DE5\u5177\u4EE3\u7801\uFF08\u4EC5\u652F\u6301 JavaScript\uFF09\u3002\u975E\u5E42\u7B49\u2014\u2014\u91CD\u8BD5\u4F1A\u5EFA\u51FA\u91CD\u590D flow\uFF0C\u91CD\u8BD5\u524D\u5148 tool workflow list --keyword <name> \u6838\u5BF9"
+  ).requiredOption("--name <name>", "\u5DE5\u4F5C\u6D41\u540D\u79F0").requiredOption(
+    "--code <code|@file>",
+    "CODE \u8282\u70B9 JavaScript \u4EE3\u7801\uFF1B\u503C\u4EE5 @ \u5F00\u5934\u5219\u8BFB\u53D6\u8BE5\u6587\u4EF6\u8DEF\u5F84\uFF08\u5982 @./tool.js\uFF09\uFF0C\u5426\u5219\u6309\u5B57\u9762\u4EE3\u7801"
+  ).option("--description <text>", "\u5DE5\u4F5C\u6D41\u63CF\u8FF0").option(
+    "--input-vars <json|@file>",
+    "\u8986\u76D6 START formConfig\uFF08@file \u540C --code\uFF09\uFF1B\u5F62\u6001\u662F formConfig \u6570\u7EC4 [{type,label,required,placeholder,variableName,...}]\uFF0C\u9ED8\u8BA4\u4EC5 dialogue\u3002\u6CE8\u610F\uFF1A\u4E0E tool create \u7684 --input-vars\uFF08input_var_descriptions\uFF09\u662F\u4E0D\u540C\u5B57\u6BB5"
+  ).option("--no-publish", "\u53EA\u5EFA\u8349\u7A3F\u4E0D\u53D1\u5E03").option("--code-node-name <name>", "CODE \u8282\u70B9\u540D\uFF08\u9ED8\u8BA4 javascript_1\uFF09").option("--version-desc <text>", "\u53D1\u5E03\u7248\u672C\u63CF\u8FF0\uFF08\u5E73\u53F0\u7248\u672C\u5386\u53F2\u91CC\u53EF\u89C1\uFF1B--no-publish \u65F6\u5FFD\u7565\uFF09").action(async (opts) => {
+    try {
+      const code = readArgMaybeFile(opts.code);
+      const inputVars = opts.inputVars !== void 0 ? JSON.parse(readArgMaybeFile(opts.inputVars)) : void 0;
+      const data = await createFlow({
+        name: opts.name,
+        code,
+        description: opts.description,
+        inputVars,
+        codeNodeName: opts.codeNodeName,
+        publish: opts.publish,
+        versionDesc: opts.versionDesc
+      });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  workflow.command("update <flow_id>").description("\u66F4\u65B0\u5DE5\u4F5C\u6D41\u552F\u4E00 CODE \u8282\u70B9\u7684\u4EE3\u7801\uFF08\u5176\u5B83\u8282\u70B9\u539F\u6837\u4FDD\u7559\uFF09").requiredOption(
+    "--code <code|@file>",
+    "CODE \u8282\u70B9\u65B0\u4EE3\u7801\uFF08JavaScript\uFF09\uFF1B\u503C\u4EE5 @ \u5F00\u5934\u5219\u8BFB\u53D6\u8BE5\u6587\u4EF6\u8DEF\u5F84\uFF0C\u5426\u5219\u6309\u5B57\u9762\u4EE3\u7801"
+  ).option("--no-publish", "\u53EA\u66F4\u65B0\u8349\u7A3F\u4E0D\u53D1\u5E03").option("--version-desc <text>", "\u53D1\u5E03\u7248\u672C\u63CF\u8FF0\uFF08\u5E73\u53F0\u7248\u672C\u5386\u53F2\u91CC\u53EF\u89C1\uFF1B--no-publish \u65F6\u5FFD\u7565\uFF09").action(async (flowId, opts) => {
+    try {
+      const code = readArgMaybeFile(opts.code);
+      const data = await updateFlowCode({
+        flowId,
+        code,
+        publish: opts.publish,
+        versionDesc: opts.versionDesc
+      });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  workflow.command("run <flow_id>").description(
+    "\u8FD0\u884C\u5DF2\u53D1\u5E03\u7684\u5DE5\u4F5C\u6D41\uFF08HTTP \u540C\u6B65\u6267\u884C\uFF09\uFF1A\u81EA\u52A8\u53D6\u5F53\u524D\u7A7A\u95F4\u5E94\u7528\u6001 access key\uFF0C\u8FD4\u56DE run_result"
+  ).option(
+    "--input <json|@file>",
+    `flow \u5165\u53C2 JSON \u5BF9\u8C61\uFF08\u9ED8\u8BA4 {}\uFF09\uFF0C\u952E\u5BF9\u5E94 START formConfig \u7684 variableName\uFF0C\u5982 '{"dialogue":...}'\uFF1B@file \u540C --code`
+  ).action(async (flowId, opts) => {
+    try {
+      const inputs = opts.input !== void 0 ? JSON.parse(readArgMaybeFile(opts.input)) : void 0;
+      const data = await runFlow({ flowId, inputs });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  workflow.command("delete <flow_id>").description("\u786C\u5220\u9664\u5DE5\u4F5C\u6D41\uFF08flow\uFF09\u2014\u2014\u4E0D\u53EF\u6062\u590D\uFF08\u533A\u522B\u4E8E tool delete \u7684\u8F6F\u5220\u9664\uFF09").option("--yes", "\u786E\u8BA4\u5220\u9664\uFF08\u5FC5\u987B\u663E\u5F0F\u52A0\uFF0C\u5426\u5219\u62D2\u7EDD\uFF09").action(async (flowId, opts) => {
+    try {
+      if (!opts.yes) {
+        throw new APIError(1, "\u5220\u9664\u4F1A\u8BA9\u6307\u5411\u6B64 flow \u7684\u81EA\u5B9A\u4E49\u5DE5\u5177\u5931\u6548\uFF0C\u786E\u8BA4\u8BF7\u52A0 --yes");
+      }
+      const data = await deleteFlow({ flowId });
+      formatOutput({ success: true, data }, program2.opts().table);
+    } catch (err) {
+      reportCaughtError(err);
+      process.exit(toExitCode(err));
+    }
+  });
+  workflow.command("describe").description(
+    "\u8F93\u51FA CODE \u8282\u70B9\uFF08JavaScript\uFF09\u4F7F\u7528\u6587\u6863\uFF1A\u5165\u53E3/\u53D8\u91CF\u6CE8\u5165/\u8FD4\u56DE\u503C/\u5185\u7F6E\u5305/SDK\uFF0C\u4F9D\u636E\u5B98\u65B9\u6587\u6863\u6574\u7406"
+  ).action(() => {
+    formatOutput({ success: true, data: { guide: CODE_NODE_GUIDE } }, program2.opts().table);
+  });
+}
+
 // src/commands/workspace.ts
 var DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
 function toISODate(d) {
@@ -6874,6 +7431,7 @@ registerWorkspaceCommand(program);
 registerAgentCommand(program);
 registerOpsAgentCommand(program);
 registerSACommand(program);
+registerToolCommand(program);
 registerProductCommand(program);
 registerMediaCommand(program);
 registerKnowledgeCommand(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bty/customer-service-cli",
-  "version": "0.6.6",
+  "version": "0.6.7",
   "description": "AI Customer Service CLI - Agent friendly",
   "type": "module",
   "main": "./dist/bin.js",