@crabcloud/cli 0.3.1 → 0.5.3

package/dist/crab.js

@@ -2988,6 +2988,9 @@ function handlePipeResult(left, next, ctx) {
   }
   return next._zod.run({ value: left.value, issues: left.issues }, ctx);
 }
+var $ZodPreprocess = /* @__PURE__ */ $constructor("$ZodPreprocess", (inst, def) => {
+  $ZodPipe.init(inst, def);
+});
 var $ZodReadonly = /* @__PURE__ */ $constructor("$ZodReadonly", (inst, def) => {
   $ZodType.init(inst, def);
   defineLazyInternal(inst, "propValues", (zod) => zod.def.innerType._zod.propValues);
@@ -6025,6 +6028,10 @@ function pipe(in_, out) {
     out
   });
 }
+var ZodPreprocess = /* @__PURE__ */ $constructor("ZodPreprocess", (inst, def) => {
+  ZodPipe.init(inst, def);
+  $ZodPreprocess.init(inst, def);
+});
 var ZodReadonly = /* @__PURE__ */ $constructor("ZodReadonly", (inst, def) => {
   $ZodReadonly.init(inst, def);
   ZodType.init(inst, def);
@@ -6048,6 +6055,13 @@ function refine(fn, _params = {}) {
 function superRefine(fn, params) {
   return _superRefine(fn, params);
 }
+function preprocess(fn, schema) {
+  return new ZodPreprocess({
+    type: "pipe",
+    in: transform(fn),
+    out: schema
+  });
+}
 // ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/classic/coerce.js
 var exports_coerce = {};
 __export(exports_coerce, {
@@ -6072,6 +6086,335 @@ function bigint2(params) {
 function date2(params) {
   return _coercedDate(ZodDate, params);
 }
+// ../../packages/contracts/src/shop.ts
+var SHOP_PERMISSIONS = ["products", "orders", "aftercare", "customers", "marketing", "finance", "team", "settings"];
+var shopCategoryMoveInput = object({
+  direction: _enum(["up", "down"])
+});
+var comboValues = array(string2().min(1).max(60)).min(1).max(24);
+var shopStoreCreateInput = object({
+  name: string2().min(1).max(60),
+  tagline: string2().max(200).default("")
+});
+var shopStoreUpdateInput = object({
+  name: string2().min(1).max(60),
+  tagline: string2().max(200),
+  description: string2().max(2000),
+  logoObjectId: string2().min(1).nullable(),
+  skuPrefix: string2().regex(/^[A-Za-z0-9]{0,8}$/)
+}).partial();
+var shopCategoryCreateInput = object({
+  name: string2().min(1).max(60),
+  parentId: string2().min(1).nullish()
+});
+var shopCategoryUpdateInput = object({
+  name: string2().min(1).max(60),
+  parentId: string2().min(1).nullable()
+}).partial();
+var shopVariantInput = object({
+  combo: comboValues,
+  priceCents: number2().int().min(0).max(1e8).nullish(),
+  compareAtPriceCents: number2().int().min(0).max(1e8).nullish(),
+  stock: number2().int().min(0).max(1e7).nullish(),
+  enabled: boolean2().default(true),
+  code: string2().max(64).nullish()
+});
+var shopProductCreateInput = object({
+  kind: _enum(["digital", "physical"]),
+  variantMode: _enum(["single", "multi"]),
+  name: string2().min(1).max(140),
+  description: string2().max(2000).default(""),
+  content: string2().max(30000).default(""),
+  categoryId: string2().min(1).nullish(),
+  status: _enum(["draft", "active", "archived"]).default("draft"),
+  priceCents: number2().int().min(0).max(1e8).nullish(),
+  compareAtPriceCents: number2().int().min(0).max(1e8).nullish(),
+  stock: number2().int().min(0).max(1e7).nullish(),
+  refundable: boolean2().nullish(),
+  deliveryType: _enum(["file", "license"]).nullish(),
+  deliveryFileId: string2().min(1).nullish(),
+  imageObjectId: string2().min(1).nullish(),
+  gallery: array(string2().min(1)).max(8).nullish(),
+  specAxes: array(object({ name: string2().min(1).max(30), values: comboValues })).max(3).nullish(),
+  variants: array(shopVariantInput).max(24).nullish(),
+  code: string2().max(64).nullish(),
+  maxPerOrder: number2().int().min(1).max(1e4).nullish(),
+  maxPerBuyer: number2().int().min(1).max(1e4).nullish()
+});
+var shopProductUpdateInput = shopProductCreateInput.extend({
+  status: _enum(["draft", "active", "archived"]).optional(),
+  description: string2().max(2000).optional(),
+  content: string2().max(30000).optional()
+}).partial();
+var shopStockAdjustTarget = object({
+  variantId: string2().min(1).nullish(),
+  amount: number2().int().min(0).max(1e7)
+});
+var shopStockAdjustInput = object({
+  mode: _enum(["in", "out", "set"]),
+  reason: _enum(["purchase", "manual"]).nullish(),
+  note: string2().max(200).nullish(),
+  targets: array(shopStockAdjustTarget).min(1).max(50)
+}).superRefine((val, ctx) => {
+  if (val.reason === "purchase" && val.mode !== "in") {
+    ctx.addIssue({ code: "custom", path: ["reason"], message: "reason 'purchase' only applies to inbound" });
+  }
+  if (val.mode !== "set" && val.targets.some((t) => t.amount === 0)) {
+    ctx.addIssue({ code: "custom", path: ["targets"], message: "amount must be positive for in/out" });
+  }
+});
+var shopListedStockInput = object({
+  targets: array(object({
+    variantId: string2().min(1).nullish(),
+    stock: number2().int().min(0).max(1e7)
+  })).min(1).max(50)
+});
+var shopStripeConnectInput = object({
+  secretKey: string2().min(1).max(255).regex(/^(sk|rk)_(test|live)_/, "must be a Stripe secret key (sk_…/rk_…)"),
+  webhookSecret: string2().max(255).regex(/^whsec_/, "must be a Stripe webhook signing secret (whsec_…)").optional()
+});
+var shopDiscountCodeCreateInput = object({
+  code: string2().trim().regex(/^[A-Z0-9]{0,20}$/, "code must be uppercase letters/digits").optional(),
+  kind: _enum(["amount_off", "percent_off"]),
+  amountCents: number2().int().min(1).max(1e8).nullish(),
+  percent: number2().int().min(1).max(99).nullish(),
+  minSpendCents: number2().int().min(0).max(1e8).nullish(),
+  maxUses: number2().int().min(1).max(1e6).nullish(),
+  expiresAt: number2().int().min(0).nullish()
+});
+var shopDiscountCodeToggleInput = object({
+  status: _enum(["active", "disabled"])
+});
+var shopCustomerAssignInput = object({
+  memberId: string2().min(1).nullable()
+});
+var shopCustomerNoteInput = object({
+  note: string2().max(2000)
+});
+var shopInviteResetInput = object({
+  permissions: array(_enum(SHOP_PERMISSIONS)).default(["orders", "customers"]),
+  bizRoles: array(_enum(["sales", "support"])).default([])
+});
+var shopMemberUpdateInput = object({
+  permissions: array(_enum(SHOP_PERMISSIONS)).min(0).max(SHOP_PERMISSIONS.length),
+  bizRoles: array(_enum(["sales", "support"])).nullish()
+});
+var shopStoreRoleCreateInput = object({
+  name: string2().trim().min(1).max(30),
+  permissions: array(_enum(SHOP_PERMISSIONS)).max(SHOP_PERMISSIONS.length)
+});
+var shopStoreRoleUpdateInput = object({
+  name: string2().trim().min(1).max(30).optional(),
+  permissions: array(_enum(SHOP_PERMISSIONS)).max(SHOP_PERMISSIONS.length).optional()
+});
+var shopShippingAddressInput = object({
+  name: string2().min(1).max(80),
+  phone: string2().min(1).max(40),
+  region: string2().max(120).optional(),
+  detail: string2().min(1).max(500)
+});
+var shopCheckoutInput = object({
+  productId: string2().min(1),
+  variantId: string2().min(1).nullish(),
+  quantity: number2().int().min(1).max(99).default(1),
+  buyerEmail: string2().email().max(200),
+  shippingAddress: shopShippingAddressInput.nullish(),
+  discountCode: string2().trim().max(20).nullish(),
+  provider: _enum(["auto", "mock", "stripe"]).default("auto")
+});
+var shopShipInput = object({
+  trackingNumber: string2().min(1).max(120),
+  quantity: number2().int().min(1).max(1e7).optional()
+});
+var shopApplicationCreateInput = object({
+  name: string2().trim().min(1).max(60),
+  tagline: string2().trim().max(200).default("")
+});
+// ../../packages/contracts/src/hr.ts
+var hrPermissionFlags = [
+  "org.manage",
+  "people.write",
+  "tasks.write",
+  "sensitive.read"
+];
+var hrEventTypes = [
+  "onboard",
+  "contract",
+  "change",
+  "attendance",
+  "payroll",
+  "award",
+  "asset",
+  "offboard",
+  "note"
+];
+var hrTaskStatuses = ["alert", "confirm", "queued", "done"];
+var hrTaskDecisions = ["approved", "rejected"];
+var optionalDay = number2().int().positive().nullable().optional();
+var hrOrgUpdateInput = object({
+  name: string2().trim().min(1).max(80)
+});
+var hrMemberAddInput = object({
+  username: string2().trim().toLowerCase().min(3).max(32),
+  title: string2().trim().max(40).optional(),
+  permissions: record(_enum(hrPermissionFlags), boolean2()).optional()
+});
+var hrInviteUpdateInput = object({
+  permissions: record(_enum(hrPermissionFlags), boolean2())
+});
+var hrOrgApplicationCreateInput = object({
+  name: string2().trim().min(1).max(80),
+  note: string2().trim().max(200).default("")
+});
+var hrMemberUpdateInput = object({
+  role: _enum(["admin", "member"]).optional(),
+  permissions: record(_enum(hrPermissionFlags), boolean2()).optional(),
+  title: string2().trim().max(40).optional()
+});
+var hrPersonCreateInput = object({
+  name: string2().trim().min(1).max(60),
+  employeeNo: string2().trim().max(40).optional(),
+  dept: string2().trim().max(40).optional(),
+  role: string2().trim().max(40).optional(),
+  status: _enum(["active", "probation"]).optional(),
+  hiredAt: number2().int().positive(),
+  probationEnd: optionalDay,
+  contractType: string2().trim().max(20).optional(),
+  contractStart: optionalDay,
+  contractEnd: optionalDay,
+  mobile: string2().trim().max(20).optional(),
+  email: string2().trim().max(120).optional(),
+  profile: record(string2(), unknown()).optional(),
+  idNumber: string2().trim().max(18).optional(),
+  salaryCents: number2().int().min(0).max(1e7).nullable().optional(),
+  notes: string2().trim().max(2000).optional()
+});
+var hrImportRowInput = hrPersonCreateInput.omit({ status: true });
+var hrImportInput = object({
+  rows: array(hrImportRowInput).min(1).max(200)
+});
+var hrPersonUpdateInput = object({
+  name: string2().trim().min(1).max(60).optional(),
+  employeeNo: string2().trim().max(40).optional(),
+  dept: string2().trim().max(40).optional(),
+  role: string2().trim().max(40).optional(),
+  status: _enum(["active", "probation", "resigned"]).optional(),
+  hiredAt: number2().int().positive().optional(),
+  probationEnd: optionalDay,
+  contractType: string2().trim().max(20).optional(),
+  contractStart: optionalDay,
+  contractEnd: optionalDay,
+  offboardedAt: optionalDay,
+  mobile: string2().trim().max(20).optional(),
+  email: string2().trim().max(120).optional(),
+  profile: record(string2(), unknown()).optional(),
+  idNumber: string2().trim().max(18).nullable().optional(),
+  salaryCents: number2().int().min(0).max(1e7).nullable().optional(),
+  notes: string2().trim().max(2000).optional()
+});
+var hrPersonListQuery = object({
+  q: string2().trim().max(100).optional(),
+  status: _enum(["active", "probation", "resigned"]).optional(),
+  dept: string2().trim().max(40).optional(),
+  limit: exports_coerce.number().int().min(1).max(200).optional(),
+  offset: exports_coerce.number().int().min(0).optional()
+});
+var hrEventCreateInput = object({
+  type: _enum(hrEventTypes),
+  note: string2().trim().min(1).max(2000),
+  at: number2().int().positive().optional()
+});
+var hrEventListQuery = object({
+  personId: string2().trim().min(1).max(64).optional(),
+  type: _enum(hrEventTypes).optional(),
+  limit: exports_coerce.number().int().min(1).max(200).optional(),
+  offset: exports_coerce.number().int().min(0).optional()
+});
+var hrTaskCreateInput = object({
+  kind: string2().trim().min(1).max(40),
+  title: string2().trim().min(1).max(120),
+  node: string2().trim().max(200).optional(),
+  detail: string2().trim().max(2000).optional(),
+  status: _enum(hrTaskStatuses).optional(),
+  dueAt: number2().int().positive().nullable().optional(),
+  assigneeAccountId: string2().trim().max(64).nullable().optional(),
+  source: string2().trim().max(20).optional(),
+  refType: string2().trim().max(20).optional(),
+  refId: string2().trim().max(64).optional(),
+  meta: record(string2(), unknown()).nullable().optional()
+});
+var hrTaskUpdateInput = object({
+  status: _enum(hrTaskStatuses).optional(),
+  node: string2().trim().max(200).optional(),
+  detail: string2().trim().max(2000).optional(),
+  dueAt: number2().int().positive().nullable().optional(),
+  assigneeAccountId: string2().trim().max(64).nullable().optional(),
+  decision: _enum(hrTaskDecisions).optional(),
+  decisionNote: string2().trim().max(500).optional(),
+  meta: record(string2(), unknown()).nullable().optional()
+});
+var hrTaskListQuery = object({
+  status: _enum(hrTaskStatuses).optional(),
+  kind: string2().trim().max(40).optional(),
+  limit: exports_coerce.number().int().min(1).max(200).optional(),
+  offset: exports_coerce.number().int().min(0).optional()
+});
+var hrAnnouncementCreateInput = object({
+  title: string2().trim().min(1).max(120),
+  body: string2().trim().min(1).max(4000)
+});
+var hrAnnouncementListQuery = object({
+  includeWithdrawn: _enum(["1", "0"]).optional(),
+  limit: exports_coerce.number().int().min(1).max(100).optional(),
+  offset: exports_coerce.number().int().min(0).optional()
+});
+var hrDictTypes = ["dept", "position"];
+var hrDictCreateInput = object({
+  type: _enum(hrDictTypes),
+  name: string2().trim().min(1).max(40)
+});
+var hrAttachmentListQuery = object({
+  personId: string2().trim().max(64).optional(),
+  taskId: string2().trim().max(64).optional(),
+  limit: exports_coerce.number().int().min(1).max(200).optional(),
+  offset: exports_coerce.number().int().min(0).optional()
+});
+var optionalDayField = number2().int().positive().nullable().optional();
+var hrOnboardFormSchema = object({
+  name: string2().trim().max(60).optional(),
+  gender: string2().trim().max(20).optional(),
+  birthDate: optionalDayField,
+  mobile: string2().trim().max(20).optional(),
+  email: string2().trim().max(120).optional(),
+  idNumber: string2().trim().max(18).optional(),
+  education: string2().trim().max(40).optional(),
+  address: string2().trim().max(120).optional(),
+  emergencyContact: string2().trim().max(120).optional(),
+  notes: string2().trim().max(2000).optional(),
+  employeeNo: string2().trim().max(40).optional(),
+  dept: string2().trim().max(40).optional(),
+  role: string2().trim().max(40).optional(),
+  contractType: string2().trim().max(20).optional(),
+  contractStart: optionalDayField,
+  contractEnd: optionalDayField,
+  employmentType: _enum(["probation", "active"]).optional(),
+  probationEnd: optionalDayField,
+  hiredAt: number2().int().positive().optional(),
+  salaryCents: number2().int().min(0).max(1e7).nullable().optional()
+});
+var hrRegularizeFormSchema = object({
+  selfSummary: string2().trim().max(4000).optional(),
+  newRole: string2().trim().max(40).optional(),
+  salaryCents: number2().int().min(0).max(1e7).nullable().optional(),
+  probationReview: string2().trim().max(2000).optional(),
+  regularizeDate: optionalDayField
+});
+var hrOffboardFormSchema = object({
+  offboardType: _enum(["personal", "mutual", "dismissal"]).optional(),
+  reason: string2().trim().max(2000).optional(),
+  lastDay: optionalDayField,
+  handoverNotes: string2().trim().max(2000).optional()
+});
 // ../../packages/contracts/src/index.ts
 var accountDomain = "crabcloud.cc";
 var adminDomain = `admin.${accountDomain}`;
@@ -6092,9 +6435,16 @@ var scopes = [
   "storage.delete",
   "contacts.read",
   "contacts.write",
+  "addresses.read",
+  "addresses.write",
+  "favorites.read",
+  "favorites.write",
   "collab.read",
   "collab.write",
-  "agent.read"
+  "hr.read",
+  "hr.write",
+  "agent.read",
+  "agent.write"
 ];
 var scopeGroups = [
   { id: "account", scopes: ["account.read", "credits.read"] },
@@ -6102,7 +6452,10 @@ var scopeGroups = [
   { id: "storage", scopes: ["storage.read", "storage.write", "storage.delete"] },
   { id: "collab", scopes: ["collab.read", "collab.write"] },
   { id: "contacts", scopes: ["contacts.read", "contacts.write"] },
-  { id: "agent", scopes: ["agent.read"] }
+  { id: "addresses", scopes: ["addresses.read", "addresses.write"] },
+  { id: "favorites", scopes: ["favorites.read", "favorites.write"] },
+  { id: "hr", scopes: ["hr.read", "hr.write"] },
+  { id: "agent", scopes: ["agent.read", "agent.write"] }
 ];
 function expandScopes(input) {
   const expanded = input.flatMap((item) => {
@@ -6184,7 +6537,8 @@ var sessionSummarySchema = object({
 var deviceStartInput = object({
   name: string2().trim().min(1).max(80),
   scopes: array(_enum(scopes)).min(1).max(scopes.length),
-  space: string2().trim().min(1).max(80).optional()
+  space: string2().trim().min(1).max(80).optional(),
+  org: string2().trim().min(1).max(80).optional()
 });
 var devicePollInput = object({ deviceCode: string2().min(16).max(200) });
 var deviceDecisionInput = object({
@@ -6197,11 +6551,33 @@ var agentTokenSummarySchema = object({
   name: string2(),
   scopes: array(_enum(scopes)),
   collabSpace: string2().nullable().optional(),
+  hrOrg: string2().nullable().optional(),
+  kind: _enum(["agent", "api", "mobile"]).optional(),
+  keyHint: string2().optional(),
   createdAt: number2(),
   lastUsedAt: number2().nullable(),
   expiresAt: number2().nullable(),
   revoked: boolean2()
 });
+var apiKeyCreateInput = object({
+  name: string2().trim().min(1).max(64),
+  scopes: array(string2().trim().min(1).max(40)).min(1).max(32)
+});
+var mobileTokenCreateInput = object({
+  name: string2().trim().min(1).max(64)
+});
+var agentPushPlatforms = ["android", "ios", "web"];
+var agentPushPrefsSchema = object({
+  approvals: boolean2().optional(),
+  tasks: boolean2().optional(),
+  cron: boolean2().optional()
+});
+var agentPushRegisterInput = object({
+  platform: _enum(agentPushPlatforms),
+  token: string2().min(10).max(2000),
+  name: string2().trim().max(64).optional(),
+  prefs: agentPushPrefsSchema.optional()
+});
 var oauthProviders = ["google", "reai", "github"];
 var oauthUnbindInput = object({ provider: _enum(oauthProviders) });
 var oauthOnboardingConfirmInput = object({
@@ -6248,6 +6624,15 @@ var adminPlanTierUpdateInput = object({
   quotaJson: record(string2(), unknown()).optional(),
   status: _enum(adminPlanTierStatuses).optional()
 });
+var adminShopStoreStatusInput = object({
+  status: _enum(["active", "archived"])
+});
+var adminShopApplicationRejectInput = object({
+  note: string2().trim().min(1).max(500)
+});
+var adminHrApplicationRejectInput = object({
+  note: string2().trim().min(1).max(500)
+});
 var subscriptionChangeInput = object({
   tierId: string2().trim().min(1).max(50)
 });
@@ -6362,6 +6747,27 @@ var contactQueryInput = object({
   limit: number2().int().min(1).max(50).default(20),
   offset: number2().int().min(0).default(0)
 });
+var addressCreateInput = object({
+  name: string2().trim().min(1).max(64),
+  phone: string2().trim().min(1).max(32),
+  region: string2().trim().max(128).optional().default(""),
+  detail: string2().trim().min(1).max(256),
+  isDefault: boolean2().optional().default(false)
+});
+var addressUpdateInput = object({
+  name: string2().trim().min(1).max(64).optional(),
+  phone: string2().trim().min(1).max(32).optional(),
+  region: string2().trim().max(128).optional(),
+  detail: string2().trim().min(1).max(256).optional(),
+  isDefault: boolean2().optional()
+});
+var FAVORITE_KINDS = ["shop.product"];
+var favoriteKindSchema = _enum(FAVORITE_KINDS);
+var favoritePutInput = object({
+  kind: favoriteKindSchema,
+  refId: string2().trim().min(1).max(64),
+  meta: record(string2(), unknown()).optional().default({})
+});
 var collabTaskStatuses = ["open", "done"];
 var collabBoostKinds = ["tasks", "members"];
 var COLLAB_RECORD_BODY_MAX = 20000;
@@ -6410,7 +6816,7 @@ var collabRecordListQuery = object({
 });
 var agentPermissionModes = ["confirm", "auto_edit", "yolo"];
 var agentSessionKinds = ["chat", "task"];
-var agentMemoryTypes = ["preference", "contact", "project"];
+var agentMemoryTypes = ["preference", "contact", "project", "daily"];
 var AGENT_TITLE_MAX = 120;
 var AGENT_MEMORY_MAX = 2000;
 var AGENT_PERSONA_MAX = 2000;
@@ -6426,10 +6832,17 @@ var agentToolsConfigSchema = object({
     contacts: boolean2().optional()
   }).optional()
 });
+var agentDelegationModules = ["mail", "storage", "collab", "workspace", "web"];
+var agentDelegationRefSchema = object({
+  module: _enum(agentDelegationModules),
+  id: string2().min(1).max(200),
+  title: string2().max(300).optional()
+});
 var agentConfigUpdateInput = object({
   activeModelId: string2().trim().min(1).max(64).optional(),
   persona: string2().max(AGENT_PERSONA_MAX).optional(),
   mode: _enum(agentPermissionModes).optional(),
+  planEnabled: boolean2().optional(),
   tools: agentToolsConfigSchema.optional()
 });
 var AGENT_PROVIDER_LABEL_MAX = 60;
@@ -6446,6 +6859,11 @@ var agentProviderModelInput = object({
   inputImage: boolean2().optional(),
   inputVideo: boolean2().optional()
 });
+var agentSkillCreateInput = object({
+  name: string2().trim().max(64).optional(),
+  description: string2().trim().max(600).optional(),
+  body: string2().min(1).max(1e5)
+});
 var agentSessionCreateInput = object({
   kind: _enum(agentSessionKinds).default("chat"),
   title: string2().trim().max(AGENT_TITLE_MAX).optional(),
@@ -6454,10 +6872,35 @@ var agentSessionCreateInput = object({
 }).refine((v) => v.kind === "chat" || !!v.title && v.title.length > 0, {
   message: "task requires title"
 });
-var agentSessionRenameInput = object({ title: string2().trim().min(1).max(AGENT_TITLE_MAX) });
+var agentSessionRenameInput = object({
+  title: string2().trim().min(1).max(AGENT_TITLE_MAX).optional(),
+  mode: _enum(agentPermissionModes).optional()
+}).refine((v) => v.title !== undefined || v.mode !== undefined, { message: "nothing to update" });
+var agentUsageOverviewSchema = object({
+  monthActions: number2().int().min(0),
+  turns30d: number2().int().min(0),
+  daily: array(object({ day: string2().regex(/^\d{4}-\d{2}-\d{2}$/), count: number2().int().min(0) })).max(120),
+  toolCalls: array(object({ action: string2().min(1), count: number2().int().min(0) })).max(40),
+  approvals: object({
+    approved: number2().int().min(0),
+    rejected: number2().int().min(0),
+    pending: number2().int().min(0),
+    expired: number2().int().min(0)
+  }),
+  taskRuns: object({ total: number2().int().min(0), failed: number2().int().min(0) })
+});
 var agentSessionListQuery = object({
   kind: _enum(agentSessionKinds).optional(),
-  limit: exports_coerce.number().int().min(1).max(200).optional()
+  limit: exports_coerce.number().int().min(1).max(200).optional(),
+  archived: preprocess((v) => v === "1" || v === "true", boolean2()).optional(),
+  q: string2().trim().min(1).max(100).optional()
+});
+var agentTaskCreateInput = object({
+  title: string2().trim().min(1).max(AGENT_TITLE_MAX),
+  repeatCron: string2().trim().max(100).optional(),
+  notifyMail: boolean2().optional(),
+  mode: _enum(["task", "branch"]).optional(),
+  seedMessageIds: array(string2().min(1).max(80)).max(20).optional()
 });
 var agentMemoryCreateInput = object({
   type: _enum(agentMemoryTypes),
@@ -6815,6 +7258,9 @@ function exitCodeForApiError(body) {
     case "collab_space_not_bound":
     case "collab_space_mismatch":
       return EXIT_SCOPE;
+    case "hr_org_not_bound":
+    case "hr_org_mismatch":
+      return EXIT_SCOPE;
     default:
       return 1;
   }
@@ -6894,6 +7340,22 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
   contacts invite [--reset] [--json] 我的邀请码、链接与统计（--reset 重置，旧链接失效）
   contacts invitees [--offset N] [--json]
                                      我邀请的人（直接下级 + 间接计数）
+  addresses list [--json]             收货地址簿（默认地址在前，上限 20 条）
+  addresses add --name 收件人 --phone 电话 --detail 详址 [--region 省/市/区] [--default] [--json]
+                                      添加地址（--default 同时清掉旧默认）
+  addresses update <id|名称> [--name] [--phone] [--region] [--detail] [--default|--no-default] [--json]
+                                      更新地址（只改给出的字段）
+  addresses set-default <id|名称>     设为默认地址（服务端保证默认唯一，旧默认自动让位）
+  addresses rm <id|名称>              删除地址（应用侧已落库的快照不受影响）
+  favorites list [--kind shop.product] [--offset N] [--json]
+                                      收藏列表（kind 点分式「模块.资源」，v1 仅 shop.product）
+  favorites add <refId> [--kind shop.product] [--meta productName=名称,storeId=店铺id] [--json]
+                                      收藏（幂等，重复执行返回现有条目；meta 是收藏时快照，
+                                      shop.product 建议 productName + storeId 供展示兜底）
+  favorites check <refId> [--kind shop.product] [--json]
+                                      查询单条是否已收藏
+  favorites rm <refId> [--kind shop.product]
+                                      取消收藏（幂等，不存在也成功）
   storage ls [--q 关键字] [--source files|media|mail|collab|agent] [--category <id|none>]
                [--type doc|image|video|archive|code] [--tag a,b] [--trash]
                [--shared] [--recent] [--encrypted only|plain] [--message-id <id>]
@@ -6955,6 +7417,116 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
   collab activity [--json]           协作域活动事件（Agent 推送/读取、任务创建、摘要更新）
   post <taskId> (--body "..." | --body-file <path>) [--attach <fileId,...>] [--link <url,...>] [--json]
                                      推送任务记录（糖命令：等价 collab task records 的写入）
+  hr orgs [--json]                   我的组织列表（hr 命令需令牌绑定组织：login --scopes hr --org org:<名称>）
+  hr org apply <名称> [--note 说明] [--json]
+                                     申请创建公司（审核-计费制：通过时扣 1 积分自动建司）
+  hr org application [--json]        查我的建司申请进度（pending / approved / rejected）
+  hr org rename <新名称> [--org <arg>] [--json]
+                                     组织改名（org.manage）
+  hr members [--org <arg>] [--json]  成员列表（角色与权限 flags）
+  hr member add <用户名> [--title 头衔] [--permissions org.manage=1,...] [--org <arg>]
+                                     邀请平台账号入组织（默认只读，--permissions 定生效权限）
+  hr member set <memberId> [--role admin|member] [--permissions org.manage=1,...] [--title]
+                                     角色与权限逐项配置（owner 恒全权不可改）
+  hr member rm <memberId>            移除成员
+  hr invite [--permissions org.manage=1,...] [--reset] [--org <arg>]
+                                     常驻邀请链接（/join 加入页；--permissions 改加入后默认权限，
+                                     未指定项视为关；--reset 作废旧链，配置保留）
+  hr people [--q 关键字] [--status active|probation|resigned] [--dept] [--limit N] [--offset N] [--json]
+                                     花名册（身份证/薪资对令牌永不外泄，输出如实按无权限转述）
+  hr stats [--org <arg>] [--json]    花名册统计带（在职/试用/离职 + 合同与试用期风险计数）
+  hr person <id> [--json]            人员详情
+  hr person create --name "姓名" --hired-at YYYY-MM-DD [--dept] [--role] [--probation-end] [--contract-type] [--contract-end] [--mobile] [--email] [--notes] [--json]
+                                     建档（自动落入职事件）
+  hr person edit <id> [--dept] [--role] [--status ...] [--contract-end YYYY-MM-DD] [--offboarded-at YYYY-MM-DD] [--json]
+                                     编辑（转正/离职状态流转自动落痕）
+  hr person offboard <id> [--date YYYY-MM-DD] [--json]
+                                     办理离职（档案封存，记录依法保留）
+  hr person rm <id>                  删除人员（仅零记录档案可删；有事件时间线一律 409）
+  hr event add <personId> --type <onboard|contract|change|attendance|payroll|award|asset|offboard|note> --note "..." [--at YYYY-MM-DD] [--json]
+                                     事件落痕（时间线即证据链）
+  hr events [--person <id>] [--type] [--limit N] [--offset N] [--json]
+                                     事件时间线
+  hr import <文件.csv|.tsv|.json> [--org <arg>] [--json]
+                                     批量建档（≤200 行；CSV/TSV 表头自动识别，姓名/入职列必填）
+  hr dicts [--org <arg>] [--json]    字典全量（部门 / 岗位）
+  hr dict add <dept|position> <名称> [--org <arg>] [--json]
+                                     新增字典项（在用项禁删，服务端 409）
+  hr dict rm <entryId> [--org <arg>] 删除字典项
+  hr tasks [--status alert|confirm|queued|done] [--kind] [--limit N] [--offset N] [--json]
+                                     任务列表
+  hr task create --kind <attendance|payroll|contract|...> --title "..." [--node] [--detail] [--due YYYY-MM-DD] [--json]
+                                     新建任务
+  hr task update <id> [--status ...] [--node] [--detail] [--due YYYY-MM-DD] [--json]
+                                     任务流转
+  hr task link <taskId> [--reset] [--org <arg>] [--json]
+                                     申请单免登录填单链接（入职/转正/离职单发候选人；--reset 作废旧链）
+  hr apply-link [--reset] [--org <arg>] [--json]
+                                     组织常驻入职收集链接（候选人提交即自动生成入职申请单）
+  hr announce list [--all] [--limit N] [--offset N] [--org <arg>] [--json]
+                                     公告列表（默认只看生效；--all 含已撤回）
+  hr announce post <标题> --body "..." [--org <arg>] [--json]
+                                     发布公告（org.manage；对象 = 组织全体成员）
+  hr announce withdraw <公告id> [--org <arg>] [--json]
+                                     撤回公告（发布者本人或 org.manage；留档不删）
+  hr inbox [--seen] [--org <arg>] [--json]
+                                     收件箱聚合（未读公告 + 待拍板任务 + 提醒；--seen 标记已读）
+  hr desk [--org <arg>] [--json]     工作台聚合（Agent 首入口：统计 + 提醒 + 任务三段 + 公告 + 动态，一次取全）
+  shop status [--json]               店铺列表 + 开通申请进度（多店全列，★ = 当前店）
+  shop use <slug>                    切换当前管理的店铺（持久保存；店级命令缺省作用于它，
+                                     --store 可单条临时覆盖；不带参数显示当前店）
+  shop apply <店铺名> [--tagline 一句话介绍] [--json]
+                                     提交开店申请（成为卖家/增开统一入口；平台审核通过自动建店，
+                                     增开通过时扣积分）
+  shop roles --store <slug> [--json] 店铺角色预设（权限组合模板 + 匹配成员数）
+  shop members --store <slug> [--json]
+                                     成员列表（身份/权限组合/业务身份/归属客户/状态）
+  shop member edit <用户名> --perms <a,b,c> [--biz sales,support] --store <slug> [--json]
+                                     编辑成员权限组合与业务身份（--perms 七项逗号分隔，
+                                     --biz 省略则不改；身份=归因资格，可多选）
+  shop invite [--reset --perms <a,b> --biz <sales,support>] --store <slug> [--json]
+                                     查看 / 重置常驻邀请链接（重置后旧链接作废，
+                                     受邀者权限取新默认组合；接受走链接页）
+  shop categories [--store <slug>] [--json]
+                                     分类树（多级缩进 + 商品数 + id）
+  shop category add <名称> [--parent <id或名称>] --store <slug> [--json]
+                                     新建分类（缺省顶级；新建落同级末尾）
+  shop category rename <id或名称> <新名称> --store <slug> [--json]
+  shop category move <id或名称> <up|down> --store <slug> [--json]
+                                     同级内上移/下移一位（边界静默不动）
+  shop category delete <id或名称> --store <slug> [--json]
+                                     删除分类（有子级拒绝；叶子删除后商品迁入未分类）
+  shop products [--status draft|active|archived] [--category <id|名称>] [--q 文本]
+                [--limit N --offset N] [--json]
+                                     商品列表（多规格行库存 = 变体合计；q 按名称/描述匹配）
+  shop product <id|SKU码> [--json]   商品详情（先 id 直查，404 再按店内 SKU 码反查）
+  shop product create --kind physical|digital --name 名称 [--variant-mode single|multi]
+        [--spec-axis "颜色=红,蓝"]… [--price-cents N] [--compare-at-cents N]
+        [--category <id|名称>] [--description …] [--code <SKU码>] [--stock N]
+        [--refundable on|off] [--max-per-order N] [--max-per-buyer N]
+        [--delivery file|license --delivery-file <对象id>] [--status draft|active] [--json]
+                                     新建商品（类型与规格模式创建即锁定；多规格组合价
+                                     后续 product spec 配置；金额一律整数分）
+  shop product update <id|SKU码> [--name …] [--description …] [--category <id|名称|none>]
+        [--price-cents N] [--compare-at-cents N|clear] [--status draft|active|archived]
+        [--refundable on|off] [--max-per-order N|clear] [--max-per-buyer N|clear]
+        [--code <SKU码>] [--json]
+                                     更新商品（类型与规格模式不可变；改组合价用 product
+                                     spec，改库存用 stock / listed）
+  shop product spec <id|SKU码> --set "<值1,值2>=价格分[,划线价分][,on|off]" … [--json]
+                                     多规格组合整组配置（值按轴顺序；未提及组合保持
+                                     原值；不改库存；被台账引用的组合只能关不能删）
+  shop product archive <id|SKU码> [--json]
+                                     下架归档（软删；订单快照不受影响）
+  shop stock in|out|set <id|SKU码> --amount N [--variant <组合码|变体id|"值1/值2">]
+        [--reason purchase] --note "说明" [--json]
+                                     库存动账（实物动仓库账；数字限量同命令走上架账；
+                                     in/out ≥1；set 或未给 --reason 必须带 --note；
+                                     退货入库/发货出库由售后与发货端点自动落账）
+  shop listed <id|SKU码> --stock N [--variant <组合码|变体id|"值1/值2">] [--json]
+                                     实物销售库存（上架额度）直设，0 ≤ N ≤ 实际库存
+  shop movements [--product <id|SKU码>] [--limit N --offset N] [--json]
+                                     出入库台账（新→旧；--product 按商品过滤）
   credits [--json]                   积分余额（月送/充值/合计；需 credits.read scope）
   credits history [--limit N] [--offset N] [--json]
                                      积分流水（变动 ±：消耗为负；需 credits.read）
@@ -6998,10 +7570,21 @@ async function login() {
     console.error("示例：crab login --scopes collab --space default");
     return EXIT_USAGE;
   }
+  const orgArg = readFlag("--org");
+  if (requested.some((s) => s === "hr.read" || s === "hr.write") && !orgArg) {
+    console.error("含人事行政 scope（hr）时必须指定 --org <org:<名称>|组织id>>——令牌将绑定该组织，越界访问一律拒绝。");
+    console.error("示例：crab login --scopes hr --org org:远帆文化");
+    return EXIT_USAGE;
+  }
   const openBrowser = !hasFlag("--no-open");
   const start = await api2(apiBase, "/v1/auth/device/start", {
     method: "POST",
-    body: JSON.stringify({ name: `${hostname()} · crab cli`, scopes: requested, ...spaceArg ? { space: spaceArg } : {} })
+    body: JSON.stringify({
+      name: `${hostname()} · crab cli`,
+      scopes: requested,
+      ...spaceArg ? { space: spaceArg } : {},
+      ...orgArg ? { org: orgArg } : {}
+    })
   });
   if (start.status !== 200) {
     console.error(`发起授权失败（${start.status}）：`, errorMessage(start.body, JSON.stringify(start.body)));
@@ -7045,6 +7628,8 @@ async function login() {
       console.log(`  scopes: ${poll.body.data.scopes.join(", ")}`);
       if (spaceArg)
         console.log(`  协作空间绑定: ${spaceArg}（collab 命令只能作用于该空间）`);
+      if (orgArg)
+        console.log(`  HR 组织绑定: ${orgArg}（hr 命令只能作用于该组织）`);
       return 0;
     }
   }
@@ -7187,11 +7772,13 @@ async function tokensList() {
     return 0;
   }
   if (rows.length === 0) {
-    console.log("还没有已授权的 Agent 令牌。");
+    console.log("还没有已授权的令牌。");
     return 0;
   }
   for (const token of rows) {
-    console.log(`${token.id}  ${token.name}  [${token.scopes.join(", ")}]  ${token.revoked ? "已撤销" : "生效中"}${token.collabSpace ? `  ⟨空间 ${token.collabSpace}⟩` : ""}`);
+    const isApiKey = token.kind === "api";
+    const hint = isApiKey && token.keyHint ? ` ⟨${token.keyHint}⟩` : "";
+    console.log(`${token.id}  ${isApiKey ? "[API Key] " : ""}${token.name}${hint}  [${token.scopes.join(", ")}]  ${token.revoked ? "已撤销" : "生效中"}${token.collabSpace ? `  ⟨空间 ${token.collabSpace}⟩` : ""}`);
     console.log(`    创建 ${formatTime(token.createdAt)} · 最近使用 ${token.lastUsedAt ? formatTime(token.lastUsedAt) : "—"}${token.expiresAt ? ` · 过期 ${formatTime(token.expiresAt)}` : ""}`);
   }
   return 0;
@@ -7690,6 +8277,322 @@ async function contactsInvitees() {
     console.log(`（还有更多：contacts invitees --offset ${page.nextOffset}）`);
   return 0;
 }
+function resolveAddressArg(list, arg) {
+  const byId = list.find((item) => item.id === arg);
+  if (byId)
+    return { ok: true, id: byId.id };
+  const byName = list.filter((item) => item.name === arg);
+  if (byName.length === 1)
+    return { ok: true, id: byName[0].id };
+  if (byName.length > 1) {
+    return {
+      ok: false,
+      failure: "ambiguous",
+      error: `有 ${byName.length} 条同名地址，请改用 id：
+` + byName.map((item) => `  ${item.id}  ${item.name}  ${item.phone}  ${item.detail}`).join(`
+`)
+    };
+  }
+  return { ok: false, failure: "missing", error: "地址不存在或已删除（crab addresses list 查看现有条目）。" };
+}
+async function requireAddressList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/addresses", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取地址簿失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  return { credentials, list: res.body.data };
+}
+function addressLine(address) {
+  const region = address.region ? `${address.region} · ` : "";
+  return `${address.id}  ${address.name}  ${address.phone}  ${region}${address.detail}${address.isDefault ? "  [默认]" : ""}`;
+}
+async function addressesList() {
+  const loaded = await requireAddressList();
+  if (typeof loaded === "number")
+    return loaded;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(loaded.list, null, 2));
+    return 0;
+  }
+  if (loaded.list.length === 0) {
+    console.log("地址簿还是空的。");
+    return 0;
+  }
+  for (const address of loaded.list)
+    console.log(addressLine(address));
+  console.log(`共 ${loaded.list.length} 条`);
+  return 0;
+}
+function addressFieldFlags() {
+  const body = {};
+  let hasAny = false;
+  for (const [flag, key] of [
+    ["--name", "name"],
+    ["--phone", "phone"],
+    ["--region", "region"],
+    ["--detail", "detail"]
+  ]) {
+    const value = readFlag(flag);
+    if (value !== undefined) {
+      body[key] = value;
+      hasAny = true;
+    }
+  }
+  if (hasFlag("--default")) {
+    body.isDefault = true;
+    hasAny = true;
+  } else if (hasFlag("--no-default")) {
+    body.isDefault = false;
+    hasAny = true;
+  }
+  return { body, hasAny };
+}
+async function addressesAdd() {
+  const name = readFlag("--name");
+  const phone = readFlag("--phone");
+  const detail = readFlag("--detail");
+  if (!name || !phone || !detail) {
+    console.error("用法：crab addresses add --name 收件人 --phone 电话 --detail 详址 [--region 省/市/区] [--default] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const { body } = addressFieldFlags();
+  const res = await api2(credentials.apiBase, "/v1/addresses", {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ name, phone, detail, region: readFlag("--region") ?? "", ...body })
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    console.error(errorMessage(res.body, "添加失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const address = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(address, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已添加：${address.name}（id ${address.id}）${address.isDefault ? "，已设为默认" : ""}`);
+  return 0;
+}
+async function addressesUpdate(idOrName) {
+  if (!idOrName) {
+    console.error("用法：crab addresses update <id|名称> [--name 名] [--phone 电话] [--region 省/市/区] [--detail 详址] [--default|--no-default] [--json]");
+    return EXIT_USAGE;
+  }
+  const { body, hasAny } = addressFieldFlags();
+  if (!hasAny) {
+    console.error("没有给出要更新的字段（--name/--phone/--region/--detail/--default）。");
+    return EXIT_USAGE;
+  }
+  const loaded = await requireAddressList();
+  if (typeof loaded === "number")
+    return loaded;
+  const resolved = resolveAddressArg(loaded.list, idOrName);
+  if (!resolved.ok) {
+    console.error(resolved.error);
+    return resolved.failure === "ambiguous" ? EXIT_USAGE : EXIT_NOT_FOUND;
+  }
+  const res = await api2(loaded.credentials.apiBase, `/v1/addresses/${encodeURIComponent(resolved.id)}`, {
+    method: "PATCH",
+    headers: authHeaders(loaded.credentials),
+    body: JSON.stringify(body)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "更新失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const address = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(address, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已更新：${addressLine(address)}`);
+  return 0;
+}
+async function addressesSetDefault(idOrName) {
+  if (!idOrName) {
+    console.error("用法：crab addresses set-default <id|名称>");
+    return EXIT_USAGE;
+  }
+  const loaded = await requireAddressList();
+  if (typeof loaded === "number")
+    return loaded;
+  const resolved = resolveAddressArg(loaded.list, idOrName);
+  if (!resolved.ok) {
+    console.error(resolved.error);
+    return resolved.failure === "ambiguous" ? EXIT_USAGE : EXIT_NOT_FOUND;
+  }
+  const res = await api2(loaded.credentials.apiBase, `/v1/addresses/${encodeURIComponent(resolved.id)}`, {
+    method: "PATCH",
+    headers: authHeaders(loaded.credentials),
+    body: JSON.stringify({ isDefault: true })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "设置默认地址失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const address = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(address, null, 2));
+    return 0;
+  }
+  console.log(`✓ 默认地址已切换：${address.name}（${address.region ? `${address.region} · ` : ""}${address.detail}）`);
+  return 0;
+}
+async function addressesRm(idOrName) {
+  if (!idOrName) {
+    console.error("用法：crab addresses rm <id|名称>");
+    return EXIT_USAGE;
+  }
+  const loaded = await requireAddressList();
+  if (typeof loaded === "number")
+    return loaded;
+  const resolved = resolveAddressArg(loaded.list, idOrName);
+  if (!resolved.ok) {
+    console.error(resolved.error);
+    return resolved.failure === "ambiguous" ? EXIT_USAGE : EXIT_NOT_FOUND;
+  }
+  const res = await api2(loaded.credentials.apiBase, `/v1/addresses/${encodeURIComponent(resolved.id)}`, {
+    method: "DELETE",
+    headers: authHeaders(loaded.credentials)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "删除失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  console.log(`✓ 已删除（${resolved.id}）；已下单订单不受影响（结账用的是下单时的地址快照）。`);
+  return 0;
+}
+var FAVORITE_KINDS_CLI = ["shop.product"];
+function favoriteKindFlag() {
+  return readFlag("--kind") ?? FAVORITE_KINDS_CLI[0];
+}
+function parseMetaFlag() {
+  const raw = readFlag("--meta");
+  if (raw === undefined)
+    return {};
+  const meta = {};
+  for (const pair of raw.split(",")) {
+    const eq = pair.indexOf("=");
+    if (eq <= 0)
+      return null;
+    meta[pair.slice(0, eq).trim()] = pair.slice(eq + 1).trim();
+  }
+  return meta;
+}
+function favoriteLine(favorite) {
+  const productName = typeof favorite.meta.productName === "string" ? favorite.meta.productName : "";
+  const storeId = typeof favorite.meta.storeId === "string" ? `  店 ${favorite.meta.storeId}` : "";
+  const name = productName ? `${productName}（${favorite.refId}）` : favorite.refId;
+  return `${favorite.id}  ${name}${storeId}  ${favorite.kind}  ${new Date(favorite.createdAt).toLocaleDateString("zh-CN")}`;
+}
+async function favoritesList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = favoriteKindFlag();
+  const params = new URLSearchParams({ kind });
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  params.set("limit", readFlag("--limit") ?? "30");
+  const res = await api2(credentials.apiBase, `/v1/favorites?${params}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取收藏失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const page = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(page, null, 2));
+    return 0;
+  }
+  if (page.items.length === 0) {
+    console.log(`还没有 ${kind} 收藏。`);
+    return 0;
+  }
+  for (const favorite of page.items)
+    console.log(favoriteLine(favorite));
+  console.log(`共 ${page.total} 条`);
+  if (page.nextOffset !== null)
+    console.log(`（还有更多：favorites list --offset ${page.nextOffset}）`);
+  return 0;
+}
+async function favoritesAdd(refId) {
+  if (!refId) {
+    console.error("用法：crab favorites add <refId> [--kind shop.product] [--meta productName=名称,storeId=店铺id] [--json]");
+    return EXIT_USAGE;
+  }
+  const meta = parseMetaFlag();
+  if (meta === null) {
+    console.error("--meta 格式不正确：应为 k=v,k=v（逗号分隔、每个键值对首个 = 分隔）。");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = favoriteKindFlag();
+  const res = await api2(credentials.apiBase, "/v1/favorites", {
+    method: "PUT",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ kind, refId, meta })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "收藏失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const favorite = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(favorite, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已收藏：${favoriteLine(favorite)}`);
+  return 0;
+}
+async function favoritesCheck(refId) {
+  if (!refId) {
+    console.error("用法：crab favorites check <refId> [--kind shop.product] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = favoriteKindFlag();
+  const res = await api2(credentials.apiBase, `/v1/favorites/${encodeURIComponent(kind)}/${encodeURIComponent(refId)}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "查询收藏状态失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const { favorited } = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ favorited }, null, 2));
+    return 0;
+  }
+  console.log(favorited ? `✓ 已收藏（${kind} · ${refId}）` : `未收藏（${kind} · ${refId}）`);
+  return 0;
+}
+async function favoritesRm(refId) {
+  if (!refId) {
+    console.error("用法：crab favorites rm <refId> [--kind shop.product]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = favoriteKindFlag();
+  const res = await api2(credentials.apiBase, `/v1/favorites/${encodeURIComponent(kind)}/${encodeURIComponent(refId)}`, { method: "DELETE", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "取消收藏失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  console.log(`✓ 已取消收藏（${kind} · ${refId}）`);
+  return 0;
+}
 var STORAGE_SOURCES = ["files", "media", "mail", "collab", "agent"];
 var STORAGE_TYPES = ["doc", "image", "video", "archive", "code"];
 var MIME_BY_EXT = {
@@ -9166,75 +10069,2938 @@ async function logout() {
   console.log("✓ 已撤销 Agent Token 并清除本地凭证。");
   return 0;
 }
-switch (command) {
-  case "init":
-    process.exit(await init());
-  case "login":
-    process.exit(await login());
-  case "whoami":
-    process.exit(await whoami());
-  case "tokens": {
-    const sub = args[1];
-    if (sub === "list")
-      process.exit(await tokensList());
-    if (sub === "revoke")
-      process.exit(await tokensRevoke(args[2]));
-    console.error(sub ? `未知子命令：tokens ${sub}
-` : `缺少子命令：tokens list | tokens revoke <id>
-`);
-    console.log(usage);
-    process.exit(EXIT_USAGE);
+var HR_VALUED_FLAGS = [
+  "--org",
+  "--title",
+  "--role",
+  "--permissions",
+  "--name",
+  "--hired-at",
+  "--employee-no",
+  "--dept",
+  "--role",
+  "--status",
+  "--probation-end",
+  "--contract-type",
+  "--contract-end",
+  "--mobile",
+  "--email",
+  "--notes",
+  "--type",
+  "--note",
+  "--at",
+  "--date",
+  "--kind",
+  "--title",
+  "--node",
+  "--detail",
+  "--due",
+  "--limit",
+  "--offset",
+  "--q",
+  "--body",
+  "--meta"
+];
+var HR_PERSON_STATUSES = ["active", "probation", "resigned"];
+var HR_TASK_STATUSES = ["alert", "confirm", "queued", "done"];
+var HR_EVENT_TYPES = ["onboard", "contract", "change", "attendance", "payroll", "award", "asset", "offboard", "note"];
+var HR_PERMISSION_FLAGS = ["org.manage", "people.write", "tasks.write", "sensitive.read"];
+var HR_DICT_TYPES = ["dept", "position"];
+function hrOrgToken(org) {
+  return `org:${org.name}`;
+}
+function hrWebBase(apiBase) {
+  if (/127\.0\.0\.1:14321|localhost:14321/.test(apiBase))
+    return "http://127.0.0.1:14342";
+  try {
+    return `https://hr.${new URL(apiBase).host.replace(/^api\./, "")}`;
+  } catch {
+    return apiBase;
   }
-  case "skills": {
-    const sub = args[1];
-    if (sub === "install")
-      process.exit(installSkills(args.slice(2)));
-    if (sub === "list")
-      process.exit(listSkills());
-    if (sub === "uninstall")
-      process.exit(uninstallSkills(args.slice(2)));
-    console.error(`用法：crab skills install | list | uninstall [--agent claude,zcode,codex,agents]
-`);
-    process.exit(EXIT_USAGE);
+}
+function parseHrPermissions(raw) {
+  if (raw === undefined)
+    return;
+  const out = { "org.manage": false, "people.write": false, "tasks.write": false, "sensitive.read": false };
+  for (const pair of raw.split(",").map((x) => x.trim()).filter(Boolean)) {
+    const [key, value] = pair.split("=");
+    if (!key || !HR_PERMISSION_FLAGS.includes(key.trim())) {
+      console.error(`未知权限项：${pair}
+可用：${HR_PERMISSION_FLAGS.join(", ")}`);
+      return null;
+    }
+    out[key.trim()] = value !== "0" && value?.toLowerCase() !== "false";
   }
-  case "mail": {
-    const sub = args[1];
-    if (sub === "list")
-      process.exit(await mailList());
-    if (sub === "read")
-      process.exit(await mailRead(args[2]));
-    if (sub === "unread")
-      process.exit(await mailUnread(args[2]));
-    if (sub === "search")
-      process.exit(await mailSearch(args.slice(2).join(" ") || undefined));
-    if (sub === "send")
-      process.exit(await mailSend());
-    if (sub === "archive" || sub === "trash" || sub === "delete")
-      process.exit(await mailMove(sub, args[2]));
-    if (sub === "folders")
-      process.exit(await mailFoldersOverview());
-    if (sub === "activity")
-      process.exit(await mailActivity());
-    console.error(sub ? `未知子命令：mail ${sub}
-` : `缺少子命令：mail list | read | unread | search | send | archive | trash | delete | folders | activity
-`);
-    console.log(usage);
-    process.exit(EXIT_USAGE);
+  return out;
+}
+async function resolveHrOrg(credentials, arg) {
+  const res = await api2(credentials.apiBase, "/v1/hr/orgs", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取组织列表失败。"));
+    const code = res.body?.error?.code;
+    if (code === "scope_denied") {
+      console.error("提示：hr 命令需要 hr scope——运行 crab login --scopes hr --org org:<名称> 重新授权。");
+    }
+    return exitCodeForApiError(res.body);
   }
-  case "contacts": {
-    const sub = args[1];
-    if (sub === "list")
-      process.exit(await contactsList(args.slice(2).join(" ") || undefined));
-    if (sub === "add")
-      process.exit(await contactsAdd(args[2]));
-    if (sub === "rm")
-      process.exit(await contactsRm(args[2]));
+  const orgs = res.body.data.orgs;
+  if (orgs.length === 0) {
+    console.error("你还没有加入任何公司 / 组织（在 hr-web 申请创建，或 crab hr org apply <名称> 提交申请）。");
+    return EXIT_NOT_FOUND;
+  }
+  const raw = (arg ?? "").trim();
+  if (!raw) {
+    if (orgs.length === 1)
+      return orgs[0];
+    console.error("你所在的组织不止一个，请用 --org 指定（org:<名称> / 组织 id）：");
+    for (const org of orgs)
+      console.error(`  ${hrOrgToken(org)}  （成员 ${org.memberCount} · ${org.myRole}）`);
+    return EXIT_USAGE;
+  }
+  if (raw.startsWith("org:")) {
+    const name = raw.slice("org:".length).trim();
+    if (!name) {
+      console.error("org: 后面要跟组织名称（crab hr orgs 查看）。");
+      return EXIT_USAGE;
+    }
+    const hit = orgs.filter((o) => o.name === name && o.status === "active");
+    if (hit.length === 1)
+      return hit[0];
+    console.error(hit.length === 0 ? `没有名为「${name}」的 active 组织。` : `「${name}」命中多个组织，请用组织 id 指定。`);
+    return EXIT_NOT_FOUND;
+  }
+  const byId = orgs.find((o) => o.id === raw);
+  if (byId)
+    return byId;
+  const byName = orgs.filter((o) => o.name === raw);
+  if (byName.length === 1)
+    return byName[0];
+  console.error(`组织标识无效：${raw}
+应为 org:<名称> 或组织 id（crab hr orgs 查看）。`);
+  return EXIT_USAGE;
+}
+function parseHrDate(text) {
+  if (text === undefined || text.trim() === "")
+    return;
+  const [y, m, d] = text.trim().split("-").map(Number);
+  if (!y || !m || !d)
+    return null;
+  const ms = new Date(y, m - 1, d).getTime();
+  return Number.isFinite(ms) ? ms : null;
+}
+async function resolveStoreArg(credentials) {
+  const arg = readFlag("--store") ?? credentials.shopStore;
+  const res = await api2(credentials.apiBase, "/v1/shop/stores", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取店铺列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const stores = res.body.data.stores;
+  const wanted = arg ? stores.find((x) => x.slug === arg || x.id === arg) : undefined;
+  if (arg && !wanted) {
+    console.error(`找不到店铺 ${arg}（crab shop status 查看可用的 slug；crab shop use <slug> 切换当前店）`);
+    return EXIT_NOT_FOUND;
+  }
+  if (wanted)
+    return wanted;
+  if (stores.length === 1)
+    return stores[0];
+  console.error("该账号有多家店铺：先 crab shop use <slug> 设置当前店，或单条命令用 --store <slug> 临时指定");
+  return EXIT_USAGE;
+}
+var SHOP_PERMS = ["products", "orders", "aftercare", "customers", "marketing", "finance", "team", "settings"];
+function shopWebBase(apiBase) {
+  if (/127\.0\.0\.1:14321|localhost:14321/.test(apiBase))
+    return "http://127.0.0.1:14341";
+  try {
+    return `https://shop.${new URL(apiBase).host.replace(/^api\./, "")}`;
+  } catch {
+    return apiBase;
+  }
+}
+function parseCsvPermList(raw) {
+  if (!raw)
+    return null;
+  const items = raw.split(",").map((x) => x.trim()).filter(Boolean);
+  const invalid = items.filter((x) => !SHOP_PERMS.includes(x));
+  if (invalid.length > 0) {
+    console.error(`未知权限项：${invalid.join(", ")}
+可用：${SHOP_PERMS.join(", ")}`);
+    return null;
+  }
+  return items;
+}
+async function shopRoles() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/roles`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取角色列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const roles = res.body.data.roles;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(roles, null, 2));
+    return 0;
+  }
+  console.log(`「${store.name}」角色预设（模板套用：改模板不影响已套用成员）：`);
+  for (const r of roles) {
+    console.log(`  ${r.name}${r.builtin ? "（默认）" : ""}  [${r.permissions.join(", ") || "无权限"}]  匹配成员 ${r.memberCount}`);
+  }
+  return 0;
+}
+async function fetchStoreMembers(credentials, storeId) {
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${storeId}/members`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取成员列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  return res.body.data.members;
+}
+async function shopMembers() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const members = await fetchStoreMembers(credentials, store.id);
+  if (typeof members === "number")
+    return members;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(members, null, 2));
+    return 0;
+  }
+  console.log(`「${store.name}」成员：`);
+  for (const m of members) {
+    const biz = m.bizRoles.length > 0 ? m.bizRoles.join("/") : "无业务身份";
+    console.log(`  ${m.displayName || m.username} (@${m.username})  [${m.role === "owner" ? "店主" : m.permissions.join(", ") || "无权限"}]  身份: ${biz}  归属客户: ${m.assignedCustomers}  ${m.status}`);
+  }
+  return 0;
+}
+async function shopMemberEdit() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const positional = args.slice(3).filter((x) => !x.startsWith("--") && args[args.indexOf(x) - 1] !== "--perms" && args[args.indexOf(x) - 1] !== "--biz");
+  const username = positional[0];
+  const permsRaw = readFlag("--perms");
+  const bizRaw = readFlag("--biz");
+  if (!username || !permsRaw) {
+    console.error(`用法：crab shop member edit <用户名> --perms <a,b,c> [--biz sales,support] --store <slug>
+权限项：products, orders, aftercare, customers, marketing, finance, team, settings`);
+    return EXIT_USAGE;
+  }
+  const permissions = parseCsvPermList(permsRaw);
+  if (permissions === null)
+    return EXIT_USAGE;
+  let bizRoles;
+  if (bizRaw !== undefined) {
+    bizRoles = bizRaw.split(",").map((x) => x.trim()).filter(Boolean);
+    const invalid = bizRoles.filter((x) => x !== "sales" && x !== "support");
+    if (invalid.length > 0) {
+      console.error(`未知业务身份：${invalid.join(", ")}（可选 sales / support，可逗号分隔多选）`);
+      return EXIT_USAGE;
+    }
+  }
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const members = await fetchStoreMembers(credentials, store.id);
+  if (typeof members === "number")
+    return members;
+  const member = members.find((m) => m.username === username);
+  if (!member) {
+    console.error(`成员不存在：@${username}（crab shop members 查看）`);
+    return EXIT_NOT_FOUND;
+  }
+  if (member.role === "owner") {
+    console.error("店主由店铺归属决定，权限不可修改。");
+    return 1;
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/members/${member.id}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ permissions, ...bizRoles !== undefined ? { bizRoles } : {} })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "更新成员权限失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const updated = res.body.data.member;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(updated, null, 2));
+    return 0;
+  }
+  console.log(`✓ @${username} 权限已更新：[${permissions.join(", ")}]${bizRoles !== undefined ? ` · 业务身份：${bizRoles.length > 0 ? bizRoles.join("/") : "无"}` : `（业务身份保持：${member.bizRoles.join("/") || "无"}）`}`);
+  return 0;
+}
+async function shopInvite() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const reset = hasFlag("--reset");
+  const permsRaw = readFlag("--perms");
+  const bizRaw = readFlag("--biz");
+  let body = {};
+  if (reset) {
+    const permissions = permsRaw ? parseCsvPermList(permsRaw) : null;
+    if (permsRaw && permissions === null)
+      return EXIT_USAGE;
+    body = { permissions: permissions ?? ["orders", "customers"], bizRoles: bizRaw ? bizRaw.split(",").map((x) => x.trim()).filter(Boolean) : [] };
+  }
+  const path = reset ? `/v1/shop/stores/${store.id}/invite/reset` : `/v1/shop/stores/${store.id}/invite`;
+  const res = await api2(credentials.apiBase, path, {
+    method: reset ? "POST" : "GET",
+    headers: authHeaders(credentials),
+    ...reset ? { body: JSON.stringify(body) } : {}
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取邀请链接失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const invite = res.body.data.invite;
+  const url = `${shopWebBase(credentials.apiBase)}/join/${store.slug}?t=${invite.token}`;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...invite, joinUrl: url }, null, 2));
+    return 0;
+  }
+  console.log(`${reset ? "已重置，新邀请链接（旧链接作废）：" : "常驻邀请链接："}`);
+  console.log(`  ${url}`);
+  console.log(`  受邀默认权限：[${invite.permissions.join(", ")}] · 业务身份：${invite.bizRoles.length > 0 ? invite.bizRoles.join("/") : "无"}`);
+  console.log("  对方打开链接登录后一键加入；--reset --perms <a,b> --biz <sales,support> 可重置并改默认组合。");
+  return 0;
+}
+async function shopUse(slug) {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  if (!slug) {
+    if (credentials.shopStore)
+      console.log(`当前店铺：${credentials.shopStore}（crab shop use <slug> 切换）`);
+    else
+      console.log("未设置当前店。crab shop use <slug> 设置（多店账号店级命令需要）。");
+    return 0;
+  }
+  const res = await api2(credentials.apiBase, "/v1/shop/stores", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取店铺列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const stores = res.body.data.stores;
+  const hit = stores.find((x) => x.slug === slug || x.id === slug);
+  if (!hit) {
+    console.error(`找不到店铺 ${slug}（crab shop status 查看）`);
+    return EXIT_NOT_FOUND;
+  }
+  saveCredentials({ ...credentials, shopStore: hit.slug });
+  console.log(`✓ 当前店铺切换为「${hit.name}」（${hit.slug}）——店级命令缺省作用于它，--store 可临时覆盖`);
+  return 0;
+}
+async function shopStatus() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const json = hasFlag("--json");
+  const [storesRes, appRes] = await Promise.all([
+    api2(credentials.apiBase, "/v1/shop/stores", { headers: authHeaders(credentials) }),
+    api2(credentials.apiBase, "/v1/shop/applications/mine", { headers: authHeaders(credentials) })
+  ]);
+  if (storesRes.status !== 200) {
+    console.error(errorMessage(storesRes.body, "获取店铺列表失败。"));
+    return exitCodeForApiError(storesRes.body);
+  }
+  const stores = storesRes.body.data.stores;
+  const application = appRes.body.data.application;
+  if (json) {
+    console.log(JSON.stringify({ stores, application }, null, 2));
+    return 0;
+  }
+  const statusText = { pending: "审核中", approved: "已通过", rejected: "已拒绝" };
+  if (application) {
+    const line = `申请 ${application.name}［${application.kind === "seller" ? "卖家开通" : "增开店铺"}］：${statusText[application.status] ?? application.status}`;
+    console.log(application.status === "rejected" ? `${line} — 理由：${application.reviewNote || "未填写"}` : line);
+  }
+  if (stores.length === 0) {
+    console.log(application?.status === "pending" ? "（审核通过后店铺自动出现在这里）" : "还没有店铺。运行 crab shop apply <店铺名> 提交开店申请。");
+    return 0;
+  }
+  console.log(`共 ${stores.length} 家店铺${credentials.shopStore ? "（★ = 当前店）" : ""}：`);
+  for (const store of stores) {
+    const star = credentials.shopStore === store.slug ? "★ " : "  ";
+    console.log(`${star}${store.name}  [${store.myRole}]  ${store.slug}${store.status === "archived" ? "（已下架）" : ""}  id: ${store.id}`);
+  }
+  if (stores.length > 1)
+    console.log("（crab shop use <slug> 切换当前店；单条命令也可 --store <slug>）");
+  return 0;
+}
+async function shopApply(name, tagline) {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/shop/applications", {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ name, ...tagline ? { tagline } : {} })
+  });
+  if (res.status !== 201) {
+    console.error(errorMessage(res.body, "提交开店申请失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const application = res.body.data.application;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(application, null, 2));
+    return 0;
+  }
+  console.log(`✓ 申请已提交（${application.id}）`);
+  console.log(`  类型：${application.kind === "seller" ? "卖家开通（首店）" : "增开店铺"} · 状态：审核中`);
+  console.log("  平台审核通过后店铺自动开通（增开店铺在通过时扣积分）；crab shop status 查看进度。");
+  return 0;
+}
+function shopPositionals(start, valueFlags) {
+  const positional = [];
+  const rest = args.slice(start);
+  for (let i = 0;i < rest.length; i++) {
+    if (valueFlags.includes(rest[i])) {
+      i++;
+      continue;
+    }
+    if (rest[i]?.startsWith("--"))
+      continue;
+    positional.push(rest[i]);
+  }
+  return positional;
+}
+async function fetchStoreCategories(credentials, storeId) {
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${storeId}/categories`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取分类列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  return res.body.data.categories;
+}
+function resolveCategoryRef(list, ref) {
+  const byId = list.find((c) => c.id === ref);
+  if (byId)
+    return byId;
+  const byName = list.filter((c) => c.name === ref);
+  if (byName.length === 1)
+    return byName[0];
+  if (byName.length > 1)
+    return `名称「${ref}」有 ${byName.length} 个同名分类，请用 id 指定（crab shop categories 查看）`;
+  return `分类不存在：${ref}（crab shop categories 查看）`;
+}
+async function shopCategories() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const categories = await fetchStoreCategories(credentials, store.id);
+  if (typeof categories === "number")
+    return categories;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(categories, null, 2));
+    return 0;
+  }
+  if (categories.length === 0) {
+    console.log(`「${store.name}」还没有分类。crab shop category add <名称> 创建。`);
+    return 0;
+  }
+  console.log(`「${store.name}」分类树（名称后 = 商品数）：`);
+  const byParent = new Map;
+  for (const c of categories) {
+    const key = c.parentId ?? "";
+    byParent.set(key, [...byParent.get(key) ?? [], c]);
+  }
+  const print = (parentId, depth) => {
+    for (const c of byParent.get(parentId ?? "") ?? []) {
+      console.log(`${"  ".repeat(depth * 2)}  ${c.name}  (${c.productCount})  ${c.id}`);
+      print(c.id, depth + 1);
+    }
+  };
+  print(null, 0);
+  return 0;
+}
+async function shopCategoryAdd() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const positional = shopPositionals(3, ["--parent"]);
+  const name = positional.join(" ").trim();
+  const parentRef = readFlag("--parent");
+  if (!name) {
+    console.error("用法：crab shop category add <名称> [--parent <分类 id 或名称>] --store <slug>");
+    return EXIT_USAGE;
+  }
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  let parentId;
+  if (parentRef) {
+    const categories = await fetchStoreCategories(credentials, store.id);
+    if (typeof categories === "number")
+      return categories;
+    const parent = resolveCategoryRef(categories, parentRef);
+    if (typeof parent === "string") {
+      console.error(parent);
+      return EXIT_NOT_FOUND;
+    }
+    parentId = parent.id;
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/categories`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ name, ...parentId ? { parentId } : {} })
+  });
+  if (res.status !== 201) {
+    console.error(errorMessage(res.body, "创建分类失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const category = res.body.data.category;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(category, null, 2));
+    return 0;
+  }
+  console.log(`✓ 分类已创建：${category.name}（${category.id}，落同级末尾）`);
+  return 0;
+}
+async function shopCategoryRename() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const positional = shopPositionals(3, []);
+  const ref = positional[0];
+  const name = positional.slice(1).join(" ").trim();
+  if (!ref || !name) {
+    console.error("用法：crab shop category rename <分类 id 或名称> <新名称> --store <slug>");
+    return EXIT_USAGE;
+  }
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const categories = await fetchStoreCategories(credentials, store.id);
+  if (typeof categories === "number")
+    return categories;
+  const target = resolveCategoryRef(categories, ref);
+  if (typeof target === "string") {
+    console.error(target);
+    return EXIT_NOT_FOUND;
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/categories/${target.id}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ name })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "重命名分类失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(res.body.data.category, null, 2));
+  else
+    console.log(`✓ 已重命名：${target.name} → ${name}`);
+  return 0;
+}
+async function shopCategoryMove() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const positional = shopPositionals(3, []);
+  const ref = positional[0];
+  const direction = positional[1];
+  if (!ref || direction !== "up" && direction !== "down") {
+    console.error(`用法：crab shop category move <分类 id 或名称> <up|down> --store <slug>
+（同级内上移/下移一位；已在边界时静默不动）`);
+    return EXIT_USAGE;
+  }
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const categories = await fetchStoreCategories(credentials, store.id);
+  if (typeof categories === "number")
+    return categories;
+  const target = resolveCategoryRef(categories, ref);
+  if (typeof target === "string") {
+    console.error(target);
+    return EXIT_NOT_FOUND;
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/categories/${target.id}/move`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ direction })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "移动分类失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(res.body.data.category, null, 2));
+  else
+    console.log(`✓ 已${direction === "up" ? "上移" : "下移"}：${target.name}`);
+  return 0;
+}
+async function shopCategoryDelete() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const positional = shopPositionals(3, []);
+  const ref = positional[0];
+  if (!ref) {
+    console.error(`用法：crab shop category delete <分类 id> --store <slug>
+（有子分类时会被拒绝；叶子分类删除后旗下商品迁入「未分类」）`);
+    return EXIT_USAGE;
+  }
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const categories = await fetchStoreCategories(credentials, store.id);
+  if (typeof categories === "number")
+    return categories;
+  const target = resolveCategoryRef(categories, ref);
+  if (typeof target === "string") {
+    console.error(target);
+    return EXIT_NOT_FOUND;
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/categories/${target.id}`, {
+    method: "DELETE",
+    headers: authHeaders(credentials)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "删除分类失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ok: true }, null, 2));
+  else
+    console.log(`✓ 已删除分类：${target.name}（旗下商品迁入「未分类」）`);
+  return 0;
+}
+var SHOP_PRODUCT_VALUED_FLAGS = [
+  "--store",
+  "--status",
+  "--category",
+  "--q",
+  "--limit",
+  "--offset",
+  "--product",
+  "--kind",
+  "--variant-mode",
+  "--name",
+  "--price-cents",
+  "--compare-at-cents",
+  "--description",
+  "--code",
+  "--stock",
+  "--refundable",
+  "--max-per-order",
+  "--max-per-buyer",
+  "--delivery",
+  "--delivery-file",
+  "--variant",
+  "--amount",
+  "--reason",
+  "--note",
+  "--set",
+  "--spec-axis"
+];
+function readFlagAll(flag) {
+  const out = [];
+  for (let i = 0;i < args.length; i++) {
+    if (args[i] === flag && i + 1 < args.length)
+      out.push(args[i + 1]);
+  }
+  return out;
+}
+function fmtMoney(cents) {
+  if (cents === null || cents === undefined)
+    return "—";
+  return `$${(cents / 100).toFixed(2)}`;
+}
+function parseCentsFlag(raw, flagName) {
+  if (raw === undefined || raw.trim() === "") {
+    console.error(`缺少 ${flagName}（金额一律整数分，如 1990 = $19.90）`);
+    return null;
+  }
+  const n = Number(raw.trim());
+  if (!Number.isSafeInteger(n) || n < 0 || n > 1e8) {
+    console.error(`${flagName} 必须是非负整数分（禁止元/浮点），如 1990 = $19.90`);
+    return null;
+  }
+  return n;
+}
+function parseIntFlag(raw, flagName, minN) {
+  if (raw === undefined || raw.trim() === "") {
+    console.error(`缺少 ${flagName}`);
+    return null;
+  }
+  const n = Number(raw.trim());
+  if (!Number.isSafeInteger(n) || n < minN) {
+    console.error(`${flagName} 必须是 ≥${minN} 的整数`);
+    return null;
+  }
+  return n;
+}
+function parseOnOffFlag(raw, flagName) {
+  if (raw !== "on" && raw !== "off") {
+    console.error(`${flagName} 只接受 on | off`);
+    return null;
+  }
+  return raw === "on";
+}
+function shopStatusLabel(status) {
+  return status === "active" ? "在售" : status === "draft" ? "草稿" : "已归档";
+}
+function shopKindLabel(kind) {
+  return kind === "physical" ? "实物" : "数字";
+}
+function fmtListedStock(kind, stock) {
+  if (stock === null)
+    return kind === "physical" ? "待补（挂出不可买）" : "不限";
+  return String(stock);
+}
+async function fetchShopProduct(credentials, ref) {
+  const direct = await api2(credentials.apiBase, `/v1/shop/products/${encodeURIComponent(ref)}`, { headers: authHeaders(credentials) });
+  if (direct.status === 200)
+    return direct.body.data.product;
+  if (direct.status !== 404) {
+    console.error(errorMessage(direct.body, "获取商品失败。"));
+    return exitCodeForApiError(direct.body);
+  }
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const lookup = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/products/lookup?code=${encodeURIComponent(ref)}`, { headers: authHeaders(credentials) });
+  if (lookup.status !== 200) {
+    console.error(`找不到商品：${ref}（不是商品 id，也不是店内 SKU 码；crab shop products 查看）`);
+    return EXIT_NOT_FOUND;
+  }
+  const productId = lookup.body.data.productId;
+  const detail = await api2(credentials.apiBase, `/v1/shop/products/${productId}`, { headers: authHeaders(credentials) });
+  if (detail.status !== 200) {
+    console.error(errorMessage(detail.body, "获取商品失败。"));
+    return exitCodeForApiError(detail.body);
+  }
+  return detail.body.data.product;
+}
+async function resolveCategoryFlag(credentials, storeId, ref, allowNone) {
+  if (allowNone && ref === "none")
+    return { id: null };
+  const categories = await fetchStoreCategories(credentials, storeId);
+  if (typeof categories === "number")
+    return categories;
+  const hit = resolveCategoryRef(categories, ref);
+  if (typeof hit === "string") {
+    console.error(hit);
+    return EXIT_NOT_FOUND;
+  }
+  return { id: hit.id };
+}
+function resolveVariantRef(product, ref) {
+  const normalized = ref.replace(/\s*\/\s*/g, "/");
+  return product.variants.find((x) => x.id === ref) ?? product.variants.find((x) => x.code === ref) ?? product.variants.find((x) => x.combo.join("/") === normalized) ?? null;
+}
+function cartesianCombos(axes) {
+  let acc = [[]];
+  for (const axis of axes)
+    acc = acc.flatMap((prefix) => axis.values.map((value) => [...prefix, value]));
+  return acc;
+}
+function variantChoiceList(product) {
+  return product.variants.map((v) => `  ${v.code}  ${v.combo.join(" / ")}（id ${v.id}）`).join(`
+`);
+}
+async function shopProductsList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const status = readFlag("--status");
+  if (status && !["draft", "active", "archived"].includes(status)) {
+    console.error("--status 只接受 draft | active | archived");
+    return EXIT_USAGE;
+  }
+  const params = new URLSearchParams;
+  if (status)
+    params.set("status", status);
+  const categoryRef = readFlag("--category");
+  if (categoryRef) {
+    const cat = await resolveCategoryFlag(credentials, store.id, categoryRef, true);
+    if (typeof cat === "number")
+      return cat;
+    params.set("categoryId", cat.id ?? "none");
+  }
+  const q = readFlag("--q");
+  if (q)
+    params.set("q", q);
+  const limit = readFlag("--limit");
+  if (limit)
+    params.set("limit", limit);
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/products?${params.toString()}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取商品列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const data = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(data, null, 2));
+    return 0;
+  }
+  if (data.products.length === 0) {
+    console.log(`「${store.name}」还没有符合条件的商品。新建：crab shop product create --kind physical --name 名称 --variant-mode single`);
+    return 0;
+  }
+  for (const p of data.products) {
+    const shape = p.hasVariants ? `多规格·${p.variants.length} 组合` : "单规格";
+    let price;
+    if (p.hasVariants && p.variants.length > 0) {
+      const prices = p.variants.map((v) => v.priceCents);
+      const min = Math.min(...prices);
+      const max = Math.max(...prices);
+      price = min === max ? fmtMoney(min) : `${fmtMoney(min)} ~ ${fmtMoney(max)}`;
+    } else {
+      price = fmtMoney(p.priceCents);
+    }
+    const stock = p.hasVariants ? p.variants.some((v) => v.stock === null) ? "上架 不限" : `上架 ${p.variants.reduce((a, v) => a + (v.stock ?? 0), 0)}` : `上架 ${fmtListedStock(p.kind, p.stock)}`;
+    const warehouse = p.kind === "physical" ? ` · 仓库 ${p.hasVariants ? p.variants.every((v) => v.warehouseStock === null) ? "—" : p.variants.reduce((a, v) => a + (v.warehouseStock ?? 0), 0) : p.warehouseStock ?? 0}` : "";
+    console.log(`${p.id}  [${shopStatusLabel(p.status)}] ${p.name}  ${shopKindLabel(p.kind)}·${shape}  ${price}  ${stock}${warehouse}${p.code ? `  ${p.code}` : ""}`);
+  }
+  console.log(`共 ${data.total} 件商品（本页 ${data.products.length} 件；--offset 翻页）`);
+  return 0;
+}
+async function shopProductDetail(ref) {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  if (!ref) {
+    console.error("用法：crab shop product <id|SKU码> [--json]");
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, ref);
+  if (typeof product === "number")
+    return product;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(product, null, 2));
+    return 0;
+  }
+  let categoryName = product.categoryId ?? "未分类";
+  if (product.categoryId) {
+    const categories = await fetchStoreCategories(credentials, product.storeId);
+    if (typeof categories !== "number")
+      categoryName = categories.find((c) => c.id === product.categoryId)?.name ?? product.categoryId;
+  }
+  console.log(`${product.name}  [${shopStatusLabel(product.status)}]`);
+  console.log(`  ${shopKindLabel(product.kind)} · ${product.hasVariants ? "多规格" : "单规格"}  分类：${categoryName}  id：${product.id}`);
+  if (product.code)
+    console.log(`  SKU 码：${product.code}`);
+  const priceParts = [`基础价：${fmtMoney(product.priceCents)}`];
+  if (product.compareAtPriceCents !== null)
+    priceParts.push(`划线价：${fmtMoney(product.compareAtPriceCents)}`);
+  priceParts.push(`退款：${product.refundable ? "开" : "关"}`);
+  if (product.maxPerOrder !== null)
+    priceParts.push(`单笔限购 ${product.maxPerOrder}`);
+  if (product.maxPerBuyer !== null)
+    priceParts.push(`每买家限购 ${product.maxPerBuyer}`);
+  console.log(`  ${priceParts.join("  ")}`);
+  if (product.kind === "digital") {
+    console.log(`  交付：${product.deliveryType === "license" ? "license 密钥" : "文件下载"}${product.deliveryFileId ? `（对象 ${product.deliveryFileId}）` : ""}`);
+  } else if (product.hasVariants) {
+    const listedStr = product.variants.some((v) => v.stock === null) ? "不限" : `合计 ${product.variants.reduce((a, v) => a + (v.stock ?? 0), 0)}`;
+    const whStr = product.variants.every((v) => v.warehouseStock === null) ? "—" : `合计 ${product.variants.reduce((a, v) => a + (v.warehouseStock ?? 0), 0)}`;
+    console.log(`  库存：上架 ${listedStr} · 仓库 ${whStr}`);
+  } else {
+    console.log(`  库存：上架 ${fmtListedStock(product.kind, product.stock)}${product.kind === "physical" ? ` · 仓库 ${product.warehouseStock ?? 0}` : ""}`);
+  }
+  if (product.specAxes.length > 0) {
+    console.log(`  规格轴：${product.specAxes.map((a) => `${a.name}（${a.values.join("、")}）`).join("  ")}`);
+  }
+  if (product.hasVariants) {
+    if (product.variants.length === 0) {
+      console.log('  组合：待配置——crab shop product spec <id> --set "值1,值2=价格分" 配置组合价格后才能上架');
+    } else {
+      console.log(`  组合（${product.variants.length}）：`);
+      for (const v of product.variants) {
+        const price = `${fmtMoney(v.priceCents)}${v.compareAtPriceCents !== null ? `（划线 ${fmtMoney(v.compareAtPriceCents)}）` : ""}`;
+        const stock = `上架 ${v.stock === null ? "不限" : v.stock}${v.warehouseStock !== null ? ` · 仓库 ${v.warehouseStock}` : ""}`;
+        console.log(`    ${v.code}  ${v.combo.join(" / ")}  ${price}  ${stock}  ${v.enabled ? "在售" : "停售"}`);
+      }
+    }
+  }
+  if (product.gallery.length > 0)
+    console.log(`  图册：${product.gallery.length} 张（第一张为主图）`);
+  if (product.description)
+    console.log(`  描述：${product.description.length > 100 ? `${product.description.slice(0, 100)}…` : product.description}`);
+  console.log(`  更新：${formatTime(product.updatedAt)}${product.status === "archived" ? "（恢复上架：product update <id> --status draft）" : ""}`);
+  return 0;
+}
+async function shopProductCreate() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = readFlag("--kind");
+  if (kind !== "physical" && kind !== "digital") {
+    console.error(`用法：crab shop product create --kind physical|digital --name 名称 [--variant-mode single|multi] [--spec-axis "颜色=红,蓝"]… [--price-cents N] [--status draft|active] …
+必填：--kind（类型，创建后不可变）与 --name；金额一律整数分`);
+    return EXIT_USAGE;
+  }
+  const name = readFlag("--name")?.trim();
+  if (!name) {
+    console.error("缺少 --name 名称");
+    return EXIT_USAGE;
+  }
+  const variantMode = readFlag("--variant-mode") ?? "single";
+  if (variantMode !== "single" && variantMode !== "multi") {
+    console.error("--variant-mode 只接受 single | multi（创建即锁定，之后不可改）");
+    return EXIT_USAGE;
+  }
+  const axisArgs = readFlagAll("--spec-axis");
+  if (variantMode === "single" && axisArgs.length > 0) {
+    console.error("单规格商品没有规格轴（规格模式创建即锁定）；要规格就 --variant-mode multi");
+    return EXIT_USAGE;
+  }
+  const specAxes = [];
+  for (const raw of axisArgs) {
+    const eq = raw.indexOf("=");
+    if (eq <= 0) {
+      console.error(`--spec-axis 格式：轴名=值1,值2（如 "颜色=红,蓝"），收到「${raw}」`);
+      return EXIT_USAGE;
+    }
+    const axisName = raw.slice(0, eq).trim();
+    const values = raw.slice(eq + 1).split(/[,，、]+/).map((x) => x.trim()).filter(Boolean);
+    if (!axisName || values.length === 0) {
+      console.error(`--spec-axis 轴名与选项值都不能为空：「${raw}」`);
+      return EXIT_USAGE;
+    }
+    specAxes.push({ name: axisName, values });
+  }
+  if (specAxes.length > 3) {
+    console.error("规格轴最多 3 条（--spec-axis 可重复出现）");
+    return EXIT_USAGE;
+  }
+  if (variantMode === "multi") {
+    const comboCount = specAxes.reduce((acc, a) => acc * a.values.length, 1);
+    if (comboCount > 24) {
+      console.error(`规格组合 ${comboCount} 个超出上限 24——减少轴或选项值`);
+      return EXIT_USAGE;
+    }
+  }
+  const body = { kind, variantMode, name };
+  if (variantMode === "multi" && specAxes.length > 0)
+    body.specAxes = specAxes;
+  const status = readFlag("--status");
+  if (status) {
+    if (status !== "draft" && status !== "active") {
+      console.error("--status 创建时只接受 draft | active");
+      return EXIT_USAGE;
+    }
+    body.status = status;
+  }
+  const categoryRef = readFlag("--category");
+  if (categoryRef) {
+    const store = await resolveStoreArg(credentials);
+    if (typeof store === "number")
+      return store;
+    const cat = await resolveCategoryFlag(credentials, store.id, categoryRef, false);
+    if (typeof cat === "number")
+      return cat;
+    body.categoryId = cat.id;
+  }
+  const description = readFlag("--description");
+  if (description !== undefined)
+    body.description = description;
+  const priceCents = readFlag("--price-cents");
+  if (priceCents !== undefined) {
+    const parsed = parseCentsFlag(priceCents, "--price-cents");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.priceCents = parsed;
+  }
+  const compareAt = readFlag("--compare-at-cents");
+  if (compareAt !== undefined) {
+    const parsed = parseCentsFlag(compareAt, "--compare-at-cents");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.compareAtPriceCents = parsed;
+  }
+  const code = readFlag("--code");
+  if (code !== undefined) {
+    if (variantMode === "multi") {
+      console.error("多规格商品的码在每个组合上（组合配置时自动/指定分配），商品级 --code 不适用");
+      return EXIT_USAGE;
+    }
+    body.code = code.trim();
+  }
+  const stockRaw = readFlag("--stock");
+  if (stockRaw !== undefined) {
+    if (variantMode === "multi") {
+      console.error("多规格商品的库存挂在组合上：创建后用 crab shop stock（仓库账）/ crab shop listed（上架额度）按组合调整");
+      return EXIT_USAGE;
+    }
+    const parsed = parseIntFlag(stockRaw, "--stock", 0);
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.stock = parsed;
+  }
+  const refundable = readFlag("--refundable");
+  if (refundable !== undefined) {
+    const parsed = parseOnOffFlag(refundable, "--refundable");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.refundable = parsed;
+  }
+  for (const [flag, key] of [["--max-per-order", "maxPerOrder"], ["--max-per-buyer", "maxPerBuyer"]]) {
+    const raw = readFlag(flag);
+    if (raw !== undefined) {
+      const parsed = parseIntFlag(raw, flag, 1);
+      if (parsed === null)
+        return EXIT_USAGE;
+      body[key] = parsed;
+    }
+  }
+  const deliveryType = readFlag("--delivery");
+  const deliveryFile = readFlag("--delivery-file");
+  if (deliveryType !== undefined || deliveryFile !== undefined) {
+    if (kind !== "digital") {
+      console.error("--delivery / --delivery-file 只适用于数字商品（实物无交付形态）");
+      return EXIT_USAGE;
+    }
+    if (deliveryType !== undefined) {
+      if (deliveryType !== "file" && deliveryType !== "license") {
+        console.error("--delivery 只接受 file | license");
+        return EXIT_USAGE;
+      }
+      body.deliveryType = deliveryType;
+    }
+    if (deliveryFile !== undefined)
+      body.deliveryFileId = deliveryFile;
+  }
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/products`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify(body)
+  });
+  if (res.status !== 201) {
+    console.error(errorMessage(res.body, "创建商品失败。"));
+    if (res.body?.error?.code === "specs_required") {
+      console.error('提示：多规格商品上架前必须配置完整组合——crab shop product spec <id> --set "值1,值2=价格分"');
+    }
+    return exitCodeForApiError(res.body);
+  }
+  const product = res.body.data.product;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(product, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已创建商品（${shopStatusLabel(product.status)}）：${product.name}  ${product.id}`);
+  if (product.hasVariants) {
+    console.log(`  规格轴：${product.specAxes.map((a) => `${a.name}（${a.values.join("、")}）`).join("  ")}`);
+    console.log(`  下一步：crab shop product spec ${product.id} --set "值1,值2=价格分" 配置组合价格（配置完整后才能上架）`);
+  } else {
+    console.log(`  SKU 码：${product.code}`);
+    console.log(`  下一步：crab shop product update ${product.id} --price-cents 1990 --status active 上架（金额整数分）`);
+  }
+  return 0;
+}
+async function shopProductUpdate() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const target = shopPositionals(3, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error(`用法：crab shop product update <id|SKU码> [--name …] [--description …] [--category <id|名称|none>] [--price-cents N] [--compare-at-cents N|clear] [--status draft|active|archived] [--refundable on|off] [--max-per-order N|clear] [--max-per-buyer N|clear] [--code <SKU码>] [--json]
+只提交给出的字段；改多规格组合用 product spec，改库存用 stock / listed`);
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  const body = {};
+  const name = readFlag("--name");
+  if (name !== undefined) {
+    if (!name.trim()) {
+      console.error("--name 不能为空");
+      return EXIT_USAGE;
+    }
+    body.name = name.trim();
+  }
+  const description = readFlag("--description");
+  if (description !== undefined)
+    body.description = description;
+  const categoryRef = readFlag("--category");
+  if (categoryRef !== undefined) {
+    const cat = await resolveCategoryFlag(credentials, product.storeId, categoryRef, true);
+    if (typeof cat === "number")
+      return cat;
+    body.categoryId = cat.id;
+  }
+  const status = readFlag("--status");
+  if (status !== undefined) {
+    if (!["draft", "active", "archived"].includes(status)) {
+      console.error("--status 只接受 draft | active | archived");
+      return EXIT_USAGE;
+    }
+    body.status = status;
+  }
+  const priceRaw = readFlag("--price-cents");
+  if (priceRaw !== undefined) {
+    const parsed = parseCentsFlag(priceRaw, "--price-cents");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.priceCents = parsed;
+  }
+  const compareAtRaw = readFlag("--compare-at-cents");
+  if (compareAtRaw !== undefined) {
+    if (compareAtRaw === "clear")
+      body.compareAtPriceCents = null;
+    else {
+      const parsed = parseCentsFlag(compareAtRaw, "--compare-at-cents");
+      if (parsed === null)
+        return EXIT_USAGE;
+      body.compareAtPriceCents = parsed;
+    }
+  }
+  const refundable = readFlag("--refundable");
+  if (refundable !== undefined) {
+    const parsed = parseOnOffFlag(refundable, "--refundable");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.refundable = parsed;
+  }
+  for (const [flag, key] of [["--max-per-order", "maxPerOrder"], ["--max-per-buyer", "maxPerBuyer"]]) {
+    const raw = readFlag(flag);
+    if (raw !== undefined) {
+      if (raw === "clear")
+        body[key] = null;
+      else {
+        const parsed = parseIntFlag(raw, flag, 1);
+        if (parsed === null)
+          return EXIT_USAGE;
+        body[key] = parsed;
+      }
+    }
+  }
+  const code = readFlag("--code");
+  if (code !== undefined) {
+    if (product.hasVariants) {
+      console.error("多规格商品的码在每个组合上（商品级 --code 不适用，服务端会忽略）");
+      return EXIT_USAGE;
+    }
+    body.code = code.trim();
+  }
+  if (Object.keys(body).length === 0) {
+    console.error("没有任何要更新的字段——至少给一个 --name / --price-cents / --status …");
+    return EXIT_USAGE;
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify(body)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "更新商品失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const updated = res.body.data.product;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(updated, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已更新：${updated.name}  [${shopStatusLabel(updated.status)}]  ${updated.id}`);
+  console.log(`  基础价：${fmtMoney(updated.priceCents)}${updated.compareAtPriceCents !== null ? `（划线 ${fmtMoney(updated.compareAtPriceCents)}）` : ""}`);
+  return 0;
+}
+function parseSpecSet(raw, axes) {
+  const eq = raw.indexOf("=");
+  if (eq <= 0)
+    return `--set 格式："<值1,值2>=价格分[,划线价分|clear][,on|off]"（如 "红,M=1990,2500,on"），收到「${raw}」`;
+  const combo = raw.slice(0, eq).split(/[,，、]+/).map((x) => x.trim());
+  if (combo.length !== axes.length) {
+    return `组合需要 ${axes.length} 个值（轴顺序：${axes.map((a) => a.name).join(" / ")}），收到「${raw.slice(0, eq)}」`;
+  }
+  for (let i = 0;i < combo.length; i++) {
+    if (!axes[i].values.includes(combo[i])) {
+      return `值「${combo[i]}」不在规格轴「${axes[i].name}」的选项里（可选：${axes[i].values.join("、")}）`;
+    }
+  }
+  const right = raw.slice(eq + 1).split(/[,，、]+/).map((x) => x.trim());
+  const price = Number(right[0]);
+  if (!Number.isSafeInteger(price) || price < 0) {
+    return `--set 价格分必须是非负整数（如 1990 = $19.90），收到「${right[0]}」`;
+  }
+  const entry = { combo, price };
+  for (const extra of right.slice(1)) {
+    if (extra === "on" || extra === "off")
+      entry.enabled = extra === "on";
+    else if (extra === "clear")
+      entry.compareAt = null;
+    else {
+      const n = Number(extra);
+      if (!Number.isSafeInteger(n) || n < 0)
+        return `--set 第 2 段起应为划线价分、clear 或 on|off，收到「${extra}」`;
+      entry.compareAt = n;
+    }
+  }
+  return entry;
+}
+async function shopProductSpec() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const target = shopPositionals(3, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  const sets = readFlagAll("--set");
+  if (!target || sets.length === 0) {
+    console.error(`用法：crab shop product spec <id|SKU码> --set "<值1,值2>=价格分[,划线价分|clear][,on|off]" … [--json]
+值按规格轴顺序给（值1=第一轴）；未提及的组合保持原值；本命令不改库存（动账 stock / 上架额度 listed）；规格轴在创建时锁定，轴数量首次保存即锁`);
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  if (!product.hasVariants) {
+    console.error("单规格商品没有规格组合——改价格用 crab shop product update <id> --price-cents N");
+    return EXIT_USAGE;
+  }
+  if (product.specAxes.length === 0) {
+    console.error("该商品还没有规格轴（多规格商品创建时用 --spec-axis 配置；存量无轴商品暂不支持 CLI 加轴，到商家控制台操作）");
+    return EXIT_USAGE;
+  }
+  const overrides = new Map;
+  for (const raw of sets) {
+    const parsed = parseSpecSet(raw, product.specAxes);
+    if (typeof parsed === "string") {
+      console.error(parsed);
+      return EXIT_USAGE;
+    }
+    overrides.set(JSON.stringify(parsed.combo), parsed);
+  }
+  const prevByKey = new Map(product.variants.map((v) => [v.comboKey, v]));
+  const combos = cartesianCombos(product.specAxes);
+  if (combos.length > 24) {
+    console.error(`规格组合 ${combos.length} 个超出上限 24`);
+    return EXIT_USAGE;
+  }
+  const unresolved = combos.filter((combo) => {
+    const key = JSON.stringify(combo);
+    return !overrides.has(key) && !prevByKey.has(key) && product.priceCents === null;
+  });
+  if (unresolved.length > 0) {
+    console.error(`以下新组合未给价格且商品无基础价可沿用：${unresolved.map((c) => c.join("/")).join("、")}
+用 --set 补价格，或先 crab shop product update <id> --price-cents N 设基础价`);
+    return EXIT_USAGE;
+  }
+  const variants = combos.map((combo) => {
+    const key = JSON.stringify(combo);
+    const prev = prevByKey.get(key);
+    const o = overrides.get(key);
+    const row = { combo, enabled: o?.enabled ?? prev?.enabled ?? true };
+    const price = o ? o.price : prev?.priceCents;
+    if (price !== undefined)
+      row.priceCents = price;
+    row.compareAtPriceCents = o ? o.compareAt !== undefined ? o.compareAt : prev?.compareAtPriceCents ?? null : prev?.compareAtPriceCents ?? null;
+    if (prev) {
+      row.stock = prev.stock;
+      row.code = prev.code;
+    }
+    return row;
+  });
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ specAxes: product.specAxes, variants })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "配置组合失败。"));
+    const code = res.body?.error?.code;
+    if (code === "spec_combo_in_ledger")
+      console.error('提示：被出入库台账引用的组合不能删除——用 --set "…,off" 关闭在售代替');
+    if (code === "exceeds_warehouse")
+      console.error("提示：组合销售库存不能超过实际库存（存量组合原值回写不该触发；检查商品是否有超账警示态）");
+    return exitCodeForApiError(res.body);
+  }
+  const updated = res.body.data.product;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(updated, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已配置 ${updated.variants.length} 个组合（${updated.variants.filter((v) => v.enabled).length} 个在售）：`);
+  for (const v of updated.variants) {
+    const price = `${fmtMoney(v.priceCents)}${v.compareAtPriceCents !== null ? `（划线 ${fmtMoney(v.compareAtPriceCents)}）` : ""}`;
+    const stock = `上架 ${v.stock === null ? "不限" : v.stock}${v.warehouseStock !== null ? ` · 仓库 ${v.warehouseStock}` : ""}`;
+    console.log(`  ${v.code}  ${v.combo.join(" / ")}  ${price}  ${stock}  ${v.enabled ? "在售" : "停售"}`);
+  }
+  console.log("改库存：crab shop stock in|out|set <id>（仓库账）· crab shop listed <id>（上架额度，实物）");
+  return 0;
+}
+async function shopProductArchive() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const target = shopPositionals(3, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error(`用法：crab shop product archive <id|SKU码> [--json]
+下架归档（软删）：买家不可见，历史订单快照不受影响；恢复用 product update <id> --status draft`);
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}`, { method: "DELETE", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "归档商品失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ok: true, id: product.id }, null, 2));
+  else
+    console.log(`✓ 已归档：${product.name}  ${product.id}（恢复：crab shop product update ${product.id} --status draft）`);
+  return 0;
+}
+async function shopStockAdjust(mode) {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  if (mode !== "in" && mode !== "out" && mode !== "set") {
+    console.error(`用法：crab shop stock in|out|set <id|SKU码> --amount N [--variant <组合码|变体id|"值1/值2">] [--reason purchase] --note "说明" [--json]
+  in 入库 / out 出库（变动量 ≥1）/ set 盘点设定（仓库账 = N，可为 0）
+  --reason purchase 仅入库有效；set 或未给 --reason（按 manual 落账）必须带 --note
+  退货入库与发货出库由售后/发货端点自动落账，勿用本命令手工登记`);
+    return EXIT_USAGE;
+  }
+  const target = shopPositionals(3, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("缺少商品 <id|SKU码>");
+    return EXIT_USAGE;
+  }
+  const amountRaw = readFlag("--amount");
+  if (amountRaw === undefined) {
+    console.error("缺少 --amount N（in/out 为变动量 ≥1；set 为盘点后的实际库存数 ≥0）");
+    return EXIT_USAGE;
+  }
+  const amount = Number(amountRaw);
+  if (!Number.isSafeInteger(amount) || amount < 0 || mode !== "set" && amount === 0) {
+    console.error(mode === "set" ? "--amount 必须是 ≥0 的整数（盘点后的实际库存数）" : "--amount 必须是 ≥1 的整数（in/out 为变动量）");
+    return EXIT_USAGE;
+  }
+  const reason = readFlag("--reason");
+  if (reason !== undefined && reason !== "purchase" && reason !== "manual") {
+    console.error("--reason 只接受 purchase（采购入库）| manual");
+    return EXIT_USAGE;
+  }
+  if (reason === "purchase" && mode !== "in") {
+    console.error("--reason purchase 仅入库（in）有效；出库/盘点一律落 manual");
+    return EXIT_USAGE;
+  }
+  const note = readFlag("--note");
+  if ((mode === "set" || reason === undefined) && !note?.trim()) {
+    console.error('盘点（set）或未指定 --reason（按 manual 落账）必须带 --note "原因说明"（台账留痕）');
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  const targets = [];
+  const variantRef = readFlag("--variant");
+  if (product.hasVariants) {
+    if (!variantRef) {
+      console.error(`多规格商品必须用 --variant 指定组合（组合码 / 变体 id / "值1/值2"）：
+${variantChoiceList(product)}`);
+      return EXIT_USAGE;
+    }
+    const variant = resolveVariantRef(product, variantRef);
+    if (!variant) {
+      console.error(`找不到组合：${variantRef}（可用组合：
+${variantChoiceList(product)}）`);
+      return EXIT_USAGE;
+    }
+    targets.push({ variantId: variant.id, amount });
+  } else {
+    if (variantRef !== undefined) {
+      console.error("单规格商品没有组合，去掉 --variant");
+      return EXIT_USAGE;
+    }
+    targets.push({ amount });
+  }
+  const body = { mode, targets };
+  if (reason)
+    body.reason = reason;
+  if (note?.trim())
+    body.note = note.trim();
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}/stock`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify(body)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "库存动账失败。"));
+    const code = res.body?.error?.code;
+    if (code === "insufficient_stock")
+      console.error("提示：库存不足——先入库：crab shop stock in …");
+    if (code === "unlimited_stock")
+      console.error("提示：不限量库存不能出库——先用 stock set 转限量（盘点语义）再操作");
+    return exitCodeForApiError(res.body);
+  }
+  const items = res.body.data.items;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(res.body.data, null, 2));
+    return 0;
+  }
+  const after = items[0];
+  const label = mode === "in" ? "入库" : mode === "out" ? "出库" : "盘点";
+  console.log(`✓ ${label} ${amount}：${product.name}`);
+  if (after) {
+    const parts = [];
+    if (after.warehouseStock !== null)
+      parts.push(`仓库 ${after.warehouseStock}`);
+    parts.push(`上架 ${after.stock === null ? "不限" : after.stock}`);
+    console.log(`  现值：${parts.join(" · ")}`);
+  }
+  if (product.kind === "physical") {
+    console.log("  提示：动的是仓库账；上架（销售）额度另用 crab shop listed 设定（≤ 仓库账）");
+  }
+  return 0;
+}
+async function shopListedStock() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const target = shopPositionals(2, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error(`用法：crab shop listed <id|SKU码> --stock N [--variant <组合码|变体id|"值1/值2">] [--json]
+实物销售库存（上架额度）直设：0 ≤ N ≤ 实际库存，不够先 crab shop stock in 入库；数字商品无仓库层（限售额度用 stock in/set 起账）`);
+    return EXIT_USAGE;
+  }
+  const stockRaw = readFlag("--stock");
+  if (stockRaw === undefined) {
+    console.error("缺少 --stock N（上架额度，0 ~ 实际库存）");
+    return EXIT_USAGE;
+  }
+  const stock = Number(stockRaw);
+  if (!Number.isSafeInteger(stock) || stock < 0) {
+    console.error("--stock 必须是 ≥0 的整数");
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  if (product.kind !== "physical") {
+    console.error("数字商品没有仓库层，销售库存用 crab shop stock in/set 起账");
+    return EXIT_USAGE;
+  }
+  const targets = [];
+  const variantRef = readFlag("--variant");
+  if (product.hasVariants) {
+    if (!variantRef) {
+      console.error(`多规格商品必须用 --variant 指定组合：
+${variantChoiceList(product)}`);
+      return EXIT_USAGE;
+    }
+    const variant = resolveVariantRef(product, variantRef);
+    if (!variant) {
+      console.error(`找不到组合：${variantRef}（可用组合：
+${variantChoiceList(product)}）`);
+      return EXIT_USAGE;
+    }
+    targets.push({ variantId: variant.id, stock });
+  } else {
+    if (variantRef !== undefined) {
+      console.error("单规格商品没有组合，去掉 --variant");
+      return EXIT_USAGE;
+    }
+    targets.push({ stock });
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}/listed-stock`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ targets })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "设定销售库存失败。"));
+    const code = res.body?.error?.code;
+    if (code === "exceeds_warehouse")
+      console.error('提示：上架额度不能超过实际库存——先入库再上调：crab shop stock in <id> --amount N --note "…"');
+    return exitCodeForApiError(res.body);
+  }
+  const items = res.body.data.items;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(res.body.data, null, 2));
+    return 0;
+  }
+  const after = items[0];
+  console.log(`✓ 已设上架额度 ${stock}：${product.name}${after?.warehouseStock !== null && after?.warehouseStock !== undefined ? `（仓库 ${after.warehouseStock}）` : ""}`);
+  return 0;
+}
+var MOVEMENT_REASON_LABELS = {
+  purchase: "采购入库",
+  sale: "销售",
+  manual: "手工调整",
+  restore: "退款回补",
+  shipment: "发货出库"
+};
+async function shopMovements() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const params = new URLSearchParams;
+  const productRef = readFlag("--product");
+  if (productRef) {
+    const product = await fetchShopProduct(credentials, productRef);
+    if (typeof product === "number")
+      return product;
+    params.set("productId", product.id);
+  }
+  const limit = readFlag("--limit");
+  if (limit)
+    params.set("limit", limit);
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/movements?${params.toString()}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取出入库台账失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const data = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(data, null, 2));
+    return 0;
+  }
+  if (data.movements.length === 0) {
+    console.log("还没有出入库流水（入库 crab shop stock in / 发货与退款自动落账）。");
+    return 0;
+  }
+  for (const m of data.movements) {
+    const arrow = m.direction === "in" ? "入库 +" : "出库 -";
+    const tier = m.tier === "warehouse" ? "仓库" : "上架";
+    const combo = m.variantCombo ? `（${m.variantCombo.join("/")}）` : "";
+    const reason = MOVEMENT_REASON_LABELS[m.reason] ?? m.reason;
+    const order = m.orderId ? `  订单 ${m.orderId}` : "";
+    console.log(`${formatTime(m.createdAt)}  ${arrow}${m.quantity} [${tier}]  ${m.productName}${combo}  ${reason}${m.note ? `  ${m.note}` : ""}${order}`);
+  }
+  const offsetN = Number.parseInt(offset ?? "0", 10) || 0;
+  console.log(`共 ${data.total} 条流水（本页 ${data.movements.length} 条${offsetN > 0 ? `，自第 ${offsetN + 1} 条` : ""}；--offset 翻页）`);
+  return 0;
+}
+async function hrOrgsList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/hr/orgs", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取组织列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const orgs = res.body.data.orgs;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(orgs, null, 2));
+    return 0;
+  }
+  if (orgs.length === 0) {
+    console.log("还没有公司 / 组织。");
+    return 0;
+  }
+  for (const org of orgs) {
+    console.log(`${org.name}  [${org.myRole}]  ${hrOrgToken(org)}  id: ${org.id}`);
+  }
+  return 0;
+}
+async function hrOrgApply(name) {
+  if (!name) {
+    console.error("用法：crab hr org apply <名称> [--note 说明] [--json]（审核通过扣 1 积分自动建司）");
+    return EXIT_USAGE;
+  }
+  const note = readFlag("--note") ?? "";
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/hr/orgs/applications", {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ name, note })
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    const code = res.body?.error?.code;
+    if (res.status === 409 || code === "application_exists" || code === "conflict") {
+      console.error("你已有一条待审核的建司申请（crab hr org application 查进度）。");
+      return exitCodeForApiError(res.body);
+    }
+    console.error(errorMessage(res.body, "提交申请失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const application = res.body.data.application;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(application, null, 2));
+  else {
+    console.log(`✓ 已提交建司申请「${application.name}」· id: ${application.id}`);
+    console.log("审核通过后公司自动出现（通过时扣 1 积分）；进度：crab hr org application");
+  }
+  return 0;
+}
+async function hrOrgApplication() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/hr/orgs/applications/mine", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "查询申请进度失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const application = res.body.data.application;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(application, null, 2));
+    return 0;
+  }
+  if (!application) {
+    console.log("还没有建司申请（crab hr org apply <名称> 提交）。");
+    return 0;
+  }
+  const day = new Date(application.createdAt).toISOString().slice(0, 10);
+  if (application.status === "pending") {
+    console.log(`审核中：${application.name}（${day} 提交）· id: ${application.id}`);
+    console.log("通过时扣 1 积分并自动建司，无需其他操作。");
+  } else if (application.status === "approved") {
+    console.log(`✓ 已通过：${application.name}（${day} 提交）· 公司已建立`);
+    console.log("绑定新组织：crab login --scopes hr --org org:<公司名>");
+  } else {
+    console.log(`✗ 已驳回：${application.name}（${day} 提交）`);
+    if (application.reviewNote)
+      console.log(`  驳回意见：${application.reviewNote}`);
+    console.log("可修改后重新提交：crab hr org apply <名称> [--note 说明]");
+  }
+  return 0;
+}
+async function hrOrgRename() {
+  const name = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!name) {
+    console.error("用法：crab hr org rename <新名称> [--org <arg>] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ name })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "组织改名失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ok: true }, null, 2));
+  else
+    console.log(`✓ 已改名：${org.name} → ${name}（org: 令牌绑定标识随新名变化，注意重新授权）。`);
+  return 0;
+}
+async function hrMembersList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/members`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取成员列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const members = res.body.data.members;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(members, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)}`);
+  for (const m of members) {
+    const flags = Object.entries(m.permissions).filter(([, v]) => v).map(([k]) => k).join(",") || "只读";
+    console.log(`${m.username}${m.title ? `（${m.title}）` : ""}  [${m.role}]  ${flags}  id: ${m.id}${m.status !== "active" ? ` · ${m.status}` : ""}`);
+  }
+  return 0;
+}
+async function hrMemberAdd() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const username = positionalArgs(args.slice(3), HR_VALUED_FLAGS);
+  const target = username[0];
+  if (!target) {
+    console.error("用法：crab hr member add <用户名> [--title 头衔] [--org <arg>]");
+    return EXIT_USAGE;
+  }
+  const title = readFlag("--title");
+  const permissions = parseHrPermissions(readFlag("--permissions"));
+  if (permissions === null)
+    return EXIT_USAGE;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/members`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ username: target, ...title ? { title } : {}, ...permissions ? { permissions } : {} })
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    console.error(errorMessage(res.body, "邀请成员失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(res.body.data, null, 2));
+  else {
+    const on = permissions ? Object.entries(permissions).filter(([, v]) => v).map(([k]) => k).join(",") : "";
+    console.log(`✓ 已把 ${target} 加入 ${org.name}（member${on ? `，权限：${on}` : "，只读"}；用 hr member set 调整）。`);
+  }
+  return 0;
+}
+async function hrMemberSet() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  const role = readFlag("--role");
+  const permissions = parseHrPermissions(readFlag("--permissions"));
+  if (permissions === null)
+    return EXIT_USAGE;
+  const title = readFlag("--title");
+  if (!target || !role && !permissions && title === undefined) {
+    console.error("用法：crab hr member set <memberId> [--role admin|member] [--permissions org.manage=1,people.write=1,tasks.write=1,sensitive.read=0] [--title 头衔] [--org <arg>]");
+    return EXIT_USAGE;
+  }
+  if (role && role !== "admin" && role !== "member") {
+    console.error("--role 只接受 admin | member（owner 不可改）。");
+    return EXIT_USAGE;
+  }
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/members/${encodeURIComponent(target)}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ ...role ? { role } : {}, ...permissions ? { permissions } : {}, ...title !== undefined ? { title } : {} })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "更新成员失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const member = res.body.data.member;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(member, null, 2));
+  else
+    console.log(`✓ 已更新 ${member?.username ?? target}（${member?.role ?? "?"}）。`);
+  return 0;
+}
+async function hrMemberRm() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr member rm <memberId> [--org <arg>]（id 见 crab hr members）");
+    return EXIT_USAGE;
+  }
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/members/${encodeURIComponent(target)}`, {
+    method: "DELETE",
+    headers: authHeaders(credentials)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "移除成员失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(res.body.data, null, 2));
+  else
+    console.log("✓ 已移除成员（可随时重新邀请）。");
+  return 0;
+}
+async function hrInvite() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const permissionsInput = parseHrPermissions(readFlag("--permissions"));
+  if (permissionsInput === null)
+    return EXIT_USAGE;
+  if (permissionsInput) {
+    const patch = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/invite`, {
+      method: "PATCH",
+      headers: authHeaders(credentials),
+      body: JSON.stringify({ permissions: permissionsInput })
+    });
+    if (patch.status !== 200) {
+      console.error(errorMessage(patch.body, "更新邀请默认权限失败。"));
+      return exitCodeForApiError(patch.body);
+    }
+    const updated = patch.body.data.invite;
+    if (hasFlag("--json")) {
+      console.log(JSON.stringify(updated, null, 2));
+      return 0;
+    }
+    const on = Object.entries(updated.permissions).filter(([, v]) => v).map(([k]) => k);
+    console.log(`✓ 已更新加入后默认权限：${on.length ? on.join(", ") : "全只读"}（链接不变）。`);
+    return 0;
+  }
+  const path = hasFlag("--reset") ? "/invite/reset" : "/invite";
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}${path}`, { method: hasFlag("--reset") ? "POST" : "GET", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取邀请链接失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const invite = res.body.data.invite;
+  const link = `${hrWebBase(credentials.apiBase)}/join/${invite.token}`;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ...invite, link }, null, 2));
+  else {
+    if (hasFlag("--reset"))
+      console.log("✓ 已重置（旧链接立即失效，默认权限配置保留）。");
+    const on = Object.entries(invite.permissions).filter(([, v]) => v).map(([k]) => k);
+    console.log(`邀请链接：${link}`);
+    console.log(`加入后默认权限：${on.length ? on.join(", ") : "全只读"}（修改：--permissions org.manage=1,...）`);
+    console.log("未注册的老板 / 同事打开此链接，注册后自动加入组织。");
+  }
+  return 0;
+}
+async function hrPeopleList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const status = readFlag("--status");
+  if (status && !HR_PERSON_STATUSES.includes(status)) {
+    console.error(`未知状态：${status}
+可用：${HR_PERSON_STATUSES.join(", ")}`);
+    return EXIT_USAGE;
+  }
+  const params = new URLSearchParams;
+  const q = readFlag("--q");
+  if (q)
+    params.set("q", q);
+  if (status)
+    params.set("status", status);
+  const dept = readFlag("--dept");
+  if (dept)
+    params.set("dept", dept);
+  const limit = readFlag("--limit");
+  if (limit)
+    params.set("limit", limit);
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people?${params}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取花名册失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const page = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...page, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)} · 共 ${page.total} 人`);
+  if (page.people.length === 0) {
+    console.log('没有匹配的人员（crab hr person create --name "…" --hired-at YYYY-MM-DD 建档）。');
+    return 0;
+  }
+  for (const p of page.people) {
+    const day = (ms) => ms ? new Date(ms).toISOString().slice(0, 10) : "—";
+    console.log(`${p.name}  ${p.dept ? `${p.dept} · ` : ""}${p.role || "员工"}  [${p.status}]  入职 ${day(p.hiredAt)}  id: ${p.id}`);
+    if (p.alert)
+      console.log(`  ⚠ ${p.alert}`);
+  }
+  if (page.people.length < page.total)
+    console.log(`（还有更多：--offset ${(Number(offset ?? 0) || 0) + page.people.length}）`);
+  return 0;
+}
+async function hrPersonDetail(id) {
+  if (!id) {
+    console.error("用法：crab hr person <id> [--json]（id 见 crab hr people）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  let person;
+  let offset = 0;
+  while (person === undefined) {
+    const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people?limit=200&offset=${offset}`, { headers: authHeaders(credentials) });
+    if (res.status !== 200) {
+      console.error(errorMessage(res.body, "获取人员失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    const page = res.body.data;
+    person = page.people.find((p) => p.id === id);
+    offset += page.people.length;
+    if (person === undefined && (page.people.length === 0 || offset >= page.total))
+      break;
+  }
+  if (!person) {
+    console.error("人员不存在或不属于当前组织。");
+    return EXIT_NOT_FOUND;
+  }
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(person, null, 2));
+    return 0;
+  }
+  const p = person;
+  const day = (ms) => ms ? new Date(ms).toISOString().slice(0, 10) : "—";
+  console.log(`${p.name}  ${p.dept ? `${p.dept} · ` : ""}${p.role || "员工"}  [${p.status}]`);
+  console.log(`  入职 ${day(p.hiredAt)} · 合同 ${p.contractType || "—"}（${day(p.contractEnd)}）`);
+  if (p.mobile || p.email)
+    console.log(`  联系方式: ${p.mobile || "—"} / ${p.email || "—"}`);
+  console.log(`  身份证: ${p.idNumber ?? "（无权限）"} · 薪资: ${p.salaryCents != null ? `¥${(p.salaryCents / 100).toFixed(2)}` : "（无权限）"}`);
+  if (p.alert)
+    console.log(`  ⚠ ${p.alert}`);
+  console.log(`  时间线: crab hr events --person ${p.id}`);
+  return 0;
+}
+async function hrPersonCreate() {
+  const name = readFlag("--name");
+  const hiredFlag = readFlag("--hired-at");
+  if (!name || !hiredFlag) {
+    console.error('用法：crab hr person create --name "姓名" --hired-at YYYY-MM-DD [--employee-no 工号] [--dept 部门] [--role 岗位] [--status active|probation] [--probation-end YYYY-MM-DD] [--contract-type 类型] [--contract-end YYYY-MM-DD] [--mobile] [--email] [--notes] [--json]');
+    return EXIT_USAGE;
+  }
+  const hired = parseHrDate(hiredFlag);
+  if (hired == null) {
+    console.error("--hired-at 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const probation = parseHrDate(readFlag("--probation-end"));
+  if (probation === null) {
+    console.error("--probation-end 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  const contractEnd = parseHrDate(readFlag("--contract-end"));
+  if (contractEnd === null) {
+    console.error("--contract-end 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  const status = readFlag("--status") ?? "active";
+  if (!HR_PERSON_STATUSES.includes(status) || status === "resigned") {
+    console.error("--status 只接受 active | probation（建档不直接建离职）。");
+    return EXIT_USAGE;
+  }
+  const payload = {
+    name,
+    hiredAt: hired,
+    status,
+    employeeNo: readFlag("--employee-no") ?? "",
+    dept: readFlag("--dept") ?? "",
+    role: readFlag("--role") ?? "",
+    mobile: readFlag("--mobile") ?? "",
+    email: readFlag("--email") ?? "",
+    notes: readFlag("--notes") ?? ""
+  };
+  if (probation != null)
+    payload.probationEnd = probation;
+  const contractType = readFlag("--contract-type");
+  if (contractType)
+    payload.contractType = contractType;
+  if (contractEnd != null)
+    payload.contractEnd = contractEnd;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify(payload)
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    console.error(errorMessage(res.body, "建档失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const person = res.body.data.person;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(person, null, 2));
+  else
+    console.log(`✓ 已建档 ${person.name}（自动落入职事件）· id: ${person.id}`);
+  return 0;
+}
+async function hrPersonEdit() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr person edit <id> [--dept] [--role] [--status active|probation|resigned] [--offboarded-at YYYY-MM-DD] [--contract-type] [--contract-end YYYY-MM-DD] [--mobile] [--email] [--notes] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const payload = {};
+  const simple = [
+    ["--dept", "dept"],
+    ["--role", "role"],
+    ["--contract-type", "contractType"],
+    ["--mobile", "mobile"],
+    ["--email", "email"],
+    ["--notes", "notes"]
+  ];
+  for (const [flag, key] of simple) {
+    const value = readFlag(flag);
+    if (value !== undefined)
+      payload[key] = value;
+  }
+  const status = readFlag("--status");
+  if (status) {
+    if (!HR_PERSON_STATUSES.includes(status)) {
+      console.error(`--status 只接受：${HR_PERSON_STATUSES.join(", ")}`);
+      return EXIT_USAGE;
+    }
+    payload.status = status;
+  }
+  const contractEnd = parseHrDate(readFlag("--contract-end"));
+  if (contractEnd === null) {
+    console.error("--contract-end 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  if (contractEnd != null)
+    payload.contractEnd = contractEnd;
+  const offboarded = parseHrDate(readFlag("--offboarded-at"));
+  if (offboarded === null) {
+    console.error("--offboarded-at 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  if (offboarded != null)
+    payload.offboardedAt = offboarded;
+  if (Object.keys(payload).length === 0) {
+    console.error("没有要更新的字段。");
+    return EXIT_USAGE;
+  }
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people/${encodeURIComponent(target)}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify(payload)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "更新失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const person = res.body.data.person;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(person, null, 2));
+  else
+    console.log(`✓ 已更新 ${person?.name ?? target}（${person?.status ?? "?"}；状态流转自动落痕）。`);
+  return 0;
+}
+async function hrPersonOffboard() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr person offboard <id> [--date YYYY-MM-DD] [--json]（离职封存不删，记录依法保留）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const date = parseHrDate(readFlag("--date"));
+  if (date === null) {
+    console.error("--date 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people/${encodeURIComponent(target)}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ status: "resigned", ...date != null ? { offboardedAt: date } : {} })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "离职办理失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const person = res.body.data.person;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(person, null, 2));
+  else
+    console.log(`✓ ${person?.name ?? target} 已离职（档案封存，离职事件已落时间线）。`);
+  return 0;
+}
+async function hrPersonRm() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr person rm <id> [--org <arg>] [--json]（仅零记录档案可删；有事件时间线走离职封存）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people/${encodeURIComponent(target)}`, {
+    method: "DELETE",
+    headers: authHeaders(credentials)
+  });
+  if (res.status !== 200) {
+    const code = res.body?.error?.code;
+    if (res.status === 409 || code === "conflict") {
+      console.error("该档案已有事件记录（时间线即证据链），不能删除——请走离职封存：crab hr person offboard。");
+      return exitCodeForApiError(res.body);
+    }
+    console.error(errorMessage(res.body, "删除人员失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ok: true }, null, 2));
+  else
+    console.log("✓ 已删除（零记录档案）。");
+  return 0;
+}
+function hrStatsLines(s) {
+  const lines = [`在职 ${s.active} · 试用 ${s.probation} · 离职 ${s.resigned} · 共 ${s.total} 人`];
+  const risks = [];
+  if (s.contractDueSoon)
+    risks.push(`合同 60 天内到期 ${s.contractDueSoon} 人`);
+  if (s.contractOverdue)
+    risks.push(`合同已到期未续签 ${s.contractOverdue} 人`);
+  if (s.probationDueSoon)
+    risks.push(`试用期 30 天内届满 ${s.probationDueSoon} 人`);
+  if (s.probationOverdue)
+    risks.push(`试用期已过未转正 ${s.probationOverdue} 人`);
+  lines.push(risks.length ? `风险：${risks.join(" · ")}` : "风险：无");
+  return lines;
+}
+async function hrStats() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people/stats`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取统计失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const stats = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...stats, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)} · 花名册统计`);
+  for (const line of hrStatsLines(stats.stats))
+    console.log(line);
+  return 0;
+}
+async function hrEventAdd() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  const type = readFlag("--type");
+  const note = readFlag("--note");
+  if (!target || !type || !note) {
+    console.error(`用法：crab hr event add <personId> --type <${HR_EVENT_TYPES.join("|")}> --note "记录内容" [--at YYYY-MM-DD] [--json]`);
+    return EXIT_USAGE;
+  }
+  if (!HR_EVENT_TYPES.includes(type)) {
+    console.error(`未知事件类型：${type}
+可用：${HR_EVENT_TYPES.join(", ")}`);
+    return EXIT_USAGE;
+  }
+  const at = parseHrDate(readFlag("--at"));
+  if (at === null) {
+    console.error("--at 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people/${encodeURIComponent(target)}/events`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ type, note, ...at != null ? { at } : {} })
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    console.error(errorMessage(res.body, "落痕失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const event = res.body.data.event;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(event, null, 2));
+  else
+    console.log(`✓ 已落痕（${type}）· 事件 id: ${event.id}`);
+  return 0;
+}
+async function hrEventsList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const type = readFlag("--type");
+  if (type && !HR_EVENT_TYPES.includes(type)) {
+    console.error(`未知事件类型：${type}
+可用：${HR_EVENT_TYPES.join(", ")}`);
+    return EXIT_USAGE;
+  }
+  const params = new URLSearchParams;
+  const person = readFlag("--person");
+  if (person)
+    params.set("personId", person);
+  if (type)
+    params.set("type", type);
+  const limit = readFlag("--limit");
+  if (limit)
+    params.set("limit", limit);
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/events?${params}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取时间线失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const page = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...page, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)} · 共 ${page.total} 条`);
+  for (const event of page.events) {
+    const day = new Date(event.at).toISOString().slice(0, 10);
+    console.log(`${day}  [${event.type}]  ${event.note}  person: ${event.personId}`);
+  }
+  if (page.events.length < page.total)
+    console.log(`（还有更多：--offset ${(Number(offset ?? 0) || 0) + page.events.length}）`);
+  return 0;
+}
+function parseHrImportFile(text) {
+  try {
+    const parsed = JSON.parse(text);
+    if (Array.isArray(parsed))
+      return { rows: parsed };
+  } catch {}
+  const lines = text.split(/\r?\n/).filter((line) => line.trim() !== "");
+  if (lines.length < 2) {
+    console.error("文件至少要有表头 + 一行数据（TSV/CSV），或 JSON 行数组。");
+    return EXIT_USAGE;
+  }
+  const delimiter = lines[0].includes("\t") ? "\t" : ",";
+  const cells = lines.map((line) => line.split(delimiter).map((cell) => cell.trim().replace(/^"|"$/g, "")));
+  const aliases = [
+    ["name", ["姓名", "名字", "name"]],
+    ["employeeNo", ["工号", "员工编号", "emp"]],
+    ["dept", ["部门", "dept"]],
+    ["role", ["岗位", "职位", "role"]],
+    ["hiredAt", ["入职", "hire"]],
+    ["probationEnd", ["试用期", "probation"]],
+    ["contractType", ["合同类型", "contract type"]],
+    ["contractEnd", ["合同到期", "合同终止", "contract end"]],
+    ["mobile", ["手机", "电话", "mobile", "phone"]],
+    ["email", ["邮箱", "email"]],
+    ["notes", ["备注", "note"]]
+  ];
+  const mapping = (cells[0] ?? []).map((header) => {
+    const lower = header.toLowerCase();
+    for (const [field, list] of aliases)
+      if (list.some((alias) => lower.includes(alias)))
+        return field;
+    return null;
+  });
+  const nameIndex = mapping.indexOf("name");
+  const hireIndex = mapping.indexOf("hiredAt");
+  if (nameIndex < 0 || hireIndex < 0) {
+    console.error("表头里没认出「姓名」和「入职」列——JSON 数组格式不受此限。");
+    return EXIT_USAGE;
+  }
+  const rows = [];
+  for (const row of cells.slice(1)) {
+    const record = {};
+    let skip = false;
+    mapping.forEach((field, index) => {
+      if (!field)
+        return;
+      const value = (row[index] ?? "").trim();
+      if (!value)
+        return;
+      if (field === "hiredAt" || field === "probationEnd" || field === "contractEnd") {
+        const [y, m, d] = value.replace(/[/.]/g, "-").split("-").map(Number);
+        const ms = y && m && d ? new Date(y, m - 1, d).getTime() : NaN;
+        if (!Number.isFinite(ms)) {
+          skip = true;
+          return;
+        }
+        record[field] = ms;
+      } else {
+        record[field] = value;
+      }
+    });
+    if (!skip && record.name && record.hiredAt)
+      rows.push(record);
+  }
+  return { rows };
+}
+async function hrImport() {
+  const file = positionalArgs(args.slice(2), HR_VALUED_FLAGS)[0];
+  if (!file) {
+    console.error("用法：crab hr import <文件.csv|.tsv|.json> [--org <arg>] [--json]（≤200 行；CSV/TSV 首行表头，姓名与入职列必填）");
+    return EXIT_USAGE;
+  }
+  let text;
+  try {
+    text = readFileSync2(file, "utf8");
+  } catch {
+    console.error(`读取文件失败：${file}`);
+    return EXIT_USAGE;
+  }
+  const parsed = parseHrImportFile(text);
+  if (typeof parsed === "number")
+    return parsed;
+  if (parsed.rows.length === 0) {
+    console.error("没有可导入的行（姓名/入职日期缺失或日期格式不对）。");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people/import`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ rows: parsed.rows.slice(0, 200) })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "导入失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const report = res.body.data.report;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(report, null, 2));
+  else {
+    console.log(`✓ 导入完成：新建 ${report.created} 人${parsed.rows.length > 200 ? `（仅前 200 行，共 ${parsed.rows.length} 行）` : ""}。`);
+    if (report.failed.length)
+      console.log(`  失败 ${report.failed.length} 行：#${report.failed.map((f) => f.row + 1).join(", #")}`);
+  }
+  return 0;
+}
+async function hrTasksList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const status = readFlag("--status");
+  if (status && !HR_TASK_STATUSES.includes(status)) {
+    console.error(`未知状态：${status}
+可用：${HR_TASK_STATUSES.join(", ")}`);
+    return EXIT_USAGE;
+  }
+  const params = new URLSearchParams;
+  if (status)
+    params.set("status", status);
+  const kind = readFlag("--kind");
+  if (kind)
+    params.set("kind", kind);
+  const limit = readFlag("--limit");
+  if (limit)
+    params.set("limit", limit);
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/tasks?${params}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取任务失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const page = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...page, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)} · 共 ${page.total} 条`);
+  for (const task of page.tasks) {
+    const due = task.dueAt ? new Date(task.dueAt).toISOString().slice(0, 10) : "—";
+    console.log(`[${task.status}] ${task.title}  ${task.node || ""}  (${task.kind} · 截止 ${due})  id: ${task.id}`);
+  }
+  if (page.tasks.length < page.total)
+    console.log(`（还有更多：--offset ${(Number(offset ?? 0) || 0) + page.tasks.length}）`);
+  return 0;
+}
+async function hrTaskCreate() {
+  const kind = readFlag("--kind");
+  const title = readFlag("--title");
+  if (!kind || !title) {
+    console.error('用法：crab hr task create --kind <attendance|payroll|contract|recruit|meeting|asset|admin|person/onboard|...> --title "..." [--node 节点说明] [--detail 详情] [--due YYYY-MM-DD] [--status alert|confirm|queued|done] [--meta JSON] [--json]');
+    return EXIT_USAGE;
+  }
+  const status = readFlag("--status");
+  if (status && !HR_TASK_STATUSES.includes(status)) {
+    console.error(`未知状态：${status}
+可用：${HR_TASK_STATUSES.join(", ")}`);
+    return EXIT_USAGE;
+  }
+  const due = parseHrDate(readFlag("--due"));
+  if (due === null) {
+    console.error("--due 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  let meta;
+  const metaFlag = readFlag("--meta");
+  if (metaFlag !== undefined) {
+    try {
+      meta = JSON.parse(metaFlag);
+    } catch {
+      console.error("--meta 需要合法 JSON（申请单任务须含 meta.form，服务端按 kind schema 校验）。");
+      return EXIT_USAGE;
+    }
+  }
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/tasks`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ kind, title, node: readFlag("--node") ?? "", detail: readFlag("--detail") ?? "", ...status ? { status } : {}, ...due != null ? { dueAt: due } : {}, ...meta ? { meta } : {} })
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    console.error(errorMessage(res.body, "创建任务失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const task = res.body.data.task;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(task, null, 2));
+  else
+    console.log(`✓ 已创建任务 ${task.title} · id: ${task.id}`);
+  return 0;
+}
+async function hrTaskUpdate() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  const status = readFlag("--status");
+  if (!target || !status && readFlag("--node") === undefined && readFlag("--detail") === undefined && readFlag("--due") === undefined) {
+    console.error("用法：crab hr task update <id> [--status alert|confirm|queued|done] [--node 节点说明] [--detail 详情] [--due YYYY-MM-DD] [--json]");
+    return EXIT_USAGE;
+  }
+  if (status && !HR_TASK_STATUSES.includes(status)) {
+    console.error(`未知状态：${status}
+可用：${HR_TASK_STATUSES.join(", ")}`);
+    return EXIT_USAGE;
+  }
+  const due = parseHrDate(readFlag("--due"));
+  if (due === null) {
+    console.error("--due 格式应为 YYYY-MM-DD。");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/tasks/${encodeURIComponent(target)}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ ...status ? { status } : {}, ...readFlag("--node") !== undefined ? { node: readFlag("--node") } : {}, ...readFlag("--detail") !== undefined ? { detail: readFlag("--detail") } : {}, ...due != null ? { dueAt: due } : {} })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "更新任务失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const task = res.body.data.task;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(task, null, 2));
+  else
+    console.log(`✓ 已更新 ${task.title}（${task.status}）。`);
+  return 0;
+}
+async function hrTaskLink() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr task link <taskId> [--reset] [--org <arg>] [--json]（仅入职/转正/离职申请单有候选人表单）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const reset = hasFlag("--reset");
+  const path = `/orgs/${encodeURIComponent(org.id)}/tasks/${encodeURIComponent(target)}${reset ? "/form-link/reset" : "/form-link"}`;
+  const res = await api2(credentials.apiBase, `/v1/hr${path}`, { method: reset ? "POST" : "GET", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    const code = res.body?.error?.code;
+    if (res.status === 400 && code === "bad_request") {
+      console.error("该任务没有候选人填单表单（仅 person/onboard · person/promotion · person/offboard 申请单支持）。");
+      return exitCodeForApiError(res.body);
+    }
+    console.error(errorMessage(res.body, "获取填单链接失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const token = res.body.data.token;
+  const link = `${hrWebBase(credentials.apiBase)}/form/${token}`;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ token, link }, null, 2));
+  else {
+    if (reset)
+      console.log("✓ 已重置（旧链接立即失效）。");
+    console.log(`填单链接：${link}`);
+    console.log("候选人免登录打开即可填写本人区字段；提交后申请单进待拍板。");
+  }
+  return 0;
+}
+async function hrDesk() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/desk`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取工作台失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const desk = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...desk, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)} · 工作台`);
+  for (const line of hrStatsLines(desk.desk.stats))
+    console.log(line);
+  console.log(`
+替你盯着：`);
+  for (const reminder of desk.desk.reminders) {
+    const chip = reminder.kind === "onboard_pending" ? `已等 ${reminder.days} 天` : reminder.days < 0 ? `过期 ${-reminder.days} 天` : `剩 ${reminder.days} 天`;
+    console.log(`  ⚠ ${reminder.text}（${chip}）`);
+  }
+  if (!desk.desk.reminders.length)
+    console.log("  （无）");
+  console.log(`
+等你拍板：`);
+  for (const task of desk.desk.pending)
+    console.log(`  [${task.status}] ${task.title}${task.refLabel ? ` · ${task.refLabel}` : ""}  ${task.node || ""}  id: ${task.id}`);
+  if (!desk.desk.pending.length)
+    console.log("  （空）");
+  console.log(`
+助理在办：`);
+  for (const task of desk.desk.running)
+    console.log(`  ${task.title}${task.refLabel ? ` · ${task.refLabel}` : ""}  ${task.node || ""}  id: ${task.id}`);
+  if (!desk.desk.running.length)
+    console.log("  （空）");
+  console.log(`
+近期完成：`);
+  for (const task of desk.desk.done)
+    console.log(`  ${task.title}${task.refLabel ? ` · ${task.refLabel}` : ""}  ${task.node || ""}`);
+  if (!desk.desk.done.length)
+    console.log("  （空）");
+  console.log(`
+最近公告：`);
+  for (const item of desk.desk.announcements.slice(0, 3)) {
+    const day = new Date(item.createdAt).toISOString().slice(0, 10);
+    console.log(`  ${day}  ${item.title}（${item.createdByName}）`);
+  }
+  if (!desk.desk.announcements.length)
+    console.log("  （无）");
+  console.log(`
+最近动态：`);
+  for (const event of desk.desk.recentEvents.slice(0, 8)) {
+    const day = new Date(event.at).toISOString().slice(0, 10);
+    console.log(`  ${day}  ${event.personName ? `${event.personName} · ` : ""}${event.note}`);
+  }
+  if (!desk.desk.recentEvents.length)
+    console.log("  （无）");
+  return 0;
+}
+function hrAnnouncementStatus(s) {
+  return s === "active" ? "[生效]" : "[已撤回]";
+}
+async function hrAnnounce() {
+  const op = args[2];
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const base = `/v1/hr/orgs/${encodeURIComponent(org.id)}/announcements`;
+  if (op === "list") {
+    const params = new URLSearchParams;
+    if (hasFlag("--all"))
+      params.set("includeWithdrawn", "1");
+    const limit = readFlag("--limit");
+    if (limit)
+      params.set("limit", limit);
+    const offset = readFlag("--offset");
+    if (offset)
+      params.set("offset", offset);
+    const res = await api2(credentials.apiBase, `${base}?${params}`, { headers: authHeaders(credentials) });
+    if (res.status !== 200) {
+      console.error(errorMessage(res.body, "获取公告失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    const page = res.body.data;
+    if (hasFlag("--json")) {
+      console.log(JSON.stringify({ ...page, org: { id: org.id, name: org.name } }, null, 2));
+      return 0;
+    }
+    console.log(`组织：${hrOrgToken(org)} · 公告 ${page.total} 条`);
+    for (const a of page.announcements) {
+      const day = new Date(a.createdAt).toISOString().slice(0, 10);
+      console.log(`${day}  ${hrAnnouncementStatus(a.status)}  ${a.title}（${a.createdByName}）  id: ${a.id}`);
+      console.log(`  ${a.body.length > 120 ? `${a.body.slice(0, 120)}…` : a.body}`);
+    }
+    if (page.announcements.length < page.total)
+      console.log(`（还有更多：--offset ${(Number(offset ?? 0) || 0) + page.announcements.length}）`);
+    return 0;
+  }
+  if (op === "post") {
+    const title = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+    const body = readFlag("--body");
+    if (!title || !body) {
+      console.error('用法：crab hr announce post <标题> --body "正文" [--org <arg>] [--json]');
+      return EXIT_USAGE;
+    }
+    const res = await api2(credentials.apiBase, base, {
+      method: "POST",
+      headers: authHeaders(credentials),
+      body: JSON.stringify({ title, body })
+    });
+    if (res.status !== 200 && res.status !== 201) {
+      console.error(errorMessage(res.body, "发布公告失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    const a = res.body.data.announcement;
+    if (hasFlag("--json"))
+      console.log(JSON.stringify(a, null, 2));
+    else
+      console.log(`✓ 已发布「${a.title}」· id: ${a.id}（成员收件箱可见）。`);
+    return 0;
+  }
+  if (op === "withdraw") {
+    const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+    if (!target) {
+      console.error("用法：crab hr announce withdraw <公告id> [--org <arg>] [--json]（撤回留档不删）");
+      return EXIT_USAGE;
+    }
+    const res = await api2(credentials.apiBase, `${base}/${encodeURIComponent(target)}/withdraw`, { method: "POST", headers: authHeaders(credentials) });
+    if (res.status !== 200) {
+      console.error(errorMessage(res.body, "撤回失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    const a = res.body.data.announcement;
+    if (hasFlag("--json"))
+      console.log(JSON.stringify({ ok: true }, null, 2));
+    else
+      console.log(`✓ 已撤回「${a?.title ?? target}」（成员不再可见，记录保留）。`);
+    return 0;
+  }
+  console.error(`用法：crab hr announce list | post <标题> --body "..." | withdraw <id>
+`);
+  return EXIT_USAGE;
+}
+async function hrInbox() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const base = `/v1/hr/orgs/${encodeURIComponent(org.id)}/inbox`;
+  if (hasFlag("--seen")) {
+    const res = await api2(credentials.apiBase, `${base}/seen`, { method: "POST", headers: authHeaders(credentials) });
+    if (res.status !== 200) {
+      console.error(errorMessage(res.body, "标记已读失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    if (hasFlag("--json"))
+      console.log(JSON.stringify(res.body.data, null, 2));
+    else
+      console.log("✓ 公告已全部标记已读。");
+    return 0;
+  }
+  const res = await api2(credentials.apiBase, base, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取收件箱失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const inbox = res.body.data.inbox;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...res.body.data, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)} · 收件箱（上次打开 ${inbox.lastSeenAt ? new Date(inbox.lastSeenAt).toLocaleDateString("zh-CN") : "从未"}）`);
+  console.log(`
+未读公告 ${inbox.unreadAnnouncementCount} 条：`);
+  for (const a of inbox.announcements)
+    console.log(`  ${new Date(a.createdAt).toISOString().slice(0, 10)}  ${a.title}（${a.createdByName}）  id: ${a.id}`);
+  if (!inbox.announcements.length)
+    console.log("  （无）");
+  console.log(`
+待拍板 ${inbox.pendingTaskCount} 条：`);
+  for (const t of inbox.pendingTasks)
+    console.log(`  [${t.status}] ${t.title}  ${t.node || ""}  id: ${t.id}`);
+  if (!inbox.pendingTasks.length)
+    console.log("  （无）");
+  console.log(`
+替你盯着：`);
+  for (const r of inbox.reminders)
+    console.log(`  ⚠ ${r.text}（${r.days < 0 ? `过期 ${-r.days} 天` : `剩 ${r.days} 天`}）`);
+  if (!inbox.reminders.length)
+    console.log("  （无）");
+  console.log(`
+打开看完后标记已读：crab hr inbox --seen`);
+  return 0;
+}
+async function hrDicts() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/dicts`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取字典失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const entries = res.body.data.entries;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...res.body.data, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  for (const type of HR_DICT_TYPES) {
+    const list = entries.filter((e) => e.type === type);
+    console.log(`${type === "dept" ? "部门" : "岗位"}（${list.length}）：`);
+    for (const e of list)
+      console.log(`  ${e.name}  id: ${e.id}`);
+    if (!list.length)
+      console.log("  （空）");
+  }
+  return 0;
+}
+async function hrDictAdd() {
+  const type = args[3];
+  const name = args[4];
+  if (!type || !name || !HR_DICT_TYPES.includes(type)) {
+    console.error("用法：crab hr dict add <dept|position> <名称> [--org <arg>] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/dicts`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ type, name })
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    console.error(errorMessage(res.body, "新增字典项失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const entry = res.body.data.entry;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(entry, null, 2));
+  else
+    console.log(`✓ 已新增${type === "dept" ? "部门" : "岗位"}「${entry.name}」· id: ${entry.id}（同名幂等返回已有项）。`);
+  return 0;
+}
+async function hrDictRm() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr dict rm <entryId> [--org <arg>] [--json]（被花名册在用的项服务端 409 拒删）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/dicts/${encodeURIComponent(target)}`, {
+    method: "DELETE",
+    headers: authHeaders(credentials)
+  });
+  if (res.status !== 200) {
+    const code = res.body?.error?.code;
+    if (res.status === 409 || code === "conflict") {
+      console.error("该字典项正被花名册人员使用，不能删除（先改人员的部门/岗位）。");
+      return exitCodeForApiError(res.body);
+    }
+    console.error(errorMessage(res.body, "删除字典项失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ok: true }, null, 2));
+  else
+    console.log("✓ 已删除字典项。");
+  return 0;
+}
+async function hrApplyLink() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const reset = hasFlag("--reset");
+  const path = `/orgs/${encodeURIComponent(org.id)}${reset ? "/form-link/reset" : "/form-link"}`;
+  const res = await api2(credentials.apiBase, `/v1/hr${path}`, { method: reset ? "POST" : "GET", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取入职收集链接失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const token = res.body.data.token;
+  const link = `${hrWebBase(credentials.apiBase)}/apply/${token}`;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ token, link }, null, 2));
+  else {
+    if (reset)
+      console.log("✓ 已重置（散出去的旧二维码全部作废）。");
+    console.log(`入职收集链接：${link}`);
+    console.log("候选人扫码 / 打开提交即自动生成入职申请单（进待拍板），HR 无需先建单。");
+  }
+  return 0;
+}
+switch (command) {
+  case "init":
+    process.exit(await init());
+  case "login":
+    process.exit(await login());
+  case "whoami":
+    process.exit(await whoami());
+  case "tokens": {
+    const sub = args[1];
+    if (sub === "list")
+      process.exit(await tokensList());
+    if (sub === "revoke")
+      process.exit(await tokensRevoke(args[2]));
+    console.error(sub ? `未知子命令：tokens ${sub}
+` : `缺少子命令：tokens list | tokens revoke <id>
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "skills": {
+    const sub = args[1];
+    if (sub === "install")
+      process.exit(installSkills(args.slice(2)));
+    if (sub === "list")
+      process.exit(listSkills());
+    if (sub === "uninstall")
+      process.exit(uninstallSkills(args.slice(2)));
+    console.error(`用法：crab skills install | list | uninstall [--agent claude,zcode,codex,agents]
+`);
+    process.exit(EXIT_USAGE);
+  }
+  case "mail": {
+    const sub = args[1];
+    if (sub === "list")
+      process.exit(await mailList());
+    if (sub === "read")
+      process.exit(await mailRead(args[2]));
+    if (sub === "unread")
+      process.exit(await mailUnread(args[2]));
+    if (sub === "search")
+      process.exit(await mailSearch(args.slice(2).join(" ") || undefined));
+    if (sub === "send")
+      process.exit(await mailSend());
+    if (sub === "archive" || sub === "trash" || sub === "delete")
+      process.exit(await mailMove(sub, args[2]));
+    if (sub === "folders")
+      process.exit(await mailFoldersOverview());
+    if (sub === "activity")
+      process.exit(await mailActivity());
+    console.error(sub ? `未知子命令：mail ${sub}
+` : `缺少子命令：mail list | read | unread | search | send | archive | trash | delete | folders | activity
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "contacts": {
+    const sub = args[1];
+    if (sub === "list")
+      process.exit(await contactsList(args.slice(2).join(" ") || undefined));
+    if (sub === "add")
+      process.exit(await contactsAdd(args[2]));
+    if (sub === "rm")
+      process.exit(await contactsRm(args[2]));
     if (sub === "invite")
       process.exit(await contactsInvite(hasFlag("--reset")));
     if (sub === "invitees")
       process.exit(await contactsInvitees());
     console.error(sub ? `未知子命令：contacts ${sub}
 ` : `缺少子命令：contacts list | add | rm | invite | invitees
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "addresses": {
+    const sub = args[1];
+    if (sub === "list")
+      process.exit(await addressesList());
+    if (sub === "add")
+      process.exit(await addressesAdd());
+    if (sub === "update")
+      process.exit(await addressesUpdate(args[2]));
+    if (sub === "set-default")
+      process.exit(await addressesSetDefault(args[2]));
+    if (sub === "rm")
+      process.exit(await addressesRm(args[2]));
+    console.error(sub ? `未知子命令：addresses ${sub}
+` : `缺少子命令：addresses list | add | update | set-default | rm
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "favorites": {
+    const sub = args[1];
+    if (sub === "list")
+      process.exit(await favoritesList());
+    if (sub === "add")
+      process.exit(await favoritesAdd(args[2]));
+    if (sub === "check")
+      process.exit(await favoritesCheck(args[2]));
+    if (sub === "rm")
+      process.exit(await favoritesRm(args[2]));
+    console.error(sub ? `未知子命令：favorites ${sub}
+` : `缺少子命令：favorites list | add | check | rm
 `);
     console.log(usage);
     process.exit(EXIT_USAGE);
@@ -9297,6 +13063,88 @@ switch (command) {
       process.exit(await agentApprovals());
     console.error(sub ? `未知子命令：agent ${sub}
 ` : `缺少子命令：agent status | sessions | approvals
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "shop": {
+    const sub = args[1];
+    if (sub === "status")
+      process.exit(await shopStatus());
+    if (sub === "roles")
+      process.exit(await shopRoles());
+    if (sub === "members")
+      process.exit(await shopMembers());
+    if (sub === "member") {
+      if (args[2] === "edit")
+        process.exit(await shopMemberEdit());
+      console.error(`用法：crab shop member edit <用户名> --perms <a,b,c> [--biz sales,support] --store <slug>
+`);
+      process.exit(EXIT_USAGE);
+    }
+    if (sub === "products")
+      process.exit(await shopProductsList());
+    if (sub === "product") {
+      const op = args[2];
+      if (op === "create")
+        process.exit(await shopProductCreate());
+      if (op === "update")
+        process.exit(await shopProductUpdate());
+      if (op === "spec")
+        process.exit(await shopProductSpec());
+      if (op === "archive")
+        process.exit(await shopProductArchive());
+      process.exit(await shopProductDetail(op));
+    }
+    if (sub === "stock")
+      process.exit(await shopStockAdjust(args[2]));
+    if (sub === "listed")
+      process.exit(await shopListedStock());
+    if (sub === "movements")
+      process.exit(await shopMovements());
+    if (sub === "categories")
+      process.exit(await shopCategories());
+    if (sub === "category") {
+      if (args[2] === "add")
+        process.exit(await shopCategoryAdd());
+      if (args[2] === "rename")
+        process.exit(await shopCategoryRename());
+      if (args[2] === "move")
+        process.exit(await shopCategoryMove());
+      if (args[2] === "delete")
+        process.exit(await shopCategoryDelete());
+      console.error(`用法：crab shop category add|rename|move|delete …（crab --help 看完整用法）
+`);
+      process.exit(EXIT_USAGE);
+    }
+    if (sub === "invite")
+      process.exit(await shopInvite());
+    if (sub === "use") {
+      const target = args.slice(2).find((x) => !x.startsWith("--"));
+      process.exit(await shopUse(target));
+    }
+    if (sub === "apply") {
+      const positional = [];
+      const rest = args.slice(2);
+      for (let i = 0;i < rest.length; i++) {
+        if (rest[i] === "--tagline") {
+          i++;
+          continue;
+        }
+        if (rest[i]?.startsWith("--"))
+          continue;
+        positional.push(rest[i]);
+      }
+      const taglineArg = readFlag("--tagline");
+      if (positional.length === 0) {
+        console.error(`用法：crab shop apply <店铺名> [--tagline 一句话介绍] [--json]
+`);
+        process.exit(EXIT_USAGE);
+      }
+      process.exit(await shopApply(positional.join(" "), taglineArg));
+    }
+    console.error(sub ? `未知子命令：shop ${sub}
+` : `缺少子命令：shop status | apply | products | product | stock | listed | movements | categories | category | members | member | invite | use | roles
 `);
     console.log(usage);
     process.exit(EXIT_USAGE);
@@ -9353,6 +13201,103 @@ switch (command) {
   }
   case "post":
     process.exit(await collabPushRecord(args[1]));
+  case "hr": {
+    const sub = args[1];
+    if (sub === "orgs")
+      process.exit(await hrOrgsList());
+    if (sub === "org") {
+      if (args[2] === "apply")
+        process.exit(await hrOrgApply(positionalArgs(args.slice(3), HR_VALUED_FLAGS).join(" ") || undefined));
+      if (args[2] === "application")
+        process.exit(await hrOrgApplication());
+      if (args[2] === "rename")
+        process.exit(await hrOrgRename());
+      console.error(`用法：crab hr org apply <名称> [--note 说明] | org application | org rename <新名称>
+`);
+      process.exit(EXIT_USAGE);
+    }
+    if (sub === "members")
+      process.exit(await hrMembersList());
+    if (sub === "member") {
+      const op = args[2];
+      if (op === "add")
+        process.exit(await hrMemberAdd());
+      if (op === "set")
+        process.exit(await hrMemberSet());
+      if (op === "rm")
+        process.exit(await hrMemberRm());
+      console.error(`用法：crab hr member add|set|rm
+`);
+      process.exit(EXIT_USAGE);
+    }
+    if (sub === "invite")
+      process.exit(await hrInvite());
+    if (sub === "people")
+      process.exit(await hrPeopleList());
+    if (sub === "stats")
+      process.exit(await hrStats());
+    if (sub === "person") {
+      const op = args[2];
+      if (op === "create")
+        process.exit(await hrPersonCreate());
+      if (op === "edit")
+        process.exit(await hrPersonEdit());
+      if (op === "offboard")
+        process.exit(await hrPersonOffboard());
+      if (op === "rm")
+        process.exit(await hrPersonRm());
+      process.exit(await hrPersonDetail(op));
+    }
+    if (sub === "event") {
+      if (args[2] === "add")
+        process.exit(await hrEventAdd());
+      console.error(`用法：crab hr event add <personId> --type <类型> --note "..."
+`);
+      process.exit(EXIT_USAGE);
+    }
+    if (sub === "events")
+      process.exit(await hrEventsList());
+    if (sub === "import")
+      process.exit(await hrImport());
+    if (sub === "dicts")
+      process.exit(await hrDicts());
+    if (sub === "dict") {
+      if (args[2] === "add")
+        process.exit(await hrDictAdd());
+      if (args[2] === "rm")
+        process.exit(await hrDictRm());
+      console.error(`用法：crab hr dict add <dept|position> <名称> | dict rm <entryId>
+`);
+      process.exit(EXIT_USAGE);
+    }
+    if (sub === "tasks")
+      process.exit(await hrTasksList());
+    if (sub === "task") {
+      const op = args[2];
+      if (op === "create")
+        process.exit(await hrTaskCreate());
+      if (op === "update")
+        process.exit(await hrTaskUpdate());
+      if (op === "link")
+        process.exit(await hrTaskLink());
+      console.error(`用法：crab hr task create|update|link
+`);
+      process.exit(EXIT_USAGE);
+    }
+    if (sub === "apply-link")
+      process.exit(await hrApplyLink());
+    if (sub === "announce")
+      process.exit(await hrAnnounce());
+    if (sub === "inbox")
+      process.exit(await hrInbox());
+    if (sub === "desk")
+      process.exit(await hrDesk());
+    console.error(sub ? `未知子命令：hr ${sub}
+` : `缺少子命令：hr orgs | org apply | members | member | invite | people | stats | person | event add | events | import | dicts | dict | tasks | task | apply-link | announce | inbox | desk
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
   case "logout":
     process.exit(await logout());
   case "version":