@crabcloud/cli 0.5.0 → 0.5.3

package/dist/crab.js

@@ -6091,16 +6091,18 @@ var SHOP_PERMISSIONS = ["products", "orders", "aftercare", "customers", "marketi
 var shopCategoryMoveInput = object({
   direction: _enum(["up", "down"])
 });
-var shopSpecGroupCreateInput = object({
-  name: string2().trim().min(1).max(30),
-  values: array(string2().trim().min(1).max(60)).min(1).max(20)
-});
-var shopSpecGroupUpdateInput = shopSpecGroupCreateInput.partial();
 var comboValues = array(string2().min(1).max(60)).min(1).max(24);
 var shopStoreCreateInput = object({
   name: string2().min(1).max(60),
   tagline: string2().max(200).default("")
 });
+var shopStoreUpdateInput = object({
+  name: string2().min(1).max(60),
+  tagline: string2().max(200),
+  description: string2().max(2000),
+  logoObjectId: string2().min(1).nullable(),
+  skuPrefix: string2().regex(/^[A-Za-z0-9]{0,8}$/)
+}).partial();
 var shopCategoryCreateInput = object({
   name: string2().min(1).max(60),
   parentId: string2().min(1).nullish()
@@ -6111,31 +6113,61 @@ var shopCategoryUpdateInput = object({
 }).partial();
 var shopVariantInput = object({
   combo: comboValues,
-  priceCents: number2().int().min(0).max(1e8),
+  priceCents: number2().int().min(0).max(1e8).nullish(),
+  compareAtPriceCents: number2().int().min(0).max(1e8).nullish(),
   stock: number2().int().min(0).max(1e7).nullish(),
-  enabled: boolean2().default(true)
+  enabled: boolean2().default(true),
+  code: string2().max(64).nullish()
 });
 var shopProductCreateInput = object({
   kind: _enum(["digital", "physical"]),
+  variantMode: _enum(["single", "multi"]),
   name: string2().min(1).max(140),
   description: string2().max(2000).default(""),
+  content: string2().max(30000).default(""),
   categoryId: string2().min(1).nullish(),
   status: _enum(["draft", "active", "archived"]).default("draft"),
   priceCents: number2().int().min(0).max(1e8).nullish(),
+  compareAtPriceCents: number2().int().min(0).max(1e8).nullish(),
   stock: number2().int().min(0).max(1e7).nullish(),
+  refundable: boolean2().nullish(),
   deliveryType: _enum(["file", "license"]).nullish(),
   deliveryFileId: string2().min(1).nullish(),
+  imageObjectId: string2().min(1).nullish(),
+  gallery: array(string2().min(1)).max(8).nullish(),
   specAxes: array(object({ name: string2().min(1).max(30), values: comboValues })).max(3).nullish(),
-  specGroupIds: array(string2().min(1)).max(3).nullish(),
-  variants: array(shopVariantInput).max(24).nullish()
+  variants: array(shopVariantInput).max(24).nullish(),
+  code: string2().max(64).nullish(),
+  maxPerOrder: number2().int().min(1).max(1e4).nullish(),
+  maxPerBuyer: number2().int().min(1).max(1e4).nullish()
+});
+var shopProductUpdateInput = shopProductCreateInput.extend({
+  status: _enum(["draft", "active", "archived"]).optional(),
+  description: string2().max(2000).optional(),
+  content: string2().max(30000).optional()
+}).partial();
+var shopStockAdjustTarget = object({
+  variantId: string2().min(1).nullish(),
+  amount: number2().int().min(0).max(1e7)
 });
-var shopProductUpdateInput = shopProductCreateInput.partial();
 var shopStockAdjustInput = object({
   mode: _enum(["in", "out", "set"]),
-  amount: number2().int().min(0).max(1e7),
-  variantId: string2().min(1).nullish(),
   reason: _enum(["purchase", "manual"]).nullish(),
-  note: string2().max(200).nullish()
+  note: string2().max(200).nullish(),
+  targets: array(shopStockAdjustTarget).min(1).max(50)
+}).superRefine((val, ctx) => {
+  if (val.reason === "purchase" && val.mode !== "in") {
+    ctx.addIssue({ code: "custom", path: ["reason"], message: "reason 'purchase' only applies to inbound" });
+  }
+  if (val.mode !== "set" && val.targets.some((t) => t.amount === 0)) {
+    ctx.addIssue({ code: "custom", path: ["targets"], message: "amount must be positive for in/out" });
+  }
+});
+var shopListedStockInput = object({
+  targets: array(object({
+    variantId: string2().min(1).nullish(),
+    stock: number2().int().min(0).max(1e7)
+  })).min(1).max(50)
 });
 var shopStripeConnectInput = object({
   secretKey: string2().min(1).max(255).regex(/^(sk|rk)_(test|live)_/, "must be a Stripe secret key (sk_…/rk_…)"),
@@ -6219,15 +6251,20 @@ var hrEventTypes = [
 var hrTaskStatuses = ["alert", "confirm", "queued", "done"];
 var hrTaskDecisions = ["approved", "rejected"];
 var optionalDay = number2().int().positive().nullable().optional();
-var hrOrgCreateInput = object({
-  name: string2().trim().min(1).max(80)
-});
 var hrOrgUpdateInput = object({
   name: string2().trim().min(1).max(80)
 });
 var hrMemberAddInput = object({
   username: string2().trim().toLowerCase().min(3).max(32),
-  title: string2().trim().max(40).optional()
+  title: string2().trim().max(40).optional(),
+  permissions: record(_enum(hrPermissionFlags), boolean2()).optional()
+});
+var hrInviteUpdateInput = object({
+  permissions: record(_enum(hrPermissionFlags), boolean2())
+});
+var hrOrgApplicationCreateInput = object({
+  name: string2().trim().min(1).max(80),
+  note: string2().trim().max(200).default("")
 });
 var hrMemberUpdateInput = object({
   role: _enum(["admin", "member"]).optional(),
@@ -6398,6 +6435,10 @@ var scopes = [
   "storage.delete",
   "contacts.read",
   "contacts.write",
+  "addresses.read",
+  "addresses.write",
+  "favorites.read",
+  "favorites.write",
   "collab.read",
   "collab.write",
   "hr.read",
@@ -6411,6 +6452,8 @@ var scopeGroups = [
   { id: "storage", scopes: ["storage.read", "storage.write", "storage.delete"] },
   { id: "collab", scopes: ["collab.read", "collab.write"] },
   { id: "contacts", scopes: ["contacts.read", "contacts.write"] },
+  { id: "addresses", scopes: ["addresses.read", "addresses.write"] },
+  { id: "favorites", scopes: ["favorites.read", "favorites.write"] },
   { id: "hr", scopes: ["hr.read", "hr.write"] },
   { id: "agent", scopes: ["agent.read", "agent.write"] }
 ];
@@ -6509,7 +6552,7 @@ var agentTokenSummarySchema = object({
   scopes: array(_enum(scopes)),
   collabSpace: string2().nullable().optional(),
   hrOrg: string2().nullable().optional(),
-  kind: _enum(["agent", "api"]).optional(),
+  kind: _enum(["agent", "api", "mobile"]).optional(),
   keyHint: string2().optional(),
   createdAt: number2(),
   lastUsedAt: number2().nullable(),
@@ -6520,6 +6563,21 @@ var apiKeyCreateInput = object({
   name: string2().trim().min(1).max(64),
   scopes: array(string2().trim().min(1).max(40)).min(1).max(32)
 });
+var mobileTokenCreateInput = object({
+  name: string2().trim().min(1).max(64)
+});
+var agentPushPlatforms = ["android", "ios", "web"];
+var agentPushPrefsSchema = object({
+  approvals: boolean2().optional(),
+  tasks: boolean2().optional(),
+  cron: boolean2().optional()
+});
+var agentPushRegisterInput = object({
+  platform: _enum(agentPushPlatforms),
+  token: string2().min(10).max(2000),
+  name: string2().trim().max(64).optional(),
+  prefs: agentPushPrefsSchema.optional()
+});
 var oauthProviders = ["google", "reai", "github"];
 var oauthUnbindInput = object({ provider: _enum(oauthProviders) });
 var oauthOnboardingConfirmInput = object({
@@ -6572,6 +6630,9 @@ var adminShopStoreStatusInput = object({
 var adminShopApplicationRejectInput = object({
   note: string2().trim().min(1).max(500)
 });
+var adminHrApplicationRejectInput = object({
+  note: string2().trim().min(1).max(500)
+});
 var subscriptionChangeInput = object({
   tierId: string2().trim().min(1).max(50)
 });
@@ -6686,6 +6747,27 @@ var contactQueryInput = object({
   limit: number2().int().min(1).max(50).default(20),
   offset: number2().int().min(0).default(0)
 });
+var addressCreateInput = object({
+  name: string2().trim().min(1).max(64),
+  phone: string2().trim().min(1).max(32),
+  region: string2().trim().max(128).optional().default(""),
+  detail: string2().trim().min(1).max(256),
+  isDefault: boolean2().optional().default(false)
+});
+var addressUpdateInput = object({
+  name: string2().trim().min(1).max(64).optional(),
+  phone: string2().trim().min(1).max(32).optional(),
+  region: string2().trim().max(128).optional(),
+  detail: string2().trim().min(1).max(256).optional(),
+  isDefault: boolean2().optional()
+});
+var FAVORITE_KINDS = ["shop.product"];
+var favoriteKindSchema = _enum(FAVORITE_KINDS);
+var favoritePutInput = object({
+  kind: favoriteKindSchema,
+  refId: string2().trim().min(1).max(64),
+  meta: record(string2(), unknown()).optional().default({})
+});
 var collabTaskStatuses = ["open", "done"];
 var collabBoostKinds = ["tasks", "members"];
 var COLLAB_RECORD_BODY_MAX = 20000;
@@ -7258,6 +7340,22 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
   contacts invite [--reset] [--json] 我的邀请码、链接与统计（--reset 重置，旧链接失效）
   contacts invitees [--offset N] [--json]
                                      我邀请的人（直接下级 + 间接计数）
+  addresses list [--json]             收货地址簿（默认地址在前，上限 20 条）
+  addresses add --name 收件人 --phone 电话 --detail 详址 [--region 省/市/区] [--default] [--json]
+                                      添加地址（--default 同时清掉旧默认）
+  addresses update <id|名称> [--name] [--phone] [--region] [--detail] [--default|--no-default] [--json]
+                                      更新地址（只改给出的字段）
+  addresses set-default <id|名称>     设为默认地址（服务端保证默认唯一，旧默认自动让位）
+  addresses rm <id|名称>              删除地址（应用侧已落库的快照不受影响）
+  favorites list [--kind shop.product] [--offset N] [--json]
+                                      收藏列表（kind 点分式「模块.资源」，v1 仅 shop.product）
+  favorites add <refId> [--kind shop.product] [--meta productName=名称,storeId=店铺id] [--json]
+                                      收藏（幂等，重复执行返回现有条目；meta 是收藏时快照，
+                                      shop.product 建议 productName + storeId 供展示兜底）
+  favorites check <refId> [--kind shop.product] [--json]
+                                      查询单条是否已收藏
+  favorites rm <refId> [--kind shop.product]
+                                      取消收藏（幂等，不存在也成功）
   storage ls [--q 关键字] [--source files|media|mail|collab|agent] [--category <id|none>]
                [--type doc|image|video|archive|code] [--tag a,b] [--trash]
                [--shared] [--recent] [--encrypted only|plain] [--message-id <id>]
@@ -7320,16 +7418,23 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
   post <taskId> (--body "..." | --body-file <path>) [--attach <fileId,...>] [--link <url,...>] [--json]
                                      推送任务记录（糖命令：等价 collab task records 的写入）
   hr orgs [--json]                   我的组织列表（hr 命令需令牌绑定组织：login --scopes hr --org org:<名称>）
-  hr org create <名称> [--json]      创建公司 / 组织（创建者 owner）
+  hr org apply <名称> [--note 说明] [--json]
+                                     申请创建公司（审核-计费制：通过时扣 1 积分自动建司）
+  hr org application [--json]        查我的建司申请进度（pending / approved / rejected）
+  hr org rename <新名称> [--org <arg>] [--json]
+                                     组织改名（org.manage）
   hr members [--org <arg>] [--json]  成员列表（角色与权限 flags）
-  hr member add <用户名> [--title 头衔] [--org <arg>]
-                                     邀请平台账号入组织（member，只读）
+  hr member add <用户名> [--title 头衔] [--permissions org.manage=1,...] [--org <arg>]
+                                     邀请平台账号入组织（默认只读，--permissions 定生效权限）
   hr member set <memberId> [--role admin|member] [--permissions org.manage=1,...] [--title]
                                      角色与权限逐项配置（owner 恒全权不可改）
   hr member rm <memberId>            移除成员
-  hr invite [--reset] [--org <arg>]  常驻邀请链接（未注册者注册即入组织；--reset 作废旧链）
+  hr invite [--permissions org.manage=1,...] [--reset] [--org <arg>]
+                                     常驻邀请链接（/join 加入页；--permissions 改加入后默认权限，
+                                     未指定项视为关；--reset 作废旧链，配置保留）
   hr people [--q 关键字] [--status active|probation|resigned] [--dept] [--limit N] [--offset N] [--json]
                                      花名册（身份证/薪资对令牌永不外泄，输出如实按无权限转述）
+  hr stats [--org <arg>] [--json]    花名册统计带（在职/试用/离职 + 合同与试用期风险计数）
   hr person <id> [--json]            人员详情
   hr person create --name "姓名" --hired-at YYYY-MM-DD [--dept] [--role] [--probation-end] [--contract-type] [--contract-end] [--mobile] [--email] [--notes] [--json]
                                      建档（自动落入职事件）
@@ -7337,19 +7442,36 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
                                      编辑（转正/离职状态流转自动落痕）
   hr person offboard <id> [--date YYYY-MM-DD] [--json]
                                      办理离职（档案封存，记录依法保留）
+  hr person rm <id>                  删除人员（仅零记录档案可删；有事件时间线一律 409）
   hr event add <personId> --type <onboard|contract|change|attendance|payroll|award|asset|offboard|note> --note "..." [--at YYYY-MM-DD] [--json]
                                      事件落痕（时间线即证据链）
   hr events [--person <id>] [--type] [--limit N] [--offset N] [--json]
                                      事件时间线
   hr import <文件.csv|.tsv|.json> [--org <arg>] [--json]
                                      批量建档（≤200 行；CSV/TSV 表头自动识别，姓名/入职列必填）
+  hr dicts [--org <arg>] [--json]    字典全量（部门 / 岗位）
+  hr dict add <dept|position> <名称> [--org <arg>] [--json]
+                                     新增字典项（在用项禁删，服务端 409）
+  hr dict rm <entryId> [--org <arg>] 删除字典项
   hr tasks [--status alert|confirm|queued|done] [--kind] [--limit N] [--offset N] [--json]
                                      任务列表
   hr task create --kind <attendance|payroll|contract|...> --title "..." [--node] [--detail] [--due YYYY-MM-DD] [--json]
                                      新建任务
   hr task update <id> [--status ...] [--node] [--detail] [--due YYYY-MM-DD] [--json]
                                      任务流转
-  hr desk [--org <arg>] [--json]     工作台聚合（Agent 首入口：任务三段 + 大事提醒 + 最近动态）
+  hr task link <taskId> [--reset] [--org <arg>] [--json]
+                                     申请单免登录填单链接（入职/转正/离职单发候选人；--reset 作废旧链）
+  hr apply-link [--reset] [--org <arg>] [--json]
+                                     组织常驻入职收集链接（候选人提交即自动生成入职申请单）
+  hr announce list [--all] [--limit N] [--offset N] [--org <arg>] [--json]
+                                     公告列表（默认只看生效；--all 含已撤回）
+  hr announce post <标题> --body "..." [--org <arg>] [--json]
+                                     发布公告（org.manage；对象 = 组织全体成员）
+  hr announce withdraw <公告id> [--org <arg>] [--json]
+                                     撤回公告（发布者本人或 org.manage；留档不删）
+  hr inbox [--seen] [--org <arg>] [--json]
+                                     收件箱聚合（未读公告 + 待拍板任务 + 提醒；--seen 标记已读）
+  hr desk [--org <arg>] [--json]     工作台聚合（Agent 首入口：统计 + 提醒 + 任务三段 + 公告 + 动态，一次取全）
   shop status [--json]               店铺列表 + 开通申请进度（多店全列，★ = 当前店）
   shop use <slug>                    切换当前管理的店铺（持久保存；店级命令缺省作用于它，
                                      --store 可单条临时覆盖；不带参数显示当前店）
@@ -7374,12 +7496,37 @@ var usage = `crab — Crab Cloud CLI（Agent-first 入口）
                                      同级内上移/下移一位（边界静默不动）
   shop category delete <id或名称> --store <slug> [--json]
                                      删除分类（有子级拒绝；叶子删除后商品迁入未分类）
-  shop specs [--store <slug>] [--json]
-                                     规格库模板（名称/选项值/引用商品数）
-  shop spec add <名称> --values <值1,值2,…> --store <slug> [--json]
-  shop spec update <id或名称> [--name <新名>] [--values <a,b,c>] --store <slug> [--json]
-  shop spec delete <id或名称> --store <slug> [--json]
-                                     规格模板管理（引用 = 快照拷贝，改/删不影响已建商品）
+  shop products [--status draft|active|archived] [--category <id|名称>] [--q 文本]
+                [--limit N --offset N] [--json]
+                                     商品列表（多规格行库存 = 变体合计；q 按名称/描述匹配）
+  shop product <id|SKU码> [--json]   商品详情（先 id 直查，404 再按店内 SKU 码反查）
+  shop product create --kind physical|digital --name 名称 [--variant-mode single|multi]
+        [--spec-axis "颜色=红,蓝"]… [--price-cents N] [--compare-at-cents N]
+        [--category <id|名称>] [--description …] [--code <SKU码>] [--stock N]
+        [--refundable on|off] [--max-per-order N] [--max-per-buyer N]
+        [--delivery file|license --delivery-file <对象id>] [--status draft|active] [--json]
+                                     新建商品（类型与规格模式创建即锁定；多规格组合价
+                                     后续 product spec 配置；金额一律整数分）
+  shop product update <id|SKU码> [--name …] [--description …] [--category <id|名称|none>]
+        [--price-cents N] [--compare-at-cents N|clear] [--status draft|active|archived]
+        [--refundable on|off] [--max-per-order N|clear] [--max-per-buyer N|clear]
+        [--code <SKU码>] [--json]
+                                     更新商品（类型与规格模式不可变；改组合价用 product
+                                     spec，改库存用 stock / listed）
+  shop product spec <id|SKU码> --set "<值1,值2>=价格分[,划线价分][,on|off]" … [--json]
+                                     多规格组合整组配置（值按轴顺序；未提及组合保持
+                                     原值；不改库存；被台账引用的组合只能关不能删）
+  shop product archive <id|SKU码> [--json]
+                                     下架归档（软删；订单快照不受影响）
+  shop stock in|out|set <id|SKU码> --amount N [--variant <组合码|变体id|"值1/值2">]
+        [--reason purchase] --note "说明" [--json]
+                                     库存动账（实物动仓库账；数字限量同命令走上架账；
+                                     in/out ≥1；set 或未给 --reason 必须带 --note；
+                                     退货入库/发货出库由售后与发货端点自动落账）
+  shop listed <id|SKU码> --stock N [--variant <组合码|变体id|"值1/值2">] [--json]
+                                     实物销售库存（上架额度）直设，0 ≤ N ≤ 实际库存
+  shop movements [--product <id|SKU码>] [--limit N --offset N] [--json]
+                                     出入库台账（新→旧；--product 按商品过滤）
   credits [--json]                   积分余额（月送/充值/合计；需 credits.read scope）
   credits history [--limit N] [--offset N] [--json]
                                      积分流水（变动 ±：消耗为负；需 credits.read）
@@ -8130,6 +8277,322 @@ async function contactsInvitees() {
     console.log(`（还有更多：contacts invitees --offset ${page.nextOffset}）`);
   return 0;
 }
+function resolveAddressArg(list, arg) {
+  const byId = list.find((item) => item.id === arg);
+  if (byId)
+    return { ok: true, id: byId.id };
+  const byName = list.filter((item) => item.name === arg);
+  if (byName.length === 1)
+    return { ok: true, id: byName[0].id };
+  if (byName.length > 1) {
+    return {
+      ok: false,
+      failure: "ambiguous",
+      error: `有 ${byName.length} 条同名地址，请改用 id：
+` + byName.map((item) => `  ${item.id}  ${item.name}  ${item.phone}  ${item.detail}`).join(`
+`)
+    };
+  }
+  return { ok: false, failure: "missing", error: "地址不存在或已删除（crab addresses list 查看现有条目）。" };
+}
+async function requireAddressList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/addresses", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取地址簿失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  return { credentials, list: res.body.data };
+}
+function addressLine(address) {
+  const region = address.region ? `${address.region} · ` : "";
+  return `${address.id}  ${address.name}  ${address.phone}  ${region}${address.detail}${address.isDefault ? "  [默认]" : ""}`;
+}
+async function addressesList() {
+  const loaded = await requireAddressList();
+  if (typeof loaded === "number")
+    return loaded;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(loaded.list, null, 2));
+    return 0;
+  }
+  if (loaded.list.length === 0) {
+    console.log("地址簿还是空的。");
+    return 0;
+  }
+  for (const address of loaded.list)
+    console.log(addressLine(address));
+  console.log(`共 ${loaded.list.length} 条`);
+  return 0;
+}
+function addressFieldFlags() {
+  const body = {};
+  let hasAny = false;
+  for (const [flag, key] of [
+    ["--name", "name"],
+    ["--phone", "phone"],
+    ["--region", "region"],
+    ["--detail", "detail"]
+  ]) {
+    const value = readFlag(flag);
+    if (value !== undefined) {
+      body[key] = value;
+      hasAny = true;
+    }
+  }
+  if (hasFlag("--default")) {
+    body.isDefault = true;
+    hasAny = true;
+  } else if (hasFlag("--no-default")) {
+    body.isDefault = false;
+    hasAny = true;
+  }
+  return { body, hasAny };
+}
+async function addressesAdd() {
+  const name = readFlag("--name");
+  const phone = readFlag("--phone");
+  const detail = readFlag("--detail");
+  if (!name || !phone || !detail) {
+    console.error("用法：crab addresses add --name 收件人 --phone 电话 --detail 详址 [--region 省/市/区] [--default] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const { body } = addressFieldFlags();
+  const res = await api2(credentials.apiBase, "/v1/addresses", {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ name, phone, detail, region: readFlag("--region") ?? "", ...body })
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    console.error(errorMessage(res.body, "添加失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const address = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(address, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已添加：${address.name}（id ${address.id}）${address.isDefault ? "，已设为默认" : ""}`);
+  return 0;
+}
+async function addressesUpdate(idOrName) {
+  if (!idOrName) {
+    console.error("用法：crab addresses update <id|名称> [--name 名] [--phone 电话] [--region 省/市/区] [--detail 详址] [--default|--no-default] [--json]");
+    return EXIT_USAGE;
+  }
+  const { body, hasAny } = addressFieldFlags();
+  if (!hasAny) {
+    console.error("没有给出要更新的字段（--name/--phone/--region/--detail/--default）。");
+    return EXIT_USAGE;
+  }
+  const loaded = await requireAddressList();
+  if (typeof loaded === "number")
+    return loaded;
+  const resolved = resolveAddressArg(loaded.list, idOrName);
+  if (!resolved.ok) {
+    console.error(resolved.error);
+    return resolved.failure === "ambiguous" ? EXIT_USAGE : EXIT_NOT_FOUND;
+  }
+  const res = await api2(loaded.credentials.apiBase, `/v1/addresses/${encodeURIComponent(resolved.id)}`, {
+    method: "PATCH",
+    headers: authHeaders(loaded.credentials),
+    body: JSON.stringify(body)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "更新失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const address = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(address, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已更新：${addressLine(address)}`);
+  return 0;
+}
+async function addressesSetDefault(idOrName) {
+  if (!idOrName) {
+    console.error("用法：crab addresses set-default <id|名称>");
+    return EXIT_USAGE;
+  }
+  const loaded = await requireAddressList();
+  if (typeof loaded === "number")
+    return loaded;
+  const resolved = resolveAddressArg(loaded.list, idOrName);
+  if (!resolved.ok) {
+    console.error(resolved.error);
+    return resolved.failure === "ambiguous" ? EXIT_USAGE : EXIT_NOT_FOUND;
+  }
+  const res = await api2(loaded.credentials.apiBase, `/v1/addresses/${encodeURIComponent(resolved.id)}`, {
+    method: "PATCH",
+    headers: authHeaders(loaded.credentials),
+    body: JSON.stringify({ isDefault: true })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "设置默认地址失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const address = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(address, null, 2));
+    return 0;
+  }
+  console.log(`✓ 默认地址已切换：${address.name}（${address.region ? `${address.region} · ` : ""}${address.detail}）`);
+  return 0;
+}
+async function addressesRm(idOrName) {
+  if (!idOrName) {
+    console.error("用法：crab addresses rm <id|名称>");
+    return EXIT_USAGE;
+  }
+  const loaded = await requireAddressList();
+  if (typeof loaded === "number")
+    return loaded;
+  const resolved = resolveAddressArg(loaded.list, idOrName);
+  if (!resolved.ok) {
+    console.error(resolved.error);
+    return resolved.failure === "ambiguous" ? EXIT_USAGE : EXIT_NOT_FOUND;
+  }
+  const res = await api2(loaded.credentials.apiBase, `/v1/addresses/${encodeURIComponent(resolved.id)}`, {
+    method: "DELETE",
+    headers: authHeaders(loaded.credentials)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "删除失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  console.log(`✓ 已删除（${resolved.id}）；已下单订单不受影响（结账用的是下单时的地址快照）。`);
+  return 0;
+}
+var FAVORITE_KINDS_CLI = ["shop.product"];
+function favoriteKindFlag() {
+  return readFlag("--kind") ?? FAVORITE_KINDS_CLI[0];
+}
+function parseMetaFlag() {
+  const raw = readFlag("--meta");
+  if (raw === undefined)
+    return {};
+  const meta = {};
+  for (const pair of raw.split(",")) {
+    const eq = pair.indexOf("=");
+    if (eq <= 0)
+      return null;
+    meta[pair.slice(0, eq).trim()] = pair.slice(eq + 1).trim();
+  }
+  return meta;
+}
+function favoriteLine(favorite) {
+  const productName = typeof favorite.meta.productName === "string" ? favorite.meta.productName : "";
+  const storeId = typeof favorite.meta.storeId === "string" ? `  店 ${favorite.meta.storeId}` : "";
+  const name = productName ? `${productName}（${favorite.refId}）` : favorite.refId;
+  return `${favorite.id}  ${name}${storeId}  ${favorite.kind}  ${new Date(favorite.createdAt).toLocaleDateString("zh-CN")}`;
+}
+async function favoritesList() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = favoriteKindFlag();
+  const params = new URLSearchParams({ kind });
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  params.set("limit", readFlag("--limit") ?? "30");
+  const res = await api2(credentials.apiBase, `/v1/favorites?${params}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取收藏失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const page = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(page, null, 2));
+    return 0;
+  }
+  if (page.items.length === 0) {
+    console.log(`还没有 ${kind} 收藏。`);
+    return 0;
+  }
+  for (const favorite of page.items)
+    console.log(favoriteLine(favorite));
+  console.log(`共 ${page.total} 条`);
+  if (page.nextOffset !== null)
+    console.log(`（还有更多：favorites list --offset ${page.nextOffset}）`);
+  return 0;
+}
+async function favoritesAdd(refId) {
+  if (!refId) {
+    console.error("用法：crab favorites add <refId> [--kind shop.product] [--meta productName=名称,storeId=店铺id] [--json]");
+    return EXIT_USAGE;
+  }
+  const meta = parseMetaFlag();
+  if (meta === null) {
+    console.error("--meta 格式不正确：应为 k=v,k=v（逗号分隔、每个键值对首个 = 分隔）。");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = favoriteKindFlag();
+  const res = await api2(credentials.apiBase, "/v1/favorites", {
+    method: "PUT",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ kind, refId, meta })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "收藏失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const favorite = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(favorite, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已收藏：${favoriteLine(favorite)}`);
+  return 0;
+}
+async function favoritesCheck(refId) {
+  if (!refId) {
+    console.error("用法：crab favorites check <refId> [--kind shop.product] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = favoriteKindFlag();
+  const res = await api2(credentials.apiBase, `/v1/favorites/${encodeURIComponent(kind)}/${encodeURIComponent(refId)}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "查询收藏状态失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const { favorited } = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ favorited }, null, 2));
+    return 0;
+  }
+  console.log(favorited ? `✓ 已收藏（${kind} · ${refId}）` : `未收藏（${kind} · ${refId}）`);
+  return 0;
+}
+async function favoritesRm(refId) {
+  if (!refId) {
+    console.error("用法：crab favorites rm <refId> [--kind shop.product]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = favoriteKindFlag();
+  const res = await api2(credentials.apiBase, `/v1/favorites/${encodeURIComponent(kind)}/${encodeURIComponent(refId)}`, { method: "DELETE", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "取消收藏失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  console.log(`✓ 已取消收藏（${kind} · ${refId}）`);
+  return 0;
+}
 var STORAGE_SOURCES = ["files", "media", "mail", "collab", "agent"];
 var STORAGE_TYPES = ["doc", "image", "video", "archive", "code"];
 var MIME_BY_EXT = {
@@ -9634,14 +10097,42 @@ var HR_VALUED_FLAGS = [
   "--due",
   "--limit",
   "--offset",
-  "--q"
+  "--q",
+  "--body",
+  "--meta"
 ];
 var HR_PERSON_STATUSES = ["active", "probation", "resigned"];
 var HR_TASK_STATUSES = ["alert", "confirm", "queued", "done"];
 var HR_EVENT_TYPES = ["onboard", "contract", "change", "attendance", "payroll", "award", "asset", "offboard", "note"];
+var HR_PERMISSION_FLAGS = ["org.manage", "people.write", "tasks.write", "sensitive.read"];
+var HR_DICT_TYPES = ["dept", "position"];
 function hrOrgToken(org) {
   return `org:${org.name}`;
 }
+function hrWebBase(apiBase) {
+  if (/127\.0\.0\.1:14321|localhost:14321/.test(apiBase))
+    return "http://127.0.0.1:14342";
+  try {
+    return `https://hr.${new URL(apiBase).host.replace(/^api\./, "")}`;
+  } catch {
+    return apiBase;
+  }
+}
+function parseHrPermissions(raw) {
+  if (raw === undefined)
+    return;
+  const out = { "org.manage": false, "people.write": false, "tasks.write": false, "sensitive.read": false };
+  for (const pair of raw.split(",").map((x) => x.trim()).filter(Boolean)) {
+    const [key, value] = pair.split("=");
+    if (!key || !HR_PERMISSION_FLAGS.includes(key.trim())) {
+      console.error(`未知权限项：${pair}
+可用：${HR_PERMISSION_FLAGS.join(", ")}`);
+      return null;
+    }
+    out[key.trim()] = value !== "0" && value?.toLowerCase() !== "false";
+  }
+  return out;
+}
 async function resolveHrOrg(credentials, arg) {
   const res = await api2(credentials.apiBase, "/v1/hr/orgs", { headers: authHeaders(credentials) });
   if (res.status !== 200) {
@@ -9654,7 +10145,7 @@ async function resolveHrOrg(credentials, arg) {
   }
   const orgs = res.body.data.orgs;
   if (orgs.length === 0) {
-    console.error("你还没有加入任何公司 / 组织（在 hr-web 创建，或 crab hr org create <名称>）。");
+    console.error("你还没有加入任何公司 / 组织（在 hr-web 申请创建，或 crab hr org apply <名称> 提交申请）。");
     return EXIT_NOT_FOUND;
   }
   const raw = (arg ?? "").trim();
@@ -10193,166 +10684,919 @@ async function shopCategoryDelete() {
     console.log(`✓ 已删除分类：${target.name}（旗下商品迁入「未分类」）`);
   return 0;
 }
-async function fetchSpecGroups(credentials, storeId) {
-  const res = await api2(credentials.apiBase, `/v1/shop/stores/${storeId}/spec-groups`, { headers: authHeaders(credentials) });
-  if (res.status !== 200) {
-    console.error(errorMessage(res.body, "获取规格库失败。"));
-    return exitCodeForApiError(res.body);
+var SHOP_PRODUCT_VALUED_FLAGS = [
+  "--store",
+  "--status",
+  "--category",
+  "--q",
+  "--limit",
+  "--offset",
+  "--product",
+  "--kind",
+  "--variant-mode",
+  "--name",
+  "--price-cents",
+  "--compare-at-cents",
+  "--description",
+  "--code",
+  "--stock",
+  "--refundable",
+  "--max-per-order",
+  "--max-per-buyer",
+  "--delivery",
+  "--delivery-file",
+  "--variant",
+  "--amount",
+  "--reason",
+  "--note",
+  "--set",
+  "--spec-axis"
+];
+function readFlagAll(flag) {
+  const out = [];
+  for (let i = 0;i < args.length; i++) {
+    if (args[i] === flag && i + 1 < args.length)
+      out.push(args[i + 1]);
   }
-  return res.body.data.groups;
+  return out;
 }
-function resolveSpecGroupRef(list, ref) {
-  const byId = list.find((g) => g.id === ref);
-  if (byId)
-    return byId;
-  const byName = list.filter((g) => g.name === ref);
-  if (byName.length === 1)
-    return byName[0];
-  if (byName.length > 1)
-    return `名称「${ref}」有 ${byName.length} 个同名模板，请用 id 指定（crab shop specs 查看）`;
-  return `规格模板不存在：${ref}（crab shop specs 查看）`;
+function fmtMoney(cents) {
+  if (cents === null || cents === undefined)
+    return "—";
+  return `$${(cents / 100).toFixed(2)}`;
 }
-function parseSpecValues(flagName) {
-  const raw = readFlag(flagName);
-  if (raw === undefined)
+function parseCentsFlag(raw, flagName) {
+  if (raw === undefined || raw.trim() === "") {
+    console.error(`缺少 ${flagName}（金额一律整数分，如 1990 = $19.90）`);
     return null;
-  const values = raw.split(/[,，、]+/).map((x) => x.trim()).filter(Boolean);
-  if (values.length === 0 || values.length > 20) {
-    console.error("选项值需 1-20 个（逗号分隔；重复值自动去重）。");
+  }
+  const n = Number(raw.trim());
+  if (!Number.isSafeInteger(n) || n < 0 || n > 1e8) {
+    console.error(`${flagName} 必须是非负整数分（禁止元/浮点），如 1990 = $19.90`);
     return null;
   }
-  return values;
+  return n;
 }
-async function shopSpecs() {
-  const credentials = requireCredentials();
-  if (typeof credentials === "number")
-    return credentials;
-  const store = await resolveStoreArg(credentials);
-  if (typeof store === "number")
-    return store;
-  const groups = await fetchSpecGroups(credentials, store.id);
-  if (typeof groups === "number")
-    return groups;
-  if (hasFlag("--json")) {
-    console.log(JSON.stringify(groups, null, 2));
-    return 0;
+function parseIntFlag(raw, flagName, minN) {
+  if (raw === undefined || raw.trim() === "") {
+    console.error(`缺少 ${flagName}`);
+    return null;
   }
-  if (groups.length === 0) {
-    console.log(`「${store.name}」规格库还是空的。crab shop spec add <名称> --values <a,b,c> 创建模板。`);
-    return 0;
+  const n = Number(raw.trim());
+  if (!Number.isSafeInteger(n) || n < minN) {
+    console.error(`${flagName} 必须是 ≥${minN} 的整数`);
+    return null;
   }
-  console.log(`「${store.name}」规格库（引用 = 快照拷贝进商品，改模板不影响已建商品）：`);
-  for (const g of groups) {
-    console.log(`  ${g.name}  [${g.values.join(" / ")}]  引用商品 ${g.productCount}  ${g.id}`);
+  return n;
+}
+function parseOnOffFlag(raw, flagName) {
+  if (raw !== "on" && raw !== "off") {
+    console.error(`${flagName} 只接受 on | off`);
+    return null;
   }
-  return 0;
+  return raw === "on";
 }
-async function shopSpecAdd() {
-  const credentials = requireCredentials();
-  if (typeof credentials === "number")
-    return credentials;
-  const positional = shopPositionals(3, ["--values"]);
-  const name = positional.join(" ").trim();
-  const values = parseSpecValues("--values");
-  if (!name || values === null) {
-    console.error("用法：crab shop spec add <名称> --values <值1,值2,…> --store <slug>");
-    return EXIT_USAGE;
+function shopStatusLabel(status) {
+  return status === "active" ? "在售" : status === "draft" ? "草稿" : "已归档";
+}
+function shopKindLabel(kind) {
+  return kind === "physical" ? "实物" : "数字";
+}
+function fmtListedStock(kind, stock) {
+  if (stock === null)
+    return kind === "physical" ? "待补（挂出不可买）" : "不限";
+  return String(stock);
+}
+async function fetchShopProduct(credentials, ref) {
+  const direct = await api2(credentials.apiBase, `/v1/shop/products/${encodeURIComponent(ref)}`, { headers: authHeaders(credentials) });
+  if (direct.status === 200)
+    return direct.body.data.product;
+  if (direct.status !== 404) {
+    console.error(errorMessage(direct.body, "获取商品失败。"));
+    return exitCodeForApiError(direct.body);
   }
   const store = await resolveStoreArg(credentials);
   if (typeof store === "number")
     return store;
-  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/spec-groups`, {
-    method: "POST",
-    headers: authHeaders(credentials),
-    body: JSON.stringify({ name, values })
-  });
-  if (res.status !== 201) {
-    console.error(errorMessage(res.body, "创建规格模板失败。"));
-    return exitCodeForApiError(res.body);
+  const lookup = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/products/lookup?code=${encodeURIComponent(ref)}`, { headers: authHeaders(credentials) });
+  if (lookup.status !== 200) {
+    console.error(`找不到商品：${ref}（不是商品 id，也不是店内 SKU 码；crab shop products 查看）`);
+    return EXIT_NOT_FOUND;
   }
-  const group = res.body.data.group;
-  if (hasFlag("--json")) {
-    console.log(JSON.stringify(group, null, 2));
-    return 0;
+  const productId = lookup.body.data.productId;
+  const detail = await api2(credentials.apiBase, `/v1/shop/products/${productId}`, { headers: authHeaders(credentials) });
+  if (detail.status !== 200) {
+    console.error(errorMessage(detail.body, "获取商品失败。"));
+    return exitCodeForApiError(detail.body);
   }
-  console.log(`✓ 模板已创建：${group.name} [${group.values.join(" / ")}]（${group.id}）`);
-  return 0;
+  return detail.body.data.product;
+}
+async function resolveCategoryFlag(credentials, storeId, ref, allowNone) {
+  if (allowNone && ref === "none")
+    return { id: null };
+  const categories = await fetchStoreCategories(credentials, storeId);
+  if (typeof categories === "number")
+    return categories;
+  const hit = resolveCategoryRef(categories, ref);
+  if (typeof hit === "string") {
+    console.error(hit);
+    return EXIT_NOT_FOUND;
+  }
+  return { id: hit.id };
+}
+function resolveVariantRef(product, ref) {
+  const normalized = ref.replace(/\s*\/\s*/g, "/");
+  return product.variants.find((x) => x.id === ref) ?? product.variants.find((x) => x.code === ref) ?? product.variants.find((x) => x.combo.join("/") === normalized) ?? null;
 }
-async function shopSpecUpdate() {
+function cartesianCombos(axes) {
+  let acc = [[]];
+  for (const axis of axes)
+    acc = acc.flatMap((prefix) => axis.values.map((value) => [...prefix, value]));
+  return acc;
+}
+function variantChoiceList(product) {
+  return product.variants.map((v) => `  ${v.code}  ${v.combo.join(" / ")}（id ${v.id}）`).join(`
+`);
+}
+async function shopProductsList() {
   const credentials = requireCredentials();
   if (typeof credentials === "number")
     return credentials;
-  const positional = shopPositionals(3, ["--name", "--values"]);
-  const ref = positional[0];
-  const name = readFlag("--name");
-  const values = readFlag("--values") !== undefined ? parseSpecValues("--values") : undefined;
-  if (!ref || name === undefined && values === undefined) {
-    console.error("用法：crab shop spec update <模板 id 或名称> [--name <新名>] [--values <a,b,c>] --store <slug>");
+  const store = await resolveStoreArg(credentials);
+  if (typeof store === "number")
+    return store;
+  const status = readFlag("--status");
+  if (status && !["draft", "active", "archived"].includes(status)) {
+    console.error("--status 只接受 draft | active | archived");
+    return EXIT_USAGE;
+  }
+  const params = new URLSearchParams;
+  if (status)
+    params.set("status", status);
+  const categoryRef = readFlag("--category");
+  if (categoryRef) {
+    const cat = await resolveCategoryFlag(credentials, store.id, categoryRef, true);
+    if (typeof cat === "number")
+      return cat;
+    params.set("categoryId", cat.id ?? "none");
+  }
+  const q = readFlag("--q");
+  if (q)
+    params.set("q", q);
+  const limit = readFlag("--limit");
+  if (limit)
+    params.set("limit", limit);
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/products?${params.toString()}`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取商品列表失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const data = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(data, null, 2));
+    return 0;
+  }
+  if (data.products.length === 0) {
+    console.log(`「${store.name}」还没有符合条件的商品。新建：crab shop product create --kind physical --name 名称 --variant-mode single`);
+    return 0;
+  }
+  for (const p of data.products) {
+    const shape = p.hasVariants ? `多规格·${p.variants.length} 组合` : "单规格";
+    let price;
+    if (p.hasVariants && p.variants.length > 0) {
+      const prices = p.variants.map((v) => v.priceCents);
+      const min = Math.min(...prices);
+      const max = Math.max(...prices);
+      price = min === max ? fmtMoney(min) : `${fmtMoney(min)} ~ ${fmtMoney(max)}`;
+    } else {
+      price = fmtMoney(p.priceCents);
+    }
+    const stock = p.hasVariants ? p.variants.some((v) => v.stock === null) ? "上架 不限" : `上架 ${p.variants.reduce((a, v) => a + (v.stock ?? 0), 0)}` : `上架 ${fmtListedStock(p.kind, p.stock)}`;
+    const warehouse = p.kind === "physical" ? ` · 仓库 ${p.hasVariants ? p.variants.every((v) => v.warehouseStock === null) ? "—" : p.variants.reduce((a, v) => a + (v.warehouseStock ?? 0), 0) : p.warehouseStock ?? 0}` : "";
+    console.log(`${p.id}  [${shopStatusLabel(p.status)}] ${p.name}  ${shopKindLabel(p.kind)}·${shape}  ${price}  ${stock}${warehouse}${p.code ? `  ${p.code}` : ""}`);
+  }
+  console.log(`共 ${data.total} 件商品（本页 ${data.products.length} 件；--offset 翻页）`);
+  return 0;
+}
+async function shopProductDetail(ref) {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  if (!ref) {
+    console.error("用法：crab shop product <id|SKU码> [--json]");
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, ref);
+  if (typeof product === "number")
+    return product;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(product, null, 2));
+    return 0;
+  }
+  let categoryName = product.categoryId ?? "未分类";
+  if (product.categoryId) {
+    const categories = await fetchStoreCategories(credentials, product.storeId);
+    if (typeof categories !== "number")
+      categoryName = categories.find((c) => c.id === product.categoryId)?.name ?? product.categoryId;
+  }
+  console.log(`${product.name}  [${shopStatusLabel(product.status)}]`);
+  console.log(`  ${shopKindLabel(product.kind)} · ${product.hasVariants ? "多规格" : "单规格"}  分类：${categoryName}  id：${product.id}`);
+  if (product.code)
+    console.log(`  SKU 码：${product.code}`);
+  const priceParts = [`基础价：${fmtMoney(product.priceCents)}`];
+  if (product.compareAtPriceCents !== null)
+    priceParts.push(`划线价：${fmtMoney(product.compareAtPriceCents)}`);
+  priceParts.push(`退款：${product.refundable ? "开" : "关"}`);
+  if (product.maxPerOrder !== null)
+    priceParts.push(`单笔限购 ${product.maxPerOrder}`);
+  if (product.maxPerBuyer !== null)
+    priceParts.push(`每买家限购 ${product.maxPerBuyer}`);
+  console.log(`  ${priceParts.join("  ")}`);
+  if (product.kind === "digital") {
+    console.log(`  交付：${product.deliveryType === "license" ? "license 密钥" : "文件下载"}${product.deliveryFileId ? `（对象 ${product.deliveryFileId}）` : ""}`);
+  } else if (product.hasVariants) {
+    const listedStr = product.variants.some((v) => v.stock === null) ? "不限" : `合计 ${product.variants.reduce((a, v) => a + (v.stock ?? 0), 0)}`;
+    const whStr = product.variants.every((v) => v.warehouseStock === null) ? "—" : `合计 ${product.variants.reduce((a, v) => a + (v.warehouseStock ?? 0), 0)}`;
+    console.log(`  库存：上架 ${listedStr} · 仓库 ${whStr}`);
+  } else {
+    console.log(`  库存：上架 ${fmtListedStock(product.kind, product.stock)}${product.kind === "physical" ? ` · 仓库 ${product.warehouseStock ?? 0}` : ""}`);
+  }
+  if (product.specAxes.length > 0) {
+    console.log(`  规格轴：${product.specAxes.map((a) => `${a.name}（${a.values.join("、")}）`).join("  ")}`);
+  }
+  if (product.hasVariants) {
+    if (product.variants.length === 0) {
+      console.log('  组合：待配置——crab shop product spec <id> --set "值1,值2=价格分" 配置组合价格后才能上架');
+    } else {
+      console.log(`  组合（${product.variants.length}）：`);
+      for (const v of product.variants) {
+        const price = `${fmtMoney(v.priceCents)}${v.compareAtPriceCents !== null ? `（划线 ${fmtMoney(v.compareAtPriceCents)}）` : ""}`;
+        const stock = `上架 ${v.stock === null ? "不限" : v.stock}${v.warehouseStock !== null ? ` · 仓库 ${v.warehouseStock}` : ""}`;
+        console.log(`    ${v.code}  ${v.combo.join(" / ")}  ${price}  ${stock}  ${v.enabled ? "在售" : "停售"}`);
+      }
+    }
+  }
+  if (product.gallery.length > 0)
+    console.log(`  图册：${product.gallery.length} 张（第一张为主图）`);
+  if (product.description)
+    console.log(`  描述：${product.description.length > 100 ? `${product.description.slice(0, 100)}…` : product.description}`);
+  console.log(`  更新：${formatTime(product.updatedAt)}${product.status === "archived" ? "（恢复上架：product update <id> --status draft）" : ""}`);
+  return 0;
+}
+async function shopProductCreate() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const kind = readFlag("--kind");
+  if (kind !== "physical" && kind !== "digital") {
+    console.error(`用法：crab shop product create --kind physical|digital --name 名称 [--variant-mode single|multi] [--spec-axis "颜色=红,蓝"]… [--price-cents N] [--status draft|active] …
+必填：--kind（类型，创建后不可变）与 --name；金额一律整数分`);
     return EXIT_USAGE;
   }
-  if (values === null)
+  const name = readFlag("--name")?.trim();
+  if (!name) {
+    console.error("缺少 --name 名称");
+    return EXIT_USAGE;
+  }
+  const variantMode = readFlag("--variant-mode") ?? "single";
+  if (variantMode !== "single" && variantMode !== "multi") {
+    console.error("--variant-mode 只接受 single | multi（创建即锁定，之后不可改）");
     return EXIT_USAGE;
+  }
+  const axisArgs = readFlagAll("--spec-axis");
+  if (variantMode === "single" && axisArgs.length > 0) {
+    console.error("单规格商品没有规格轴（规格模式创建即锁定）；要规格就 --variant-mode multi");
+    return EXIT_USAGE;
+  }
+  const specAxes = [];
+  for (const raw of axisArgs) {
+    const eq = raw.indexOf("=");
+    if (eq <= 0) {
+      console.error(`--spec-axis 格式：轴名=值1,值2（如 "颜色=红,蓝"），收到「${raw}」`);
+      return EXIT_USAGE;
+    }
+    const axisName = raw.slice(0, eq).trim();
+    const values = raw.slice(eq + 1).split(/[,，、]+/).map((x) => x.trim()).filter(Boolean);
+    if (!axisName || values.length === 0) {
+      console.error(`--spec-axis 轴名与选项值都不能为空：「${raw}」`);
+      return EXIT_USAGE;
+    }
+    specAxes.push({ name: axisName, values });
+  }
+  if (specAxes.length > 3) {
+    console.error("规格轴最多 3 条（--spec-axis 可重复出现）");
+    return EXIT_USAGE;
+  }
+  if (variantMode === "multi") {
+    const comboCount = specAxes.reduce((acc, a) => acc * a.values.length, 1);
+    if (comboCount > 24) {
+      console.error(`规格组合 ${comboCount} 个超出上限 24——减少轴或选项值`);
+      return EXIT_USAGE;
+    }
+  }
+  const body = { kind, variantMode, name };
+  if (variantMode === "multi" && specAxes.length > 0)
+    body.specAxes = specAxes;
+  const status = readFlag("--status");
+  if (status) {
+    if (status !== "draft" && status !== "active") {
+      console.error("--status 创建时只接受 draft | active");
+      return EXIT_USAGE;
+    }
+    body.status = status;
+  }
+  const categoryRef = readFlag("--category");
+  if (categoryRef) {
+    const store = await resolveStoreArg(credentials);
+    if (typeof store === "number")
+      return store;
+    const cat = await resolveCategoryFlag(credentials, store.id, categoryRef, false);
+    if (typeof cat === "number")
+      return cat;
+    body.categoryId = cat.id;
+  }
+  const description = readFlag("--description");
+  if (description !== undefined)
+    body.description = description;
+  const priceCents = readFlag("--price-cents");
+  if (priceCents !== undefined) {
+    const parsed = parseCentsFlag(priceCents, "--price-cents");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.priceCents = parsed;
+  }
+  const compareAt = readFlag("--compare-at-cents");
+  if (compareAt !== undefined) {
+    const parsed = parseCentsFlag(compareAt, "--compare-at-cents");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.compareAtPriceCents = parsed;
+  }
+  const code = readFlag("--code");
+  if (code !== undefined) {
+    if (variantMode === "multi") {
+      console.error("多规格商品的码在每个组合上（组合配置时自动/指定分配），商品级 --code 不适用");
+      return EXIT_USAGE;
+    }
+    body.code = code.trim();
+  }
+  const stockRaw = readFlag("--stock");
+  if (stockRaw !== undefined) {
+    if (variantMode === "multi") {
+      console.error("多规格商品的库存挂在组合上：创建后用 crab shop stock（仓库账）/ crab shop listed（上架额度）按组合调整");
+      return EXIT_USAGE;
+    }
+    const parsed = parseIntFlag(stockRaw, "--stock", 0);
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.stock = parsed;
+  }
+  const refundable = readFlag("--refundable");
+  if (refundable !== undefined) {
+    const parsed = parseOnOffFlag(refundable, "--refundable");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.refundable = parsed;
+  }
+  for (const [flag, key] of [["--max-per-order", "maxPerOrder"], ["--max-per-buyer", "maxPerBuyer"]]) {
+    const raw = readFlag(flag);
+    if (raw !== undefined) {
+      const parsed = parseIntFlag(raw, flag, 1);
+      if (parsed === null)
+        return EXIT_USAGE;
+      body[key] = parsed;
+    }
+  }
+  const deliveryType = readFlag("--delivery");
+  const deliveryFile = readFlag("--delivery-file");
+  if (deliveryType !== undefined || deliveryFile !== undefined) {
+    if (kind !== "digital") {
+      console.error("--delivery / --delivery-file 只适用于数字商品（实物无交付形态）");
+      return EXIT_USAGE;
+    }
+    if (deliveryType !== undefined) {
+      if (deliveryType !== "file" && deliveryType !== "license") {
+        console.error("--delivery 只接受 file | license");
+        return EXIT_USAGE;
+      }
+      body.deliveryType = deliveryType;
+    }
+    if (deliveryFile !== undefined)
+      body.deliveryFileId = deliveryFile;
+  }
   const store = await resolveStoreArg(credentials);
   if (typeof store === "number")
     return store;
-  const groups = await fetchSpecGroups(credentials, store.id);
-  if (typeof groups === "number")
-    return groups;
-  const target = resolveSpecGroupRef(groups, ref);
-  if (typeof target === "string") {
-    console.error(target);
-    return EXIT_NOT_FOUND;
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/products`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify(body)
+  });
+  if (res.status !== 201) {
+    console.error(errorMessage(res.body, "创建商品失败。"));
+    if (res.body?.error?.code === "specs_required") {
+      console.error('提示：多规格商品上架前必须配置完整组合——crab shop product spec <id> --set "值1,值2=价格分"');
+    }
+    return exitCodeForApiError(res.body);
+  }
+  const product = res.body.data.product;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(product, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已创建商品（${shopStatusLabel(product.status)}）：${product.name}  ${product.id}`);
+  if (product.hasVariants) {
+    console.log(`  规格轴：${product.specAxes.map((a) => `${a.name}（${a.values.join("、")}）`).join("  ")}`);
+    console.log(`  下一步：crab shop product spec ${product.id} --set "值1,值2=价格分" 配置组合价格（配置完整后才能上架）`);
+  } else {
+    console.log(`  SKU 码：${product.code}`);
+    console.log(`  下一步：crab shop product update ${product.id} --price-cents 1990 --status active 上架（金额整数分）`);
+  }
+  return 0;
+}
+async function shopProductUpdate() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const target = shopPositionals(3, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error(`用法：crab shop product update <id|SKU码> [--name …] [--description …] [--category <id|名称|none>] [--price-cents N] [--compare-at-cents N|clear] [--status draft|active|archived] [--refundable on|off] [--max-per-order N|clear] [--max-per-buyer N|clear] [--code <SKU码>] [--json]
+只提交给出的字段；改多规格组合用 product spec，改库存用 stock / listed`);
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  const body = {};
+  const name = readFlag("--name");
+  if (name !== undefined) {
+    if (!name.trim()) {
+      console.error("--name 不能为空");
+      return EXIT_USAGE;
+    }
+    body.name = name.trim();
+  }
+  const description = readFlag("--description");
+  if (description !== undefined)
+    body.description = description;
+  const categoryRef = readFlag("--category");
+  if (categoryRef !== undefined) {
+    const cat = await resolveCategoryFlag(credentials, product.storeId, categoryRef, true);
+    if (typeof cat === "number")
+      return cat;
+    body.categoryId = cat.id;
+  }
+  const status = readFlag("--status");
+  if (status !== undefined) {
+    if (!["draft", "active", "archived"].includes(status)) {
+      console.error("--status 只接受 draft | active | archived");
+      return EXIT_USAGE;
+    }
+    body.status = status;
+  }
+  const priceRaw = readFlag("--price-cents");
+  if (priceRaw !== undefined) {
+    const parsed = parseCentsFlag(priceRaw, "--price-cents");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.priceCents = parsed;
+  }
+  const compareAtRaw = readFlag("--compare-at-cents");
+  if (compareAtRaw !== undefined) {
+    if (compareAtRaw === "clear")
+      body.compareAtPriceCents = null;
+    else {
+      const parsed = parseCentsFlag(compareAtRaw, "--compare-at-cents");
+      if (parsed === null)
+        return EXIT_USAGE;
+      body.compareAtPriceCents = parsed;
+    }
+  }
+  const refundable = readFlag("--refundable");
+  if (refundable !== undefined) {
+    const parsed = parseOnOffFlag(refundable, "--refundable");
+    if (parsed === null)
+      return EXIT_USAGE;
+    body.refundable = parsed;
+  }
+  for (const [flag, key] of [["--max-per-order", "maxPerOrder"], ["--max-per-buyer", "maxPerBuyer"]]) {
+    const raw = readFlag(flag);
+    if (raw !== undefined) {
+      if (raw === "clear")
+        body[key] = null;
+      else {
+        const parsed = parseIntFlag(raw, flag, 1);
+        if (parsed === null)
+          return EXIT_USAGE;
+        body[key] = parsed;
+      }
+    }
+  }
+  const code = readFlag("--code");
+  if (code !== undefined) {
+    if (product.hasVariants) {
+      console.error("多规格商品的码在每个组合上（商品级 --code 不适用，服务端会忽略）");
+      return EXIT_USAGE;
+    }
+    body.code = code.trim();
   }
-  const res = await api2(credentials.apiBase, `/v1/shop/spec-groups/${target.id}`, {
+  if (Object.keys(body).length === 0) {
+    console.error("没有任何要更新的字段——至少给一个 --name / --price-cents / --status …");
+    return EXIT_USAGE;
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}`, {
     method: "PATCH",
     headers: authHeaders(credentials),
-    body: JSON.stringify({ ...name !== undefined ? { name: name.trim() } : {}, ...values !== undefined ? { values } : {} })
+    body: JSON.stringify(body)
   });
   if (res.status !== 200) {
-    console.error(errorMessage(res.body, "更新规格模板失败。"));
+    console.error(errorMessage(res.body, "更新商品失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const updated = res.body.data.product;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(updated, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已更新：${updated.name}  [${shopStatusLabel(updated.status)}]  ${updated.id}`);
+  console.log(`  基础价：${fmtMoney(updated.priceCents)}${updated.compareAtPriceCents !== null ? `（划线 ${fmtMoney(updated.compareAtPriceCents)}）` : ""}`);
+  return 0;
+}
+function parseSpecSet(raw, axes) {
+  const eq = raw.indexOf("=");
+  if (eq <= 0)
+    return `--set 格式："<值1,值2>=价格分[,划线价分|clear][,on|off]"（如 "红,M=1990,2500,on"），收到「${raw}」`;
+  const combo = raw.slice(0, eq).split(/[,，、]+/).map((x) => x.trim());
+  if (combo.length !== axes.length) {
+    return `组合需要 ${axes.length} 个值（轴顺序：${axes.map((a) => a.name).join(" / ")}），收到「${raw.slice(0, eq)}」`;
+  }
+  for (let i = 0;i < combo.length; i++) {
+    if (!axes[i].values.includes(combo[i])) {
+      return `值「${combo[i]}」不在规格轴「${axes[i].name}」的选项里（可选：${axes[i].values.join("、")}）`;
+    }
+  }
+  const right = raw.slice(eq + 1).split(/[,，、]+/).map((x) => x.trim());
+  const price = Number(right[0]);
+  if (!Number.isSafeInteger(price) || price < 0) {
+    return `--set 价格分必须是非负整数（如 1990 = $19.90），收到「${right[0]}」`;
+  }
+  const entry = { combo, price };
+  for (const extra of right.slice(1)) {
+    if (extra === "on" || extra === "off")
+      entry.enabled = extra === "on";
+    else if (extra === "clear")
+      entry.compareAt = null;
+    else {
+      const n = Number(extra);
+      if (!Number.isSafeInteger(n) || n < 0)
+        return `--set 第 2 段起应为划线价分、clear 或 on|off，收到「${extra}」`;
+      entry.compareAt = n;
+    }
+  }
+  return entry;
+}
+async function shopProductSpec() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const target = shopPositionals(3, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  const sets = readFlagAll("--set");
+  if (!target || sets.length === 0) {
+    console.error(`用法：crab shop product spec <id|SKU码> --set "<值1,值2>=价格分[,划线价分|clear][,on|off]" … [--json]
+值按规格轴顺序给（值1=第一轴）；未提及的组合保持原值；本命令不改库存（动账 stock / 上架额度 listed）；规格轴在创建时锁定，轴数量首次保存即锁`);
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  if (!product.hasVariants) {
+    console.error("单规格商品没有规格组合——改价格用 crab shop product update <id> --price-cents N");
+    return EXIT_USAGE;
+  }
+  if (product.specAxes.length === 0) {
+    console.error("该商品还没有规格轴（多规格商品创建时用 --spec-axis 配置；存量无轴商品暂不支持 CLI 加轴，到商家控制台操作）");
+    return EXIT_USAGE;
+  }
+  const overrides = new Map;
+  for (const raw of sets) {
+    const parsed = parseSpecSet(raw, product.specAxes);
+    if (typeof parsed === "string") {
+      console.error(parsed);
+      return EXIT_USAGE;
+    }
+    overrides.set(JSON.stringify(parsed.combo), parsed);
+  }
+  const prevByKey = new Map(product.variants.map((v) => [v.comboKey, v]));
+  const combos = cartesianCombos(product.specAxes);
+  if (combos.length > 24) {
+    console.error(`规格组合 ${combos.length} 个超出上限 24`);
+    return EXIT_USAGE;
+  }
+  const unresolved = combos.filter((combo) => {
+    const key = JSON.stringify(combo);
+    return !overrides.has(key) && !prevByKey.has(key) && product.priceCents === null;
+  });
+  if (unresolved.length > 0) {
+    console.error(`以下新组合未给价格且商品无基础价可沿用：${unresolved.map((c) => c.join("/")).join("、")}
+用 --set 补价格，或先 crab shop product update <id> --price-cents N 设基础价`);
+    return EXIT_USAGE;
+  }
+  const variants = combos.map((combo) => {
+    const key = JSON.stringify(combo);
+    const prev = prevByKey.get(key);
+    const o = overrides.get(key);
+    const row = { combo, enabled: o?.enabled ?? prev?.enabled ?? true };
+    const price = o ? o.price : prev?.priceCents;
+    if (price !== undefined)
+      row.priceCents = price;
+    row.compareAtPriceCents = o ? o.compareAt !== undefined ? o.compareAt : prev?.compareAtPriceCents ?? null : prev?.compareAtPriceCents ?? null;
+    if (prev) {
+      row.stock = prev.stock;
+      row.code = prev.code;
+    }
+    return row;
+  });
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ specAxes: product.specAxes, variants })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "配置组合失败。"));
+    const code = res.body?.error?.code;
+    if (code === "spec_combo_in_ledger")
+      console.error('提示：被出入库台账引用的组合不能删除——用 --set "…,off" 关闭在售代替');
+    if (code === "exceeds_warehouse")
+      console.error("提示：组合销售库存不能超过实际库存（存量组合原值回写不该触发；检查商品是否有超账警示态）");
+    return exitCodeForApiError(res.body);
+  }
+  const updated = res.body.data.product;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(updated, null, 2));
+    return 0;
+  }
+  console.log(`✓ 已配置 ${updated.variants.length} 个组合（${updated.variants.filter((v) => v.enabled).length} 个在售）：`);
+  for (const v of updated.variants) {
+    const price = `${fmtMoney(v.priceCents)}${v.compareAtPriceCents !== null ? `（划线 ${fmtMoney(v.compareAtPriceCents)}）` : ""}`;
+    const stock = `上架 ${v.stock === null ? "不限" : v.stock}${v.warehouseStock !== null ? ` · 仓库 ${v.warehouseStock}` : ""}`;
+    console.log(`  ${v.code}  ${v.combo.join(" / ")}  ${price}  ${stock}  ${v.enabled ? "在售" : "停售"}`);
+  }
+  console.log("改库存：crab shop stock in|out|set <id>（仓库账）· crab shop listed <id>（上架额度，实物）");
+  return 0;
+}
+async function shopProductArchive() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const target = shopPositionals(3, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error(`用法：crab shop product archive <id|SKU码> [--json]
+下架归档（软删）：买家不可见，历史订单快照不受影响；恢复用 product update <id> --status draft`);
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}`, { method: "DELETE", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "归档商品失败。"));
     return exitCodeForApiError(res.body);
   }
-  const group = res.body.data.group;
   if (hasFlag("--json"))
-    console.log(JSON.stringify(group, null, 2));
+    console.log(JSON.stringify({ ok: true, id: product.id }, null, 2));
   else
-    console.log(`✓ 模板已更新：${group.name} [${group.values.join(" / ")}]（已建商品不受影响）`);
+    console.log(`✓ 已归档：${product.name}  ${product.id}（恢复：crab shop product update ${product.id} --status draft）`);
   return 0;
 }
-async function shopSpecDelete() {
+async function shopStockAdjust(mode) {
   const credentials = requireCredentials();
   if (typeof credentials === "number")
     return credentials;
-  const positional = shopPositionals(3, []);
-  const ref = positional[0];
-  if (!ref) {
-    console.error(`用法：crab shop spec delete <模板 id 或名称> --store <slug>
-（引用 = 快照拷贝：删除不影响已建商品）`);
+  if (mode !== "in" && mode !== "out" && mode !== "set") {
+    console.error(`用法：crab shop stock in|out|set <id|SKU码> --amount N [--variant <组合码|变体id|"值1/值2">] [--reason purchase] --note "说明" [--json]
+  in 入库 / out 出库（变动量 ≥1）/ set 盘点设定（仓库账 = N，可为 0）
+  --reason purchase 仅入库有效；set 或未给 --reason（按 manual 落账）必须带 --note
+  退货入库与发货出库由售后/发货端点自动落账，勿用本命令手工登记`);
+    return EXIT_USAGE;
+  }
+  const target = shopPositionals(3, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("缺少商品 <id|SKU码>");
+    return EXIT_USAGE;
+  }
+  const amountRaw = readFlag("--amount");
+  if (amountRaw === undefined) {
+    console.error("缺少 --amount N（in/out 为变动量 ≥1；set 为盘点后的实际库存数 ≥0）");
+    return EXIT_USAGE;
+  }
+  const amount = Number(amountRaw);
+  if (!Number.isSafeInteger(amount) || amount < 0 || mode !== "set" && amount === 0) {
+    console.error(mode === "set" ? "--amount 必须是 ≥0 的整数（盘点后的实际库存数）" : "--amount 必须是 ≥1 的整数（in/out 为变动量）");
+    return EXIT_USAGE;
+  }
+  const reason = readFlag("--reason");
+  if (reason !== undefined && reason !== "purchase" && reason !== "manual") {
+    console.error("--reason 只接受 purchase（采购入库）| manual");
+    return EXIT_USAGE;
+  }
+  if (reason === "purchase" && mode !== "in") {
+    console.error("--reason purchase 仅入库（in）有效；出库/盘点一律落 manual");
+    return EXIT_USAGE;
+  }
+  const note = readFlag("--note");
+  if ((mode === "set" || reason === undefined) && !note?.trim()) {
+    console.error('盘点（set）或未指定 --reason（按 manual 落账）必须带 --note "原因说明"（台账留痕）');
+    return EXIT_USAGE;
+  }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  const targets = [];
+  const variantRef = readFlag("--variant");
+  if (product.hasVariants) {
+    if (!variantRef) {
+      console.error(`多规格商品必须用 --variant 指定组合（组合码 / 变体 id / "值1/值2"）：
+${variantChoiceList(product)}`);
+      return EXIT_USAGE;
+    }
+    const variant = resolveVariantRef(product, variantRef);
+    if (!variant) {
+      console.error(`找不到组合：${variantRef}（可用组合：
+${variantChoiceList(product)}）`);
+      return EXIT_USAGE;
+    }
+    targets.push({ variantId: variant.id, amount });
+  } else {
+    if (variantRef !== undefined) {
+      console.error("单规格商品没有组合，去掉 --variant");
+      return EXIT_USAGE;
+    }
+    targets.push({ amount });
+  }
+  const body = { mode, targets };
+  if (reason)
+    body.reason = reason;
+  if (note?.trim())
+    body.note = note.trim();
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}/stock`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify(body)
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "库存动账失败。"));
+    const code = res.body?.error?.code;
+    if (code === "insufficient_stock")
+      console.error("提示：库存不足——先入库：crab shop stock in …");
+    if (code === "unlimited_stock")
+      console.error("提示：不限量库存不能出库——先用 stock set 转限量（盘点语义）再操作");
+    return exitCodeForApiError(res.body);
+  }
+  const items = res.body.data.items;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(res.body.data, null, 2));
+    return 0;
+  }
+  const after = items[0];
+  const label = mode === "in" ? "入库" : mode === "out" ? "出库" : "盘点";
+  console.log(`✓ ${label} ${amount}：${product.name}`);
+  if (after) {
+    const parts = [];
+    if (after.warehouseStock !== null)
+      parts.push(`仓库 ${after.warehouseStock}`);
+    parts.push(`上架 ${after.stock === null ? "不限" : after.stock}`);
+    console.log(`  现值：${parts.join(" · ")}`);
+  }
+  if (product.kind === "physical") {
+    console.log("  提示：动的是仓库账；上架（销售）额度另用 crab shop listed 设定（≤ 仓库账）");
+  }
+  return 0;
+}
+async function shopListedStock() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const target = shopPositionals(2, SHOP_PRODUCT_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error(`用法：crab shop listed <id|SKU码> --stock N [--variant <组合码|变体id|"值1/值2">] [--json]
+实物销售库存（上架额度）直设：0 ≤ N ≤ 实际库存，不够先 crab shop stock in 入库；数字商品无仓库层（限售额度用 stock in/set 起账）`);
+    return EXIT_USAGE;
+  }
+  const stockRaw = readFlag("--stock");
+  if (stockRaw === undefined) {
+    console.error("缺少 --stock N（上架额度，0 ~ 实际库存）");
+    return EXIT_USAGE;
+  }
+  const stock = Number(stockRaw);
+  if (!Number.isSafeInteger(stock) || stock < 0) {
+    console.error("--stock 必须是 ≥0 的整数");
     return EXIT_USAGE;
   }
+  const product = await fetchShopProduct(credentials, target);
+  if (typeof product === "number")
+    return product;
+  if (product.kind !== "physical") {
+    console.error("数字商品没有仓库层，销售库存用 crab shop stock in/set 起账");
+    return EXIT_USAGE;
+  }
+  const targets = [];
+  const variantRef = readFlag("--variant");
+  if (product.hasVariants) {
+    if (!variantRef) {
+      console.error(`多规格商品必须用 --variant 指定组合：
+${variantChoiceList(product)}`);
+      return EXIT_USAGE;
+    }
+    const variant = resolveVariantRef(product, variantRef);
+    if (!variant) {
+      console.error(`找不到组合：${variantRef}（可用组合：
+${variantChoiceList(product)}）`);
+      return EXIT_USAGE;
+    }
+    targets.push({ variantId: variant.id, stock });
+  } else {
+    if (variantRef !== undefined) {
+      console.error("单规格商品没有组合，去掉 --variant");
+      return EXIT_USAGE;
+    }
+    targets.push({ stock });
+  }
+  const res = await api2(credentials.apiBase, `/v1/shop/products/${product.id}/listed-stock`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ targets })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "设定销售库存失败。"));
+    const code = res.body?.error?.code;
+    if (code === "exceeds_warehouse")
+      console.error('提示：上架额度不能超过实际库存——先入库再上调：crab shop stock in <id> --amount N --note "…"');
+    return exitCodeForApiError(res.body);
+  }
+  const items = res.body.data.items;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(res.body.data, null, 2));
+    return 0;
+  }
+  const after = items[0];
+  console.log(`✓ 已设上架额度 ${stock}：${product.name}${after?.warehouseStock !== null && after?.warehouseStock !== undefined ? `（仓库 ${after.warehouseStock}）` : ""}`);
+  return 0;
+}
+var MOVEMENT_REASON_LABELS = {
+  purchase: "采购入库",
+  sale: "销售",
+  manual: "手工调整",
+  restore: "退款回补",
+  shipment: "发货出库"
+};
+async function shopMovements() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
   const store = await resolveStoreArg(credentials);
   if (typeof store === "number")
     return store;
-  const groups = await fetchSpecGroups(credentials, store.id);
-  if (typeof groups === "number")
-    return groups;
-  const target = resolveSpecGroupRef(groups, ref);
-  if (typeof target === "string") {
-    console.error(target);
-    return EXIT_NOT_FOUND;
+  const params = new URLSearchParams;
+  const productRef = readFlag("--product");
+  if (productRef) {
+    const product = await fetchShopProduct(credentials, productRef);
+    if (typeof product === "number")
+      return product;
+    params.set("productId", product.id);
   }
-  const res = await api2(credentials.apiBase, `/v1/shop/spec-groups/${target.id}`, {
-    method: "DELETE",
-    headers: authHeaders(credentials)
-  });
+  const limit = readFlag("--limit");
+  if (limit)
+    params.set("limit", limit);
+  const offset = readFlag("--offset");
+  if (offset)
+    params.set("offset", offset);
+  const res = await api2(credentials.apiBase, `/v1/shop/stores/${store.id}/movements?${params.toString()}`, { headers: authHeaders(credentials) });
   if (res.status !== 200) {
-    console.error(errorMessage(res.body, "删除规格模板失败。"));
+    console.error(errorMessage(res.body, "获取出入库台账失败。"));
     return exitCodeForApiError(res.body);
   }
-  if (hasFlag("--json"))
-    console.log(JSON.stringify({ ok: true }, null, 2));
-  else
-    console.log(`✓ 已删除模板：${target.name}（已引用商品不受影响）`);
+  const data = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify(data, null, 2));
+    return 0;
+  }
+  if (data.movements.length === 0) {
+    console.log("还没有出入库流水（入库 crab shop stock in / 发货与退款自动落账）。");
+    return 0;
+  }
+  for (const m of data.movements) {
+    const arrow = m.direction === "in" ? "入库 +" : "出库 -";
+    const tier = m.tier === "warehouse" ? "仓库" : "上架";
+    const combo = m.variantCombo ? `（${m.variantCombo.join("/")}）` : "";
+    const reason = MOVEMENT_REASON_LABELS[m.reason] ?? m.reason;
+    const order = m.orderId ? `  订单 ${m.orderId}` : "";
+    console.log(`${formatTime(m.createdAt)}  ${arrow}${m.quantity} [${tier}]  ${m.productName}${combo}  ${reason}${m.note ? `  ${m.note}` : ""}${order}`);
+  }
+  const offsetN = Number.parseInt(offset ?? "0", 10) || 0;
+  console.log(`共 ${data.total} 条流水（本页 ${data.movements.length} 条${offsetN > 0 ? `，自第 ${offsetN + 1} 条` : ""}；--offset 翻页）`);
   return 0;
 }
 async function hrOrgsList() {
@@ -10378,29 +11622,96 @@ async function hrOrgsList() {
   }
   return 0;
 }
-async function hrOrgCreate(name) {
+async function hrOrgApply(name) {
   if (!name) {
-    console.error("用法：crab hr org create <名称> [--json]");
+    console.error("用法：crab hr org apply <名称> [--note 说明] [--json]（审核通过扣 1 积分自动建司）");
     return EXIT_USAGE;
   }
+  const note = readFlag("--note") ?? "";
   const credentials = requireCredentials();
   if (typeof credentials === "number")
     return credentials;
-  const res = await api2(credentials.apiBase, "/v1/hr/orgs", {
+  const res = await api2(credentials.apiBase, "/v1/hr/orgs/applications", {
     method: "POST",
     headers: authHeaders(credentials),
-    body: JSON.stringify({ name })
+    body: JSON.stringify({ name, note })
   });
   if (res.status !== 200 && res.status !== 201) {
-    console.error(errorMessage(res.body, "创建组织失败。"));
+    const code = res.body?.error?.code;
+    if (res.status === 409 || code === "application_exists" || code === "conflict") {
+      console.error("你已有一条待审核的建司申请（crab hr org application 查进度）。");
+      return exitCodeForApiError(res.body);
+    }
+    console.error(errorMessage(res.body, "提交申请失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const application = res.body.data.application;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(application, null, 2));
+  else {
+    console.log(`✓ 已提交建司申请「${application.name}」· id: ${application.id}`);
+    console.log("审核通过后公司自动出现（通过时扣 1 积分）；进度：crab hr org application");
+  }
+  return 0;
+}
+async function hrOrgApplication() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const res = await api2(credentials.apiBase, "/v1/hr/orgs/applications/mine", { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "查询申请进度失败。"));
     return exitCodeForApiError(res.body);
   }
-  const org = res.body.data.org;
+  const application = res.body.data.application;
   if (hasFlag("--json")) {
-    console.log(JSON.stringify(org, null, 2));
+    console.log(JSON.stringify(application, null, 2));
+    return 0;
+  }
+  if (!application) {
+    console.log("还没有建司申请（crab hr org apply <名称> 提交）。");
     return 0;
   }
-  console.log(`✓ 已创建 ${org.name}（你是 owner）。提示：重新授权绑定该组织：crab login --scopes hr --org ${hrOrgToken(org)}`);
+  const day = new Date(application.createdAt).toISOString().slice(0, 10);
+  if (application.status === "pending") {
+    console.log(`审核中：${application.name}（${day} 提交）· id: ${application.id}`);
+    console.log("通过时扣 1 积分并自动建司，无需其他操作。");
+  } else if (application.status === "approved") {
+    console.log(`✓ 已通过：${application.name}（${day} 提交）· 公司已建立`);
+    console.log("绑定新组织：crab login --scopes hr --org org:<公司名>");
+  } else {
+    console.log(`✗ 已驳回：${application.name}（${day} 提交）`);
+    if (application.reviewNote)
+      console.log(`  驳回意见：${application.reviewNote}`);
+    console.log("可修改后重新提交：crab hr org apply <名称> [--note 说明]");
+  }
+  return 0;
+}
+async function hrOrgRename() {
+  const name = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!name) {
+    console.error("用法：crab hr org rename <新名称> [--org <arg>] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}`, {
+    method: "PATCH",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ name })
+  });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "组织改名失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ok: true }, null, 2));
+  else
+    console.log(`✓ 已改名：${org.name} → ${name}（org: 令牌绑定标识随新名变化，注意重新授权）。`);
   return 0;
 }
 async function hrMembersList() {
@@ -10441,10 +11752,13 @@ async function hrMemberAdd() {
     return EXIT_USAGE;
   }
   const title = readFlag("--title");
+  const permissions = parseHrPermissions(readFlag("--permissions"));
+  if (permissions === null)
+    return EXIT_USAGE;
   const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/members`, {
     method: "POST",
     headers: authHeaders(credentials),
-    body: JSON.stringify({ username: target, ...title ? { title } : {} })
+    body: JSON.stringify({ username: target, ...title ? { title } : {}, ...permissions ? { permissions } : {} })
   });
   if (res.status !== 200 && res.status !== 201) {
     console.error(errorMessage(res.body, "邀请成员失败。"));
@@ -10452,21 +11766,11 @@ async function hrMemberAdd() {
   }
   if (hasFlag("--json"))
     console.log(JSON.stringify(res.body.data, null, 2));
-  else
-    console.log(`✓ 已把 ${target} 加入 ${org.name}（member，只读；用 hr member set 提权）。`);
-  return 0;
-}
-function parsePermissionFlags(text) {
-  if (!text)
-    return;
-  const out = {};
-  for (const pair of text.split(",").map((x) => x.trim()).filter(Boolean)) {
-    const [key, value] = pair.split("=");
-    if (!key)
-      continue;
-    out[key.trim()] = value !== "0" && value?.toLowerCase() !== "false";
+  else {
+    const on = permissions ? Object.entries(permissions).filter(([, v]) => v).map(([k]) => k).join(",") : "";
+    console.log(`✓ 已把 ${target} 加入 ${org.name}（member${on ? `，权限：${on}` : "，只读"}；用 hr member set 调整）。`);
   }
-  return out;
+  return 0;
 }
 async function hrMemberSet() {
   const credentials = requireCredentials();
@@ -10477,7 +11781,9 @@ async function hrMemberSet() {
     return org;
   const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
   const role = readFlag("--role");
-  const permissions = parsePermissionFlags(readFlag("--permissions"));
+  const permissions = parseHrPermissions(readFlag("--permissions"));
+  if (permissions === null)
+    return EXIT_USAGE;
   const title = readFlag("--title");
   if (!target || !role && !permissions && title === undefined) {
     console.error("用法：crab hr member set <memberId> [--role admin|member] [--permissions org.manage=1,people.write=1,tasks.write=1,sensitive.read=0] [--title 头衔] [--org <arg>]");
@@ -10536,6 +11842,28 @@ async function hrInvite() {
   const org = await resolveHrOrg(credentials, readFlag("--org"));
   if (typeof org === "number")
     return org;
+  const permissionsInput = parseHrPermissions(readFlag("--permissions"));
+  if (permissionsInput === null)
+    return EXIT_USAGE;
+  if (permissionsInput) {
+    const patch = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/invite`, {
+      method: "PATCH",
+      headers: authHeaders(credentials),
+      body: JSON.stringify({ permissions: permissionsInput })
+    });
+    if (patch.status !== 200) {
+      console.error(errorMessage(patch.body, "更新邀请默认权限失败。"));
+      return exitCodeForApiError(patch.body);
+    }
+    const updated = patch.body.data.invite;
+    if (hasFlag("--json")) {
+      console.log(JSON.stringify(updated, null, 2));
+      return 0;
+    }
+    const on = Object.entries(updated.permissions).filter(([, v]) => v).map(([k]) => k);
+    console.log(`✓ 已更新加入后默认权限：${on.length ? on.join(", ") : "全只读"}（链接不变）。`);
+    return 0;
+  }
   const path = hasFlag("--reset") ? "/invite/reset" : "/invite";
   const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}${path}`, { method: hasFlag("--reset") ? "POST" : "GET", headers: authHeaders(credentials) });
   if (res.status !== 200) {
@@ -10543,14 +11871,15 @@ async function hrInvite() {
     return exitCodeForApiError(res.body);
   }
   const invite = res.body.data.invite;
-  const main = credentials.apiBase.includes("127.0.0.1") ? "http://127.0.0.1:14331" : "https://crabcloud.cc";
-  const link = `${main}/register?invite=${invite.token}`;
+  const link = `${hrWebBase(credentials.apiBase)}/join/${invite.token}`;
   if (hasFlag("--json"))
     console.log(JSON.stringify({ ...invite, link }, null, 2));
   else {
     if (hasFlag("--reset"))
-      console.log("✓ 已重置（旧链接立即失效）。");
+      console.log("✓ 已重置（旧链接立即失效，默认权限配置保留）。");
+    const on = Object.entries(invite.permissions).filter(([, v]) => v).map(([k]) => k);
     console.log(`邀请链接：${link}`);
+    console.log(`加入后默认权限：${on.length ? on.join(", ") : "全只读"}（修改：--permissions org.manage=1,...）`);
     console.log("未注册的老板 / 同事打开此链接，注册后自动加入组织。");
   }
   return 0;
@@ -10619,13 +11948,20 @@ async function hrPersonDetail(id) {
   const org = await resolveHrOrg(credentials, readFlag("--org"));
   if (typeof org === "number")
     return org;
-  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people?q=${encodeURIComponent(id)}&limit=50`, { headers: authHeaders(credentials) });
-  if (res.status !== 200) {
-    console.error(errorMessage(res.body, "获取人员失败。"));
-    return exitCodeForApiError(res.body);
+  let person;
+  let offset = 0;
+  while (person === undefined) {
+    const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people?limit=200&offset=${offset}`, { headers: authHeaders(credentials) });
+    if (res.status !== 200) {
+      console.error(errorMessage(res.body, "获取人员失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    const page = res.body.data;
+    person = page.people.find((p) => p.id === id);
+    offset += page.people.length;
+    if (person === undefined && (page.people.length === 0 || offset >= page.total))
+      break;
   }
-  const people = res.body.data.people;
-  const person = people.find((p) => p.id === id);
   if (!person) {
     console.error("人员不存在或不属于当前组织。");
     return EXIT_NOT_FOUND;
@@ -10814,6 +12150,73 @@ async function hrPersonOffboard() {
     console.log(`✓ ${person?.name ?? target} 已离职（档案封存，离职事件已落时间线）。`);
   return 0;
 }
+async function hrPersonRm() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr person rm <id> [--org <arg>] [--json]（仅零记录档案可删；有事件时间线走离职封存）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people/${encodeURIComponent(target)}`, {
+    method: "DELETE",
+    headers: authHeaders(credentials)
+  });
+  if (res.status !== 200) {
+    const code = res.body?.error?.code;
+    if (res.status === 409 || code === "conflict") {
+      console.error("该档案已有事件记录（时间线即证据链），不能删除——请走离职封存：crab hr person offboard。");
+      return exitCodeForApiError(res.body);
+    }
+    console.error(errorMessage(res.body, "删除人员失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ok: true }, null, 2));
+  else
+    console.log("✓ 已删除（零记录档案）。");
+  return 0;
+}
+function hrStatsLines(s) {
+  const lines = [`在职 ${s.active} · 试用 ${s.probation} · 离职 ${s.resigned} · 共 ${s.total} 人`];
+  const risks = [];
+  if (s.contractDueSoon)
+    risks.push(`合同 60 天内到期 ${s.contractDueSoon} 人`);
+  if (s.contractOverdue)
+    risks.push(`合同已到期未续签 ${s.contractOverdue} 人`);
+  if (s.probationDueSoon)
+    risks.push(`试用期 30 天内届满 ${s.probationDueSoon} 人`);
+  if (s.probationOverdue)
+    risks.push(`试用期已过未转正 ${s.probationOverdue} 人`);
+  lines.push(risks.length ? `风险：${risks.join(" · ")}` : "风险：无");
+  return lines;
+}
+async function hrStats() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/people/stats`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取统计失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const stats = res.body.data;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...stats, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)} · 花名册统计`);
+  for (const line of hrStatsLines(stats.stats))
+    console.log(line);
+  return 0;
+}
 async function hrEventAdd() {
   const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
   const type = readFlag("--type");
@@ -11057,7 +12460,7 @@ async function hrTaskCreate() {
   const kind = readFlag("--kind");
   const title = readFlag("--title");
   if (!kind || !title) {
-    console.error('用法：crab hr task create --kind <attendance|payroll|contract|recruit|meeting|asset|admin|...> --title "..." [--node 节点说明] [--detail 详情] [--due YYYY-MM-DD] [--status alert|confirm|queued|done] [--json]');
+    console.error('用法：crab hr task create --kind <attendance|payroll|contract|recruit|meeting|asset|admin|person/onboard|...> --title "..." [--node 节点说明] [--detail 详情] [--due YYYY-MM-DD] [--status alert|confirm|queued|done] [--meta JSON] [--json]');
     return EXIT_USAGE;
   }
   const status = readFlag("--status");
@@ -11077,10 +12480,20 @@ async function hrTaskCreate() {
   const org = await resolveHrOrg(credentials, readFlag("--org"));
   if (typeof org === "number")
     return org;
+  let meta;
+  const metaFlag = readFlag("--meta");
+  if (metaFlag !== undefined) {
+    try {
+      meta = JSON.parse(metaFlag);
+    } catch {
+      console.error("--meta 需要合法 JSON（申请单任务须含 meta.form，服务端按 kind schema 校验）。");
+      return EXIT_USAGE;
+    }
+  }
   const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/tasks`, {
     method: "POST",
     headers: authHeaders(credentials),
-    body: JSON.stringify({ kind, title, node: readFlag("--node") ?? "", detail: readFlag("--detail") ?? "", ...status ? { status } : {}, ...due != null ? { dueAt: due } : {} })
+    body: JSON.stringify({ kind, title, node: readFlag("--node") ?? "", detail: readFlag("--detail") ?? "", ...status ? { status } : {}, ...due != null ? { dueAt: due } : {}, ...meta ? { meta } : {} })
   });
   if (res.status !== 200 && res.status !== 201) {
     console.error(errorMessage(res.body, "创建任务失败。"));
@@ -11132,6 +12545,42 @@ async function hrTaskUpdate() {
     console.log(`✓ 已更新 ${task.title}（${task.status}）。`);
   return 0;
 }
+async function hrTaskLink() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr task link <taskId> [--reset] [--org <arg>] [--json]（仅入职/转正/离职申请单有候选人表单）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const reset = hasFlag("--reset");
+  const path = `/orgs/${encodeURIComponent(org.id)}/tasks/${encodeURIComponent(target)}${reset ? "/form-link/reset" : "/form-link"}`;
+  const res = await api2(credentials.apiBase, `/v1/hr${path}`, { method: reset ? "POST" : "GET", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    const code = res.body?.error?.code;
+    if (res.status === 400 && code === "bad_request") {
+      console.error("该任务没有候选人填单表单（仅 person/onboard · person/promotion · person/offboard 申请单支持）。");
+      return exitCodeForApiError(res.body);
+    }
+    console.error(errorMessage(res.body, "获取填单链接失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const token = res.body.data.token;
+  const link = `${hrWebBase(credentials.apiBase)}/form/${token}`;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ token, link }, null, 2));
+  else {
+    if (reset)
+      console.log("✓ 已重置（旧链接立即失效）。");
+    console.log(`填单链接：${link}`);
+    console.log("候选人免登录打开即可填写本人区字段；提交后申请单进待拍板。");
+  }
+  return 0;
+}
 async function hrDesk() {
   const credentials = requireCredentials();
   if (typeof credentials === "number")
@@ -11150,29 +12599,41 @@ async function hrDesk() {
     return 0;
   }
   console.log(`组织：${hrOrgToken(org)} · 工作台`);
+  for (const line of hrStatsLines(desk.desk.stats))
+    console.log(line);
+  console.log(`
+替你盯着：`);
+  for (const reminder of desk.desk.reminders) {
+    const chip = reminder.kind === "onboard_pending" ? `已等 ${reminder.days} 天` : reminder.days < 0 ? `过期 ${-reminder.days} 天` : `剩 ${reminder.days} 天`;
+    console.log(`  ⚠ ${reminder.text}（${chip}）`);
+  }
+  if (!desk.desk.reminders.length)
+    console.log("  （无）");
   console.log(`
 等你拍板：`);
   for (const task of desk.desk.pending)
-    console.log(`  [${task.status}] ${task.title}  ${task.node || ""}  id: ${task.id}`);
+    console.log(`  [${task.status}] ${task.title}${task.refLabel ? ` · ${task.refLabel}` : ""}  ${task.node || ""}  id: ${task.id}`);
   if (!desk.desk.pending.length)
     console.log("  （空）");
   console.log(`
 助理在办：`);
   for (const task of desk.desk.running)
-    console.log(`  ${task.title}  ${task.node || ""}  id: ${task.id}`);
+    console.log(`  ${task.title}${task.refLabel ? ` · ${task.refLabel}` : ""}  ${task.node || ""}  id: ${task.id}`);
   if (!desk.desk.running.length)
     console.log("  （空）");
   console.log(`
 近期完成：`);
   for (const task of desk.desk.done)
-    console.log(`  ${task.title}  ${task.node || ""}`);
+    console.log(`  ${task.title}${task.refLabel ? ` · ${task.refLabel}` : ""}  ${task.node || ""}`);
   if (!desk.desk.done.length)
     console.log("  （空）");
   console.log(`
-替你盯着：`);
-  for (const reminder of desk.desk.reminders)
-    console.log(`  ⚠ ${reminder.text}（${reminder.days < 0 ? `过期 ${-reminder.days} 天` : `剩 ${reminder.days} 天`}）`);
-  if (!desk.desk.reminders.length)
+最近公告：`);
+  for (const item of desk.desk.announcements.slice(0, 3)) {
+    const day = new Date(item.createdAt).toISOString().slice(0, 10);
+    console.log(`  ${day}  ${item.title}（${item.createdByName}）`);
+  }
+  if (!desk.desk.announcements.length)
     console.log("  （无）");
   console.log(`
 最近动态：`);
@@ -11184,6 +12645,259 @@ async function hrDesk() {
     console.log("  （无）");
   return 0;
 }
+function hrAnnouncementStatus(s) {
+  return s === "active" ? "[生效]" : "[已撤回]";
+}
+async function hrAnnounce() {
+  const op = args[2];
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const base = `/v1/hr/orgs/${encodeURIComponent(org.id)}/announcements`;
+  if (op === "list") {
+    const params = new URLSearchParams;
+    if (hasFlag("--all"))
+      params.set("includeWithdrawn", "1");
+    const limit = readFlag("--limit");
+    if (limit)
+      params.set("limit", limit);
+    const offset = readFlag("--offset");
+    if (offset)
+      params.set("offset", offset);
+    const res = await api2(credentials.apiBase, `${base}?${params}`, { headers: authHeaders(credentials) });
+    if (res.status !== 200) {
+      console.error(errorMessage(res.body, "获取公告失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    const page = res.body.data;
+    if (hasFlag("--json")) {
+      console.log(JSON.stringify({ ...page, org: { id: org.id, name: org.name } }, null, 2));
+      return 0;
+    }
+    console.log(`组织：${hrOrgToken(org)} · 公告 ${page.total} 条`);
+    for (const a of page.announcements) {
+      const day = new Date(a.createdAt).toISOString().slice(0, 10);
+      console.log(`${day}  ${hrAnnouncementStatus(a.status)}  ${a.title}（${a.createdByName}）  id: ${a.id}`);
+      console.log(`  ${a.body.length > 120 ? `${a.body.slice(0, 120)}…` : a.body}`);
+    }
+    if (page.announcements.length < page.total)
+      console.log(`（还有更多：--offset ${(Number(offset ?? 0) || 0) + page.announcements.length}）`);
+    return 0;
+  }
+  if (op === "post") {
+    const title = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+    const body = readFlag("--body");
+    if (!title || !body) {
+      console.error('用法：crab hr announce post <标题> --body "正文" [--org <arg>] [--json]');
+      return EXIT_USAGE;
+    }
+    const res = await api2(credentials.apiBase, base, {
+      method: "POST",
+      headers: authHeaders(credentials),
+      body: JSON.stringify({ title, body })
+    });
+    if (res.status !== 200 && res.status !== 201) {
+      console.error(errorMessage(res.body, "发布公告失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    const a = res.body.data.announcement;
+    if (hasFlag("--json"))
+      console.log(JSON.stringify(a, null, 2));
+    else
+      console.log(`✓ 已发布「${a.title}」· id: ${a.id}（成员收件箱可见）。`);
+    return 0;
+  }
+  if (op === "withdraw") {
+    const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+    if (!target) {
+      console.error("用法：crab hr announce withdraw <公告id> [--org <arg>] [--json]（撤回留档不删）");
+      return EXIT_USAGE;
+    }
+    const res = await api2(credentials.apiBase, `${base}/${encodeURIComponent(target)}/withdraw`, { method: "POST", headers: authHeaders(credentials) });
+    if (res.status !== 200) {
+      console.error(errorMessage(res.body, "撤回失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    const a = res.body.data.announcement;
+    if (hasFlag("--json"))
+      console.log(JSON.stringify({ ok: true }, null, 2));
+    else
+      console.log(`✓ 已撤回「${a?.title ?? target}」（成员不再可见，记录保留）。`);
+    return 0;
+  }
+  console.error(`用法：crab hr announce list | post <标题> --body "..." | withdraw <id>
+`);
+  return EXIT_USAGE;
+}
+async function hrInbox() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const base = `/v1/hr/orgs/${encodeURIComponent(org.id)}/inbox`;
+  if (hasFlag("--seen")) {
+    const res = await api2(credentials.apiBase, `${base}/seen`, { method: "POST", headers: authHeaders(credentials) });
+    if (res.status !== 200) {
+      console.error(errorMessage(res.body, "标记已读失败。"));
+      return exitCodeForApiError(res.body);
+    }
+    if (hasFlag("--json"))
+      console.log(JSON.stringify(res.body.data, null, 2));
+    else
+      console.log("✓ 公告已全部标记已读。");
+    return 0;
+  }
+  const res = await api2(credentials.apiBase, base, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取收件箱失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const inbox = res.body.data.inbox;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...res.body.data, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  console.log(`组织：${hrOrgToken(org)} · 收件箱（上次打开 ${inbox.lastSeenAt ? new Date(inbox.lastSeenAt).toLocaleDateString("zh-CN") : "从未"}）`);
+  console.log(`
+未读公告 ${inbox.unreadAnnouncementCount} 条：`);
+  for (const a of inbox.announcements)
+    console.log(`  ${new Date(a.createdAt).toISOString().slice(0, 10)}  ${a.title}（${a.createdByName}）  id: ${a.id}`);
+  if (!inbox.announcements.length)
+    console.log("  （无）");
+  console.log(`
+待拍板 ${inbox.pendingTaskCount} 条：`);
+  for (const t of inbox.pendingTasks)
+    console.log(`  [${t.status}] ${t.title}  ${t.node || ""}  id: ${t.id}`);
+  if (!inbox.pendingTasks.length)
+    console.log("  （无）");
+  console.log(`
+替你盯着：`);
+  for (const r of inbox.reminders)
+    console.log(`  ⚠ ${r.text}（${r.days < 0 ? `过期 ${-r.days} 天` : `剩 ${r.days} 天`}）`);
+  if (!inbox.reminders.length)
+    console.log("  （无）");
+  console.log(`
+打开看完后标记已读：crab hr inbox --seen`);
+  return 0;
+}
+async function hrDicts() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/dicts`, { headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取字典失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const entries = res.body.data.entries;
+  if (hasFlag("--json")) {
+    console.log(JSON.stringify({ ...res.body.data, org: { id: org.id, name: org.name } }, null, 2));
+    return 0;
+  }
+  for (const type of HR_DICT_TYPES) {
+    const list = entries.filter((e) => e.type === type);
+    console.log(`${type === "dept" ? "部门" : "岗位"}（${list.length}）：`);
+    for (const e of list)
+      console.log(`  ${e.name}  id: ${e.id}`);
+    if (!list.length)
+      console.log("  （空）");
+  }
+  return 0;
+}
+async function hrDictAdd() {
+  const type = args[3];
+  const name = args[4];
+  if (!type || !name || !HR_DICT_TYPES.includes(type)) {
+    console.error("用法：crab hr dict add <dept|position> <名称> [--org <arg>] [--json]");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/dicts`, {
+    method: "POST",
+    headers: authHeaders(credentials),
+    body: JSON.stringify({ type, name })
+  });
+  if (res.status !== 200 && res.status !== 201) {
+    console.error(errorMessage(res.body, "新增字典项失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const entry = res.body.data.entry;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify(entry, null, 2));
+  else
+    console.log(`✓ 已新增${type === "dept" ? "部门" : "岗位"}「${entry.name}」· id: ${entry.id}（同名幂等返回已有项）。`);
+  return 0;
+}
+async function hrDictRm() {
+  const target = positionalArgs(args.slice(3), HR_VALUED_FLAGS)[0];
+  if (!target) {
+    console.error("用法：crab hr dict rm <entryId> [--org <arg>] [--json]（被花名册在用的项服务端 409 拒删）");
+    return EXIT_USAGE;
+  }
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const res = await api2(credentials.apiBase, `/v1/hr/orgs/${encodeURIComponent(org.id)}/dicts/${encodeURIComponent(target)}`, {
+    method: "DELETE",
+    headers: authHeaders(credentials)
+  });
+  if (res.status !== 200) {
+    const code = res.body?.error?.code;
+    if (res.status === 409 || code === "conflict") {
+      console.error("该字典项正被花名册人员使用，不能删除（先改人员的部门/岗位）。");
+      return exitCodeForApiError(res.body);
+    }
+    console.error(errorMessage(res.body, "删除字典项失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ ok: true }, null, 2));
+  else
+    console.log("✓ 已删除字典项。");
+  return 0;
+}
+async function hrApplyLink() {
+  const credentials = requireCredentials();
+  if (typeof credentials === "number")
+    return credentials;
+  const org = await resolveHrOrg(credentials, readFlag("--org"));
+  if (typeof org === "number")
+    return org;
+  const reset = hasFlag("--reset");
+  const path = `/orgs/${encodeURIComponent(org.id)}${reset ? "/form-link/reset" : "/form-link"}`;
+  const res = await api2(credentials.apiBase, `/v1/hr${path}`, { method: reset ? "POST" : "GET", headers: authHeaders(credentials) });
+  if (res.status !== 200) {
+    console.error(errorMessage(res.body, "获取入职收集链接失败。"));
+    return exitCodeForApiError(res.body);
+  }
+  const token = res.body.data.token;
+  const link = `${hrWebBase(credentials.apiBase)}/apply/${token}`;
+  if (hasFlag("--json"))
+    console.log(JSON.stringify({ token, link }, null, 2));
+  else {
+    if (reset)
+      console.log("✓ 已重置（散出去的旧二维码全部作废）。");
+    console.log(`入职收集链接：${link}`);
+    console.log("候选人扫码 / 打开提交即自动生成入职申请单（进待拍板），HR 无需先建单。");
+  }
+  return 0;
+}
 switch (command) {
   case "init":
     process.exit(await init());
@@ -11253,6 +12967,40 @@ switch (command) {
       process.exit(await contactsInvitees());
     console.error(sub ? `未知子命令：contacts ${sub}
 ` : `缺少子命令：contacts list | add | rm | invite | invitees
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "addresses": {
+    const sub = args[1];
+    if (sub === "list")
+      process.exit(await addressesList());
+    if (sub === "add")
+      process.exit(await addressesAdd());
+    if (sub === "update")
+      process.exit(await addressesUpdate(args[2]));
+    if (sub === "set-default")
+      process.exit(await addressesSetDefault(args[2]));
+    if (sub === "rm")
+      process.exit(await addressesRm(args[2]));
+    console.error(sub ? `未知子命令：addresses ${sub}
+` : `缺少子命令：addresses list | add | update | set-default | rm
+`);
+    console.log(usage);
+    process.exit(EXIT_USAGE);
+  }
+  case "favorites": {
+    const sub = args[1];
+    if (sub === "list")
+      process.exit(await favoritesList());
+    if (sub === "add")
+      process.exit(await favoritesAdd(args[2]));
+    if (sub === "check")
+      process.exit(await favoritesCheck(args[2]));
+    if (sub === "rm")
+      process.exit(await favoritesRm(args[2]));
+    console.error(sub ? `未知子命令：favorites ${sub}
+` : `缺少子命令：favorites list | add | check | rm
 `);
     console.log(usage);
     process.exit(EXIT_USAGE);
@@ -11334,6 +13082,26 @@ switch (command) {
 `);
       process.exit(EXIT_USAGE);
     }
+    if (sub === "products")
+      process.exit(await shopProductsList());
+    if (sub === "product") {
+      const op = args[2];
+      if (op === "create")
+        process.exit(await shopProductCreate());
+      if (op === "update")
+        process.exit(await shopProductUpdate());
+      if (op === "spec")
+        process.exit(await shopProductSpec());
+      if (op === "archive")
+        process.exit(await shopProductArchive());
+      process.exit(await shopProductDetail(op));
+    }
+    if (sub === "stock")
+      process.exit(await shopStockAdjust(args[2]));
+    if (sub === "listed")
+      process.exit(await shopListedStock());
+    if (sub === "movements")
+      process.exit(await shopMovements());
     if (sub === "categories")
       process.exit(await shopCategories());
     if (sub === "category") {
@@ -11346,19 +13114,6 @@ switch (command) {
       if (args[2] === "delete")
         process.exit(await shopCategoryDelete());
       console.error(`用法：crab shop category add|rename|move|delete …（crab --help 看完整用法）
-`);
-      process.exit(EXIT_USAGE);
-    }
-    if (sub === "specs")
-      process.exit(await shopSpecs());
-    if (sub === "spec") {
-      if (args[2] === "add")
-        process.exit(await shopSpecAdd());
-      if (args[2] === "update")
-        process.exit(await shopSpecUpdate());
-      if (args[2] === "delete")
-        process.exit(await shopSpecDelete());
-      console.error(`用法：crab shop spec add|update|delete …（crab --help 看完整用法）
 `);
       process.exit(EXIT_USAGE);
     }
@@ -11389,7 +13144,7 @@ switch (command) {
       process.exit(await shopApply(positional.join(" "), taglineArg));
     }
     console.error(sub ? `未知子命令：shop ${sub}
-` : `缺少子命令：shop status | shop apply <店铺名>
+` : `缺少子命令：shop status | apply | products | product | stock | listed | movements | categories | category | members | member | invite | use | roles
 `);
     console.log(usage);
     process.exit(EXIT_USAGE);
@@ -11451,9 +13206,13 @@ switch (command) {
     if (sub === "orgs")
       process.exit(await hrOrgsList());
     if (sub === "org") {
-      if (args[2] === "create")
-        process.exit(await hrOrgCreate(args.slice(3).find((x) => !x.startsWith("--"))));
-      console.error(`用法：crab hr org create <名称> [--json]
+      if (args[2] === "apply")
+        process.exit(await hrOrgApply(positionalArgs(args.slice(3), HR_VALUED_FLAGS).join(" ") || undefined));
+      if (args[2] === "application")
+        process.exit(await hrOrgApplication());
+      if (args[2] === "rename")
+        process.exit(await hrOrgRename());
+      console.error(`用法：crab hr org apply <名称> [--note 说明] | org application | org rename <新名称>
 `);
       process.exit(EXIT_USAGE);
     }
@@ -11475,6 +13234,8 @@ switch (command) {
       process.exit(await hrInvite());
     if (sub === "people")
       process.exit(await hrPeopleList());
+    if (sub === "stats")
+      process.exit(await hrStats());
     if (sub === "person") {
       const op = args[2];
       if (op === "create")
@@ -11483,6 +13244,8 @@ switch (command) {
         process.exit(await hrPersonEdit());
       if (op === "offboard")
         process.exit(await hrPersonOffboard());
+      if (op === "rm")
+        process.exit(await hrPersonRm());
       process.exit(await hrPersonDetail(op));
     }
     if (sub === "event") {
@@ -11496,6 +13259,17 @@ switch (command) {
       process.exit(await hrEventsList());
     if (sub === "import")
       process.exit(await hrImport());
+    if (sub === "dicts")
+      process.exit(await hrDicts());
+    if (sub === "dict") {
+      if (args[2] === "add")
+        process.exit(await hrDictAdd());
+      if (args[2] === "rm")
+        process.exit(await hrDictRm());
+      console.error(`用法：crab hr dict add <dept|position> <名称> | dict rm <entryId>
+`);
+      process.exit(EXIT_USAGE);
+    }
     if (sub === "tasks")
       process.exit(await hrTasksList());
     if (sub === "task") {
@@ -11504,14 +13278,22 @@ switch (command) {
         process.exit(await hrTaskCreate());
       if (op === "update")
         process.exit(await hrTaskUpdate());
-      console.error(`用法：crab hr task create|update
+      if (op === "link")
+        process.exit(await hrTaskLink());
+      console.error(`用法：crab hr task create|update|link
 `);
       process.exit(EXIT_USAGE);
     }
+    if (sub === "apply-link")
+      process.exit(await hrApplyLink());
+    if (sub === "announce")
+      process.exit(await hrAnnounce());
+    if (sub === "inbox")
+      process.exit(await hrInbox());
     if (sub === "desk")
       process.exit(await hrDesk());
     console.error(sub ? `未知子命令：hr ${sub}
-` : `缺少子命令：hr orgs | org create | members | member | invite | people | person | event add | events | import | tasks | task | desk
+` : `缺少子命令：hr orgs | org apply | members | member | invite | people | stats | person | event add | events | import | dicts | dict | tasks | task | apply-link | announce | inbox | desk
 `);
     console.log(usage);
     process.exit(EXIT_USAGE);