@gowuai/cli 0.0.0-stage → 0.1.1

package/README.md

@@ -1,3 +1,42 @@
-# Temporary Holding Version
+# @gowuai/cli
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+格物（GoWu）开放平台命令行 `gowu`：搜索商品、下单付款、订单与售后；员工福利 / 企业采购应用还能查企业额度、做企业管理、参与福豆任务。给人用，也给 AI Agent 用（Agent 执行命令、读 Markdown 或 `--json` 输出）。
+
+需要 Node.js 18.17 及以上。
+
+## 安装与登录
+
+```bash
+npx -y @gowuai/cli login     # 免安装运行
+# 或全局安装后用 gowu
+npm i -g @gowuai/cli
+gowu login
+```
+
+`gowu login` 会自动打开浏览器授权页，用手机号登录、选择要授权的应用即可；同时打印网址和授权码，没弹出浏览器（远程服务器、SSH、Agent 沙箱）时手动打开，或在手机上打开也行。`--no-browser` 不自动打开。第一次登录会自动开通体验应用。
+不需要填任何密钥；登录后令牌自动续期，30 天内不用再登录。凭证保存在 `~/.config/gowu/credentials.json`（只有本人可读）。
+
+可以登录多个应用：`gowu apps` 查看，`gowu use <应用名>` 切换；单条命令也可以用 `--app <应用名>` 指定。
+
+## 常用命令
+
+```bash
+gowu search 保温杯 --max 300 --in-stock      # 搜索（商品图以 Markdown 图片输出）
+gowu product <商品id>                         # 详情与规格 skuId
+gowu address add --name 张三 --phone 138… --detail "文三路 100 号" --region "浙江省 杭州市 西湖区"
+gowu preview <商品id> <skuId> 1               # 结算试算
+gowu buy <商品id> <skuId> 1 --address <地址id> # 下单
+gowu orders / gowu order <订单号> / gowu logistics <订单号>
+gowu refund list
+```
+
+- **消费者购物**应用：`buy` 生成支付宝付款码（扫码或打开链接付款），`gowu payment <付款单号>` 查结果。
+- **员工福利 / 企业采购**应用：`buy` 用企业额度下单，`--mixed` 混合支付（返回支付宝补差链接）；另有 `points`（我的额度）、`org`（企业管理）、`tasks`（福豆任务）、`partner`（应用负责人绑定员工）、`upload`（上传任务图片）。
+
+`gowu help` 只列出当前应用能用的命令；`gowu tools` 列出当前应用的全部工具，`gowu call <工具名> --args '{…}'` 可直接调用任意工具。所有命令加 `--json` 输出原始数据。
+
+## 说明
+
+- 命令行不持有任何签名密钥：请求以登录令牌发到格物服务端，由服务端代为签名调用开放接口，权限与应用在开放平台开通的一致。
+- 下单、退款等会花钱或改变状态的操作，请在执行前确认商品、规格、金额与地址。
+- 文档：https://open.gowu.net/docs#cli

package/bin/gowu.js

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+import("../dist/index.js").then((m) => m.main(process.argv.slice(2)));

package/dist/auth.js

@@ -0,0 +1,117 @@
+import { resolveBase, saveCredentials } from "./config.js";
+/**
+ * 设备码登录（RFC 8628）：申请设备码 → 用户在任意设备的浏览器里输入短代码、手机号登录、选应用并授权 → 轮询换令牌。
+ * 不需要本机能打开浏览器或监听端口，Agent 的沙箱 / 远程环境里也能用。
+ */
+const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
+const CLIENT_NAME = "格物 CLI";
+export class CliError extends Error {
+    code;
+    constructor(message, code = "ERROR") {
+        super(message);
+        this.code = code;
+    }
+}
+async function postForm(url, body) {
+    const res = await fetch(url, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+        body: new URLSearchParams(body).toString()
+    });
+    const data = (await res.json().catch(() => ({})));
+    return { status: res.status, data };
+}
+async function ensureClient(c) {
+    if (c.clientId)
+        return c.clientId;
+    const res = await fetch(`${resolveBase(c.base)}/oauth/register`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ client_name: CLIENT_NAME, grant_types: [DEVICE_GRANT, "refresh_token"] })
+    });
+    const data = (await res.json().catch(() => ({})));
+    if (!res.ok || !data.client_id)
+        throw new CliError(`注册命令行客户端失败：${data.error_description ?? res.status}`);
+    c.clientId = data.client_id;
+    saveCredentials(c);
+    return data.client_id;
+}
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/** 第一步：申请设备码。返回给用户看的网址与授权码，不等待 */
+export async function startDeviceLogin(c) {
+    const base = resolveBase(c.base);
+    let clientId = await ensureClient(c);
+    let start = await postForm(`${base}/oauth/device_authorization`, { client_id: clientId });
+    if (start.status === 400 && start.data.error === "invalid_client") {
+        // 客户端被平台停用或库被重置：重新注册一次
+        c.clientId = undefined;
+        clientId = await ensureClient(c);
+        start = await postForm(`${base}/oauth/device_authorization`, { client_id: clientId });
+    }
+    if (start.status !== 200)
+        throw new CliError(`申请授权码失败：${String(start.data.error_description ?? start.status)}`);
+    const d = start.data;
+    return {
+        deviceCode: d.device_code,
+        userCode: d.user_code,
+        verificationUri: d.verification_uri,
+        verificationUriComplete: d.verification_uri_complete,
+        interval: Math.max(1, d.interval || 5) * 1000,
+        expiresAt: Date.now() + d.expires_in * 1000
+    };
+}
+/** 第二步：轮询直到用户在浏览器里授权（或拒绝、过期）。`once` 只查一次，未授权时返回 null */
+export async function pollDeviceLogin(c, p, opts = {}) {
+    if (!c.clientId)
+        throw new CliError("登录状态不完整，请重新执行 gowu login", "NEED_LOGIN");
+    const base = resolveBase(c.base);
+    let interval = p.interval;
+    let first = true;
+    while (Date.now() < p.expiresAt) {
+        if (!first || !opts.once)
+            await sleep(first && opts.once ? 0 : interval);
+        first = false;
+        const r = await postForm(`${base}/oauth/token`, { grant_type: DEVICE_GRANT, device_code: p.deviceCode, client_id: c.clientId });
+        if (r.status === 200 && r.data.access_token)
+            return r.data;
+        const err = String(r.data.error ?? "");
+        if (err === "authorization_pending" || err === "slow_down") {
+            if (err === "slow_down")
+                interval += 5000;
+            if (opts.once)
+                return null;
+            continue;
+        }
+        if (err === "access_denied")
+            throw new CliError("已在浏览器里拒绝授权", "ACCESS_DENIED");
+        if (err === "expired_token")
+            throw new CliError("授权码已过期，请重新执行 gowu login", "EXPIRED");
+        throw new CliError(`登录失败：${String(r.data.error_description ?? err ?? r.status)}`);
+    }
+    throw new CliError("等待授权超时，请重新执行 gowu login", "EXPIRED");
+}
+export function tokenToCredential(t, info) {
+    return {
+        appKey: info.appKey,
+        appName: info.appName,
+        realm: info.realm,
+        accessToken: t.access_token,
+        refreshToken: t.refresh_token,
+        expiresAt: Date.now() + t.expires_in * 1000,
+        scope: t.scope ?? "mcp"
+    };
+}
+/** 访问令牌快过期（剩不到 60 秒）或已被拒时用刷新令牌换新的；刷新令牌失效就要求重新登录 */
+export async function refreshCredential(c, app) {
+    if (!c.clientId)
+        throw new CliError("登录状态不完整，请重新执行 gowu login", "NEED_LOGIN");
+    const r = await postForm(`${resolveBase(c.base)}/oauth/token`, { grant_type: "refresh_token", refresh_token: app.refreshToken, client_id: c.clientId });
+    if (r.status !== 200 || !r.data.access_token) {
+        throw new CliError(`登录已失效（${String(r.data.error_description ?? r.status)}），请重新执行 gowu login`, "NEED_LOGIN");
+    }
+    const t = r.data;
+    const next = { ...app, accessToken: t.access_token, refreshToken: t.refresh_token, expiresAt: Date.now() + t.expires_in * 1000 };
+    c.apps[app.appKey] = next;
+    saveCredentials(c);
+    return next;
+}

package/dist/browser.js

@@ -0,0 +1,34 @@
+import { spawn } from "node:child_process";
+/**
+ * 登录时尽量自动打开授权页（gh auth login 同款体验）。打不开不影响登录：网址与授权码照样打印，用户可以手动打开、
+ * 或在手机上打开——设备码登录本来就是为打不开浏览器的环境（Agent 沙箱、远程服务器）设计的。
+ *
+ * 不自动打开的情况：--no-browser / GOWU_NO_BROWSER、CI、SSH 远程会话、Linux 没有图形界面。
+ */
+export function canOpenBrowser(noBrowserFlag) {
+    const env = process.env;
+    if (noBrowserFlag || env.GOWU_NO_BROWSER || env.CI)
+        return false;
+    if (env.SSH_CONNECTION || env.SSH_TTY)
+        return false;
+    if (process.platform === "linux" && !env.DISPLAY && !env.WAYLAND_DISPLAY)
+        return false;
+    return process.platform === "darwin" || process.platform === "win32" || process.platform === "linux";
+}
+export function openBrowser(url) {
+    try {
+        const [cmd, args] = process.platform === "darwin"
+            ? ["open", [url]]
+            : process.platform === "win32"
+                ? // start 的第一个带引号参数是窗口标题，所以先给个空标题
+                    ["cmd", ["/c", "start", "", url.replace(/&/g, "^&")]]
+                : ["xdg-open", [url]];
+        const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+        child.on("error", () => undefined);
+        child.unref();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}

package/dist/commands.js

@@ -0,0 +1,548 @@
+import { readFileSync, statSync } from "node:fs";
+import path from "node:path";
+import { randomBytes } from "node:crypto";
+import { CliError } from "./auth.js";
+import { resolveBase, sceneOf } from "./config.js";
+import * as fmt from "./format.js";
+import { callTool, listTools } from "./mcp.js";
+const str = (o, k) => (typeof o[k] === "string" ? o[k] : undefined);
+const num = (o, k) => {
+    const v = str(o, k);
+    if (v === undefined)
+        return undefined;
+    const n = Number(v);
+    if (!Number.isFinite(n))
+        throw new CliError(`--${k} 应为数字`);
+    return n;
+};
+const need = (v, what) => {
+    if (!v)
+        throw new CliError(`缺少参数：${what}`, "USAGE");
+    return v;
+};
+const pick = (ctx, consumer, enterprise) => (ctx.scene === "enterprise" ? enterprise : consumer);
+const genKey = () => `gowu-${new Date().toISOString().slice(0, 10).replace(/-/g, "")}-${randomBytes(4).toString("hex")}`;
+const compact = (o) => Object.fromEntries(Object.entries(o).filter(([, v]) => v !== undefined && v !== ""));
+/** 消费者下单每行都要 skuId：没给就看商品是不是只有一个可售规格 */
+async function resolveSku(ctx, productId, skuId) {
+    if (skuId)
+        return skuId;
+    const p = (await ctx.tool(pick(ctx, "lm_get_product", "ent_get_product"), ctx.scene === "enterprise" ? { id: productId } : { productId }));
+    const sellable = (p.skus ?? []).filter((k) => k.skuId && k.canSell !== false && k.stock !== 0);
+    if (sellable.length === 1)
+        return sellable[0].skuId;
+    if (ctx.scene === "enterprise" && !(p.skus ?? []).length)
+        return undefined; // 企业购单规格商品可不传
+    if (!sellable.length)
+        throw new CliError("这个商品目前没有可购买的规格，换一个商品试试", "UNAVAILABLE");
+    throw new CliError(`这个商品有 ${sellable.length} 个可选规格，请指定 skuId（gowu product ${productId} 查看）`, "USAGE");
+}
+/** 「浙江省 杭州市 西湖区 [某某街道]」→ 区县码与乡镇码（逐级查区划，名称前缀匹配即可：「浙江」能对上「浙江省」） */
+async function resolveRegion(ctx, region) {
+    const parts = region.split(/[\s,，/]+/).filter(Boolean);
+    if (parts.length < 3)
+        throw new CliError("--region 至少写到区县，例如「浙江省 杭州市 西湖区」", "USAGE");
+    let parent = "1";
+    const codes = [];
+    for (const part of parts.slice(0, 4)) {
+        const res = (await ctx.tool("lm_list_divisions", { parent }));
+        const items = res.items ?? [];
+        const hit = items.find((x) => x.name === part) ?? items.find((x) => x.name.startsWith(part) || part.startsWith(x.name));
+        if (!hit)
+            throw new CliError(`找不到「${part}」（可选：${items.slice(0, 12).map((x) => x.name).join("、")}…）`, "USAGE");
+        codes.push(hit);
+        parent = hit.code;
+    }
+    const county = codes.find((x) => x.level === 4) ?? codes[2];
+    const town = codes.find((x) => x.level === 5);
+    return { divisionCode: county.code, ...(town ? { townDivisionCode: town.code } : {}), names: codes.map((x) => x.name) };
+}
+async function upload(ctx, ticketTool, extra, file) {
+    const stat = statSync(file);
+    const ext = path.extname(file).toLowerCase();
+    const contentType = ext === ".png" ? "image/png" : ext === ".webp" ? "image/webp" : ext === ".gif" ? "image/gif" : "image/jpeg";
+    const t = (await ctx.tool(ticketTool, { ...extra, fileName: path.basename(file), contentType, size: stat.size }));
+    if (!t.putPath)
+        throw new CliError("没有拿到上传地址");
+    const res = await fetch(`${resolveBase(ctx.c.base)}${t.putPath}`, { method: "PUT", headers: { "content-type": contentType }, body: readFileSync(file) });
+    const data = (await res.json().catch(() => ({})));
+    if (!res.ok || data.ok === false)
+        throw new CliError(`上传失败：${data.message ?? res.status}`);
+    return data;
+}
+export const COMMANDS = [
+    // ── 购物 ──
+    {
+        name: "search",
+        usage: "search <关键词> [--min 价] [--max 价] [--in-stock] [--sort price_asc|price_desc|sales_desc] [--category 类目] [--page N] [--size N]",
+        summary: "搜索商品",
+        scene: "any",
+        group: "购物",
+        async run(ctx) {
+            const data = await ctx.tool(pick(ctx, "lm_search_products", "ent_search_products"), compact({
+                keyword: ctx.args.join(" ") || undefined,
+                priceMin: num(ctx.opts, "min"),
+                priceMax: num(ctx.opts, "max"),
+                inStockOnly: ctx.opts["in-stock"] ? true : undefined,
+                sortBy: str(ctx.opts, "sort"),
+                category: str(ctx.opts, "category"),
+                page: num(ctx.opts, "page"),
+                pageSize: num(ctx.opts, "size") ?? 10
+            }));
+            ctx.out(fmt.products(data), data);
+        }
+    },
+    {
+        name: "product",
+        usage: "product <商品id>",
+        summary: "商品详情与规格（skuId）",
+        scene: "any",
+        group: "购物",
+        async run(ctx) {
+            const id = need(ctx.args[0], "商品id");
+            const data = await ctx.tool(pick(ctx, "lm_get_product", "ent_get_product"), ctx.scene === "enterprise" ? { id } : { productId: id });
+            ctx.out(fmt.product(data), data);
+        }
+    },
+    {
+        name: "categories",
+        usage: "categories",
+        summary: "商品类目",
+        scene: "any",
+        group: "购物",
+        async run(ctx) {
+            const data = await ctx.tool(pick(ctx, "lm_list_categories", "ent_list_categories"), {});
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "preview",
+        usage: "preview <商品id> [skuId] [数量]",
+        summary: "结算试算（应付金额；企业购会显示额度是否够、是否要补差）",
+        scene: "any",
+        group: "购物",
+        async run(ctx) {
+            const productId = need(ctx.args[0], "商品id");
+            const skuId = await resolveSku(ctx, productId, ctx.args[1]);
+            const qty = Number(ctx.args[2] ?? 1);
+            const items = ctx.scene === "enterprise" ? [compact({ productId, skuId, qty })] : [{ productId, skuId, quantity: qty }];
+            const data = await ctx.tool(pick(ctx, "lm_checkout_preview", "ent_checkout_preview"), { items });
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "buy",
+        usage: "buy <商品id> [skuId] [数量] --address <地址id> [--key 幂等键] [--mixed] [--device pc|mobile] [--return-url URL]",
+        summary: "下单：消费者购物生成支付宝付款码；企业购用企业额度下单（--mixed 混合支付）",
+        scene: "any",
+        group: "购物",
+        async run(ctx) {
+            const productId = need(ctx.args[0], "商品id");
+            const skuId = await resolveSku(ctx, productId, ctx.args[1]);
+            const qty = Number(ctx.args[2] ?? 1);
+            const key = str(ctx.opts, "key") ?? genKey();
+            const addressId = need(str(ctx.opts, "address"), "--address <地址id>（gowu address list 查看，或 gowu address add 新增）");
+            const common = compact({ addressId, idempotencyKey: key, device: str(ctx.opts, "device"), returnUrl: str(ctx.opts, "return-url") });
+            if (ctx.scene === "enterprise") {
+                const data = await ctx.tool("ent_create_order", { ...common, items: [compact({ productId, skuId, qty })], payWith: ctx.opts.mixed ? "mixed" : "points" });
+                ctx.out(`${fmt.enterpriseOrder(data)}\n\n幂等键：\`${key}\`（重试时用 --key ${key}，不会重复下单）`, data);
+            }
+            else {
+                const data = await ctx.tool("lm_create_payment_link", { ...common, items: [{ productId, skuId, quantity: qty }] });
+                ctx.out(`${fmt.paymentLink(data)}\n\n幂等键：\`${key}\`（重新获取同一张付款码时用 --key ${key}）`, data);
+            }
+        }
+    },
+    {
+        name: "divisions",
+        usage: "divisions [上级code]",
+        summary: "行政区划逐级查询（从省开始）",
+        scene: "any",
+        group: "地址",
+        async run(ctx) {
+            const data = await ctx.tool("lm_list_divisions", compact({ parent: ctx.args[0] }));
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "address",
+        usage: "address list | add --name 收货人 --phone 手机 --detail 详细地址 --region \"省 市 区 [街道]\" [--default] | default <id> | delete <id>",
+        summary: "收货地址簿",
+        scene: "any",
+        group: "地址",
+        async run(ctx) {
+            const sub = ctx.args[0] ?? "list";
+            if (sub === "list") {
+                const data = await ctx.tool("buyer_list_addresses", {});
+                return ctx.out(fmt.json(data), data);
+            }
+            if (sub === "add") {
+                const region = await resolveRegion(ctx, need(str(ctx.opts, "region"), "--region \"省 市 区 [街道]\""));
+                const data = await ctx.tool("buyer_add_address", compact({
+                    receiver: need(str(ctx.opts, "name"), "--name 收货人"),
+                    receiverPhone: need(str(ctx.opts, "phone"), "--phone 手机号"),
+                    addressDetail: need(str(ctx.opts, "detail"), "--detail 详细地址"),
+                    divisionCode: region.divisionCode,
+                    townDivisionCode: region.townDivisionCode,
+                    isDefault: ctx.opts.default ? true : undefined
+                }));
+                return ctx.out(`已保存地址（${region.names.join(" ")}）。\n\n${fmt.json(data)}`, data);
+            }
+            if (sub === "default" || sub === "delete") {
+                const addressId = need(ctx.args[1], "地址id");
+                const data = await ctx.tool(sub === "default" ? "buyer_set_default_address" : "buyer_delete_address", { addressId });
+                return ctx.out(fmt.json(data), data);
+            }
+            throw new CliError(`不认识的子命令：address ${sub}`, "USAGE");
+        }
+    },
+    // ── 订单与售后 ──
+    {
+        name: "orders",
+        usage: "orders [--limit N]",
+        summary: "订单列表",
+        scene: "any",
+        group: "订单与售后",
+        async run(ctx) {
+            const data = await ctx.tool(pick(ctx, "lm_list_orders", "ent_list_orders"), compact({ limit: num(ctx.opts, "limit") }));
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "order",
+        usage: "order <订单号>",
+        summary: "订单详情（企业购混合支付带 mixedPay 状态）",
+        scene: "any",
+        group: "订单与售后",
+        async run(ctx) {
+            const id = need(ctx.args[0], "订单号");
+            const data = await ctx.tool(pick(ctx, "lm_get_order", "ent_get_order"), ctx.scene === "enterprise" ? { bizOrderId: id } : { orderId: id });
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "logistics",
+        usage: "logistics <企业购订单号 | 消费者子订单id>",
+        summary: "物流轨迹",
+        scene: "any",
+        group: "订单与售后",
+        async run(ctx) {
+            const id = need(ctx.args[0], "订单号");
+            const data = await ctx.tool(pick(ctx, "lm_get_order_logistics", "ent_get_order_logistics"), ctx.scene === "enterprise" ? { bizOrderId: id } : { subOrderId: id });
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "receive",
+        usage: "receive <企业购订单号 | 消费者子订单id>",
+        summary: "确认收货",
+        scene: "any",
+        group: "订单与售后",
+        async run(ctx) {
+            const id = need(ctx.args[0], "订单号");
+            const data = ctx.scene === "enterprise" ? await ctx.tool("ent_order_action", { bizOrderId: id, action: "receive" }) : await ctx.tool("lm_confirm_receipt", { subOrderId: id });
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "payment",
+        usage: "payment [付款单号]",
+        summary: "付款与下单结果（不带单号列出最近的付款单）",
+        scene: "consumer",
+        group: "订单与售后",
+        async run(ctx) {
+            if (!ctx.args[0]) {
+                const data = await ctx.tool("lm_list_payments", compact({ limit: num(ctx.opts, "limit") }));
+                return ctx.out(fmt.json(data), data);
+            }
+            const data = await ctx.tool("lm_get_payment", { outTradeNo: ctx.args[0] });
+            ctx.out(fmt.payment(data), data);
+        }
+    },
+    {
+        name: "cancel",
+        usage: "cancel <订单号>",
+        summary: "取消订单（未发货）",
+        scene: "enterprise",
+        group: "订单与售后",
+        async run(ctx) {
+            const data = await ctx.tool("ent_order_action", { bizOrderId: need(ctx.args[0], "订单号"), action: "cancel" });
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "resume-pay",
+        usage: "resume-pay <订单号> [--device pc|mobile]",
+        summary: "混合支付：重新获取补差链接",
+        scene: "enterprise",
+        group: "订单与售后",
+        async run(ctx) {
+            const data = await ctx.tool("ent_order_action", compact({ bizOrderId: need(ctx.args[0], "订单号"), action: "resume-pay", device: str(ctx.opts, "device") }));
+            ctx.out(fmt.enterpriseOrder(data), data);
+        }
+    },
+    {
+        name: "refund",
+        usage: "refund list | get <售后单号> | cancel <售后单号> | 消费者：options <子订单id> <订单行id> · request <付款单号> --line <订单行id> [--reason-id ID] [--reason 说明] · return <付款单号> --line <订单行id> --company 快递公司 --no 运单号 | 企业购：request <订单号> [--sub 子订单] [--reason-id ID] [--reason 说明] [--amount 金额] [--need-return] · return <售后单号> --company 快递公司 --no 运单号",
+        summary: "售后：查看、申请、撤销、回传退货运单",
+        scene: "any",
+        group: "订单与售后",
+        async run(ctx) {
+            const sub = ctx.args[0] ?? "list";
+            const ent = ctx.scene === "enterprise";
+            let data;
+            if (sub === "list")
+                data = await ctx.tool(pick(ctx, "lm_list_refunds", "ent_list_refunds"), {});
+            else if (sub === "get")
+                data = await ctx.tool(pick(ctx, "lm_get_refund", "ent_get_refund"), ent ? { refundId: need(ctx.args[1], "售后单号") } : { disputeId: need(ctx.args[1], "售后单号") });
+            else if (sub === "cancel")
+                data = ent
+                    ? await ctx.tool("ent_refund_action", { refundId: need(ctx.args[1], "售后单号"), action: "cancel" })
+                    : await ctx.tool("lm_cancel_refund", { disputeId: need(ctx.args[1], "售后单号") });
+            else if (sub === "options" && !ent)
+                data = await ctx.tool("lm_refund_options", { subOrderId: need(ctx.args[1], "子订单id"), orderLineId: need(ctx.args[2], "订单行id") });
+            else if (sub === "request")
+                data = ent
+                    ? await ctx.tool("ent_request_refund", compact({
+                        bizOrderId: need(ctx.args[1], "订单号"),
+                        subOrderId: str(ctx.opts, "sub"),
+                        reasonId: str(ctx.opts, "reason-id"),
+                        reasonText: str(ctx.opts, "reason"),
+                        amount: num(ctx.opts, "amount"),
+                        needReturn: ctx.opts["need-return"] ? true : undefined
+                    }))
+                    : await ctx.tool("lm_request_refund", compact({ outTradeNo: need(ctx.args[1], "付款单号"), orderLineId: str(ctx.opts, "line"), reasonId: str(ctx.opts, "reason-id"), reason: str(ctx.opts, "reason") }));
+            else if (sub === "return")
+                data = ent
+                    ? await ctx.tool("ent_refund_action", compact({ refundId: need(ctx.args[1], "售后单号"), action: "return", logisticsCompany: need(str(ctx.opts, "company"), "--company"), invoiceNo: need(str(ctx.opts, "no"), "--no") }))
+                    : await ctx.tool("lm_submit_return_shipment", compact({
+                        outTradeNo: need(ctx.args[1], "付款单号"),
+                        orderLineId: str(ctx.opts, "line"),
+                        logisticsCompany: need(str(ctx.opts, "company"), "--company"),
+                        invoiceNo: need(str(ctx.opts, "no"), "--no")
+                    }));
+            else
+                throw new CliError(`不认识的子命令：refund ${sub}`, "USAGE");
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    // ── 企业额度（员工） ──
+    {
+        name: "points",
+        usage: "points [summary | ledger [--type grant|order|refund|expire] | batches | rules]",
+        summary: "我的企业额度：余额、流水、到期",
+        scene: "enterprise",
+        group: "企业额度",
+        async run(ctx) {
+            const sub = ctx.args[0] ?? "summary";
+            const map = {
+                summary: ["ent_points_summary", {}],
+                ledger: ["ent_points_ledger", compact({ type: str(ctx.opts, "type"), page: num(ctx.opts, "page"), pageSize: num(ctx.opts, "size") })],
+                batches: ["ent_points_batches", {}],
+                rules: ["ent_points_rules", {}]
+            };
+            const hit = map[sub];
+            if (!hit)
+                throw new CliError(`不认识的子命令：points ${sub}`, "USAGE");
+            const data = await ctx.tool(hit[0], hit[1]);
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "checkin",
+        usage: "checkin [status]",
+        summary: "每日签到领额度（员工福利）",
+        scene: "enterprise",
+        group: "企业额度",
+        async run(ctx) {
+            const data = await ctx.tool(ctx.args[0] === "status" ? "ent_checkin_status" : "ent_checkin", {});
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "notifications",
+        usage: "notifications [read <id,id…>]",
+        summary: "站内信",
+        scene: "enterprise",
+        group: "企业额度",
+        async run(ctx) {
+            const data = ctx.args[0] === "read"
+                ? await ctx.tool("ent_mark_notifications_read", { ids: need(ctx.args[1], "站内信 id").split(",") })
+                : await ctx.tool("ent_list_notifications", {});
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    // ── 企业管理（管理员） ──
+    {
+        name: "org",
+        usage: "org overview | dashboard | members | member <账号id|用户id> [--by-user] | grant <用户id> <额度> [--theme 类型] [--name 名称] [--days 有效天数] | revoke <用户id> <额度> | bills | consumption | departments | budgets",
+        summary: "企业管理：额度池、员工、发放额度、账单（管理员）",
+        scene: "enterprise",
+        group: "企业管理",
+        async run(ctx) {
+            const sub = ctx.args[0] ?? "overview";
+            let data;
+            const simple = {
+                overview: "ent_org_overview",
+                dashboard: "ent_org_dashboard",
+                members: "ent_org_list_members",
+                bills: "ent_org_bills",
+                consumption: "ent_org_consumption",
+                departments: "ent_org_list_departments",
+                budgets: "ent_org_list_budgets"
+            };
+            if (simple[sub])
+                data = await ctx.tool(simple[sub], {});
+            else if (sub === "member")
+                data = await ctx.tool("ent_org_get_member", compact({ accountId: need(ctx.args[1], "账号id"), by: ctx.opts["by-user"] ? "userId" : undefined }));
+            else if (sub === "grant" || sub === "revoke")
+                data = await ctx.tool("ent_org_grant_points", compact({
+                    action: sub,
+                    userId: need(ctx.args[1], "用户id"),
+                    amount: Number(need(ctx.args[2], "额度（100 = 1 元）")),
+                    theme: str(ctx.opts, "theme"),
+                    name: str(ctx.opts, "name"),
+                    expiresInDays: num(ctx.opts, "days")
+                }));
+            else
+                throw new CliError(`不认识的子命令：org ${sub}`, "USAGE");
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "upload",
+        usage: "upload cover <图片文件> | proof <任务id> <图片文件>",
+        summary: "上传任务封面（管理员）或任务凭证（员工），返回图片地址",
+        scene: "enterprise",
+        group: "任务",
+        async run(ctx) {
+            const sub = ctx.args[0];
+            const data = sub === "cover"
+                ? await upload(ctx, "ent_org_task_cover_ticket", {}, need(ctx.args[1], "图片文件"))
+                : sub === "proof"
+                    ? await upload(ctx, "ent_task_proof_ticket", { taskId: need(ctx.args[1], "任务id") }, need(ctx.args[2], "图片文件"))
+                    : (() => {
+                        throw new CliError("用法：upload cover <文件> | upload proof <任务id> <文件>", "USAGE");
+                    })();
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    {
+        name: "tasks",
+        usage: "tasks [list [--redeem] | mine [--redeem] | get <任务id> | do <任务id> signup|complete|submit|redeem [--payload JSON]]",
+        summary: "福豆任务（员工）：可参与的任务、报名、提交、兑换",
+        scene: "enterprise",
+        group: "任务",
+        async run(ctx) {
+            const sub = ctx.args[0] ?? "list";
+            let data;
+            if (sub === "list")
+                data = await ctx.tool("ent_list_tasks", { tab: ctx.opts.redeem ? "redeem" : "earn" });
+            else if (sub === "mine")
+                data = await ctx.tool("ent_my_tasks", { kind: ctx.opts.redeem ? "redeem" : "earn" });
+            else if (sub === "get")
+                data = await ctx.tool("ent_get_task", { taskId: need(ctx.args[1], "任务id") });
+            else if (sub === "do") {
+                const payload = str(ctx.opts, "payload");
+                data = await ctx.tool("ent_task_action", compact({ taskId: need(ctx.args[1], "任务id"), action: need(ctx.args[2], "动作"), payload: payload ? JSON.parse(payload) : undefined, idempotencyKey: genKey() }));
+            }
+            else
+                throw new CliError(`不认识的子命令：tasks ${sub}`, "USAGE");
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    // ── 员工绑定（应用负责人） ──
+    {
+        name: "partner",
+        usage: "partner orgs | members <企业id> | bind <企业id> <用户id> [--role member|admin|owner] [--name 姓名] | bind-me [--role admin] | unbind <企业id> <用户id>",
+        summary: "应用名下的企业与员工绑定（仅应用负责人）",
+        scene: "enterprise",
+        group: "员工绑定",
+        async run(ctx) {
+            const sub = ctx.args[0] ?? "orgs";
+            let data;
+            if (sub === "orgs")
+                data = await ctx.tool("partner_list_orgs", {});
+            else if (sub === "members")
+                data = await ctx.tool("partner_list_members", { orgId: need(ctx.args[1], "企业id") });
+            else if (sub === "bind" || sub === "bind-me") {
+                let orgId = ctx.args[1];
+                let userId = ctx.args[2];
+                if (sub === "bind-me") {
+                    // 把当前登录的自己绑成员工 / 管理员：自测企业购流程的第一步
+                    const me = (await ctx.tool("buyer_get_profile", {}));
+                    userId = me.account?.externalId;
+                    const orgs = (await ctx.tool("partner_list_orgs", {}));
+                    orgId = ctx.args[1] ?? orgs.items?.[0]?.orgId;
+                }
+                data = await ctx.tool("partner_bind_member", compact({ orgId: need(orgId, "企业id"), userId: need(userId, "用户id"), role: str(ctx.opts, "role") ?? (sub === "bind-me" ? "admin" : "member"), name: str(ctx.opts, "name") }));
+            }
+            else if (sub === "unbind")
+                data = await ctx.tool("partner_unbind_member", { orgId: need(ctx.args[1], "企业id"), userId: need(ctx.args[2], "用户id") });
+            else
+                throw new CliError(`不认识的子命令：partner ${sub}`, "USAGE");
+            ctx.out(fmt.json(data), data);
+        }
+    },
+    // ── 其他 ──
+    {
+        name: "tools",
+        usage: "tools [--verbose]",
+        summary: "当前应用能用的全部工具（gowu call 可直接调用）",
+        scene: "any",
+        group: "其他",
+        async run(ctx) {
+            const tools = await listTools(ctx.c, ctx.app);
+            const md = tools.map((t) => `- \`${t.name}\` ${t.title ?? ""}${ctx.opts.verbose ? `\n  ${(t.description ?? "").slice(0, 300)}` : ""}`).join("\n");
+            ctx.out(`当前应用「${ctx.app.appName}」可用 ${tools.length} 个工具：\n\n${md}`, tools);
+        }
+    },
+    {
+        name: "call",
+        usage: "call <工具名> [--args '{JSON}'] [--参数名 值 …]",
+        summary: "直接调用任意工具（参数见 gowu tools --verbose）",
+        scene: "any",
+        group: "其他",
+        async run(ctx) {
+            const name = need(ctx.args[0], "工具名");
+            const input = {};
+            const raw = str(ctx.opts, "args");
+            if (raw)
+                Object.assign(input, JSON.parse(raw));
+            for (const [k, v] of Object.entries(ctx.opts)) {
+                if (k === "args" || k === "json" || k === "app")
+                    continue;
+                if (typeof v === "boolean")
+                    input[k] = v;
+                else
+                    input[k] = /^-?\d+(\.\d+)?$/.test(v) ? Number(v) : /^[[{]/.test(v) ? JSON.parse(v) : v;
+            }
+            const data = await ctx.tool(name, input);
+            ctx.out(fmt.json(data), data);
+        }
+    }
+];
+export function commandsFor(scene) {
+    return COMMANDS.filter((c) => c.scene === "any" || c.scene === scene);
+}
+export function makeCtx(c, app, args, opts, print) {
+    const scene = sceneOf(app.realm);
+    return {
+        c,
+        app,
+        scene,
+        args,
+        opts,
+        async tool(name, input) {
+            const r = await callTool(c, app, name, input);
+            if (!r.ok) {
+                const d = r.data;
+                throw new CliError(d?.message ?? r.text ?? "调用失败", d?.code ?? "ERROR");
+            }
+            return r.data;
+        },
+        out(markdown, data) {
+            print(opts.json ? fmt.json(data) : markdown);
+        }
+    };
+}

package/dist/config.js

@@ -0,0 +1,69 @@
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+/**
+ * 本机凭证：~/.config/gowu/credentials.json（XDG_CONFIG_HOME / Windows APPDATA 下同名目录），权限 600。
+ *
+ * 按 appKey 分别保存令牌：一个开发者可以同时登录体验应用与正式的员工福利应用，`gowu use` 切换当前应用。
+ * scope 字段预留——以后管理类操作要单独授权时，令牌带上权限范围，文件格式不用变。
+ */
+export const DEFAULT_BASE = "https://api.gowu.net";
+export function configDir() {
+    if (process.env.GOWU_CONFIG_DIR)
+        return process.env.GOWU_CONFIG_DIR;
+    if (process.platform === "win32" && process.env.APPDATA)
+        return path.join(process.env.APPDATA, "gowu");
+    return path.join(process.env.XDG_CONFIG_HOME || path.join(homedir(), ".config"), "gowu");
+}
+const file = () => path.join(configDir(), "credentials.json");
+/** 服务端地址：环境变量 GOWU_API_BASE（联调用）> 已登录时记下的 > 默认 */
+export function resolveBase(saved) {
+    return (process.env.GOWU_API_BASE || saved || DEFAULT_BASE).replace(/\/+$/, "");
+}
+export function loadCredentials() {
+    try {
+        const c = JSON.parse(readFileSync(file(), "utf8"));
+        if (c && c.version === 1 && c.apps) {
+            // 换了服务端（如本地联调 → 线上）：旧的客户端与令牌在新服务端无效
+            if (String(c.base ?? DEFAULT_BASE).replace(/\/+$/, "") !== resolveBase())
+                return { version: 1, base: resolveBase(), apps: {} };
+            return c;
+        }
+    }
+    catch {
+        // 没有或损坏：当作未登录
+    }
+    return { version: 1, base: resolveBase(), apps: {} };
+}
+export function saveCredentials(c) {
+    const dir = configDir();
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    // 先写临时文件再改名：写到一半被打断也不会留下半个 JSON
+    const tmp = `${file()}.${process.pid}.tmp`;
+    writeFileSync(tmp, JSON.stringify({ ...c, base: resolveBase(c.base) }, null, 2), { mode: 0o600 });
+    renameSync(tmp, file());
+    try {
+        chmodSync(file(), 0o600);
+    }
+    catch {
+        // Windows 不支持 chmod，靠用户目录权限
+    }
+}
+export function clearCredentials() {
+    rmSync(file(), { force: true });
+}
+export function currentApp(c, override) {
+    const key = override ? findAppKey(c, override) : c.current;
+    return key ? (c.apps[key] ?? null) : null;
+}
+/** 按 appKey 或应用名称找（`gowu use 福利测试应用`） */
+export function findAppKey(c, nameOrKey) {
+    if (c.apps[nameOrKey])
+        return nameOrKey;
+    const hit = Object.values(c.apps).find((a) => a.appName === nameOrKey);
+    return hit?.appKey ?? null;
+}
+export function sceneOf(realm) {
+    return realm === "welfare" || realm === "procurement" ? "enterprise" : "consumer";
+}

package/dist/format.js

@@ -0,0 +1,112 @@
+/**
+ * 输出：默认是给人和 Agent 都好读的 Markdown（商品图、付款码用 ![…](…)），`--json` 输出接口原始数据。
+ * 没有专门格式的结果直接打印格式化的 JSON——Agent 解析 JSON 比解析排版可靠。
+ */
+const s = (v) => (typeof v === "string" ? v : typeof v === "number" ? String(v) : "");
+const yuan = (v) => {
+    const n = Number(v);
+    return Number.isFinite(n) && v !== null && v !== "" ? `¥${n.toFixed(2)}` : "";
+};
+/** 标题里的方括号、换行会打断 Markdown 图片语法 */
+const alt = (t) => t.replace(/[[\]\r\n]/g, " ").slice(0, 60);
+const img = (url, title) => {
+    let u = s(url).trim();
+    if (u.startsWith("//"))
+        u = `https:${u}`;
+    return /^https?:\/\//.test(u) ? `![${alt(title)}](${u.replace(/ /g, "%20").replace(/\(/g, "%28").replace(/\)/g, "%29")})` : "";
+};
+export function json(v) {
+    return JSON.stringify(v, null, 2);
+}
+export function products(data) {
+    const items = (data?.items ?? []);
+    if (!items.length)
+        return "没有找到符合条件的商品。";
+    const total = data.total;
+    const head = total !== undefined ? `共 ${s(total)} 件，以下 ${items.length} 件：\n\n` : "";
+    return (head +
+        items
+            .map((it, i) => {
+            const title = s(it.title) || "商品";
+            const meta = [
+                yuan(it.price),
+                it.marketPrice && Number(it.marketPrice) > Number(it.price) ? `原价 ${yuan(it.marketPrice)}` : "",
+                s(it.shopName),
+                it.availability === "out_of_stock" ? "缺货" : it.availability === "in_stock" ? "有货" : ""
+            ].filter(Boolean);
+            return [`${i + 1}. **${title}**`, img(it.imageUrl, title), meta.join(" · "), `商品 id：\`${s(it.id)}\``].filter(Boolean).join("\n\n");
+        })
+            .join("\n\n---\n\n"));
+}
+export function product(data) {
+    const p = data;
+    const title = s(p.title) || "商品";
+    const skus = (Array.isArray(p.skus) ? p.skus : []);
+    const lines = [
+        `**${title}**`,
+        img(p.imageUrl, title),
+        [yuan(p.price), s(p.shopName), s(p.brand)].filter(Boolean).join(" · "),
+        `商品 id：\`${s(p.id)}\``
+    ];
+    if (skus.length) {
+        lines.push("规格：\n" +
+            skus
+                .slice(0, 30)
+                .map((k) => {
+                const spec = k.specs && typeof k.specs === "object" ? Object.values(k.specs).map(s).filter(Boolean).join(" / ") : s(k.specs) || s(k.name);
+                const off = k.canSell === false || k.stock === 0 ? "（不可购买）" : "";
+                return `- ${spec || "默认规格"}  ${yuan(k.price)}${off}  skuId：\`${s(k.skuId)}\``;
+            })
+                .join("\n"));
+    }
+    else if (Array.isArray(p.skus)) {
+        lines.push("这个商品暂时不能下单（没有可售规格）。");
+    }
+    return lines.filter(Boolean).join("\n\n");
+}
+/** 消费者购物：付款码 */
+export function paymentLink(data) {
+    const d = data;
+    return [
+        `已生成付款单 \`${s(d.outTradeNo)}\`，应付 **${d.money !== undefined ? `¥${s(d.money)}` : yuan(d.amount)}**。用手机支付宝扫码付款：`,
+        img(d.qrImageUrl, "付款码"),
+        `手机上也可以直接打开：${s(d.payUrl)}`,
+        "付款后平台自动下单；查结果：`gowu payment " + s(d.outTradeNo) + "`（status = fulfilled 即已下单）。付款期限约 23 小时，超时自动关单、不扣钱。"
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+/** 企业购：下单结果（全额额度或混合支付） */
+export function enterpriseOrder(data) {
+    const d = data;
+    const id = s(d.bizOrderId) || s(d.order?.bizOrderId);
+    const lines = [`已下单，订单号 \`${id}\`。`];
+    if (s(d.launchUrl)) {
+        lines.push(`这是混合支付订单，员工还需用支付宝补差${d.cashCent !== undefined ? ` ¥${(Number(d.cashCent) / 100).toFixed(2)}` : ""}：`, `[去支付宝补差](${s(d.launchUrl)})（24 小时有效；过期用 \`gowu resume-pay ${id}\` 重新获取）`, `付完以订单状态为准：\`gowu order ${id}\`（mixedPay.status = confirmed 才算付清）。`);
+    }
+    return lines.join("\n\n");
+}
+export function payment(data) {
+    const d = data;
+    const status = s(d.status);
+    const label = {
+        pending_payment: "待付款",
+        paid: "已付款，正在下单",
+        fulfilling: "正在下单",
+        fulfilled: "已下单",
+        closed: "已关闭（超时未付，没扣钱）",
+        refund_pending: "下单失败，退款中",
+        refunded: "已退款"
+    };
+    return [
+        `付款单 \`${s(d.outTradeNo)}\`：**${label[status] ?? status}**`,
+        s(d.upstreamOrderId) ? `订单号：\`${s(d.upstreamOrderId)}\`（查看：\`gowu order ${s(d.upstreamOrderId)}\`）` : "",
+        d.money !== undefined ? `金额：¥${s(d.money)}` : ""
+    ]
+        .filter(Boolean)
+        .join("\n\n");
+}
+/** 结果里有 qrImageUrl / launchUrl 之类给用户点的东西时，额外提一句，Agent 不至于漏掉 */
+export function fallback(data) {
+    return json(data);
+}

package/dist/index.js

@@ -0,0 +1,202 @@
+import { readFileSync } from "node:fs";
+import { CliError, pollDeviceLogin, startDeviceLogin, tokenToCredential } from "./auth.js";
+import { COMMANDS, commandsFor, makeCtx } from "./commands.js";
+import { clearCredentials, currentApp, findAppKey, loadCredentials, resolveBase, saveCredentials, sceneOf } from "./config.js";
+import { callTool } from "./mcp.js";
+import { canOpenBrowser, openBrowser } from "./browser.js";
+/**
+ * gowu —— 格物开放平台命令行。
+ *
+ *   gowu login              设备码登录：在浏览器里输入授权码、手机号登录、选应用
+ *   gowu search 保温杯 --max 300
+ *   gowu buy <商品id> <skuId> --address <地址id>
+ *
+ * 全局选项：--json 输出原始数据；--app <应用名|appKey> 本次用指定应用；环境变量 GOWU_API_BASE 指定服务端（联调用）。
+ */
+const VERSION = (() => {
+    try {
+        return JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
+    }
+    catch {
+        return "0.0.0";
+    }
+})();
+/** --key value / --key=value / --flag；其余是位置参数。-- 之后全部当位置参数 */
+export function parseArgs(argv) {
+    const args = [];
+    const opts = {};
+    let rest = false;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (rest || !a.startsWith("--") || a === "--") {
+            if (a === "--" && !rest)
+                rest = true;
+            else
+                args.push(a);
+            continue;
+        }
+        const eq = a.indexOf("=");
+        if (eq > 0) {
+            opts[a.slice(2, eq)] = a.slice(eq + 1);
+            continue;
+        }
+        const key = a.slice(2);
+        const next = argv[i + 1];
+        if (next !== undefined && !next.startsWith("--")) {
+            opts[key] = next;
+            i++;
+        }
+        else {
+            opts[key] = true;
+        }
+    }
+    const [cmd = "help", ...pos] = args;
+    return { cmd, args: pos, opts };
+}
+const print = (s) => void process.stdout.write(`${s}\n`);
+const printErr = (s) => void process.stderr.write(`${s}\n`);
+function help(scene, appName) {
+    const list = scene ? commandsFor(scene) : COMMANDS;
+    const groups = new Map();
+    for (const c of list) {
+        const g = groups.get(c.group) ?? [];
+        g.push(`  gowu ${c.usage}\n      ${c.summary}`);
+        groups.set(c.group, g);
+    }
+    return [
+        `gowu ${VERSION} · 格物开放平台命令行`,
+        appName ? `当前应用：${appName}（${scene === "enterprise" ? "企业购" : "消费者购物"}）` : "还没登录：先执行 gowu login",
+        "",
+        "账号",
+        "  gowu login            在浏览器里授权（自动打开授权页；--no-browser 不打开，也可在手机上完成）",
+        "                        Agent 用：gowu login --start 先拿网址与授权码，用户授权后 gowu login --finish",
+        "  gowu whoami           当前应用与账号",
+        "  gowu apps             已登录的应用；gowu use <应用名|appKey> 切换",
+        "  gowu logout [--all]   退出当前应用（--all 全部）",
+        "",
+        ...[...groups.entries()].flatMap(([g, lines]) => [g, ...lines, ""]),
+        "全局选项：--json 输出原始数据 · --app <应用名|appKey> 本次使用指定应用",
+        "更多：https://open.gowu.net/docs#cli"
+    ].join("\n");
+}
+function codeMessage(v) {
+    return [
+        "请在浏览器打开下面的网址，用手机号登录并选择要授权的应用：",
+        "",
+        `  ${v.verificationUriComplete}`,
+        "",
+        `  （或打开 ${v.verificationUri} 手动输入授权码：${v.userCode}）`,
+        "",
+        `授权码 ${Math.max(1, Math.round((v.expiresAt - Date.now()) / 60_000))} 分钟内有效。`
+    ].join("\n");
+}
+/**
+ * 登录。人在终端里直接 `gowu login`：打印网址后等待授权。
+ * Agent 分两步：`gowu login --start` 立即返回网址与授权码（转告用户），用户授权后 `gowu login --finish` 完成——
+ * 很多 Agent 要等命令结束才看得到输出，一直等待的 login 会让它没机会把网址告诉用户。
+ */
+async function login(opts) {
+    const c = loadCredentials();
+    let pending = c.pending && c.pending.expiresAt > Date.now() ? c.pending : undefined;
+    if (opts.start || !opts.finish || !pending) {
+        if (opts.finish && !pending)
+            throw new CliError("没有进行中的登录，请先执行 gowu login --start", "USAGE");
+        pending = await startDeviceLogin(c);
+        c.pending = pending;
+        saveCredentials(c);
+        // 能打开就直接打开授权页（Agent 跑在用户电脑上时也会弹出，省得用户复制网址）；打不开就靠打印的网址
+        const opened = canOpenBrowser(Boolean(opts["no-browser"])) && openBrowser(pending.verificationUriComplete);
+        if (opts.start) {
+            const data = { verificationUri: pending.verificationUri, verificationUriComplete: pending.verificationUriComplete, userCode: pending.userCode, expiresIn: Math.round((pending.expiresAt - Date.now()) / 1000) };
+            return print(opts.json
+                ? JSON.stringify({ ...data, browserOpened: opened }, null, 2)
+                : `${opened ? "已在浏览器中打开授权页。" : ""}${codeMessage(pending)}\n\n用户在浏览器里授权后，执行 gowu login --finish 完成登录。`);
+        }
+        print(`${opened ? "已在浏览器中打开授权页；没有弹出的话请手动打开下面的网址。\n\n" : ""}${codeMessage(pending)}\n正在等待授权…`);
+    }
+    const t = await pollDeviceLogin(c, pending, { once: Boolean(opts.once) });
+    if (!t)
+        return print(opts.json ? JSON.stringify({ ok: false, code: "PENDING", message: "用户还没有完成授权" }) : "用户还没有完成授权，稍后再执行 gowu login --finish。");
+    // 令牌里是哪个应用：问服务端
+    const probe = tokenToCredential(t, { appKey: "", appName: "", realm: null });
+    const who = await callTool(c, probe, "account_whoami", {});
+    const w = (who.data ?? {});
+    if (!w.appKey)
+        throw new CliError("登录成功但读取应用信息失败，请重试");
+    const cred = tokenToCredential(t, { appKey: w.appKey, appName: w.appName || w.appKey, realm: w.realm ?? null });
+    c.apps[cred.appKey] = cred;
+    c.current = cred.appKey;
+    delete c.pending;
+    saveCredentials(c);
+    const data = { appKey: cred.appKey, appName: cred.appName, realm: cred.realm };
+    print(opts.json
+        ? JSON.stringify(data, null, 2)
+        : `✓ 已登录「${cred.appName}」（${sceneOf(cred.realm) === "enterprise" ? "企业购" : "消费者购物"}）。执行 gowu help 查看可用命令。`);
+}
+export async function main(argv) {
+    const { cmd, args, opts } = parseArgs(argv);
+    try {
+        if (cmd === "--version" || cmd === "version" || opts.version)
+            return print(VERSION);
+        if (cmd === "login")
+            return await login(opts);
+        const c = loadCredentials();
+        if (cmd === "logout") {
+            if (opts.all || Object.keys(c.apps).length <= 1) {
+                clearCredentials();
+                return print("已退出全部应用。");
+            }
+            const app = currentApp(c, typeof opts.app === "string" ? opts.app : undefined);
+            if (app)
+                delete c.apps[app.appKey];
+            c.current = Object.keys(c.apps)[0];
+            saveCredentials(c);
+            return print(`已退出「${app?.appName ?? ""}」${c.current ? `，当前应用：${c.apps[c.current].appName}` : ""}。`);
+        }
+        if (cmd === "apps") {
+            const list = Object.values(c.apps);
+            if (opts.json)
+                return print(JSON.stringify(list.map(({ appKey, appName, realm }) => ({ appKey, appName, realm, current: appKey === c.current })), null, 2));
+            if (!list.length)
+                return print("还没有登录任何应用，执行 gowu login。");
+            return print(list.map((a) => `${a.appKey === c.current ? "*" : " "} ${a.appName}  ${a.appKey}  ${sceneOf(a.realm) === "enterprise" ? "企业购" : "消费者购物"}`).join("\n"));
+        }
+        if (cmd === "use") {
+            const key = findAppKey(c, args[0] ?? "");
+            if (!key)
+                throw new CliError(`没有登录过「${args[0] ?? ""}」：gowu apps 查看已登录的应用，或 gowu login 再授权一个`, "USAGE");
+            c.current = key;
+            saveCredentials(c);
+            return print(`当前应用：${c.apps[key].appName}`);
+        }
+        const app = currentApp(c, typeof opts.app === "string" ? opts.app : undefined);
+        if (cmd === "help" || opts.help)
+            return print(help(app ? sceneOf(app.realm) : undefined, app?.appName));
+        if (!app)
+            throw new CliError("还没登录：先执行 gowu login", "NEED_LOGIN");
+        if (cmd === "whoami") {
+            const r = await callTool(c, app, "account_whoami", {});
+            const w = (r.data ?? {});
+            const data = { appKey: app.appKey, appName: app.appName, realm: app.realm, server: resolveBase(c.base), ...w };
+            return print(opts.json
+                ? JSON.stringify(data, null, 2)
+                : `应用：${app.appName}（${app.appKey}）\n场景：${sceneOf(app.realm) === "enterprise" ? "企业购" : "消费者购物"}\n服务端：${resolveBase(c.base)}\n可用接口：${Array.isArray(w.allowedEndpoints) ? w.allowedEndpoints.length : "?"} 个`);
+        }
+        const scene = sceneOf(app.realm);
+        const command = COMMANDS.find((x) => x.name === cmd);
+        if (!command)
+            throw new CliError(`不认识的命令：${cmd}。执行 gowu help 查看可用命令`, "USAGE");
+        if (command.scene !== "any" && command.scene !== scene) {
+            throw new CliError(`「${cmd}」只在${command.scene === "enterprise" ? "企业购" : "消费者购物"}应用里可用，当前应用是「${app.appName}」。gowu use 切换应用`, "NOT_ALLOWED");
+        }
+        await command.run(makeCtx(c, app, args, opts, print));
+    }
+    catch (e) {
+        const err = e;
+        if (opts.json)
+            print(JSON.stringify({ ok: false, code: err.code ?? "ERROR", message: err.message }, null, 2));
+        else
+            printErr(`✗ ${err.message}`);
+        process.exitCode = err.code === "USAGE" ? 2 : 1;
+    }
+}

package/dist/mcp.js

@@ -0,0 +1,73 @@
+import { resolveBase } from "./config.js";
+import { CliError, refreshCredential } from "./auth.js";
+let rpcId = 0;
+async function rpc(base, token, method, params) {
+    const res = await fetch(`${base}/mcp`, {
+        method: "POST",
+        headers: { authorization: `Bearer ${token}`, "content-type": "application/json", accept: "application/json, text/event-stream" },
+        body: JSON.stringify({ jsonrpc: "2.0", id: ++rpcId, method, params })
+    });
+    const raw = await res.text();
+    // 可能是 SSE（event: message / data: {...}）也可能是纯 JSON
+    const line = raw.split("\n").filter((l) => l.startsWith("data:")).pop();
+    const json = line ? line.slice(5).trim() : raw.trim();
+    let body = null;
+    try {
+        body = JSON.parse(json);
+    }
+    catch {
+        body = null;
+    }
+    return { status: res.status, body };
+}
+async function withAuth(c, app, fn) {
+    let cur = app;
+    if (cur.expiresAt - Date.now() < 60_000)
+        cur = await refreshCredential(c, cur);
+    let r = await fn(cur.accessToken);
+    if (r.status === 401) {
+        cur = await refreshCredential(c, cur);
+        r = await fn(cur.accessToken);
+        if (r.status === 401)
+            throw new CliError("登录已失效，请重新执行 gowu login", "NEED_LOGIN");
+    }
+    return r.value;
+}
+export async function listTools(c, app) {
+    const base = resolveBase(c.base);
+    return withAuth(c, app, async (token) => {
+        const r = await rpc(base, token, "tools/list", {});
+        if (r.status === 401)
+            return { status: 401, value: [] };
+        const tools = (r.body?.result?.tools ?? []);
+        if (!r.body?.result)
+            throw new CliError(`获取工具列表失败（HTTP ${r.status}）`);
+        return { status: r.status, value: tools };
+    });
+}
+export async function callTool(c, app, name, args) {
+    const base = resolveBase(c.base);
+    return withAuth(c, app, async (token) => {
+        const r = await rpc(base, token, "tools/call", { name, arguments: args });
+        if (r.status === 401)
+            return { status: 401, value: { ok: false, data: null, text: "", hints: [] } };
+        const err = r.body?.error;
+        if (err) {
+            const msg = String(err.message ?? "");
+            if (/not found/i.test(msg))
+                throw new CliError(`当前应用没有开放这个功能（${name}）。用 gowu tools 查看可用功能，或用 gowu use 切换应用`, "NOT_ALLOWED");
+            throw new CliError(msg || `调用失败（HTTP ${r.status}）`);
+        }
+        const result = (r.body?.result ?? {});
+        const texts = (result.content ?? []).filter((x) => x.type === "text").map((x) => x.text ?? "");
+        const [first = "", ...rest] = texts;
+        let data = first;
+        try {
+            data = JSON.parse(first);
+        }
+        catch {
+            // 不是 JSON 就当文本
+        }
+        return { status: r.status, value: { ok: !result.isError, data, text: first, hints: rest } };
+    });
+}

package/package.json

@@ -1,6 +1,44 @@
 {
   "name": "@gowuai/cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.1",
+  "description": "格物（GoWu）开放平台命令行：搜索商品、下单付款、订单售后、企业购额度与企业管理。给人用，也给 AI Agent 用。",
+  "type": "module",
+  "bin": {
+    "gowu": "bin/gowu.js"
+  },
+  "files": [
+    "bin",
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18.17"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "dev": "tsx src/index.ts",
+    "test": "tsx --test \"src/**/*.test.ts\"",
+    "prepublishOnly": "tsc -p tsconfig.json"
+  },
+  "keywords": [
+    "gowu",
+    "shopping",
+    "mcp",
+    "agent",
+    "cli"
+  ],
+  "homepage": "https://open.gowu.net/docs#cli",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/gowuai/cli.git"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3"
+  }
+}