@jingyi0605/codingns 0.7.4 → 0.8.0

package/bin/codingns.mjs

@@ -40,6 +40,9 @@ switch (command) {
   case "opencli":
     await runOpenCliCommand(argv);
     break;
+  case "mcp":
+    await runMcpCommand(argv);
+    break;
   default:
     console.error(`[codingns] 不支持的命令：${command}`);
     printHelp(1);
@@ -606,6 +609,21 @@ async function runAssistantCommand(argv) {
         projectId: readOptionalTrimmedValue(options.values["project-id"])
       })));
       return;
+    case "terminals:create":
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: "/api/assistant/terminals",
+        argv: rest,
+        supportedOptions: ["workspace-id", "project-id", "name", "cwd", "shell"],
+        helpTopic: "terminals.create"
+      }, (options) => ({
+        workspaceId: readOptionalTrimmedValue(options.values["workspace-id"]),
+        projectId: readOptionalTrimmedValue(options.values["project-id"]),
+        name: readOptionalTrimmedValue(options.values.name),
+        cwd: readOptionalTrimmedValue(options.values.cwd),
+        shell: readOptionalTrimmedValue(options.values.shell)
+      })));
+      return;
     case "terminals:history": {
       const [terminalId, ...tail] = rest;
       await printAssistantResponse(await requestAssistant({
@@ -627,9 +645,11 @@ async function runAssistantCommand(argv) {
         path: `/api/assistant/terminals/${requirePositional(terminalId, "terminalId")}/input`,
         argv: tail,
         supportedOptions: ["input"],
+        supportedFlags: ["confirm"],
         helpTopic: "terminals.send"
       }, (options) => ({
-        content: requireOptionValue(options.values.input, "input")
+        content: requireOptionValue(options.values.input, "input"),
+        confirm: options.flags.confirm === true
       })));
       return;
     }
@@ -639,7 +659,245 @@ async function runAssistantCommand(argv) {
         method: "DELETE",
         path: `/api/assistant/terminals/${requirePositional(terminalId, "terminalId")}`,
         argv: tail,
+        supportedFlags: ["confirm"],
         helpTopic: "terminals.close"
+      }, (options) => ({
+        confirm: options.flags.confirm === true
+      })));
+      return;
+    }
+    case "office:document-create":
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: "/api/assistant/office/documents",
+        argv: rest,
+        supportedOptions: ["workspace-id", "title", "template-id", "template-key", "summary", "content-json", "outline-json"],
+        helpTopic: "office.document-create"
+      }, (options) => ({
+        workspaceId: readOptionalTrimmedValue(options.values["workspace-id"]),
+        title: requireOptionValue(options.values.title, "title"),
+        templateId: readOptionalTrimmedValue(options.values["template-id"]),
+        templateKey: readOptionalTrimmedValue(options.values["template-key"]),
+        summary: readOptionalTrimmedValue(options.values.summary),
+        content: parseJsonOption(options.values["content-json"], "content-json"),
+        outline: parseJsonOption(options.values["outline-json"], "outline-json")
+      })));
+      return;
+    case "office:document-update": {
+      const [documentId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "PATCH",
+        path: `/api/assistant/office/documents/${requirePositional(documentId, "documentId")}`,
+        argv: tail,
+        supportedOptions: ["title", "template-id", "summary", "status", "content-json", "outline-json"],
+        helpTopic: "office.document-update"
+      }, (options) => ({
+        title: readOptionalTrimmedValue(options.values.title),
+        templateId: readOptionalTrimmedValue(options.values["template-id"]),
+        summary: readOptionalTrimmedValue(options.values.summary),
+        status: readOptionalTrimmedValue(options.values.status),
+        content: parseJsonOption(options.values["content-json"], "content-json"),
+        outline: parseJsonOption(options.values["outline-json"], "outline-json")
+      })));
+      return;
+    }
+    case "office:document-export": {
+      const [documentId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: `/api/assistant/office/documents/${requirePositional(documentId, "documentId")}/export`,
+        argv: tail,
+        supportedOptions: ["workspace-id", "format", "risk-level", "execute"],
+        helpTopic: "office.document-export"
+      }, (options) => ({
+        workspaceId: readOptionalTrimmedValue(options.values["workspace-id"]),
+        format: readOptionalTrimmedValue(options.values.format),
+        riskLevel: readOptionalTrimmedValue(options.values["risk-level"]),
+        execute: parseOptionalBooleanOption(options.values.execute, "execute")
+      })));
+      return;
+    }
+    case "office:document-task": {
+      const [taskId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "GET",
+        path: `/api/assistant/office/document-tasks/${requirePositional(taskId, "taskId")}`,
+        argv: tail,
+        helpTopic: "office.document-task"
+      }));
+      return;
+    }
+    case "office:browser-profiles":
+    case "office:browser-profile-list":
+      await printAssistantResponse(await requestAssistant({
+        method: "GET",
+        path: "/api/assistant/office/browser/profiles",
+        argv: rest,
+        supportedOptions: ["workspace-id"],
+        helpTopic: "office.browser-profile-list"
+      }, (options) => ({
+        workspaceId: readOptionalTrimmedValue(options.values["workspace-id"])
+      })));
+      return;
+    case "office:browser-profile-create":
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: "/api/assistant/office/browser/profiles",
+        argv: rest,
+        supportedOptions: ["workspace-id", "engine", "mode", "display-name", "ownership-scope", "cdp-endpoint"],
+        helpTopic: "office.browser-profile-create"
+      }, (options) => ({
+        workspaceId: readOptionalTrimmedValue(options.values["workspace-id"]),
+        engine: readOptionalTrimmedValue(options.values.engine),
+        mode: readOptionalTrimmedValue(options.values.mode),
+        displayName: readOptionalTrimmedValue(options.values["display-name"]),
+        ownershipScope: readOptionalTrimmedValue(options.values["ownership-scope"]),
+        cdpEndpoint: readOptionalTrimmedValue(options.values["cdp-endpoint"])
+      })));
+      return;
+    case "office:browser-profile-get": {
+      const [profileId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "GET",
+        path: `/api/assistant/office/browser/profiles/${requirePositional(profileId, "profileId")}`,
+        argv: tail,
+        helpTopic: "office.browser-profile-get"
+      }));
+      return;
+    }
+    case "office:browser-task-create":
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: "/api/assistant/office/browser/tasks",
+        argv: rest,
+        supportedOptions: ["workspace-id", "title", "profile-id", "risk-level", "execution-backend", "execute", "input-json"],
+        helpTopic: "office.browser-task-create"
+      }, (options) => ({
+        workspaceId: readOptionalTrimmedValue(options.values["workspace-id"]),
+        title: readOptionalTrimmedValue(options.values.title),
+        profileId: readOptionalTrimmedValue(options.values["profile-id"]),
+        riskLevel: readOptionalTrimmedValue(options.values["risk-level"]),
+        executionBackend: readOptionalTrimmedValue(options.values["execution-backend"]),
+        execute: parseOptionalBooleanOption(options.values.execute, "execute"),
+        input: parseJsonOption(options.values["input-json"], "input-json")
+      })));
+      return;
+    case "office:browser-task-get": {
+      const [taskId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "GET",
+        path: `/api/assistant/office/browser/tasks/${requirePositional(taskId, "taskId")}`,
+        argv: tail,
+        helpTopic: "office.browser-task-get"
+      }));
+      return;
+    }
+    case "office:ops-targets":
+      await printAssistantResponse(await requestAssistant({
+        method: "GET",
+        path: "/api/assistant/office/ops/targets",
+        argv: rest,
+        supportedOptions: ["workspace-id", "kind", "status"],
+        helpTopic: "office.ops-targets"
+      }, (options) => ({
+        workspaceId: readOptionalTrimmedValue(options.values["workspace-id"]),
+        kind: readOptionalTrimmedValue(options.values.kind),
+        status: readOptionalTrimmedValue(options.values.status)
+      })));
+      return;
+    case "office:ops-target-create":
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: "/api/assistant/office/ops/targets",
+        argv: rest,
+        supportedOptions: ["workspace-id", "kind", "display-name", "environment", "credential-ref", "config-json"],
+        helpTopic: "office.ops-target-create"
+      }, (options) => ({
+        workspaceId: readOptionalTrimmedValue(options.values["workspace-id"]),
+        kind: readOptionalTrimmedValue(options.values.kind),
+        displayName: requireOptionValue(options.values["display-name"], "display-name"),
+        environment: readOptionalTrimmedValue(options.values.environment),
+        credentialRef: readOptionalTrimmedValue(options.values["credential-ref"]),
+        config: parseJsonOption(options.values["config-json"], "config-json") ?? {}
+      })));
+      return;
+    case "office:ops-target-get": {
+      const [targetId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "GET",
+        path: `/api/assistant/office/ops/targets/${requirePositional(targetId, "targetId")}`,
+        argv: tail,
+        helpTopic: "office.ops-target-get"
+      }));
+      return;
+    }
+    case "office:ops-ssh-task-create":
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: "/api/assistant/office/ops/ssh-tasks",
+        argv: rest,
+        supportedOptions: ["title", "target-id", "risk-level", "execute", "input-json"],
+        helpTopic: "office.ops-ssh-task-create"
+      }, (options) => ({
+        title: readOptionalTrimmedValue(options.values.title),
+        targetId: requireOptionValue(options.values["target-id"], "target-id"),
+        riskLevel: readOptionalTrimmedValue(options.values["risk-level"]),
+        execute: parseOptionalBooleanOption(options.values.execute, "execute"),
+        input: parseJsonOption(options.values["input-json"], "input-json")
+      })));
+      return;
+    case "office:ops-task-execute": {
+      const [taskId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: `/api/assistant/office/ops/tasks/${requirePositional(taskId, "taskId")}/execute`,
+        argv: tail,
+        supportedFlags: ["confirm"],
+        helpTopic: "office.ops-task-execute"
+      }, (options) => ({
+        confirm: options.flags.confirm === true
+      })));
+      return;
+    }
+    case "office:task-approval-reply": {
+      const [approvalId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: `/api/assistant/office/task-approvals/${requirePositional(approvalId, "approvalId")}/reply`,
+        argv: tail,
+        supportedOptions: ["status", "decision-note"],
+        helpTopic: "office.task-approval-reply"
+      }, (options) => ({
+        status: readOptionalTrimmedValue(options.values.status) ?? "approved",
+        decisionNote: readOptionalTrimmedValue(options.values["decision-note"])
+      })));
+      return;
+    }
+    case "office:ops-browser-task-create":
+      await printAssistantResponse(await requestAssistant({
+        method: "POST",
+        path: "/api/assistant/office/ops/browser-tasks",
+        argv: rest,
+        supportedOptions: ["title", "target-id", "profile-id", "execution-backend", "risk-level", "input-json"],
+        supportedFlags: ["confirm"],
+        helpTopic: "office.ops-browser-task-create"
+      }, (options) => ({
+        title: readOptionalTrimmedValue(options.values.title),
+        targetId: requireOptionValue(options.values["target-id"], "target-id"),
+        profileId: readOptionalTrimmedValue(options.values["profile-id"]),
+        executionBackend: readOptionalTrimmedValue(options.values["execution-backend"]),
+        riskLevel: readOptionalTrimmedValue(options.values["risk-level"]),
+        input: parseJsonOption(options.values["input-json"], "input-json"),
+        confirm: options.flags.confirm === true
+      })));
+      return;
+    case "office:ops-task-get": {
+      const [taskId, ...tail] = rest;
+      await printAssistantResponse(await requestAssistant({
+        method: "GET",
+        path: `/api/assistant/office/ops/tasks/${requirePositional(taskId, "taskId")}`,
+        argv: tail,
+        helpTopic: "office.ops-task-get"
       }));
       return;
     }
@@ -658,11 +916,13 @@ async function runAssistantCommand(argv) {
         argv: rest,
         supportedOptions: ["workspace-id", "root-path", "command-hint"],
         repeatableOptions: ["command-hint"],
+        supportedFlags: ["confirm"],
         helpTopic: "debug-targets.analyze"
       }, (options) => ({
         workspaceId: requireOptionValue(options.values["workspace-id"], "workspace-id"),
         rootPath: requireOptionValue(options.values["root-path"], "root-path"),
-        commandHints: readMultiOptionValues(options.values["command-hint"])
+        commandHints: readMultiOptionValues(options.values["command-hint"]),
+        confirm: options.flags.confirm === true
       })));
       return;
     case "debug-targets:framework-analysis": {
@@ -681,8 +941,11 @@ async function runAssistantCommand(argv) {
         method: "POST",
         path: `/api/assistant/debug-targets/${requirePositional(targetId, "targetId")}/framework-analysis/refresh`,
         argv: tail,
+        supportedFlags: ["confirm"],
         helpTopic: "debug-targets.refresh-framework-analysis"
-      }));
+      }, (options) => ({
+        confirm: options.flags.confirm === true
+      })));
       return;
     }
     case "debug-targets:launch-plan": {
@@ -693,9 +956,11 @@ async function runAssistantCommand(argv) {
         argv: tail,
         supportedOptions: ["port-request"],
         repeatableOptions: ["port-request"],
+        supportedFlags: ["confirm"],
         helpTopic: "debug-targets.launch-plan"
       }, (options) => ({
-        portRequests: parseDebugPortRequests(options.values["port-request"])
+        portRequests: parseDebugPortRequests(options.values["port-request"]),
+        confirm: options.flags.confirm === true
       })));
       return;
     }
@@ -707,11 +972,13 @@ async function runAssistantCommand(argv) {
         argv: tail,
         supportedOptions: ["shell", "runtime-type", "port-request"],
         repeatableOptions: ["port-request"],
+        supportedFlags: ["confirm"],
         helpTopic: "debug-targets.run"
       }, (options) => ({
         shell: readOptionalTrimmedValue(options.values.shell),
         runtimeType: readOptionalTrimmedValue(options.values["runtime-type"]),
-        portRequests: parseDebugPortRequests(options.values["port-request"])
+        portRequests: parseDebugPortRequests(options.values["port-request"]),
+        confirm: options.flags.confirm === true
       })));
       return;
     }
@@ -913,8 +1180,11 @@ async function runAssistantCommand(argv) {
         method: "POST",
         path: `/api/assistant/worktrees/${requirePositional(workspaceId, "workspaceId")}/merge-into-parent`,
         argv: tail,
+        supportedFlags: ["confirm"],
         helpTopic: "worktrees.merge"
-      }));
+      }, (options) => ({
+        confirm: options.flags.confirm === true
+      })));
       return;
     }
     case "worktrees:cleanup": {
@@ -936,6 +1206,83 @@ async function runAssistantCommand(argv) {
   }
 }
 
+async function runMcpCommand(argv) {
+  const [target, action, ...rest] = argv;
+
+  if (!target || isHelpToken(target)) {
+    printMcpHelp(0);
+  }
+
+  if (target !== "workspace-office") {
+    console.error(`[codingns] 不支持的 MCP 目标：${target}`);
+    printMcpHelp(1);
+  }
+
+  if (!action || isHelpToken(action)) {
+    printMcpWorkspaceOfficeHelp(0);
+  }
+
+  switch (action) {
+    case "serve":
+      await runWorkspaceOfficeMcpServe(rest);
+      return;
+    default:
+      console.error(`[codingns] 不支持的 workspace-office MCP 动作：${action}`);
+      printMcpWorkspaceOfficeHelp(1);
+  }
+}
+
+async function runWorkspaceOfficeMcpServe(argv) {
+  const options = parseArgs(argv, {
+    supportedOptions: ["base-url", "token", "auth-file"],
+    supportedFlags: []
+  });
+
+  if (options.help) {
+    printMcpWorkspaceOfficeHelp(0);
+  }
+
+  if (options.errors.length > 0) {
+    for (const error of options.errors) {
+      console.error(`[codingns] ${error}`);
+    }
+    printMcpWorkspaceOfficeHelp(1);
+  }
+
+  const authFilePath = readStringOption(
+    options.values["auth-file"],
+    process.env.WORKSPACE_SESSION_AUTH_FILE,
+    process.env.CODINGNS_AUTH_FILE,
+    process.env.BUTLER_AUTH_FILE
+  );
+  const credential = authFilePath
+    ? readAssistantCredentialFromFile(path.resolve(authFilePath))
+    : readAssistantCredential();
+  const baseUrl = readStringOption(
+    options.values["base-url"],
+    process.env.CODINGNS_OFFICE_MCP_BASE_URL,
+    credential?.apiBaseUrl ?? ""
+  );
+  const accessToken = readStringOption(
+    options.values.token,
+    process.env.CODINGNS_OFFICE_MCP_ACCESS_TOKEN,
+    credential?.accessToken ?? ""
+  );
+
+  if (!baseUrl) {
+    fail("workspace-office MCP 缺少 baseUrl，请传 --base-url 或提供认证文件");
+  }
+
+  if (!accessToken) {
+    fail("workspace-office MCP 缺少 access token，请传 --token 或提供认证文件");
+  }
+
+  process.env.CODINGNS_OFFICE_MCP_BASE_URL = baseUrl;
+  process.env.CODINGNS_OFFICE_MCP_ACCESS_TOKEN = accessToken;
+  await import("./office-mcp-server.mjs");
+  await new Promise(() => {});
+}
+
 async function runSkillsCommand(argv) {
   const [action, ...rest] = argv;
 
@@ -1231,7 +1578,7 @@ async function requestAssistant(command, buildPayload) {
   let response;
 
   try {
-    const usesJsonBody = command.method === "POST" || command.method === "PUT";
+    const usesJsonBody = command.method === "POST" || command.method === "PUT" || command.method === "DELETE";
     response = await fetch(url, {
       method: command.method,
       headers: {
@@ -1578,6 +1925,15 @@ function readAssistantCredential() {
     return cachedAssistantCredential;
   }
 
+  cachedAssistantCredential = readAssistantCredentialFromFile(credentialFilePath);
+  return cachedAssistantCredential;
+}
+
+function readAssistantCredentialFromFile(credentialFilePath) {
+  if (!credentialFilePath) {
+    return null;
+  }
+
   let rawContent;
 
   try {
@@ -1652,6 +2008,31 @@ function readOptionalTrimmedValue(value) {
   return normalized.length > 0 ? normalized : null;
 }
 
+function parseJsonOption(value, field) {
+  const normalized = readOptionalTrimmedValue(value);
+
+  if (!normalized) {
+    return undefined;
+  }
+
+  try {
+    return JSON.parse(normalized);
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : "未知错误";
+    fail(`参数 --${field} 不是合法 JSON：${detail}`);
+  }
+}
+
+function parseOptionalBooleanOption(value, field) {
+  const normalized = readOptionalTrimmedValue(value);
+
+  if (normalized === null) {
+    return undefined;
+  }
+
+  return parseBooleanOption(normalized, field);
+}
+
 function readAssistantTerminalHistoryLimitOption(value) {
   const normalized = readOptionalTrimmedValue(value);
 
@@ -1798,6 +2179,7 @@ codingns 用法：
 
   codingns start [--host 0.0.0.0] [--port 3002] [--data-dir ~/.codingns] [--demo]
   codingns assistant <group> <action> [options]
+  codingns mcp workspace-office serve [--auth-file <path> | --base-url <url> --token <token>]
   codingns provider-sessions <action> [options]
   codingns skills <action> [options]
   codingns opencli <action> [options]
@@ -1814,14 +2196,19 @@ assistant 例子：
 
   codingns assistant capabilities list --token <token>
   codingns assistant projects list --status active --token <token>
+  codingns assistant office browser-profile-list --token <token>
+  codingns assistant office browser-profile-create --engine chrome --mode persistent --display-name "办公 Chrome" --token <token>
+  codingns assistant office browser-task-create --execution-backend opencli_bridge --input-json '{"startUrl":"https://example.invalid","actions":[{"type":"read_dom"}]}' --token <token>
+  codingns assistant office ops-target-create --kind ssh_host --display-name "生产 SSH" --config-json '{"host":"10.0.0.8","username":"root"}' --token <token>
+  codingns assistant office document-create --title "周报" --template-key team.doct.weekly --content-json '{"sections":[]}' --token <token>
   codingns assistant workspaces list --token <token>
-  codingns assistant debug-targets analyze --workspace-id <id> --root-path <path> --token <token>
-  codingns assistant debug-targets launch-plan <targetId> --port-request role=backend,cwd=apps/api,port=44001 --token <token>
+  codingns assistant debug-targets analyze --workspace-id <id> --root-path <path> --confirm --token <token>
+  codingns assistant debug-targets launch-plan <targetId> --port-request role=backend,cwd=apps/api,port=44001 --confirm --token <token>
   codingns assistant worktrees tree --root-workspace-id <id> --token <token>
   codingns assistant sessions send <sessionId> --message "继续修复类型错误" --token <token>
   codingns assistant follow-ups continue <taskId> --summary "目标还没完成" --continue-prompt "继续补齐剩余实现" --token <token>
-  codingns assistant terminals send <terminalId> --input "npm test\\n" --token <token>
-  codingns assistant terminals close <terminalId> --token <token>
+  codingns assistant terminals send <terminalId> --input "npm test\\n" --confirm --token <token>
+  codingns assistant terminals close <terminalId> --confirm --token <token>
 
 skills 例子：
 
@@ -1835,6 +2222,10 @@ opencli 例子：
   codingns opencli check --token <token>
   codingns opencli config --enabled true --command-id hackernews/top --token <token>
 
+mcp 例子：
+
+  codingns mcp workspace-office serve --auth-file ~/.codingns/host/workspace-session-runtime/<workspaceId>/<sessionId>/WORKSPACE_SESSION_AUTH.json
+
 provider-sessions 例子：
 
   codingns provider-sessions delete --provider codex --provider-session-id <id> --raw-store-ref <ref>
@@ -1849,6 +2240,52 @@ provider-sessions 例子：
   process.exit(exitCode);
 }
 
+function printMcpHelp(exitCode) {
+  const output = `
+codingns mcp 用法：
+
+  codingns mcp workspace-office serve [--auth-file <path> | --base-url <url> --token <token>]
+
+说明：
+
+  workspace-office 会启动工作区专用 office MCP server。
+  它只暴露当前工作区允许的 office.document.* / office.browser.* / office.ops.*。
+`.trim();
+
+  if (exitCode === 0) {
+    console.log(output);
+  } else {
+    console.error(output);
+  }
+
+  process.exit(exitCode);
+}
+
+function printMcpWorkspaceOfficeHelp(exitCode) {
+  const output = `
+codingns mcp workspace-office serve
+
+用途：
+  启动工作区专用 office MCP server，供 Codex / Claude / OpenCode 这类支持 MCP 的 CLI 直接挂正式办公工具。
+
+用法：
+  codingns mcp workspace-office serve [--auth-file <path> | --base-url <url> --token <token>]
+
+说明：
+  - 优先复用工作区 scoped 认证文件。
+  - 真实执行仍走 Host /api/assistant/office/*。
+  - 暴露工具只包含当前工作区允许的 office.document.* / office.browser.* / office.ops.*。
+`.trim();
+
+  if (exitCode === 0) {
+    console.log(output);
+  } else {
+    console.error(output);
+  }
+
+  process.exit(exitCode);
+}
+
 function printAssistantHelpTopic(topic, exitCode) {
   const output = getAssistantHelpText(topic);
 
@@ -1899,6 +2336,259 @@ function printProviderSessionsHelpTopic(topic, exitCode) {
 
 function getAssistantHelpText(topic) {
   switch (topic) {
+    case "office":
+      return `
+codingns assistant office
+
+可用动作：
+  document-create            创建办公文档
+  document-update            更新办公文档
+  document-export            创建或执行文档导出任务
+  document-task              读取文档导出任务
+  browser-profile-list       列出浏览器 Profile
+  browser-profile-create     创建浏览器 Profile
+  browser-profile-get        读取浏览器 Profile
+  browser-task-create        创建并可选执行浏览器任务
+  browser-task-get           读取浏览器任务
+  ops-targets                列出运维目标
+  ops-target-create          创建运维目标
+  ops-target-get             读取运维目标
+  ops-ssh-task-create        创建 SSH 运维任务
+  ops-task-execute           执行已创建的 SSH 运维任务
+  task-approval-reply        回复办公任务审批
+  ops-browser-task-create    创建浏览器运维任务
+  ops-task-get               读取运维任务
+
+示例：
+  codingns assistant office browser-profile-create --engine chrome --mode persistent --display-name "办公 Chrome" --token <token>
+  codingns assistant office browser-task-create --execution-backend opencli_bridge --input-json '{"startUrl":"https://example.invalid","actions":[{"type":"read_dom"}]}' --token <token>
+  codingns assistant office ops-target-create --kind ssh_host --display-name "生产 SSH" --config-json '{"host":"10.0.0.8","username":"root"}' --token <token>
+  codingns assistant office document-create --title "周报" --template-key team.doct.weekly --content-json '{"sections":[]}' --token <token>
+`.trim();
+    case "office.document-create":
+      return `
+codingns assistant office document-create
+
+用途：
+  在助手能力面里创建正式办公文档。
+
+用法：
+  codingns assistant office document-create --title <title> [--workspace-id <id>] [--template-id <id> | --template-key <key>] [--summary <text>] [--content-json <json>] [--outline-json <json>] --token <token>
+`.trim();
+    case "office.document-update":
+      return `
+codingns assistant office document-update
+
+用途：
+  更新已有办公文档的标题、模板、摘要或结构化内容。
+
+用法：
+  codingns assistant office document-update <documentId> [--title <title>] [--template-id <id>] [--summary <text>] [--status draft|reviewing|published|archived] [--content-json <json>] [--outline-json <json>] --token <token>
+`.trim();
+    case "office.document-export":
+      return `
+codingns assistant office document-export
+
+用途：
+  创建文档导出任务，并可选择立即执行。
+
+用法：
+  codingns assistant office document-export <documentId> [--workspace-id <id>] [--format docx|pdf|md] [--risk-level low|medium|high] [--execute true|false] --token <token>
+`.trim();
+    case "office.document-task":
+      return `
+codingns assistant office document-task
+
+用途：
+  读取文档导出任务状态、产物和回执。
+
+用法：
+  codingns assistant office document-task <taskId> --token <token>
+`.trim();
+    case "office.browser-profiles":
+    case "office.browser-profile-list":
+      return `
+codingns assistant office browser-profile-list
+
+用途：
+  列出办公浏览器 Profile。
+
+用法：
+  codingns assistant office browser-profile-list [--workspace-id <id>] --token <token>
+
+兼容：
+  旧别名 \`codingns assistant office browser-profiles\` 仍可继续使用。
+`.trim();
+    case "office.browser-profile-create":
+      return `
+codingns assistant office browser-profile-create
+
+用途：
+  创建独立持久化 Profile，或创建 CDP 接管模式的浏览器 Profile。
+
+用法：
+  codingns assistant office browser-profile-create [--workspace-id <id>] [--engine chrome|edge] [--mode persistent|cdp_attached] [--display-name <name>] [--ownership-scope user|workspace] [--cdp-endpoint <url>] --token <token>
+`.trim();
+    case "office.browser-profile-get":
+      return `
+codingns assistant office browser-profile-get
+
+用途：
+  读取办公浏览器 Profile 详情。
+
+用法：
+  codingns assistant office browser-profile-get <profileId> --token <token>
+`.trim();
+    case "office.browser-task-create":
+      return `
+codingns assistant office browser-task-create
+
+用途：
+  创建并可选立即执行办公浏览器任务，工作区会话里调用浏览器能力就走这条链路。
+
+用法：
+  codingns assistant office browser-task-create [--profile-id <profileId>] [--workspace-id <id>] [--title <title>] [--risk-level low|medium|high] [--execution-backend playwright|opencli_bridge] [--execute true|false] [--input-json <json>] --token <token>
+
+输入约定：
+  --input-json 必须是一个 JSON 对象，最小结构如下：
+  {"startUrl":"https://example.invalid","actions":[{"type":"read_dom"}]}
+
+后端选择：
+  - playwright：默认，无头浏览器执行
+  - playwright 仍然要求显式传 --profile-id
+  - opencli_bridge：复用 opencli 浏览器扩展，走真实浏览器调试
+  - opencli_bridge 是无感桥接入口，通常不需要也不建议传 --profile-id
+  - 涉及登录、验证码、二次确认弹窗、复杂真实站点、必须复用现有 Chrome/Edge 登录态时，优先显式传 --execution-backend opencli_bridge
+  - 只有页面明显适合无头执行，或者用户明确要求无头链路时，才继续使用默认 playwright
+
+支持动作：
+  - goto：打开指定 url，字段：type、url
+  - click：点击元素，字段：type、selector
+  - fill：填写输入框，字段：type、selector、value
+  - press：按键，字段：type、key；可选 selector
+  - select：选择下拉项，字段：type、selector、value 或 values
+  - upload：上传文件，字段：type、selector、filePath 或 filePaths
+  - download：点击并等待下载，字段：type、selector；可选 fileName
+  - wait：纯等待，字段：type；可选 timeoutMs
+  - read_dom：读取 body 文本并生成 DOM 快照产物，字段：type
+  - extract_text：提取 body 文本并生成文本产物，字段：type
+  - screenshot：截图并生成 PNG 产物，字段：type；可选 fullPage、timeoutMs
+
+最小可抄样例：
+  1. 打开页面并读取内容
+     {"startUrl":"https://www.zhihu.com/signin","actions":[{"type":"read_dom"}]}
+  2. 打开页面后截图
+     {"startUrl":"https://www.zhihu.com/signin","actions":[{"type":"screenshot","fullPage":true}]}
+  3. 打开页面，等待，再读取 DOM
+     {"startUrl":"https://www.zhihu.com/signin","actions":[{"type":"wait","timeoutMs":3000},{"type":"read_dom"}]}
+  4. 点击按钮后截图
+     {"startUrl":"https://example.invalid","actions":[{"type":"click","selector":"button[type=\\"submit\\"]"},{"type":"screenshot"}]}
+  5. 填表单后停留
+     {"startUrl":"https://example.invalid/login","actions":[{"type":"fill","selector":"input[name=\\"username\\"]","value":"demo"},{"type":"fill","selector":"input[name=\\"password\\"]","value":"secret"},{"type":"screenshot"}]}
+  6. 登录页 / 验证码 / 复杂真实站点，优先真实浏览器调试
+     {"startUrl":"https://target.example/login","executionBackend":"opencli_bridge","actions":[{"type":"read_dom"},{"type":"wait","timeoutMs":3000},{"type":"screenshot","fullPage":true}]}
+  7. 已登录浏览器里继续操作，保留真人登录态
+     {"startUrl":"https://target.example/console","executionBackend":"opencli_bridge","actions":[{"type":"click","selector":"button[data-testid=\\"next-step\\"]"},{"type":"wait","timeoutMs":1500},{"type":"screenshot","fullPage":true}]}
+
+建议顺序：
+  无头 playwright 任务先 running \`browser-profile-list\` 看是否已有可复用 Profile；没有再创建 Profile。
+  遇到登录、验证码、复杂真实站点或必须复用现有浏览器登录态时，优先显式传 \`--execution-backend opencli_bridge\`；通常不需要先手动查/建 Profile，也不需要传 \`--profile-id\`。
+  遇到真实站点网页任务，先查这里的示例，不要退回去翻源码或自己猜私有 HTTP body。
+`.trim();
+    case "office.browser-task-get":
+      return `
+codingns assistant office browser-task-get
+
+用途：
+  读取办公浏览器任务状态、产物和回执。
+
+用法：
+  codingns assistant office browser-task-get <taskId> --token <token>
+`.trim();
+    case "office.ops-targets":
+      return `
+codingns assistant office ops-targets
+
+用途：
+  列出办公运维目标。
+
+用法：
+  codingns assistant office ops-targets [--workspace-id <id>] [--kind ssh_host|web_console] [--status active|disabled|error] --token <token>
+`.trim();
+    case "office.ops-target-create":
+      return `
+codingns assistant office ops-target-create
+
+用途：
+  创建 SSH 主机或网页控制台运维目标。
+
+用法：
+  codingns assistant office ops-target-create --workspace-id <id> --display-name <name> [--kind ssh_host|web_console] [--environment <name>] [--credential-ref <ref>] [--config-json <json>] --token <token>
+`.trim();
+    case "office.ops-target-get":
+      return `
+codingns assistant office ops-target-get
+
+用途：
+  读取办公运维目标详情。
+
+用法：
+  codingns assistant office ops-target-get <targetId> --token <token>
+`.trim();
+    case "office.ops-ssh-task-create":
+      return `
+codingns assistant office ops-ssh-task-create
+
+用途：
+  创建 SSH 运维任务，可选立即执行。
+
+用法：
+  codingns assistant office ops-ssh-task-create --target-id <targetId> [--title <title>] [--risk-level low|medium|high] [--execute true|false] [--input-json <json>] --token <token>
+`.trim();
+    case "office.ops-task-execute":
+      return `
+codingns assistant office ops-task-execute
+
+用途：
+  执行已经创建并处于 ready 状态的 SSH 运维任务。
+
+用法：
+  codingns assistant office ops-task-execute <taskId> --confirm --token <token>
+`.trim();
+    case "office.task-approval-reply":
+      return `
+codingns assistant office task-approval-reply
+
+用途：
+  处理办公任务审批。高风险 SSH 任务审批通过后，才能继续执行。
+
+用法：
+  codingns assistant office task-approval-reply <approvalId> [--status approved|rejected] [--decision-note <text>] --token <token>
+`.trim();
+    case "office.ops-browser-task-create":
+      return `
+codingns assistant office ops-browser-task-create
+
+用途：
+  创建浏览器运维任务；登录态、控制台、真实站点优先走 opencli_bridge 无感桥接。
+
+用法：
+  codingns assistant office ops-browser-task-create --target-id <targetId> [--profile-id <profileId>] [--execution-backend playwright|opencli_bridge] [--title <title>] [--risk-level low|medium|high] [--input-json <json>] [--confirm] --token <token>
+
+说明：
+  - opencli_bridge：默认推荐。通常不需要传 --profile-id。
+  - playwright：仍然需要显式传 --profile-id。
+`.trim();
+    case "office.ops-task-get":
+      return `
+codingns assistant office ops-task-get
+
+用途：
+  读取办公运维任务状态、产物和回执。
+
+用法：
+  codingns assistant office ops-task-get <taskId> --token <token>
+`.trim();
     case "capabilities":
     case "capabilities.list":
       return `
@@ -2429,14 +3119,26 @@ codingns assistant follow-ups fail
 codingns assistant terminals
 
 可用动作：
+  create   在当前工作区或项目下新建终端
   list     列出项目或工作区下的终端
   history  读取终端历史输出
   send     向受控终端发送输入
   close    关闭受控终端
 
 示例：
+  codingns assistant terminals create --workspace-id <workspaceId> --token <token>
   codingns assistant terminals list --project-id <projectId> --token <token>
   codingns assistant terminals send <terminalId> --input "npm test\\n" --token <token>
+`.trim();
+    case "terminals.create":
+      return `
+codingns assistant terminals create
+
+用途：
+  在指定工作区或项目作用域下正式新建一个受控终端。
+
+用法：
+  codingns assistant terminals create [--workspace-id <id> | --project-id <id>] [--name <name>] [--cwd <cwd>] [--shell <shell>] --token <token>
 `.trim();
     case "terminals.list":
       return `
@@ -2466,7 +3168,7 @@ codingns assistant terminals send
   向受控终端发送输入，比如测试命令或构建命令。
 
 用法：
-  codingns assistant terminals send <terminalId> --input "npm test\\n" --token <token>
+  codingns assistant terminals send <terminalId> --input "npm test\\n" --confirm --token <token>
 `.trim();
     case "terminals.close":
       return `
@@ -2476,7 +3178,7 @@ codingns assistant terminals close
   关闭指定受控终端，常用于停止调试进程或回收运行资源。
 
 用法：
-  codingns assistant terminals close <terminalId> --token <token>
+  codingns assistant terminals close <terminalId> --confirm --token <token>
 `.trim();
     case "debug-targets":
       return `
@@ -2493,8 +3195,8 @@ codingns assistant debug-targets
   runtimes                   读取运行历史
 
 示例：
-  codingns assistant debug-targets analyze --workspace-id <id> --root-path /repo/demo --token <token>
-  codingns assistant debug-targets launch-plan <targetId> --port-request role=backend,cwd=apps/api,port=44001 --token <token>
+  codingns assistant debug-targets analyze --workspace-id <id> --root-path /repo/demo --confirm --token <token>
+  codingns assistant debug-targets launch-plan <targetId> --port-request role=backend,cwd=apps/api,port=44001 --confirm --token <token>
 `.trim();
     case "debug-targets.compatibility-matrix":
       return `
@@ -2514,7 +3216,7 @@ codingns assistant debug-targets analyze
   分析指定工作区下的调试目标、服务和框架兼容性。
 
 用法：
-  codingns assistant debug-targets analyze --workspace-id <id> --root-path <path> [--command-hint "pnpm dev"] [--command-hint "node server.js"] --token <token>
+  codingns assistant debug-targets analyze --workspace-id <id> --root-path <path> [--command-hint "pnpm dev"] [--command-hint "node server.js"] [--confirm] --token <token>
 `.trim();
     case "debug-targets.framework-analysis":
       return `
@@ -2534,7 +3236,7 @@ codingns assistant debug-targets refresh-framework-analysis
   刷新指定调试目标的框架分析结果。
 
 用法：
-  codingns assistant debug-targets refresh-framework-analysis <targetId> --token <token>
+  codingns assistant debug-targets refresh-framework-analysis <targetId> [--confirm] --token <token>
 `.trim();
     case "debug-targets.launch-plan":
       return `
@@ -2544,7 +3246,7 @@ codingns assistant debug-targets launch-plan
   生成调试目标启动计划，可通过重复的 --port-request 显式请求服务端口。
 
 用法：
-  codingns assistant debug-targets launch-plan <targetId> [--port-request role=frontend,cwd=apps/web,port=43001] [--port-request role=backend,cwd=apps/api,port=44001] --token <token>
+  codingns assistant debug-targets launch-plan <targetId> [--port-request role=frontend,cwd=apps/web,port=43001] [--port-request role=backend,cwd=apps/api,port=44001] [--confirm] --token <token>
 `.trim();
     case "debug-targets.run":
       return `
@@ -2554,7 +3256,7 @@ codingns assistant debug-targets run
   启动调试目标，可选指定 shell、runtimeType 和显式端口请求。
 
 用法：
-  codingns assistant debug-targets run <targetId> [--shell zsh] [--runtime-type tmux|embedded-pty|conpty-powershell|conpty-cmd|conpty-git-bash] [--port-request role=backend,cwd=apps/api,port=44001] --token <token>
+  codingns assistant debug-targets run <targetId> [--shell zsh] [--runtime-type tmux|embedded-pty|conpty-powershell|conpty-cmd|conpty-git-bash] [--port-request role=backend,cwd=apps/api,port=44001] [--confirm] --token <token>
 `.trim();
     case "debug-targets.runtime-latest":
       return `
@@ -2649,7 +3351,7 @@ codingns assistant worktrees merge
   把子工作树合并回父工作区。
 
 用法：
-  codingns assistant worktrees merge <workspaceId> --token <token>
+  codingns assistant worktrees merge <workspaceId> --confirm --token <token>
 `.trim();
     case "worktrees.cleanup":
       return `
@@ -2665,17 +3367,34 @@ codingns assistant worktrees cleanup
       return `
 codingns assistant 用法：
 
-  codingns assistant help [capabilities|projects|sessions|sandboxes|automations|timers|follow-ups|terminals|debug-targets|debug-runtimes|workspaces|worktrees] [action]
+  codingns assistant help [capabilities|projects|sessions|sandboxes|automations|timers|follow-ups|terminals|office|debug-targets|debug-runtimes|workspaces|worktrees] [action]
   codingns assistant capabilities list [--base-url http://127.0.0.1:3002] --token <token>
   codingns assistant projects list [--workspace-id <id>] [--status active|paused|archived] [--risk-level low|medium|high] --token <token>
   codingns assistant projects get <projectId> [--base-url ...] --token <token>
   codingns assistant follow-ups continue <taskId> --summary "..." --continue-prompt "..." --token <token>
+  codingns assistant office document-create --title <title> [--template-key <key>] [--content-json <json>] [--base-url ...] --token <token>
+  codingns assistant office document-update <documentId> [--title <title>] [--content-json <json>] [--base-url ...] --token <token>
+  codingns assistant office document-export <documentId> [--format docx|pdf|md] [--risk-level low|medium|high] [--execute true|false] [--base-url ...] --token <token>
+  codingns assistant office document-task <taskId> [--base-url ...] --token <token>
+  codingns assistant office browser-profiles [--workspace-id <id>] [--base-url ...] --token <token>
+  codingns assistant office browser-profile-create [--workspace-id <id>] [--engine chrome|edge] [--mode persistent|cdp_attached] [--display-name <name>] [--ownership-scope user|workspace] [--cdp-endpoint <url>] [--base-url ...] --token <token>
+  codingns assistant office browser-profile-get <profileId> [--base-url ...] --token <token>
+  codingns assistant office browser-task-create [--profile-id <profileId>] [--workspace-id <id>] [--title <title>] [--risk-level low|medium|high] [--execution-backend playwright|opencli_bridge] [--execute true|false] [--input-json <json>] [--base-url ...] --token <token>
+  codingns assistant office browser-task-get <taskId> [--base-url ...] --token <token>
+  codingns assistant office ops-targets [--workspace-id <id>] [--kind ssh_host|web_console] [--status active|disabled|error] [--base-url ...] --token <token>
+  codingns assistant office ops-target-create --workspace-id <id> --display-name <name> [--kind ssh_host|web_console] [--environment <name>] [--credential-ref <ref>] [--config-json <json>] [--base-url ...] --token <token>
+  codingns assistant office ops-target-get <targetId> [--base-url ...] --token <token>
+  codingns assistant office ops-ssh-task-create --target-id <targetId> [--title <title>] [--risk-level low|medium|high] [--execute true|false] [--input-json <json>] [--base-url ...] --token <token>
+  codingns assistant office ops-task-execute <taskId> [--confirm] [--base-url ...] --token <token>
+  codingns assistant office task-approval-reply <approvalId> [--status approved|rejected] [--decision-note <text>] [--base-url ...] --token <token>
+  codingns assistant office ops-browser-task-create --target-id <targetId> [--profile-id <profileId>] [--execution-backend playwright|opencli_bridge] [--title <title>] [--risk-level low|medium|high] [--input-json <json>] [--confirm] [--base-url ...] --token <token>
+  codingns assistant office ops-task-get <taskId> [--base-url ...] --token <token>
   codingns assistant debug-targets compatibility-matrix [--base-url ...] --token <token>
-  codingns assistant debug-targets analyze --workspace-id <id> --root-path <path> [--command-hint <command>] [--command-hint <command>] [--base-url ...] --token <token>
+  codingns assistant debug-targets analyze --workspace-id <id> --root-path <path> [--command-hint <command>] [--command-hint <command>] [--confirm] [--base-url ...] --token <token>
   codingns assistant debug-targets framework-analysis <targetId> [--base-url ...] --token <token>
-  codingns assistant debug-targets refresh-framework-analysis <targetId> [--base-url ...] --token <token>
-  codingns assistant debug-targets launch-plan <targetId> [--port-request role=backend,cwd=apps/api,port=44001] [--base-url ...] --token <token>
-  codingns assistant debug-targets run <targetId> [--shell zsh] [--runtime-type tmux|embedded-pty|conpty-powershell|conpty-cmd|conpty-git-bash] [--port-request role=backend,cwd=apps/api,port=44001] [--base-url ...] --token <token>
+  codingns assistant debug-targets refresh-framework-analysis <targetId> [--confirm] [--base-url ...] --token <token>
+  codingns assistant debug-targets launch-plan <targetId> [--port-request role=backend,cwd=apps/api,port=44001] [--confirm] [--base-url ...] --token <token>
+  codingns assistant debug-targets run <targetId> [--shell zsh] [--runtime-type tmux|embedded-pty|conpty-powershell|conpty-cmd|conpty-git-bash] [--port-request role=backend,cwd=apps/api,port=44001] [--confirm] [--base-url ...] --token <token>
   codingns assistant debug-targets runtime-latest <targetId> [--base-url ...] --token <token>
   codingns assistant debug-targets runtimes <targetId> [--limit 5] [--base-url ...] --token <token>
   codingns assistant debug-runtimes get <runtimeId> [--base-url ...] --token <token>
@@ -2712,12 +3431,12 @@ codingns assistant 用法：
   codingns assistant timers cancel <timerId> [--base-url ...] --token <token>
   codingns assistant terminals list [--workspace-id <id> | --project-id <id>] --token <token>
   codingns assistant terminals history <terminalId> [--before-seq <n>] [--limit 20] --token <token>
-  codingns assistant terminals send <terminalId> --input "npm test\\n" --token <token>
-  codingns assistant terminals close <terminalId> [--base-url ...] --token <token>
+  codingns assistant terminals send <terminalId> --input "npm test\\n" --confirm --token <token>
+  codingns assistant terminals close <terminalId> [--confirm] [--base-url ...] --token <token>
   codingns assistant worktrees tree --root-workspace-id <id> [--base-url ...] --token <token>
   codingns assistant worktrees create --source-workspace-id <id> --branch-name <name> [--display-name <name>] [--base-ref <ref>] [--base-url ...] --token <token>
   codingns assistant worktrees merge-preview <workspaceId> [--base-url ...] --token <token>
-  codingns assistant worktrees merge <workspaceId> [--base-url ...] --token <token>
+  codingns assistant worktrees merge <workspaceId> [--confirm] [--base-url ...] --token <token>
   codingns assistant worktrees cleanup <workspaceId> [--delete-branch] [--base-url ...] --token <token>
 
 环境变量：