@lark-project/meegle 0.0.2 → 0.0.3

package/README.md

@@ -19,7 +19,7 @@ npm install -g @lark-project/meegle
 meegle auth login
 
 # 2. 查看本周待办
-meegle workitem todo --action this_week --page-num 1
+meegle mywork todo --action this_week --page-num 1
 
 # 3. 查看帮助
 meegle --help
@@ -31,68 +31,93 @@ meegle inspect workitem.create
 
 ## 命令一览
 
-### workitem — 工作项
+### workitem — 工作项域
 
 | 命令 | 说明 |
 |------|------|
 | `workitem create` | 创建工作项 |
-| `workitem brief` | 查看工作项概况 |
-| `workitem update-field` | 修改工作项字段 |
-| `workitem todo` | 查看我的待办/已办 |
-| `workitem comments` | 查看评论列表 |
-| `workitem add-comment` | 添加评论 |
-| `workitem types` | 查看工作项类型列表 |
-| `workitem field-config` | 查看字段配置 |
-| `workitem role-config` | 查看角色配置 |
-| `workitem field-meta` | 查看创建元信息 |
-| `workitem man-hours` | 查看工时记录 |
-| `workitem op-record` | 查看操作记录 |
-| `workitem relations` | 查看关联关系 |
-| `workitem related` | 查看关联的工作项 |
-| `workitem search` | 使用 MQL 搜索工作项 |
-
-### node — 节点 / 流程
+| `workitem get` | 查看工作项概况 |
+| `workitem update` | 修改工作项字段 |
+| `workitem query` | 使用 MQL 搜索工作项 |
+| `workitem list-op-records` | 查看操作记录 |
+| `workitem meta-types` | 查看工作项类型列表 |
+| `workitem meta-create-fields` | 查看创建时可用字段 |
+| `workitem meta-fields` | 查看字段配置 |
+| `workitem meta-roles` | 查看角色配置 |
+
+### workflow — 工作流域
+
+| 命令 | 说明 |
+|------|------|
+| `workflow transition` | 流转或回滚节点 |
+| `workflow get-node` | 查看节点详情 |
+| `workflow update-node` | 修改节点 |
+| `workflow meta-node-fields` | 查看节点字段配置 |
+| `workflow list-state-transitions` | 查看可流转状态 |
+| `workflow list-state-required` | 查看流转必填信息 |
+
+### subtask — 子任务
+
+| 命令 | 说明 |
+|------|------|
+| `subtask update` | 创建/修改/完成/回滚子任务 |
+
+### comment — 评论域
+
+| 命令 | 说明 |
+|------|------|
+| `comment add` | 添加评论 |
+| `comment list` | 查看评论列表 |
+
+### workhour — 工时域
+
+| 命令 | 说明 |
+|------|------|
+| `workhour list-records` | 查看工时登记记录 |
+| `workhour list-schedule` | 查看人员排期 |
+
+### relation — 关系域
+
+| 命令 | 说明 |
+|------|------|
+| `relation list` | 查看关联的工作项 |
+| `relation meta-definitions` | 查看关联关系定义 |
+
+### mywork — 工作台域
 
 | 命令 | 说明 |
 |------|------|
-| `node detail` | 查看节点详情 |
-| `node transition` | 流转或回滚节点 |
-| `node update` | 修改节点 |
-| `node update-subtask` | 创建/修改/完成子任务 |
-| `node field-config` | 查看节点字段配置 |
-| `node transitable-states` | 查看可流转状态 |
-| `node transition-required` | 查看流转必填信息 |
+| `mywork todo` | 查看我的待办/已办 |
 
-### view — 视图
+### view — 视图域
 
 | 命令 | 说明 |
 |------|------|
-| `view detail` | 查看视图详情 |
-| `view create` | 创建固定视图 |
-| `view update` | 更新固定视图 |
+| `view create-fixed` | 创建固定视图 |
+| `view get` | 查看视图详情 |
+| `view update-fixed` | 更新固定视图 |
 | `view search` | 按名称搜索视图 |
 
-### chart — 图表
+### chart — 度量域
 
 | 命令 | 说明 |
 |------|------|
-| `chart detail` | 查看图表详情 |
+| `chart get` | 查看图表详情 |
 | `chart list` | 查看视图下的图表列表 |
 
-### team — 团队
+### team / user — 人员域
 
 | 命令 | 说明 |
 |------|------|
 | `team list` | 查看空间下的团队列表 |
-| `team members` | 查看团队成员 |
+| `team list-members` | 查看团队成员 |
+| `user search` | 搜索用户信息 |
 
-### 其他
+### project — 空间域
 
 | 命令 | 说明 |
 |------|------|
-| `schedule list` | 查看人员排期 |
-| `project info` | 查看空间信息 |
-| `user info` | 查看用户信息 |
+| `project search` | 搜索空间信息 |
 | `inspect [command]` | 查看命令参数详情 |
 | `+todo` | 查看本周个人待办（快捷命令） |
 
@@ -102,23 +127,23 @@ meegle inspect workitem.create
 
 ```bash
 # 本周待办
-meegle workitem todo --action this_week --page-num 1
+meegle mywork todo --action this_week --page-num 1
 
 # 已办事项
-meegle workitem todo --action done --page-num 1
+meegle mywork todo --action done --page-num 1
 
 # 逾期事项
-meegle workitem todo --action overdue --page-num 1
+meegle mywork todo --action overdue --page-num 1
 ```
 
 ### 查询工作项
 
 ```bash
 # 查看工作项概况
-meegle workitem brief --work-item-id 12345
+meegle workitem get --work-item-id 12345
 
 # 查看工作项的节点详情
-meegle node detail --work-item-id 12345 --need-sub-task
+meegle workflow get-node --work-item-id 12345 --need-sub-task
 ```
 
 ### 创建工作项
@@ -139,11 +164,11 @@ meegle workitem create --project-key PROJ --work-item-type story \
 
 ```bash
 # 修改工作项名称
-meegle workitem update-field --work-item-id 12345 \
+meegle workitem update --work-item-id 12345 \
   --set name=新标题
 
 # 同时修改多个字段
-meegle workitem update-field --work-item-id 12345 \
+meegle workitem update --work-item-id 12345 \
   --set name=新标题 \
   --set priority=P0
 ```
@@ -152,7 +177,7 @@ meegle workitem update-field --work-item-id 12345 \
 
 ```bash
 # 查询空间下的 P0 需求
-meegle workitem search --project-key PROJ \
+meegle workitem query --project-key PROJ \
   --mql "SELECT \`name\`, \`priority\` FROM \`空间名\`.\`需求\` WHERE \`priority\` = 'P0'"
 ```
 
@@ -160,7 +185,7 @@ meegle workitem search --project-key PROJ \
 
 ```bash
 # 查看团队成员排期
-meegle schedule list --project-key PROJ \
+meegle workhour list-schedule --project-key PROJ \
   --start-time 2026-03-01 --end-time 2026-03-31 \
   --user-keys "张三,李四,王五"
 ```
@@ -168,7 +193,7 @@ meegle schedule list --project-key PROJ \
 ### 查看用户信息
 
 ```bash
-meegle user info --user-keys "张三,李四" --project-key PROJ
+meegle user search --user-keys "张三,李四" --project-key PROJ
 ```
 
 ## 参数传递
@@ -178,12 +203,12 @@ meegle user info --user-keys "张三,李四" --project-key PROJ
 每个命令的参数通过 `--flag-name` 传递：
 
 ```bash
-meegle workitem brief --work-item-id 12345 --project-key PROJ
+meegle workitem get --work-item-id 12345 --project-key PROJ
 ```
 
 ### --set key=value（写入命令）
 
-`workitem create`、`workitem update-field`、`node update`、`node update-subtask` 支持 `--set` 简便设置字段：
+`workitem create`、`workitem update`、`workflow update-node`、`subtask update` 支持 `--set` 简便设置字段：
 
 ```bash
 --set name=标题              # 字符串
@@ -225,24 +250,24 @@ meegle workitem create --project-key PROJ --work-item-type story \
 直接加 flag 即为 true，不加即为 false：
 
 ```bash
-meegle node detail --work-item-id 12345 --need-sub-task
+meegle workflow get-node --work-item-id 12345 --need-sub-task
 ```
 
 ## 输出格式
 
 ```bash
 # JSON（默认）
-meegle workitem brief --work-item-id 12345
+meegle workitem get --work-item-id 12345
 
 # 选取输出属性（支持 dot path）
-meegle workitem brief --work-item-id 12345 --select "id,name,status"
-meegle workitem todo --action done --page-num 1 --select "list.work_item_info.work_item_name"
+meegle workitem get --work-item-id 12345 --select "id,name,status"
+meegle mywork todo --action done --page-num 1 --select "list.work_item_info.work_item_name"
 
 # NDJSON（适合管道处理）
-meegle workitem todo --action this_week --page-num 1 --format ndjson
+meegle mywork todo --action this_week --page-num 1 --format ndjson
 
 # 表格
-meegle workitem todo --action this_week --page-num 1 --format table
+meegle mywork todo --action this_week --page-num 1 --format table
 ```
 
 ### --select dot path
@@ -341,7 +366,7 @@ meegle config profile use staging
 meegle config profile current
 
 # 临时使用其他环境（不改变默认）
-meegle workitem todo --action this_week --page-num 1 --profile staging
+meegle mywork todo --action this_week --page-num 1 --profile staging
 
 # 删除环境
 meegle config profile delete staging
@@ -374,7 +399,7 @@ meegle auth login
 
 ```bash
 export MEEGLE_USER_ACCESS_TOKEN="your-token"
-meegle workitem todo --action this_week --page-num 1
+meegle mywork todo --action this_week --page-num 1
 ```
 
 ## License

package/dist/bin/meegle.js

@@ -51,8 +51,8 @@ async function readRootConfig() {
   }
 }
 async function writeRootConfig(root) {
-  await mkdir(CONFIG_DIR, { recursive: true });
-  await writeFile(CONFIG_PATH, JSON.stringify(root, null, 2));
+  await mkdir(CONFIG_DIR, { recursive: true, mode: 448 });
+  await writeFile(CONFIG_PATH, JSON.stringify(root, null, 2), { mode: 384 });
 }
 async function getCurrentProfileName() {
   const root = await readRootConfig();
@@ -115,9 +115,18 @@ async function saveConfig(config, profile) {
   const name = profile ?? await getCurrentProfileName();
   await saveProfileConfig(name, config);
 }
+function sanitizeHost(raw) {
+  const trimmed = raw.trim();
+  try {
+    const url = new URL(trimmed.includes("://") ? trimmed : `https://${trimmed}`);
+    return url.host;
+  } catch {
+    return trimmed;
+  }
+}
 function getServerUrl(config) {
   const envHost = getEnv("HOST");
-  const host = envHost ?? config.host ?? "meegle.com";
+  const host = sanitizeHost(envHost ?? config.host ?? "meegle.com");
   return `https://${host}/mcp_server/v1`;
 }
 var CONFIG_DIR, CONFIG_PATH;
@@ -130,6 +139,71 @@ var init_config = __esm({
   }
 });
 
+// src/core/errors.ts
+var MeegleError, ClientError, ServerError, HttpError;
+var init_errors = __esm({
+  "src/core/errors.ts"() {
+    "use strict";
+    MeegleError = class extends Error {
+      code;
+      exitCode;
+      suggestion;
+      constructor(message, code, exitCode, suggestion) {
+        super(message);
+        this.name = "MeegleError";
+        this.code = code;
+        this.exitCode = exitCode;
+        this.suggestion = suggestion;
+      }
+      toJSON() {
+        return {
+          error: this.code,
+          message: this.message,
+          ...this.suggestion !== void 0 && { suggestion: this.suggestion }
+        };
+      }
+    };
+    ClientError = class extends MeegleError {
+      constructor(message, code, suggestion) {
+        super(message, code, 1, suggestion);
+        this.name = "ClientError";
+      }
+    };
+    ServerError = class extends MeegleError {
+      constructor(message, code, suggestion) {
+        super(message, code, 2, suggestion);
+        this.name = "ServerError";
+      }
+    };
+    HttpError = class extends ServerError {
+      httpStatus;
+      constructor(message, code, httpStatus, suggestion) {
+        super(message, code, suggestion);
+        this.name = "HttpError";
+        this.httpStatus = httpStatus;
+      }
+    };
+  }
+});
+
+// src/core/profile-validation.ts
+function validateProfileName(profile) {
+  if (!PROFILE_NAME_RE.test(profile)) {
+    throw new ClientError(
+      `Profile \u540D\u79F0\u53EA\u80FD\u5305\u542B\u5B57\u6BCD\u3001\u6570\u5B57\u3001\u8FDE\u5B57\u7B26\u548C\u4E0B\u5212\u7EBF\uFF0C\u6536\u5230: "${profile}"`,
+      "CLIENT_INVALID_PROFILE"
+    );
+  }
+}
+var PROFILE_NAME_RE;
+var init_profile_validation = __esm({
+  "src/core/profile-validation.ts"() {
+    "use strict";
+    init_errors();
+    PROFILE_NAME_RE = /^[a-zA-Z0-9_-]+$/;
+  }
+});
+
 // src/core/auth/keychain-store.ts
 var keychain_store_exports = {};
 __export(keychain_store_exports, {
@@ -142,11 +216,13 @@ var exec, SERVICE, KeychainStore, SecretToolStore;
 var init_keychain_store = __esm({
   "src/core/auth/keychain-store.ts"() {
     "use strict";
+    init_profile_validation();
     exec = promisify(execFile);
     SERVICE = "meegle-cli";
     KeychainStore = class {
       account;
       constructor(profile = "default") {
+        validateProfileName(profile);
         this.account = profile;
       }
       async isAvailable() {
@@ -198,6 +274,7 @@ var init_keychain_store = __esm({
     SecretToolStore = class {
       account;
       constructor(profile = "default") {
+        validateProfileName(profile);
         this.account = profile;
       }
       async isAvailable() {
@@ -269,20 +346,34 @@ function toHex(b) {
 function fromHex(s) {
   return new Uint8Array(Buffer.from(s, "hex"));
 }
-function deriveKey(salt) {
-  const material = `${hostname()}:${userInfo().username}:meegle-cli`;
+async function getOrCreateMachineKey(dir) {
+  const keyPath = join2(dir, MACHINE_KEY_FILE);
+  try {
+    return await readFile2(keyPath, "utf-8");
+  } catch {
+    const key = randomBytes(32).toString("hex");
+    await mkdir2(dir, { recursive: true, mode: 448 });
+    await writeFile2(keyPath, key, { mode: 384 });
+    return key;
+  }
+}
+function deriveKey(salt, machineKey) {
+  const material = `${hostname()}:${userInfo().username}:${machineKey}:meegle-cli`;
   return new Uint8Array(pbkdf2Sync(material, salt, 1e5, 32, "sha256").buffer);
 }
-var FileStore;
+var MACHINE_KEY_FILE, FileStore;
 var init_file_store = __esm({
   "src/core/auth/file-store.ts"() {
     "use strict";
     init_config();
+    init_profile_validation();
+    MACHINE_KEY_FILE = ".machine-key";
     FileStore = class {
       dir;
       filename;
       constructor(dir, profile = "default") {
         this.dir = dir ?? getConfigDir();
+        validateProfileName(profile);
         this.filename = profile === "default" ? "credentials.enc" : `credentials-${profile}.enc`;
       }
       get filePath() {
@@ -290,13 +381,14 @@ var init_file_store = __esm({
       }
       async load() {
         try {
+          const machineKey = await getOrCreateMachineKey(this.dir);
           const raw = await readFile2(this.filePath, "utf-8");
           const file = JSON.parse(raw);
           const salt = fromHex(file.salt);
           const iv = fromHex(file.iv);
           const tag = fromHex(file.tag);
           const encrypted = fromHex(file.data);
-          const key = deriveKey(salt);
+          const key = deriveKey(salt, machineKey);
           const decipher = createDecipheriv("aes-256-gcm", key, iv);
           decipher.setAuthTag(tag);
           const part1 = decipher.update(encrypted);
@@ -308,9 +400,10 @@ var init_file_store = __esm({
         }
       }
       async save(data) {
+        const machineKey = await getOrCreateMachineKey(this.dir);
         const salt = new Uint8Array(randomBytes(16).buffer);
         const iv = new Uint8Array(randomBytes(12).buffer);
-        const key = deriveKey(salt);
+        const key = deriveKey(salt, machineKey);
         const cipher = createCipheriv("aes-256-gcm", key, iv);
         const plaintext = JSON.stringify(data);
         const enc1 = cipher.update(plaintext, "utf-8");
@@ -323,8 +416,8 @@ var init_file_store = __esm({
           tag: toHex(tag),
           data: encrypted.toString("hex")
         };
-        await mkdir2(this.dir, { recursive: true });
-        await writeFile2(this.filePath, JSON.stringify(file, null, 2));
+        await mkdir2(this.dir, { recursive: true, mode: 448 });
+        await writeFile2(this.filePath, JSON.stringify(file, null, 2), { mode: 384 });
       }
       async clear() {
         try {
@@ -363,40 +456,26 @@ async function createTokenStore(profile = "default") {
 // src/core/auth/token-manager.ts
 init_env();
 
-// src/core/errors.ts
-var MeegleError = class extends Error {
-  code;
-  exitCode;
-  suggestion;
-  constructor(message, code, exitCode, suggestion) {
-    super(message);
-    this.name = "MeegleError";
-    this.code = code;
-    this.exitCode = exitCode;
-    this.suggestion = suggestion;
-  }
-  toJSON() {
-    return {
-      error: this.code,
-      message: this.message,
-      ...this.suggestion !== void 0 && { suggestion: this.suggestion }
-    };
-  }
-};
-var ClientError = class extends MeegleError {
-  constructor(message, code, suggestion) {
-    super(message, code, 1, suggestion);
-    this.name = "ClientError";
-  }
-};
-var ServerError = class extends MeegleError {
-  constructor(message, code, suggestion) {
-    super(message, code, 2, suggestion);
-    this.name = "ServerError";
-  }
-};
-
 // src/core/auth/oauth-discovery.ts
+init_errors();
+var REQUIRED_ENDPOINTS = [
+  "issuer",
+  "authorization_endpoint",
+  "token_endpoint",
+  "registration_endpoint"
+];
+function validateMetadata(metadata) {
+  for (const field of REQUIRED_ENDPOINTS) {
+    const value = metadata[field];
+    if (typeof value !== "string" || !value.startsWith("https://")) {
+      throw new ClientError(
+        `OAuth \u914D\u7F6E\u5B57\u6BB5\u65E0\u6548: ${field}`,
+        "OAUTH_DISCOVERY_INVALID"
+      );
+    }
+  }
+  return metadata;
+}
 async function fetchOAuthMetadata(host, headers) {
   const url = `https://${host}/.well-known/oauth-authorization-server`;
   const res = await fetch(url, { headers });
@@ -407,7 +486,8 @@ async function fetchOAuthMetadata(host, headers) {
       `\u8BF7\u786E\u8BA4\u7AD9\u70B9 ${host} \u662F\u5426\u6B63\u786E`
     );
   }
-  return res.json();
+  const data = await res.json();
+  return validateMetadata(data);
 }
 
 // src/core/auth/token-manager.ts
@@ -445,11 +525,14 @@ var TokenManager = class {
       });
       if (!res.ok) return null;
       const data = await res.json();
+      if (typeof data.access_token !== "string" || !data.access_token) {
+        return null;
+      }
       const newTokenData = {
         accessToken: data.access_token,
-        refreshToken: data.refresh_token ?? tokenData.refreshToken,
+        refreshToken: (typeof data.refresh_token === "string" ? data.refresh_token : void 0) ?? tokenData.refreshToken,
         clientId: tokenData.clientId,
-        expiresAt: data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0
+        expiresAt: typeof data.expires_in === "number" ? Date.now() + data.expires_in * 1e3 : void 0
       };
       await this.store.save(newTokenData);
       return newTokenData;
@@ -477,6 +560,7 @@ import { randomBytes as randomBytes3 } from "crypto";
 import open from "open";
 
 // src/core/auth/oauth-client-registration.ts
+init_errors();
 import { hostname as hostname2, platform, arch, userInfo as userInfo2 } from "os";
 function getClientName() {
   const parts = [];
@@ -544,6 +628,7 @@ function generateCodeChallenge(verifier) {
 }
 
 // src/core/auth/callback-server.ts
+init_errors();
 import http from "http";
 import { URL as URL2 } from "url";
 var SUCCESS_HTML = `<!DOCTYPE html><html><body>
@@ -631,6 +716,7 @@ async function startCallbackServer() {
 }
 
 // src/core/auth/auth-code-flow.ts
+init_errors();
 function buildAuthUrl(endpoint, params) {
   const url = new URL(endpoint);
   for (const [key, value] of Object.entries(params)) {
@@ -694,6 +780,7 @@ async function startAuthCodeFlow(host, customHeaders) {
 
 // src/core/auth/device-code-flow.ts
 import qrcode from "qrcode-terminal";
+init_errors();
 function generateQR(url) {
   return new Promise((resolve) => {
     qrcode.generate(url, { small: true }, (code) => {
@@ -878,6 +965,9 @@ async function checkFirstRun(profileName) {
   process.exit(0);
 }
 
+// src/commands/auth/login.ts
+init_errors();
+
 // src/output/table.ts
 import Table from "cli-table3";
 function renderTable(data) {
@@ -1031,9 +1121,12 @@ function registerLogin(auth) {
 }
 
 // src/commands/auth/logout.ts
+init_config();
 function registerLogout(auth) {
   auth.command("logout").description("\u9000\u51FA\u767B\u5F55\uFF0C\u6E05\u9664\u672C\u5730\u51ED\u636E").action(async () => {
-    const store = await createTokenStore();
+    const profileName = auth.parent?.opts().profile;
+    const profile = profileName ?? await getCurrentProfileName();
+    const store = await createTokenStore(profile);
     await store.clear();
     console.log("\u2713 \u5DF2\u9000\u51FA\u767B\u5F55");
   });
@@ -1244,6 +1337,7 @@ function registerConfigCommands(program) {
 }
 
 // src/dynamic/params-parser.ts
+init_errors();
 function parseSetFlag(input4) {
   const eqIndex = input4.indexOf("=");
   if (eqIndex === -1) {
@@ -1256,7 +1350,8 @@ function parseSetFlag(input4) {
   const rawValue = input4.slice(eqIndex + 1);
   let value;
   try {
-    value = JSON.parse(rawValue);
+    const parsed = JSON.parse(rawValue);
+    value = typeof parsed === "object" && parsed !== null ? parsed : rawValue;
   } catch {
     value = rawValue;
   }
@@ -1332,6 +1427,9 @@ function resolveDotPath(current, segments) {
   return current;
 }
 
+// src/dynamic/response.ts
+init_errors();
+
 // src/core/logger.ts
 import chalk from "chalk";
 var LEVELS = { debug: 0, info: 1, warn: 2, error: 3 };
@@ -1363,6 +1461,11 @@ function unwrapResponse(raw) {
   const response = raw;
   const content = response.content;
   if (!Array.isArray(content)) return void 0;
+  if (response.isError) {
+    const allTexts = content.filter((e) => e.type === "text" && e.text).map((e) => e.text);
+    const message = allTexts.join("\n") || "\u670D\u52A1\u7AEF\u8FD4\u56DE\u9519\u8BEF";
+    throw new ServerError(message, "SERVER_CALL_FAILED");
+  }
   const dataTexts = [];
   for (const entry of content) {
     if (entry.type !== "text" || !entry.text) continue;
@@ -1372,10 +1475,6 @@ function unwrapResponse(raw) {
       dataTexts.push(entry.text);
     }
   }
-  if (response.isError) {
-    const message = dataTexts.join("\n") || "\u670D\u52A1\u7AEF\u8FD4\u56DE\u9519\u8BEF";
-    throw new ServerError(message, "SERVER_CALL_FAILED");
-  }
   if (dataTexts.length === 0) return void 0;
   const text = dataTexts[0];
   try {
@@ -1386,6 +1485,21 @@ function unwrapResponse(raw) {
 }
 
 // src/dynamic/register.ts
+init_errors();
+var RESOURCE_DESCRIPTIONS = {
+  workitem: "\u5DE5\u4F5C\u9879\u57DF \u2014 \u5DE5\u4F5C\u9879\u5B9E\u4F8B\u7684 CRUD \u548C\u6A21\u578B\u914D\u7F6E\uFF0C\u901A\u8FC7 work-item-id \u6807\u8BC6",
+  workflow: "\u5DE5\u4F5C\u6D41\u57DF \u2014 \u8282\u70B9\u6D41\u8F6C\u4E0E\u72B6\u6001\u6D41\u8F6C\uFF0C\u4F9D\u8D56 workitem \u7684 work-item-id",
+  subtask: "\u5B50\u4EFB\u52A1 \u2014 \u8282\u70B9\u4E0B\u7684\u5B50\u4EFB\u52A1\u64CD\u4F5C\uFF0C\u4F9D\u8D56 workflow \u7684 node-id",
+  comment: "\u8BC4\u8BBA\u57DF \u2014 \u8DE8\u5B9E\u4F53\u8BC4\u8BBA\uFF0C\u5F53\u524D\u901A\u8FC7 work-item-id \u5173\u8054",
+  workhour: "\u5DE5\u65F6\u57DF \u2014 \u5DE5\u65F6\u8BB0\u5F55\u4E0E\u6392\u671F\uFF0C\u4F9D\u8D56 workitem \u7684 work-item-id",
+  relation: "\u5173\u7CFB\u57DF \u2014 \u5DE5\u4F5C\u9879\u4E4B\u95F4\u7684\u5173\u8054\u5173\u7CFB\u5B9A\u4E49\u4E0E\u67E5\u8BE2",
+  mywork: "\u5DE5\u4F5C\u53F0\u57DF \u2014 \u8DE8\u7A7A\u95F4\u7684\u4E2A\u4EBA\u5F85\u529E/\u5DF2\u529E",
+  view: "\u89C6\u56FE\u57DF \u2014 \u89C6\u56FE\u7684\u521B\u5EFA\u3001\u67E5\u770B\u3001\u66F4\u65B0\u3001\u641C\u7D22",
+  chart: "\u5EA6\u91CF\u57DF \u2014 \u56FE\u8868\u67E5\u770B\u4E0E\u5217\u8868\uFF0C\u4F9D\u8D56 view \u7684 view-id",
+  team: "\u4EBA\u5458\u57DF \u2014 \u56E2\u961F\u5217\u8868\u4E0E\u6210\u5458\u67E5\u8BE2",
+  user: "\u4EBA\u5458\u57DF \u2014 \u7528\u6237\u641C\u7D22\uFF0C\u652F\u6301\u540D\u79F0\u6A21\u7CCA\u5339\u914D",
+  project: "\u7A7A\u95F4\u57DF \u2014 \u7A7A\u95F4\u4FE1\u606F\u641C\u7D22"
+};
 var registeredCommands = [];
 function registerDynamicCommands(program, commands, client) {
   registeredCommands = commands;
@@ -1396,7 +1510,7 @@ function registerDynamicCommands(program, commands, client) {
     groups.set(cmd.resource, list);
   }
   for (const [resource, cmds] of groups) {
-    const group = program.command(resource).description(`${resource} \u64CD\u4F5C`);
+    const group = program.command(resource).description(RESOURCE_DESCRIPTIONS[resource] ?? `${resource} \u64CD\u4F5C`);
     for (const cmd of cmds) {
       const flagSummary = buildFlagSummary(cmd);
       const sub = group.command(cmd.method).description(`${cmd.description ?? ""}  ${flagSummary}`);
@@ -1404,22 +1518,25 @@ function registerDynamicCommands(program, commands, client) {
         if (param.name === "url") continue;
         const kebab = param.name.replace(/_/g, "-");
         let desc = param.description ?? "";
-        if (param.type === "array") desc += "\uFF08\u591A\u4E2A\u503C\u7528\u9017\u53F7\u5206\u9694\uFF09";
-        if (param.type === "object") desc += "\uFF08JSON \u683C\u5F0F\uFF09";
-        if (param.type === "boolean") {
-          const flag = `--${kebab}`;
-          if (param.required) {
-            sub.requiredOption(flag, desc);
+        if (param.required) desc = `[\u5FC5\u586B] ${desc}`;
+        if (param.type === "array") {
+          const itemType = param.items?.type;
+          if (itemType === "object") {
+            desc += "\uFF08\u591A\u4E2A JSON \u5BF9\u8C61\uFF0C\u91CD\u590D\u4F20\u5165\uFF09";
+          } else if (itemType === "number") {
+            desc += "\uFF08\u591A\u4E2A\u6570\u5B57\uFF0C\u9017\u53F7\u5206\u9694\u6216\u91CD\u590D\u4F20\u5165\uFF09";
           } else {
-            sub.option(flag, desc);
+            desc += "\uFF08\u591A\u4E2A\u503C\uFF0C\u9017\u53F7\u5206\u9694\u6216\u91CD\u590D\u4F20\u5165\uFF09";
           }
+        }
+        if (param.type === "object") desc += "\uFF08JSON \u683C\u5F0F\uFF09";
+        const typeLabel = formatTypeLabel(param);
+        if (param.type === "boolean") {
+          sub.option(`--${kebab}`, desc);
+        } else if (param.type === "array") {
+          sub.option(`--${kebab} <${typeLabel}>`, desc, collect, []);
         } else {
-          const flag = `--${kebab} <value>`;
-          if (param.required) {
-            sub.requiredOption(flag, desc);
-          } else {
-            sub.option(flag, desc);
-          }
+          sub.option(`--${kebab} <${typeLabel}>`, desc);
         }
       }
       sub.option("--params <json>", "\u5B8C\u6574 JSON \u53C2\u6570\uFF08--set \u548C flag \u4F1A\u8986\u76D6\u540C\u540D\u5B57\u6BB5\uFF09");
@@ -1433,10 +1550,23 @@ function registerDynamicCommands(program, commands, client) {
           const camelKey = snakeToCamel(param.name);
           const value = cliFlags[camelKey];
           if (value === void 0) continue;
-          if (param.type === "array" && typeof value === "string") {
-            snakeFlags[param.name] = value.split(",").map((s) => s.trim());
+          if (param.type === "array") {
+            const arr = Array.isArray(value) ? value : [value];
+            const itemType = param.items?.type;
+            const expanded = itemType === "object" ? arr : arr.flatMap((s) => s.split(",").map((v) => v.trim()));
+            const filtered = expanded.filter((s) => s !== "");
+            if (filtered.length > 0) {
+              snakeFlags[param.name] = convertArrayItems(filtered, itemType);
+            }
           } else if (param.type === "number" && typeof value === "string") {
-            snakeFlags[param.name] = Number(value);
+            const num = Number(value);
+            if (Number.isNaN(num)) {
+              throw new ClientError(
+                `\u53C2\u6570 --${param.name.replace(/_/g, "-")} \u9700\u8981\u6570\u5B57\uFF0C\u6536\u5230: "${value}"`,
+                "CLIENT_INVALID_TYPE"
+              );
+            }
+            snakeFlags[param.name] = num;
           } else {
             snakeFlags[param.name] = value;
           }
@@ -1444,6 +1574,14 @@ function registerDynamicCommands(program, commands, client) {
         const setFields = (rawSet ?? []).map(parseSetFlag);
         const parsedParams = rawParams ? parseParams(rawParams) : void 0;
         const finalParams = mergeParams(setFields, parsedParams, snakeFlags);
+        const missing = cmd.parameters.filter((p) => p.required && p.name !== "url").filter((p) => finalParams[p.name] === void 0 || finalParams[p.name] === null).map((p) => `--${p.name.replace(/_/g, "-")}`);
+        if (missing.length > 0) {
+          throw new ClientError(
+            `\u7F3A\u5C11\u5FC5\u586B\u53C2\u6570: ${missing.join(", ")}`,
+            "CLIENT_MISSING_REQUIRED",
+            `\u4F7F\u7528 meegle inspect ${cmd.resource}.${cmd.method} \u67E5\u770B\u53C2\u6570\u8BE6\u60C5`
+          );
+        }
         const raw = await client.callTool(cmd.toolName, finalParams);
         let result = unwrapResponse(raw);
         if (result !== void 0) {
@@ -1463,8 +1601,41 @@ function registerDynamicCommands(program, commands, client) {
 function collect(value, previous) {
   return [...previous, value];
 }
+function formatTypeLabel(param) {
+  if (param.type === "array" && param.items?.type) {
+    return `array<${param.items.type}>`;
+  }
+  return param.type;
+}
+function convertArrayItems(values, itemType) {
+  if (itemType === "number") {
+    return values.map((v) => {
+      const n = Number(v);
+      if (Number.isNaN(n)) {
+        throw new ClientError(
+          `\u6570\u7EC4\u5143\u7D20\u9700\u8981\u6570\u5B57\uFF0C\u6536\u5230: "${v}"`,
+          "CLIENT_INVALID_TYPE"
+        );
+      }
+      return n;
+    });
+  }
+  if (itemType === "object") {
+    return values.map((v) => {
+      try {
+        return JSON.parse(v);
+      } catch {
+        throw new ClientError(
+          `\u65E0\u6CD5\u89E3\u6790 JSON: ${v}`,
+          "CLIENT_INVALID_JSON"
+        );
+      }
+    });
+  }
+  return values;
+}
 function snakeToCamel(s) {
-  return s.replace(/[_-](\w)/g, (_, c) => c.toUpperCase());
+  return s.replace(/_(\w)/g, (_, c) => c.toUpperCase());
 }
 function buildFlagSummary(cmd) {
   const flags = [];
@@ -1505,7 +1676,7 @@ function registerInspectCommand(program) {
     }
     const params = cmd.parameters.filter((p) => p.name !== "url").map((p) => ({
       flag: `--${p.name.replace(/_/g, "-")}`,
-      type: p.type,
+      type: formatTypeLabel(p),
       required: p.required ?? false,
       description: p.description ?? ""
     }));
@@ -1555,62 +1726,52 @@ function registerStaticCommands(program) {
   registerInspectCommand(program);
 }
 
-// src/helpers/todo.ts
-function registerTodo(program) {
-  program.command("+todo").description("\u67E5\u770B\u672C\u5468\u4E2A\u4EBA\u5F85\u529E").option("--project-key <key>", "\u9879\u76EE\u6807\u8BC6").action(async (options) => {
-    console.log("Fetching todos...", options.projectKey ?? "(all projects)");
-  });
-}
-
-// src/helpers/index.ts
-function registerHelperCommands(program) {
-  registerTodo(program);
-}
-
 // src/dynamic/mapper.ts
 var FALLBACK_TABLE = {
-  // workitem (14)
+  // WorkItem 工作项域 (9)
   create_workitem: { resource: "workitem", method: "create", hasFields: true },
-  get_workitem_brief: { resource: "workitem", method: "brief" },
-  get_workitem_field_meta: { resource: "workitem", method: "field-meta" },
-  get_workitem_man_hour_records: { resource: "workitem", method: "man-hours" },
-  get_workitem_op_record: { resource: "workitem", method: "op-record" },
-  update_field: { resource: "workitem", method: "update-field", hasFields: true },
-  list_todo: { resource: "workitem", method: "todo" },
-  list_workitem_comments: { resource: "workitem", method: "comments" },
-  list_workitem_field_config: { resource: "workitem", method: "field-config" },
-  list_workitem_relations: { resource: "workitem", method: "relations" },
-  list_workitem_role_config: { resource: "workitem", method: "role-config" },
-  list_workitem_types: { resource: "workitem", method: "types" },
-  list_related_workitems: { resource: "workitem", method: "related" },
-  add_comment: { resource: "workitem", method: "add-comment" },
-  // node (7)
-  get_node_detail: { resource: "node", method: "detail" },
-  transition_node: { resource: "node", method: "transition" },
-  update_node: { resource: "node", method: "update", hasFields: true },
-  update_node_subtask: { resource: "node", method: "update-subtask", hasFields: true },
-  list_node_field_config: { resource: "node", method: "field-config" },
-  get_transitable_states: { resource: "node", method: "transitable-states" },
-  get_transition_required: { resource: "node", method: "transition-required" },
-  // view (4)
-  get_view_detail: { resource: "view", method: "detail" },
-  create_fixed_view: { resource: "view", method: "create" },
-  update_fixed_view: { resource: "view", method: "update" },
+  get_workitem_brief: { resource: "workitem", method: "get" },
+  update_field: { resource: "workitem", method: "update", hasFields: true },
+  search_by_mql: { resource: "workitem", method: "query" },
+  get_workitem_op_record: { resource: "workitem", method: "list-op-records" },
+  list_workitem_types: { resource: "workitem", method: "meta-types" },
+  get_workitem_field_meta: { resource: "workitem", method: "meta-create-fields" },
+  list_workitem_field_config: { resource: "workitem", method: "meta-fields" },
+  list_workitem_role_config: { resource: "workitem", method: "meta-roles" },
+  // WorkFlow 工作流域 (6)
+  transition_node: { resource: "workflow", method: "transition" },
+  get_node_detail: { resource: "workflow", method: "get-node" },
+  update_node: { resource: "workflow", method: "update-node", hasFields: true },
+  list_node_field_config: { resource: "workflow", method: "meta-node-fields" },
+  get_transitable_states: { resource: "workflow", method: "list-state-transitions" },
+  get_transition_required: { resource: "workflow", method: "list-state-required" },
+  // SubTask 子任务 (1)
+  update_node_subtask: { resource: "subtask", method: "update", hasFields: true },
+  // Comment 评论域 (2)
+  add_comment: { resource: "comment", method: "add" },
+  list_workitem_comments: { resource: "comment", method: "list" },
+  // WorkHour 工时域 (2)
+  get_workitem_man_hour_records: { resource: "workhour", method: "list-records" },
+  list_schedule: { resource: "workhour", method: "list-schedule" },
+  // Relation 关系域 (2)
+  list_workitem_relations: { resource: "relation", method: "meta-definitions" },
+  list_related_workitems: { resource: "relation", method: "list" },
+  // MyWork 工作台域 (1)
+  list_todo: { resource: "mywork", method: "todo" },
+  // View 视图域 (4)
+  create_fixed_view: { resource: "view", method: "create-fixed" },
+  get_view_detail: { resource: "view", method: "get" },
+  update_fixed_view: { resource: "view", method: "update-fixed" },
   search_view_by_title: { resource: "view", method: "search" },
-  // chart (2)
-  get_chart_detail: { resource: "chart", method: "detail" },
+  // Chart 度量域 (2)
+  get_chart_detail: { resource: "chart", method: "get" },
   list_charts: { resource: "chart", method: "list" },
-  // team (2)
+  // UserGroup 人员域 (3)
   list_project_team: { resource: "team", method: "list" },
-  list_team_members: { resource: "team", method: "members" },
-  // search → workitem
-  search_by_mql: { resource: "workitem", method: "search" },
-  // schedule (1)
-  list_schedule: { resource: "schedule", method: "list" },
-  // project (1)
-  search_project_info: { resource: "project", method: "info" },
-  // user (1)
-  search_user_info: { resource: "user", method: "info" }
+  list_team_members: { resource: "team", method: "list-members" },
+  search_user_info: { resource: "user", method: "search" },
+  // Project 空间域 (1)
+  search_project_info: { resource: "project", method: "search" }
 };
 function mapTool(tool) {
   if (tool.metadata?.resource && tool.metadata?.method) {
@@ -1633,6 +1794,7 @@ function mapTool(tool) {
       hasFields: fallback.hasFields
     };
   }
+  logger.debug(`\u672A\u77E5 tool "${tool.name}" \u4E0D\u5728\u6620\u5C04\u8868\u4E2D\uFF0C\u4F7F\u7528 name parsing \u56DE\u9000`);
   const parts = tool.name.split("_");
   const resource = parts[0];
   const method = parts.slice(1).join("-");
@@ -1649,6 +1811,7 @@ function mapTools(tools) {
 }
 
 // src/dynamic/cache.ts
+init_profile_validation();
 import { readFile as readFile3, writeFile as writeFile3, mkdir as mkdir3 } from "fs/promises";
 import { join as join3, dirname } from "path";
 var DEFAULT_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -1656,6 +1819,7 @@ var ToolCache = class {
   filePath;
   ttlMs;
   constructor(cacheDir, profile = "default", ttlMs = DEFAULT_TTL_MS) {
+    validateProfileName(profile);
     const filename = profile === "default" ? "tools.json" : `tools-${profile}.json`;
     this.filePath = join3(cacheDir, filename);
     this.ttlMs = ttlMs;
@@ -1664,6 +1828,9 @@ var ToolCache = class {
     try {
       const raw = await readFile3(this.filePath, "utf-8");
       const data = JSON.parse(raw);
+      if (!Array.isArray(data.tools) || typeof data.timestamp !== "number") {
+        return null;
+      }
       const stale = Date.now() - data.timestamp > this.ttlMs;
       return { tools: data.tools, stale };
     } catch {
@@ -1688,12 +1855,16 @@ function convertTool(entry) {
   const props = entry.inputSchema?.properties ?? {};
   const required = new Set(entry.inputSchema?.required ?? []);
   for (const [name, schema] of Object.entries(props)) {
-    parameters.push({
+    const param = {
       name,
       type: schema.type ?? "string",
       description: schema.description,
       required: required.has(name)
-    });
+    };
+    if (schema.type === "array" && schema.items?.type) {
+      param.items = { type: schema.items.type };
+    }
+    parameters.push(param);
   }
   return {
     name: entry.name,
@@ -1704,13 +1875,15 @@ function convertTool(entry) {
 
 // src/cli.ts
 init_config();
+init_errors();
 
 // src/core/mcp-client.ts
-var requestId = 0;
+init_errors();
 var McpClient = class {
   baseUrl;
   tokenManager;
   customHeaders;
+  requestId = 0;
   constructor(baseUrl, tokenManager, customHeaders) {
     this.baseUrl = baseUrl;
     this.tokenManager = tokenManager;
@@ -1720,7 +1893,7 @@ var McpClient = class {
     try {
       return await this._doCall(method, params);
     } catch (err) {
-      if (err instanceof ServerError && err.message.includes("401")) {
+      if (err instanceof HttpError && err.httpStatus === 401) {
         const store = this.tokenManager.getStore();
         const tokenData = await store.load();
         if (tokenData) {
@@ -1736,10 +1909,11 @@ var McpClient = class {
   }
   async _doCall(method, params) {
     const token = await this.tokenManager.getToken();
-    const id = ++requestId;
+    const id = ++this.requestId;
     const body = { jsonrpc: "2.0", id, method, params };
     const headers = {
       "Content-Type": "application/json",
+      "User-Agent": "meegle-cli",
       ...this.customHeaders
     };
     if (token) {
@@ -1751,9 +1925,10 @@ var McpClient = class {
       body: JSON.stringify(body)
     });
     if (!response.ok) {
-      throw new ServerError(
+      throw new HttpError(
         `\u670D\u52A1\u7AEF\u8FD4\u56DE\u9519\u8BEF (${response.status})`,
-        "SERVER_HTTP_ERROR"
+        "SERVER_HTTP_ERROR",
+        response.status
       );
     }
     const data = await response.json();
@@ -1800,23 +1975,53 @@ function getCommandChain(cmd) {
   }
   return chain;
 }
+function extractProfileFromArgv(argv) {
+  for (let i = 0; i < argv.length; i++) {
+    if (argv[i] === "--profile" && i + 1 < argv.length) {
+      return argv[i + 1];
+    }
+    if (argv[i]?.startsWith("--profile=")) {
+      return argv[i].slice("--profile=".length);
+    }
+  }
+  return void 0;
+}
 async function createProgram() {
   const program = new Command();
-  program.name("meegle").description("Agent-First CLI for Meegle (Lark Project)").version(version).option("--format <format>", "\u8F93\u51FA\u683C\u5F0F: json | table | ndjson", "json").option("--select <props>", "\u9009\u53D6\u8F93\u51FA\u5C5E\u6027\uFF0C\u9017\u53F7\u5206\u9694").option("--verbose", "\u663E\u793A\u8BE6\u7EC6\u65E5\u5FD7").option("--profile <name>", "\u4F7F\u7528\u6307\u5B9A profile\uFF08\u4E34\u65F6\uFF0C\u4E0D\u6539\u53D8\u5168\u5C40\uFF09").hook("preAction", async (thisCommand, actionCommand) => {
+  program.name("meegle").description(`Agent-First CLI for Meegle (Lark Project)
+
+\u9886\u57DF\u6A21\u578B:
+  workitem\uFF08\u5DE5\u4F5C\u9879\uFF09\u2500 \u6838\u5FC3\u5B9E\u4F53\uFF0C\u901A\u8FC7 work-item-id \u6807\u8BC6
+  \u251C\u2500 workflow\uFF08\u5DE5\u4F5C\u6D41\uFF09\u2500 \u8282\u70B9\u6D41\u8F6C\u4E0E\u72B6\u6001\u6D41\u8F6C\uFF0C\u4F9D\u8D56 work-item-id
+  \u2502    \u2514\u2500 subtask\uFF08\u5B50\u4EFB\u52A1\uFF09\u2500 \u8282\u70B9\u4E0B\u7684\u5B50\u4EFB\u52A1\uFF0C\u4F9D\u8D56 node-id
+  \u251C\u2500 comment\uFF08\u8BC4\u8BBA\uFF09\u2500 \u5DE5\u4F5C\u9879\u7684\u8BC4\u8BBA\uFF0C\u4F9D\u8D56 work-item-id
+  \u251C\u2500 workhour\uFF08\u5DE5\u65F6\uFF09\u2500 \u5DE5\u65F6\u8BB0\u5F55\u4E0E\u6392\u671F\uFF0C\u4F9D\u8D56 work-item-id
+  \u2514\u2500 relation\uFF08\u5173\u7CFB\uFF09\u2500 \u5DE5\u4F5C\u9879\u4E4B\u95F4\u7684\u5173\u8054\u5173\u7CFB
+
+  mywork\uFF08\u5DE5\u4F5C\u53F0\uFF09\u2500 \u8DE8\u7A7A\u95F4\u7684\u4E2A\u4EBA\u5F85\u529E/\u5DF2\u529E
+  view\uFF08\u89C6\u56FE\uFF09\u2500 \u56FA\u5B9A\u89C6\u56FE\u3001\u7B5B\u9009\u89C6\u56FE
+  chart\uFF08\u5EA6\u91CF\uFF09\u2500 \u89C6\u56FE\u4E0B\u7684\u56FE\u8868\uFF0C\u4F9D\u8D56 view-id
+  team / user\uFF08\u4EBA\u5458\uFF09\u2500 \u56E2\u961F\u4E0E\u7528\u6237
+  project\uFF08\u7A7A\u95F4\uFF09\u2500 \u7A7A\u95F4\u4FE1\u606F
+
+\u5178\u578B\u64CD\u4F5C\u94FE\u8DEF:
+  \u521B\u5EFA\u5DE5\u4F5C\u9879: workitem meta-types \u2192 workitem meta-create-fields \u2192 workitem create
+  \u6D41\u8F6C\u8282\u70B9:   workflow get-node \u2192 workflow list-state-transitions \u2192 workflow transition
+  \u67E5\u770B\u5173\u8054:   relation meta-definitions \u2192 relation list`).version(version).option("--format <format>", "\u8F93\u51FA\u683C\u5F0F: json | table | ndjson", "json").option("--select <props>", "\u9009\u53D6\u8F93\u51FA\u5C5E\u6027\uFF0C\u9017\u53F7\u5206\u9694").option("--verbose", "\u663E\u793A\u8BE6\u7EC6\u65E5\u5FD7").option("--profile <name>", "\u4F7F\u7528\u6307\u5B9A profile\uFF08\u4E34\u65F6\uFF0C\u4E0D\u6539\u53D8\u5168\u5C40\uFF09").hook("preAction", async (thisCommand, actionCommand) => {
     const opts = thisCommand.opts();
     if (opts.verbose) {
       setLogLevel("debug");
     }
     const chain = getCommandChain(actionCommand);
     const topCmd = chain[0] ?? "";
-    const profileName = thisCommand.opts().profile;
+    const profileName2 = thisCommand.opts().profile;
     if (!SKIP_FIRST_RUN.includes(topCmd)) {
-      await checkFirstRun(profileName);
+      await checkFirstRun(profileName2);
     }
   });
   registerStaticCommands(program);
+  const profileName = extractProfileFromArgv(process.argv);
   try {
-    const profileName = program.opts().profile;
     const config = await loadConfig(profileName);
     const serverUrl = getServerUrl(config);
     const currentProfile = profileName ?? await getCurrentProfileName();
@@ -1848,7 +2053,6 @@ async function createProgram() {
   } catch (err) {
     logger.debug(`\u547D\u4EE4\u52A0\u8F7D\u8DF3\u8FC7: ${err}`);
   }
-  registerHelperCommands(program);
   return program;
 }
 async function run() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-project/meegle",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "Agent-First CLI for Meegle (Lark Project)",
   "type": "module",
   "bin": {
@@ -13,7 +13,7 @@
     "dist"
   ],
   "publishConfig": {
-    "tag": "dev"
+    "tag": "beta"
   },
   "scripts": {
     "build": "tsup",