@lark-project/meegle 1.0.16 → 1.0.18

package/CHANGELOG.md

@@ -8,6 +8,23 @@ versioned section on each npm release.
 
 ## [Unreleased]
 
+## [v1.0.18] - 2026-07-24
+
+### Added
+
+- Added `meegle --version` as an alias of `meegle version`, with identical plain version output.
+
+### Fixed
+
+- Required command parameters supplied through `--params` (for example `work_item_type` and `project_key` on `workitem create`) now pass CLI validation and are forwarded to the MCP tool. Both MCP `snake_case` and CLI `kebab-case` key forms are accepted. Previously Cobra rejected them before the CLI's parameter-merge pipeline ran, and the snake_case form was not matched to generated CLI flags.
+- Programmatic command-string entry points now decode `\n` as real line breaks and preserve backslashes in unsupported escape sequences, preventing multiline comments from being stored with literal `nn`.
+
+## [v1.0.17] - 2026-07-20
+
+### Fixed
+
+- Serialized store-backed OAuth refresh across CLI processes, rejected HTTP 200 error envelopes that omit `access_token`, retried requests with the newly persisted token, and guarded terminal-401 cleanup so a stale process can no longer overwrite or delete fresh credentials ([#40](https://github.com/larksuite/meegle-cli/issues/40)).
+
 ## [v1.0.16] - 2026-07-07
 
 ### Fixed

package/README.md

@@ -274,6 +274,7 @@ Offline, no-network utility for parsing Meegle / Feishu Project URLs into struct
 
 | Command | Description |
 |---------|-------------|
+| `version` | Print the CLI version (`meegle --version` is an alias) |
 | `inspect [command]` | Inspect command parameters |
 | `completion bash\|zsh\|fish` | Generate shell completion script |
 | `completion install` | Auto-install shell completion |
@@ -536,7 +537,9 @@ meegle mywork todo --set action=this_week --set page_num=1
 ### --params JSON
 
 `--params` takes a JSON object; **each top-level key is merged in as a CLI flag**.
-The key must be a valid flag of the current command — it is not a free-form payload.
+Use either the MCP's `snake_case` parameter name or the CLI flag's `kebab-case`
+name. The key must be a valid parameter of the current command — it is not a
+free-form payload.
 
 ```bash
 # These two are equivalent:
@@ -549,6 +552,8 @@ Use `--params` when:
 - the value is a nested object or array (`fields[]`, `schedule{}`) — too awkward to inline as a flag
 - you want to set many parameters at once, or feed a payload from a file (see `@file.json` below)
 
+Required top-level parameters can also be supplied through `--params`; they are equivalent to passing the corresponding flags directly.
+
 ```bash
 meegle workitem create --project-key PROJ --work-item-type story \
   --params '{"fields":[{"field_key":"name","field_value":"Title"}]}'
@@ -641,6 +646,7 @@ meegle workflow get-node --work-item-id 12345 --need-sub-task
 | `--profile` | | Use a specific configuration profile |
 | `--refresh` | | Refresh cached commands from server (bypass the local 24 h cache) |
 | `--auto-paginate` | | Automatically fetch and merge all pages when the response contains pagination signals (`next_page_token` or `pagination.has_more`); merged list arrays are concatenated, and a 200-page safety cap plus a 3-empty-page streak guard prevent runaway loops |
+| `--version` | | Print the CLI version and exit (alias of `meegle version`) |
 
 ## Advanced Usage
 
@@ -731,6 +737,18 @@ meegle inspect
 meegle inspect workitem.create
 ```
 
+### Programmatic Command Strings
+
+Applications that embed the Go command-string SDK can represent line breaks
+with `\n`. For example, a value such as
+`--content "Line 1\n\nLine 2"` reaches the command as two paragraphs. Use
+`\\n` when the value must contain the literal characters `\n`; unsupported
+escape sequences retain their backslash.
+
+This decoding only applies to programmatic command-string entry points such as
+`CommandClient.Execute` and `ExecuteCommandString`. The `meegle` binary receives
+an argument array from the shell, so normal shell quoting rules apply there.
+
 ## Authentication
 
 ### Browser Login (Default)
@@ -776,6 +794,11 @@ JSON output example (`auth status --format json`) on a rejected token:
 {"authenticated": false, "host": "meegle.com", "reason": "token rejected by server"}
 ```
 
+For credentials managed by `meegle auth login`, token refresh is serialized
+across CLI processes that share a profile. Invalid refresh responses are
+rejected without overwriting the previous credentials, and a late 401 from an
+older process cannot clear a token that another process has already refreshed.
+
 ## Configuration
 
 ### Config File

package/README.zh-CN.md

@@ -276,6 +276,7 @@ Agent 会参考 skill，自动选择合适的 `meegle` 命令执行。配合 `--
 
 | 命令 | 说明 |
 |------|------|
+| `version` | 输出 CLI 版本号（`meegle --version` 是别名） |
 | `inspect [command]` | 查看命令参数详情 |
 | `completion bash\|zsh\|fish` | 生成 Shell 补全脚本 |
 | `completion install` | 自动安装 Shell 补全 |
@@ -527,7 +528,8 @@ meegle mywork todo --set action=this_week --set page_num=1
 ### --params JSON
 
 `--params` 接收一个 JSON 对象，**每个顶层 key 都会作为 CLI flag 合并进来**。
-顶层 key 必须是当前命令的合法 flag —— 它不是一份自由结构的载荷。
+顶层 key 可使用 MCP 参数的 `snake_case` 名称或 CLI flag 的 `kebab-case` 名称；
+它必须是当前命令的合法参数，而不是一份自由结构的载荷。
 
 ```bash
 # 下面两条等价：
@@ -540,6 +542,8 @@ meegle workitem get --params '{"work_item_id":12345,"project_key":"PROJ"}'
 - 值是嵌套对象或数组（`fields[]`、`schedule{}`），直接写 flag 太别扭
 - 想一次性批量传多个参数，或者从文件加载载荷（见下方 `@file.json`）
 
+必填的顶层参数也可以通过 `--params` 提供，效果等价于直接传入对应的 flag。
+
 ```bash
 meegle workitem create --project-key PROJ --work-item-type story \
   --params '{"fields":[{"field_key":"name","field_value":"标题"}]}'
@@ -626,6 +630,7 @@ meegle workflow get-node --work-item-id 12345 --need-sub-task
 | `--profile` | | 指定配置 profile |
 | `--refresh` | | 从服务端刷新本地命令缓存（旁路 24 小时缓存） |
 | `--auto-paginate` | | 当响应包含分页信号（`next_page_token` 或 `pagination.has_more`）时自动拉取并合并所有页；列表数组会拼接，200 页安全上限与连续 3 空页保护防止失控循环 |
+| `--version` | | 输出 CLI 版本号并退出（`meegle version` 的别名） |
 
 ## 进阶用法
 
@@ -706,6 +711,16 @@ meegle inspect
 meegle inspect workitem.create
 ```
 
+### 程序化命令字符串
+
+通过 Go 命令字符串 SDK 嵌入调用时，可以用 `\n` 表示换行。例如
+`--content "第一段\n\n第二段"` 会把两个段落传给命令。若需要传递字面量
+字符 `\n`，请写成 `\\n`；不支持的转义序列会保留反斜杠。
+
+该解码只作用于 `CommandClient.Execute`、`ExecuteCommandString` 等程序化
+命令字符串入口。`meegle` 二进制直接接收 shell 解析后的参数数组，因此仍遵循
+对应 shell 的引号和转义规则。
+
 ## 认证
 
 ### 浏览器登录（默认）
@@ -751,6 +766,10 @@ JSON 输出示例（`auth status --format json`），token 被拒：
 {"authenticated": false, "host": "meegle.com", "reason": "token rejected by server"}
 ```
 
+对于 `meegle auth login` 管理的凭据，共用同一 profile 的多个 CLI 进程会串行执行
+token refresh。无效的刷新响应不会覆盖原凭据，旧进程晚到的 401 也不会清除其他进程
+刚刷新成功的新 token。
+
 ## 配置
 
 ### 配置文件

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-project/meegle",
-  "version": "1.0.16",
+  "version": "1.0.18",
   "description": "Agent-First CLI for Meegle (Lark Project)",
   "license": "MIT",
   "homepage": "https://github.com/larksuite/meegle-cli#readme",