@petercjl/procli 0.1.0 → 0.2.0

package/README.md

@@ -23,4 +23,25 @@ procli --profile nas project create --name "NAS 测试项目" --goal "验证最
 procli project create --name "新品项目" --goal "完成市场验证与上市" --yes
 ```
 
+商品项目默认生成标准生命周期 SOP。Agent 也可以提交自定义 SOP；每个节点都必须有名称和工作说明：
+
+```json
+{
+  "nodes": [{ "name": "验证需求", "description": "取得真实用户证据并形成结论" }]
+}
+```
+
+```bash
+procli project create --name "新品验证" --sop-file ./sop.json
+```
+
+删除项目仅允许系统管理员执行，必须先预览、精确复述项目名称并显式确认。删除是可恢复的软删除：
+
+```bash
+procli project delete --name "新品验证" --confirm-name "新品验证" --dry-run
+procli project delete --name "新品验证" --confirm-name "新品验证" --yes
+```
+
+店铺项目和企业项目已保留为后续能力，目前 CLI 会返回 `FEATURE_UNSUPPORTED`。
+
 配置和每个 Profile 的个人凭证保存在用户配置目录，不进入 npm 包或项目仓库。运行 `procli doctor --json` 查看当前 Profile、服务指纹和认证状态。

package/capabilities.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": "1",
   "name": "procli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "defaultProfile": "nas",
   "capabilities": [
     {
@@ -10,9 +10,39 @@
       "effect": "write",
       "risk": "medium",
       "requiredInputs": ["name"],
-      "optionalInputs": ["goal", "template", "mode", "profile", "idempotencyKey"],
-      "supports": ["dryRun", "idempotency", "targetVerification", "postWriteReadback"],
+      "optionalInputs": [
+        "goal",
+        "type",
+        "template",
+        "sopFile",
+        "mode",
+        "profile",
+        "idempotencyKey"
+      ],
+      "supports": [
+        "dryRun",
+        "idempotency",
+        "targetVerification",
+        "postWriteReadback"
+      ],
       "productionConfirmation": true
+    },
+    {
+      "id": "project.delete",
+      "command": "procli project delete",
+      "effect": "soft-delete",
+      "risk": "high",
+      "requiredInputs": ["name", "confirmName", "yes"],
+      "optionalInputs": ["profile", "idempotencyKey"],
+      "supports": [
+        "dryRun",
+        "idempotency",
+        "targetVerification",
+        "postWriteReadback",
+        "recoverableDeletion"
+      ],
+      "requiredSystemRole": "admin",
+      "confirmationRequired": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@petercjl/procli",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Agent-first CLI and portable Skill for SealSeek project management",
   "type": "module",
   "bin": {

package/skill/project-management/SKILL.md

@@ -1,54 +1,76 @@
 ---
 name: project-management
-description: Create and manage projects in a procli-compatible project management service. Use when a user asks to create a new product project, choose between local development and NAS production, or verify which project environment an Agent will modify.
+description: Create and delete projects in a procli-compatible project management service. Use when a user asks an Agent to initialize a product project with the default or a custom SOP, delete a project, choose local or NAS, or verify the target environment.
 ---
 
 # Project Management
 
-Use the bundled `procli` executable as the only execution surface. Do not call the service API directly or infer success from prose.
+Use the bundled `procli` executable as the only execution surface. Load the current `capabilities.json` and the adapter matching the advertised Agent platform before acting. Resolve the live CLI version and capabilities at runtime; do not call service APIs directly.
 
-## Input → Strategy → Output
+The logical capabilities are `project.service.project.create` and `project.service.project.delete`. If the matching adapter mapping is unresolved or unsupported, return `CAPABILITY_UNAVAILABLE`.
 
-- Input: project name is required; goal is optional; profile is optional and defaults through procli to `nas`.
-- Strategy: discover the live target, preview the write, obtain confirmation for production, create with one idempotency key, then require the CLI's write-after-readback result.
-- Output: the selected target, project record, generated task and Wiki summary, idempotency key, and an explicit success or structured error.
+## Target routing
 
-## Main line: create a project
+The default Profile is `nas`. Respect this precedence exactly:
 
-1. Run `procli profile current --json`, then `procli doctor --json`. If the selected Profile is missing, unreachable, mismatched, or unauthenticated, stop and report the structured error.
-2. Collect the project name. Use the user's stated business outcome as `--goal`; do not invent a detailed goal when it would change project intent.
-3. Generate one UUID for this logical creation attempt and retain it across retries as `--idempotency-key`.
-4. Run a preview:
+```text
+--profile > PROCLI_PROFILE > saved current Profile > nas
+```
+
+Run `procli profile current --json` and `procli doctor --json` before a write. Use `--profile local` for a one-command development override. Change the saved Profile only when the user asks for a persistent switch. Never silently switch environments after a connection or authentication failure.
+
+## Create a product project
+
+1. Collect the project name; it is the only required business input. Use the user's stated outcome as `--goal` when available.
+2. Project type defaults to `product`. Report shop and company project creation as `FEATURE_UNSUPPORTED` until the CLI advertises those capabilities.
+3. If the user wants the standard product lifecycle, omit `--sop-file`; the service initializes the default SOP, sequential tasks, and their Wiki pages.
+4. If the user supplies a custom SOP, obtain both `name` and `description` for every node. Ask the user for missing meaning, or offer a clearly labeled draft for approval. Never send an incomplete node. Save the approved structure as JSON in this form:
+
+   ```json
+   { "nodes": [{ "name": "节点名称", "description": "节点工作说明" }] }
+   ```
+
+5. Generate one UUID for the logical attempt and preserve it across retries. Preview with the same arguments and idempotency key:
 
    ```bash
-   procli project create --name "<name>" --goal "<goal>" --idempotency-key "<uuid>" --dry-run --json
+   procli project create --name "<name>" --goal "<goal>" --sop-file "<file>" --idempotency-key "<uuid>" --dry-run --json
    ```
 
-5. State the previewed Profile, URL, environment and project name. A production write requires the user's explicit creation intent; once present, execute the same request with `--yes`. A local development write does not require `--yes`.
-6. Accept success only when the CLI returns `ok=true`, the target matches the preview, and the result contains the created project plus generated task and Wiki counts.
-7. Report the project name, ID, target Profile/environment and generated structure. Never expose stored credentials.
+   Omit `--goal` or `--sop-file` when unused.
 
-## Profile routing
+6. Show the selected Profile, URL, environment, project name, SOP mode, and node count. The user's request to create is authorization for the local write. Production additionally requires `--yes`.
+7. Execute the matching command. Accept success only when `ok=true`, the target matches the preview, and the CLI returns a write-after-readback project, task count, and Wiki count.
 
-The default Profile is `nas`. Respect the CLI precedence exactly:
+## Delete a project
 
-```text
---profile > PROCLI_PROFILE > saved current Profile > nas
-```
+Deletion is a recoverable soft delete, but it is a high-risk administrator action.
+
+1. Collect the exact project name and generate one UUID for the logical attempt.
+2. Preview the target and affected counts:
+
+   ```bash
+   procli project delete --name "<exact name>" --confirm-name "<exact name>" --idempotency-key "<uuid>" --dry-run --json
+   ```
 
-Use `--profile local` for a one-command development override. Use `procli profile use local` only when the user asks to persistently change the default. Never replace a named Profile with a raw URL during normal execution.
+3. Present the Profile/environment, exact name, task count, Wiki count, administrator requirement, and recoverable status. Obtain explicit confirmation if it is not already present in the current request.
+4. Execute the identical request with `--yes`. Both name arguments must match exactly. The authenticated identity must have `systemRole=admin`.
+5. Accept success only when the CLI returns `verification=soft-delete-readback`, `deletedAt`, and `recoverable=true`.
 
 ## Failure branches
 
-- `PROFILE_NOT_CONFIGURED`: show the required `procli profile add` command and stop.
-- `TARGET_MISMATCH` or `API_VERSION_UNSUPPORTED`: stop without writing; do not bypass instance verification.
-- `AUTH_REQUIRED`: run `procli auth login --profile <name>` only when interactive browser authorization is available; otherwise return the login command.
-- `CONFIRMATION_REQUIRED`: show the target and wait for explicit authorization; then return to main-line step 5 with the same idempotency key.
-- `SERVICE_UNAVAILABLE`: do not switch from local to NAS or from NAS to local automatically. Report the selected Profile and stop.
-- Unknown write result: retry only with the same idempotency key. Never create a second logical attempt merely because the response was interrupted.
+- `PROFILE_NOT_CONFIGURED`: provide the required `procli profile add` command and stop.
+- `TARGET_MISMATCH` or `API_VERSION_UNSUPPORTED`: stop without writing.
+- `AUTH_REQUIRED`: run `procli auth login --profile <name>` only when interactive browser authorization is available; otherwise provide the command.
+- `PROJECT_NAME_CONFLICT`: ask for a distinct active-project name.
+- `SOP_NODE_INCOMPLETE`: return to custom-SOP collection and obtain both required fields.
+- `CONFIRMATION_REQUIRED`: preserve the idempotency key, obtain confirmation, then resume the matching write.
+- `ADMIN_REQUIRED`: tell the user to contact the system administrator; do not seek a bypass.
+- `DELETE_CONFIRMATION_MISMATCH`: request the exact project name and rebuild the preview.
+- `SERVICE_UNAVAILABLE`: report the selected Profile and stop without changing environments.
+- Unknown write result: retry only with the same idempotency key.
 
-## Capability contract
+## Output contract
 
-Before execution, load `capabilities.json` and the adapter matching the advertised Agent platform. The required logical capability is `project.service.project.create`. If its mapping is unresolved or unsupported, return `CAPABILITY_UNAVAILABLE`; do not guess another API or CLI.
+For creation, report the project name and ID, target Profile/environment, SOP mode, task count, Wiki count, and verification. For deletion, report the exact project name and ID, deletion time, actor, recoverable status, target, and verification. Never expose credentials or local token storage.
 
-After a reported execution failure, preserve the failed command, structured error code and target metadata for a separately authorized plugin update. Runtime execution must not edit this Skill or its adapters.
+After a reported execution failure, preserve the failed command, structured error code, and target metadata for a separately authorized plugin update. Runtime execution must not edit this Skill or its adapters.

package/skill/project-management/adapters/codex.json

@@ -8,7 +8,7 @@
       "implementation": {
         "kind": "stable-cli",
         "discovery": "Resolve procli from PATH and verify it with procli version and procli capabilities --json.",
-        "execution": "Run procli project create with the selected Profile, one idempotency key, preview and required confirmation.",
+        "execution": "Run procli project create with the selected Profile, optional custom SOP file, one idempotency key, preview and required confirmation.",
         "normalization": "Use the procli JSON envelope without reinterpretation."
       },
       "features": [
@@ -21,10 +21,44 @@
         "structured_json"
       ],
       "status": "tested",
-      "permissions": ["Network access to the selected service", "Permission to create a project"],
+      "permissions": [
+        "Network access to the selected service",
+        "Permission to create a project"
+      ],
+      "normalization": "Use the procli JSON envelope without reinterpretation.",
+      "tested_date": "2026-09-15",
+      "evidence": [
+        "Codex resolved procli 0.2.0, verified the authenticated local Profile, created a two-node custom-SOP product project, and received matching project, task, dependency, and Wiki write-after-readback results."
+      ]
+    },
+    {
+      "capability_id": "project.service.project.delete",
+      "implementation": {
+        "kind": "stable-cli",
+        "discovery": "Resolve procli from PATH and verify it with procli version and procli capabilities --json.",
+        "execution": "Run procli project delete with the selected Profile, exact-name confirmation, one idempotency key, preview, explicit --yes, and administrator authorization.",
+        "normalization": "Use the procli JSON envelope without reinterpretation."
+      },
+      "features": [
+        "profile_selection",
+        "target_identity_verification",
+        "dry_run",
+        "admin_authorization",
+        "exact_name_confirmation",
+        "idempotent_write",
+        "post_write_readback",
+        "structured_json"
+      ],
+      "status": "tested",
+      "permissions": [
+        "Network access to the selected service",
+        "System administrator permission to delete a project"
+      ],
       "normalization": "Use the procli JSON envelope without reinterpretation.",
       "tested_date": "2026-09-15",
-      "evidence": ["Codex resolved the installed procli 0.1.0 entry point, verified authenticated DingTalk identities for local development and NAS production Profiles, confirmed an unacknowledged production write was rejected, then created one project in each environment and received matching write-after-readback counts for seven tasks and eight Wiki paths."]
+      "evidence": [
+        "Codex previewed the two-node local test project, deleted it as the authenticated system administrator with exact-name confirmation, and received soft-delete-readback with the project id, actor, timestamp, counts, and recoverable=true."
+      ]
     }
   ]
 }

package/skill/project-management/adapters/sealseek.json

@@ -8,7 +8,7 @@
       "implementation": {
         "kind": "stable-cli",
         "discovery": "Resolve procli from PATH and verify it with procli version and procli capabilities --json.",
-        "execution": "Run procli project create with the selected Profile, one idempotency key, preview and required confirmation.",
+        "execution": "Run procli project create with the selected Profile, optional custom SOP file, one idempotency key, preview and required confirmation.",
         "normalization": "Use the procli JSON envelope without reinterpretation."
       },
       "features": [
@@ -21,7 +21,35 @@
         "structured_json"
       ],
       "status": "implemented",
-      "permissions": ["Network access to the selected service", "Permission to create a project"],
+      "permissions": [
+        "Network access to the selected service",
+        "Permission to create a project"
+      ],
+      "normalization": "Use the procli JSON envelope without reinterpretation."
+    },
+    {
+      "capability_id": "project.service.project.delete",
+      "implementation": {
+        "kind": "stable-cli",
+        "discovery": "Resolve procli from PATH and verify it with procli version and procli capabilities --json.",
+        "execution": "Run procli project delete with exact-name confirmation, one idempotency key, preview, explicit --yes, and administrator authorization.",
+        "normalization": "Use the procli JSON envelope without reinterpretation."
+      },
+      "features": [
+        "profile_selection",
+        "target_identity_verification",
+        "dry_run",
+        "admin_authorization",
+        "exact_name_confirmation",
+        "idempotent_write",
+        "post_write_readback",
+        "structured_json"
+      ],
+      "status": "implemented",
+      "permissions": [
+        "Network access to the selected service",
+        "System administrator permission to delete a project"
+      ],
       "normalization": "Use the procli JSON envelope without reinterpretation."
     }
   ]

package/skill/project-management/capabilities.json

@@ -17,8 +17,23 @@
         "post_write_readback",
         "structured_json"
       ],
-      "input_fields": ["profile", "name", "goal", "template", "mode", "idempotency_key"],
-      "output_fields": ["target", "project", "tasks", "wiki", "idempotency_key"],
+      "input_fields": [
+        "profile",
+        "name",
+        "goal",
+        "type",
+        "template",
+        "sop_file",
+        "mode",
+        "idempotency_key"
+      ],
+      "output_fields": [
+        "target",
+        "project",
+        "tasks",
+        "wiki",
+        "idempotency_key"
+      ],
       "side_effects": {
         "external_mutation": true,
         "may_cost_money": false,
@@ -29,6 +44,46 @@
         "AUTH_REQUIRED",
         "PERMISSION_REQUIRED",
         "PROVIDER_FAILURE",
+        "OUTPUT_CONTRACT_FAILED",
+        "PROJECT_NAME_CONFLICT",
+        "SOP_NODE_INCOMPLETE",
+        "FEATURE_UNSUPPORTED"
+      ]
+    },
+    {
+      "id": "project.service.project.delete",
+      "purpose": "Soft-delete one exactly named project as a system administrator and verify the deletion",
+      "required": true,
+      "required_features": [
+        "profile_selection",
+        "target_identity_verification",
+        "dry_run",
+        "admin_authorization",
+        "exact_name_confirmation",
+        "idempotent_write",
+        "post_write_readback",
+        "structured_json"
+      ],
+      "input_fields": ["profile", "name", "confirm_name", "idempotency_key"],
+      "output_fields": [
+        "target",
+        "project_id",
+        "project_name",
+        "deleted_at",
+        "deleted_by",
+        "recoverable",
+        "idempotency_key"
+      ],
+      "side_effects": {
+        "external_mutation": true,
+        "may_cost_money": false,
+        "authorization": "The user must explicitly intend to delete the project and the authenticated identity must have the system admin role."
+      },
+      "errors": [
+        "AUTH_REQUIRED",
+        "ADMIN_REQUIRED",
+        "DELETE_CONFIRMATION_MISMATCH",
+        "NOT_FOUND",
         "OUTPUT_CONTRACT_FAILED"
       ]
     }

package/src/main.mjs

@@ -1,11 +1,22 @@
 import crypto from "node:crypto";
 import { spawn } from "node:child_process";
 import fs from "node:fs/promises";
-import { CliError, configPath, deleteToken, normalizeUrl, readConfig, readToken, resolveProfile, saveToken, selectedProfileName, writeConfig } from "./config.mjs";
+import {
+  CliError,
+  configPath,
+  deleteToken,
+  normalizeUrl,
+  readConfig,
+  readToken,
+  resolveProfile,
+  saveToken,
+  selectedProfileName,
+  writeConfig,
+} from "./config.mjs";
 import { inspectTarget, request } from "./client.mjs";
 import { installSkill, skillSource, skillStatus } from "./skill.mjs";
 
-const VERSION = "0.1.0";
+const VERSION = "0.2.0";
 const help = `procli ${VERSION} — Agent-first project management CLI
 
 Profile（默认 nas）：
@@ -17,8 +28,10 @@ Profile（默认 nas）：
   auth status|logout [--profile NAME]
 
 项目：
-  project create --name NAME [--goal TEXT] [--template ecommerce-v1]
+  project create --name NAME [--goal TEXT] [--type product] [--sop-file FILE]
                  [--mode agent] [--idempotency-key KEY] [--dry-run] [--yes]
+  project delete --name NAME --confirm-name NAME --yes
+                 [--idempotency-key KEY] [--dry-run]
 
 发现与安装：
   capabilities [--profile NAME]
@@ -36,9 +49,13 @@ export function parseArgs(argv) {
     const value = argv[i];
     if (value.startsWith("--")) {
       const key = value.slice(2);
-      if (["json", "yes", "dry-run", "no-open", "help", "version"].includes(key)) options[key] = true;
+      if (
+        ["json", "yes", "dry-run", "no-open", "help", "version"].includes(key)
+      )
+        options[key] = true;
       else {
-        if (!argv[i + 1] || argv[i + 1].startsWith("--")) throw new CliError("ARGUMENT", `缺少 --${key} 的值`);
+        if (!argv[i + 1] || argv[i + 1].startsWith("--"))
+          throw new CliError("ARGUMENT", `缺少 --${key} 的值`);
         options[key] = argv[++i];
       }
     } else positional.push(value);
@@ -47,7 +64,8 @@ export function parseArgs(argv) {
 }
 
 function required(options, key) {
-  if (typeof options[key] !== "string" || !options[key].trim()) throw new CliError("ARGUMENT", `缺少 --${key}`);
+  if (typeof options[key] !== "string" || !options[key].trim())
+    throw new CliError("ARGUMENT", `缺少 --${key}`);
   return options[key].trim();
 }
 
@@ -56,22 +74,76 @@ function output(data, ok = true) {
   if (!ok) process.exitCode = 1;
 }
 
+async function readSopFile(file) {
+  let parsed;
+  try {
+    parsed = JSON.parse(await fs.readFile(file, "utf8"));
+  } catch (error) {
+    throw new CliError("SOP_FILE_INVALID", `无法读取 SOP JSON：${file}`, {
+      cause: error.message,
+    });
+  }
+  const nodes = Array.isArray(parsed) ? parsed : parsed?.nodes;
+  if (!Array.isArray(nodes) || nodes.length === 0)
+    throw new CliError(
+      "SOP_FILE_INVALID",
+      "SOP 文件必须是非空节点数组，或包含 nodes 数组",
+    );
+  nodes.forEach((node, index) => {
+    if (typeof node?.name !== "string" || !node.name.trim())
+      throw new CliError(
+        "SOP_NODE_INCOMPLETE",
+        `SOP 第 ${index + 1} 个节点缺少 name`,
+      );
+    if (typeof node?.description !== "string" || !node.description.trim())
+      throw new CliError(
+        "SOP_NODE_INCOMPLETE",
+        `SOP 节点“${node.name}”缺少 description`,
+      );
+  });
+  return {
+    nodes: nodes.map(({ name, description }) => ({
+      name: name.trim(),
+      description: description.trim(),
+    })),
+  };
+}
+
 async function openUrl(url) {
-  const command = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-  const child = spawn(command[0], command[1], { detached: true, stdio: "ignore" });
+  const command =
+    process.platform === "darwin"
+      ? ["open", [url]]
+      : process.platform === "win32"
+        ? ["cmd", ["/c", "start", "", url]]
+        : ["xdg-open", [url]];
+  const child = spawn(command[0], command[1], {
+    detached: true,
+    stdio: "ignore",
+  });
   child.unref();
 }
 
 async function authLogin(profile, options) {
   const verifier = crypto.randomBytes(32).toString("base64url");
-  const verifierHash = crypto.createHash("sha256").update(verifier).digest("hex");
-  const started = await request(profile, "/api/auth/cli/start", { method: "POST", body: { verifierHash, clientName: `procli/${VERSION}` }, token: "" });
+  const verifierHash = crypto
+    .createHash("sha256")
+    .update(verifier)
+    .digest("hex");
+  const started = await request(profile, "/api/auth/cli/start", {
+    method: "POST",
+    body: { verifierHash, clientName: `procli/${VERSION}` },
+    token: "",
+  });
   if (!options["no-open"]) await openUrl(started.data.verificationUrl);
-  process.stderr.write(`请在浏览器完成钉钉授权：${started.data.verificationUrl}\n`);
+  process.stderr.write(
+    `请在浏览器完成钉钉授权：${started.data.verificationUrl}\n`,
+  );
   const timeoutMs = Math.max(10000, Number(options["timeout-ms"] || 300000));
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
-    await new Promise((resolve) => setTimeout(resolve, Number(started.data.intervalMs || 1500)));
+    await new Promise((resolve) =>
+      setTimeout(resolve, Number(started.data.intervalMs || 1500)),
+    );
     const response = await fetch(profile.url + "/api/auth/cli/poll", {
       method: "POST",
       headers: { "content-type": "application/json" },
@@ -80,9 +152,19 @@ async function authLogin(profile, options) {
     });
     const payload = await response.json();
     if (response.status === 202) continue;
-    if (!response.ok || !payload.ok) throw new CliError(payload?.error?.code || "AUTH_FAILED", payload?.error?.message || "CLI 授权失败");
+    if (!response.ok || !payload.ok)
+      throw new CliError(
+        payload?.error?.code || "AUTH_FAILED",
+        payload?.error?.message || "CLI 授权失败",
+      );
     await saveToken(profile.name, payload.data.token);
-    return { profile: profile.name, url: profile.url, authenticated: true, member: payload.data.member, expiresAt: payload.data.expiresAt };
+    return {
+      profile: profile.name,
+      url: profile.url,
+      authenticated: true,
+      member: payload.data.member,
+      expiresAt: payload.data.expiresAt,
+    };
   }
   throw new CliError("AUTH_TIMEOUT", "等待钉钉授权超时，请重新运行 auth login");
 }
@@ -90,7 +172,8 @@ async function authLogin(profile, options) {
 export async function main(argv) {
   const { options, positional } = parseArgs(argv);
   const [group, command] = positional;
-  if (options.version || group === "version") return output({ version: VERSION });
+  if (options.version || group === "version")
+    return output({ version: VERSION });
   if (!group || group === "help" || options.help) return console.log(help);
   const file = configPath();
   const config = await readConfig(file);
@@ -98,30 +181,67 @@ export async function main(argv) {
   if (group === "profile") {
     if (command === "add") {
       const name = positional[2];
-      if (!name || !/^[a-zA-Z0-9._-]+$/.test(name)) throw new CliError("ARGUMENT", "请提供有效 Profile 名称");
+      if (!name || !/^[a-zA-Z0-9._-]+$/.test(name))
+        throw new CliError("ARGUMENT", "请提供有效 Profile 名称");
       const environment = required(options, "environment");
-      if (!['development', 'production'].includes(environment)) throw new CliError("ARGUMENT", "--environment 必须是 development 或 production");
-      const candidate = { name, url: normalizeUrl(required(options, "url")), environment };
+      if (!["development", "production"].includes(environment))
+        throw new CliError(
+          "ARGUMENT",
+          "--environment 必须是 development 或 production",
+        );
+      const candidate = {
+        name,
+        url: normalizeUrl(required(options, "url")),
+        environment,
+      };
       const target = await inspectTarget(candidate);
-      config.profiles[name] = { url: candidate.url, environment, instanceId: target.instanceId };
+      config.profiles[name] = {
+        url: candidate.url,
+        environment,
+        instanceId: target.instanceId,
+      };
       await writeConfig(config, file);
-      return output({ profile: name, ...config.profiles[name], verified: true });
+      return output({
+        profile: name,
+        ...config.profiles[name],
+        verified: true,
+      });
     }
-    if (command === "list") return output({ currentProfile: config.currentProfile || "nas", profiles: config.profiles });
+    if (command === "list")
+      return output({
+        currentProfile: config.currentProfile || "nas",
+        profiles: config.profiles,
+      });
     if (command === "current") {
       const name = selectedProfileName(options, config);
-      return output({ selectedBy: options.profile ? "flag" : process.env.PROCLI_PROFILE ? "environment" : "default", profile: name, ...(config.profiles[name] || { configured: false }) });
+      return output({
+        selectedBy: options.profile
+          ? "flag"
+          : process.env.PROCLI_PROFILE
+            ? "environment"
+            : "default",
+        profile: name,
+        ...(config.profiles[name] || { configured: false }),
+      });
     }
     if (command === "use") {
       const name = positional[2];
-      if (!config.profiles[name]) throw new CliError("PROFILE_NOT_CONFIGURED", `Profile “${name}”尚未配置`);
+      if (!config.profiles[name])
+        throw new CliError(
+          "PROFILE_NOT_CONFIGURED",
+          `Profile “${name}”尚未配置`,
+        );
       config.currentProfile = name;
       await writeConfig(config, file);
       return output({ currentProfile: name, ...config.profiles[name] });
     }
     if (command === "remove") {
       const name = positional[2];
-      if (!config.profiles[name]) throw new CliError("PROFILE_NOT_CONFIGURED", `Profile “${name}”尚未配置`);
+      if (!config.profiles[name])
+        throw new CliError(
+          "PROFILE_NOT_CONFIGURED",
+          `Profile “${name}”尚未配置`,
+        );
       delete config.profiles[name];
       if (config.currentProfile === name) config.currentProfile = "nas";
       await writeConfig(config, file);
@@ -132,66 +252,160 @@ export async function main(argv) {
   }
 
   if (group === "skill") {
-    if (command === "source") return output({ skill: "project-management", source: skillSource });
+    if (command === "source")
+      return output({ skill: "project-management", source: skillSource });
     const agent = options.agent || "";
-    if (command === "status") return output(await skillStatus(agent, options["target-dir"]));
-    if (command === "install") return output(await installSkill({ agent, customRoot: options["target-dir"], mode: options.mode || "auto" }));
-    if (command === "update") return output(await installSkill({ agent, customRoot: options["target-dir"], mode: options.mode || "auto", update: true }));
+    if (command === "status")
+      return output(await skillStatus(agent, options["target-dir"]));
+    if (command === "install")
+      return output(
+        await installSkill({
+          agent,
+          customRoot: options["target-dir"],
+          mode: options.mode || "auto",
+        }),
+      );
+    if (command === "update")
+      return output(
+        await installSkill({
+          agent,
+          customRoot: options["target-dir"],
+          mode: options.mode || "auto",
+          update: true,
+        }),
+      );
     throw new CliError("UNKNOWN_COMMAND", "未知 skill 命令");
   }
 
   const profile = resolveProfile(options, config);
   if (group === "doctor") {
-    const checks = { node: { ok: Number(process.versions.node.split('.')[0]) >= 20, version: process.versions.node }, config: { ok: true, path: file }, profile: { ok: true, ...profile } };
-    try { checks.server = { ok: true, ...(await inspectTarget(profile)) }; } catch (error) { checks.server = { ok: false, code: error.code, message: error.message }; }
+    const checks = {
+      node: {
+        ok: Number(process.versions.node.split(".")[0]) >= 20,
+        version: process.versions.node,
+      },
+      config: { ok: true, path: file },
+      profile: { ok: true, ...profile },
+    };
+    try {
+      checks.server = { ok: true, ...(await inspectTarget(profile)) };
+    } catch (error) {
+      checks.server = { ok: false, code: error.code, message: error.message };
+    }
     const token = await readToken(profile.name, file);
     if (!token) checks.auth = { ok: false, code: "AUTH_REQUIRED" };
     else {
-      try { checks.auth = { ok: true, ...(await request(profile, "/api/auth/cli/status", { token })).data }; }
-      catch (error) { checks.auth = { ok: false, code: error.code, message: error.message }; }
+      try {
+        checks.auth = {
+          ok: true,
+          ...(await request(profile, "/api/auth/cli/status", { token })).data,
+        };
+      } catch (error) {
+        checks.auth = { ok: false, code: error.code, message: error.message };
+      }
     }
     const ok = Object.values(checks).every((item) => item.ok);
     return output({ checks }, ok);
   }
   if (group === "capabilities") {
-    const manifest = JSON.parse(await fs.readFile(new URL("../capabilities.json", import.meta.url), "utf8"));
+    const manifest = JSON.parse(
+      await fs.readFile(
+        new URL("../capabilities.json", import.meta.url),
+        "utf8",
+      ),
+    );
     let server;
-    try { server = (await request(profile, "/api/capabilities", { token: "" })).data; } catch (error) { server = { available: false, code: error.code }; }
-    return output({ cli: manifest, server, target: await inspectTarget(profile) });
+    try {
+      server = (await request(profile, "/api/capabilities", { token: "" }))
+        .data;
+    } catch (error) {
+      server = { available: false, code: error.code };
+    }
+    return output({
+      cli: manifest,
+      server,
+      target: await inspectTarget(profile),
+    });
   }
   if (group === "auth") {
     if (command === "login") return output(await authLogin(profile, options));
     if (command === "status") {
       const token = await readToken(profile.name, file);
-      if (!token) throw new CliError("AUTH_REQUIRED", `Profile “${profile.name}”尚未登录`);
-      return output({ profile: profile.name, url: profile.url, ...(await request(profile, "/api/auth/cli/status", { token })).data });
+      if (!token)
+        throw new CliError(
+          "AUTH_REQUIRED",
+          `Profile “${profile.name}”尚未登录`,
+        );
+      return output({
+        profile: profile.name,
+        url: profile.url,
+        ...(await request(profile, "/api/auth/cli/status", { token })).data,
+      });
     }
     if (command === "logout") {
       const token = await readToken(profile.name, file);
-      if (token) await request(profile, "/api/auth/cli/revoke", { method: "POST", token }).catch(() => {});
+      if (token)
+        await request(profile, "/api/auth/cli/revoke", {
+          method: "POST",
+          token,
+        }).catch(() => {});
       const removed = await deleteToken(profile.name, file);
-      return output({ profile: profile.name, loggedOut: true, localCredentialRemoved: removed });
+      return output({
+        profile: profile.name,
+        loggedOut: true,
+        localCredentialRemoved: removed,
+      });
     }
     throw new CliError("UNKNOWN_COMMAND", "未知 auth 命令");
   }
   if (group === "project" && command === "create") {
     const target = await inspectTarget(profile);
-    const input = { name: required(options, "name"), goal: options.goal || "", template: options.template || "ecommerce-v1", mode: options.mode || "agent" };
-    if (input.template !== "ecommerce-v1") throw new CliError("ARGUMENT", "当前只支持模板 ecommerce-v1");
+    const type = options.type || "product";
+    if (type !== "product")
+      throw new CliError(
+        "FEATURE_UNSUPPORTED",
+        `${type === "shop" ? "店铺" : type === "company" ? "企业" : "该类型"}项目尚未开放`,
+      );
+    const input = {
+      name: required(options, "name"),
+      goal: options.goal || "",
+      type,
+      template: options.template || "product-sop-v1",
+      mode: options.mode || "agent",
+    };
+    if (options["sop-file"]) input.sop = await readSopFile(options["sop-file"]);
+    if (!["product-sop-v1", "ecommerce-v1"].includes(input.template))
+      throw new CliError("ARGUMENT", "当前只支持商品项目 SOP 模板");
     const idempotencyKey = options["idempotency-key"] || crypto.randomUUID();
-    if (options["dry-run"]) return output({ dryRun: true, target, input, idempotencyKey });
+    if (options["dry-run"])
+      return output({ dryRun: true, target, input, idempotencyKey });
     if (target.environment === "production" && !options.yes)
-      throw new CliError("CONFIRMATION_REQUIRED", "目标是生产环境；确认创建后请增加 --yes", { target, input });
-    const result = await request(profile, "/api/v1/projects", { method: "POST", body: input, idempotencyKey });
-    const readback = await request(profile, `/api/v1/projects/${encodeURIComponent(result.data.project.id)}`);
+      throw new CliError(
+        "CONFIRMATION_REQUIRED",
+        "目标是生产环境；确认创建后请增加 --yes",
+        { target, input },
+      );
+    const result = await request(profile, "/api/v1/projects", {
+      method: "POST",
+      body: input,
+      idempotencyKey,
+    });
+    const readback = await request(
+      profile,
+      `/api/v1/projects/${encodeURIComponent(result.data.project.id)}`,
+    );
     if (
       readback.data.project.id !== result.data.project.id ||
       readback.data.tasks.count !== result.data.tasks.count ||
       readback.data.wiki.count !== result.data.wiki.count
     )
-      throw new CliError("OUTPUT_CONTRACT_FAILED", "项目写入后的回读结果与创建结果不一致", {
-        projectId: result.data.project.id,
-      });
+      throw new CliError(
+        "OUTPUT_CONTRACT_FAILED",
+        "项目写入后的回读结果与创建结果不一致",
+        {
+          projectId: result.data.project.id,
+        },
+      );
     return output({
       target,
       idempotencyKey,
@@ -200,5 +414,61 @@ export async function main(argv) {
       verification: "write-after-readback",
     });
   }
+  if (group === "project" && command === "delete") {
+    const target = await inspectTarget(profile);
+    const name = required(options, "name");
+    const confirmedName = required(options, "confirm-name");
+    if (name !== confirmedName)
+      throw new CliError(
+        "DELETE_CONFIRMATION_MISMATCH",
+        "--confirm-name 必须与 --name 完全一致",
+      );
+    const idempotencyKey = options["idempotency-key"] || crypto.randomUUID();
+    if (options["dry-run"]) {
+      const found = await request(
+        profile,
+        `/api/v1/projects/resolve/by-name?name=${encodeURIComponent(name)}`,
+      );
+      return output({
+        dryRun: true,
+        target,
+        preview: {
+          project: { id: found.data.project.id, name: found.data.project.name },
+          taskCount: found.data.taskCount,
+          wikiCount: found.data.wikiCount,
+          recoverable: true,
+        },
+        idempotencyKey,
+        requiresAdmin: true,
+      });
+    }
+    if (!options.yes)
+      throw new CliError(
+        "CONFIRMATION_REQUIRED",
+        "删除项目必须增加 --yes，并提供完全一致的 --confirm-name",
+        { target, projectName: name },
+      );
+    const result = await request(profile, "/api/v1/projects/by-name", {
+      method: "DELETE",
+      body: { expectedName: name },
+      idempotencyKey,
+    });
+    const readback = await request(
+      profile,
+      `/api/v1/deleted-projects/${encodeURIComponent(result.data.projectId)}`,
+    );
+    if (!readback.data.project.deletedAt || readback.data.project.name !== name)
+      throw new CliError(
+        "OUTPUT_CONTRACT_FAILED",
+        "删除后的回读结果与请求不一致",
+        { projectId: result.data.projectId },
+      );
+    return output({
+      target,
+      idempotencyKey,
+      ...result.data,
+      verification: "soft-delete-readback",
+    });
+  }
   throw new CliError("UNKNOWN_COMMAND", "未知命令，运行 procli help 查看用法");
 }