@puyinkai/xiaobao-cli 0.1.0

package/README.md

@@ -0,0 +1,81 @@
+# @puyinkai/xiaobao-cli
+
+旺小宝 CLI —— [openclaw-xiaobao](https://github.com/puyinkai/openclaw-xiaobao)
+plugin 的 host-agnostic 等价物。14 个能力 1:1 映射为 14 个 CLI 子命令，**人类
+直接敲也好用，AI agent（Claude Code / Codex / Cursor / OpenClaw / 任何能 shell
+out 的 host）通过 stdout JSON 消费**。
+
+参考 [larksuite/cli](https://github.com/larksuite/cli) 范式，跟 OpenClaw plugin
+解耦：plugin 这条线（`@puyinkai/openclaw-xiaobao`）保持现状，本 CLI 走 npm，
+两条线并存。
+
+## 安装
+
+```bash
+npm install -g @puyinkai/xiaobao-cli
+# 或 npx 一次性用
+npx -y @puyinkai/xiaobao-cli --help
+```
+
+## 快速上手
+
+```bash
+xiaobao-cli auth login                                         # 走 device flow 登录
+xiaobao-cli project list --keyword 盛世                        # 找项目
+xiaobao-cli project use --tenant-id 1234 --tenant-name 示例租户 \
+                       --project-id 9001 --project-name 盛世禧悦  # 激活项目
+xiaobao-cli audio list --from "2026-05-01 00:00:00" --to "2026-05-02 00:00:00" --size 5
+```
+
+> openclaw-xiaobao 老用户：CLI 默认从 `~/.openclaw/state/wangxiaobao/` fallback
+> 读 token + active-project，**零迁移开箱即用**。新写操作落到 `~/.xiaobao/`。
+
+## 14 个能力
+
+| 命令 | 对应 openclaw-xiaobao tool |
+| --- | --- |
+| `auth login [--force]` | `xiaobao_authorize` |
+| `auth whoami` | `xiaobao_whoami` |
+| `auth logout` | `xiaobao_logout` |
+| `project list [--keyword <kw>]` | `xiaobao_list_projects` |
+| `project use --tenant-id ... --project-id ...` | `xiaobao_switch_project` |
+| `consultant list` | `xiaobao_list_consultants` |
+| `audio list --from --to [--user-id] ...` | `xiaobao_list_audio` |
+| `audio text <audio-id>` | `xiaobao_get_audio_text` |
+| `customer list [--customer-name] [--portrait] ...` | `xiaobao_list_customers` |
+| `visit list [--customer-id] [--from] [--to]` | `xiaobao_list_visits` |
+| `focus list [--visit-ids] [--category] ...` | `xiaobao_list_customer_focus` |
+| `resistance list [...]` | `xiaobao_list_customer_resistance` |
+| `qa <prompt> [--thread-id <id>]` | `xiaobao_quick_qa` |
+| `api <METHOD> <path>` | `xiaobao_api` |
+
+## 通用 flags
+
+- `--format json|toon|table` —— 默认 `json`（agent 友好）；`table` 人类友好；`toon` 给 LLM 上下文用
+- `--api-base <url>` / `--auth-base <url>` —— 覆盖默认（也可 env `XIAOBAO_API_BASE` / `XIAOBAO_AUTH_BASE`）
+
+## 输出协议
+
+- stdout 写**结果**（`--format` 决定形态）
+- stderr 写**进度 / 日志 / 错误**（不污染 stdout）
+- 退出码：成功 0，业务错误（401/NO_ACTIVE_PROJECT/参数错）非 0
+- 错误对象同时打到 stdout 保持可 parse
+
+## state 存储
+
+| 文件 | 路径 | 权限 |
+| --- | --- | --- |
+| OAuth tokens | `~/.xiaobao/token.json` | 0600 |
+| Active project | `~/.xiaobao/active-project.json` | 0600 |
+| User config（可选） | `~/.xiaobao/config.json` | 0600 |
+
+读取顺序：`~/.xiaobao/` → fallback `~/.openclaw/state/wangxiaobao/`。写永远到 `~/.xiaobao/`。
+
+## skill 配套
+
+`skills/` 目录下 8 个 SKILL.md 跟 cli 同包发布，跟 openclaw-xiaobao 那边镜像，
+只是调用从 plugin tool invoke 改为 shell out `xiaobao-cli ...`。
+
+## License
+
+MIT

package/dist/api-Ccj5dLMo.mjs

@@ -0,0 +1,100 @@
+import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
+import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
+import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
+import { defineCommand } from "citty";
+//#region src/commands/api.ts
+/**
+* `xiaobao-cli api <METHOD> <path>` — generic authenticated wangxiaobao API call.
+*
+* Bearer token auto-injected, 401 → refresh + retry once. Use for endpoints
+* not yet wrapped as a dedicated command, or for one-off API exploration.
+*/
+const METHODS = new Set([
+	"GET",
+	"POST",
+	"PUT",
+	"PATCH",
+	"DELETE"
+]);
+/** Parse `k1=v1&k2=v2` or `k=v,k=v` into a Record. */
+function parseKV(input) {
+	if (!input) return void 0;
+	const out = {};
+	const pairs = input.includes("&") ? input.split("&") : input.split(",");
+	for (const pair of pairs) {
+		const trimmed = pair.trim();
+		if (!trimmed) continue;
+		const idx = trimmed.indexOf("=");
+		if (idx < 0) continue;
+		out[trimmed.slice(0, idx).trim()] = trimmed.slice(idx + 1).trim();
+	}
+	return Object.keys(out).length > 0 ? out : void 0;
+}
+var api_default = defineCommand({
+	meta: {
+		name: "api",
+		description: "generic authenticated API call — 自动注入 Bearer + 401 自动 refresh（探索/调试用）"
+	},
+	args: {
+		method: {
+			type: "positional",
+			required: true,
+			description: "GET / POST / PUT / PATCH / DELETE"
+		},
+		path: {
+			type: "positional",
+			required: true,
+			description: "API 相对路径，如 `/saas/v2/estate/tenant-and-estate/by-user-id`"
+		},
+		query: {
+			type: "string",
+			description: "查询串，`k1=v1&k2=v2` 或 `k=v,k=v`"
+		},
+		body: {
+			type: "string",
+			description: "JSON body（POST/PUT/PATCH 用，传 JSON 字符串）"
+		},
+		headers: {
+			type: "string",
+			description: "自定义 headers，`K1=V1&K2=V2` 或 `K=V,K=V`（如 X-Tenant-Id=...&X-Project-Id=...）"
+		},
+		"api-base": { type: "string" },
+		"auth-base": { type: "string" },
+		format: {
+			type: "string",
+			default: "json"
+		}
+	},
+	async run({ args }) {
+		try {
+			const method = String(args.method).toUpperCase();
+			if (!METHODS.has(method)) {
+				writeError({
+					code: "BAD_METHOD",
+					message: `unknown method: ${args.method}`
+				}, args.format);
+				process.exit(2);
+			}
+			const config = resolveConfig({
+				apiBase: args["api-base"],
+				authBase: args["auth-base"]
+			});
+			let body;
+			if (args.body) try {
+				body = JSON.parse(args.body);
+			} catch {
+				body = args.body;
+			}
+			writeResult(await xbApiFetch(config, method, String(args.path), {
+				query: parseKV(args.query),
+				body,
+				headers: parseKV(args.headers)
+			}), args.format);
+		} catch (err) {
+			writeError(err, args.format);
+			process.exit(1);
+		}
+	}
+});
+//#endregion
+export { api_default as default };

package/dist/api-client-DwySN6x-.mjs

@@ -0,0 +1,75 @@
+import { r as refreshToken } from "./device-flow-BgsZipYA.mjs";
+import { a as writeToken, i as readToken, r as isAccessTokenValid } from "./token-store-CHZ_rJQk.mjs";
+//#region src/core/api-client.ts
+/**
+* HTTP client for wangxiaobao open API endpoints.
+*
+* Port of openclaw-xiaobao/src/core/api-client.ts. Difference: no
+* workspaceDir param (CLI has a single global token, not per-agent
+* isolation).
+*
+* Adds `Authorization: Bearer <accessToken>` automatically and retries once
+* with a refreshed token on HTTP 401.
+*/
+var NotAuthenticatedError = class extends Error {
+	code = "NOT_AUTHENTICATED";
+	constructor() {
+		super("No valid token cached. Run `xiaobao-cli auth login` first.");
+	}
+};
+async function ensureAccessToken(config) {
+	const cached = await readToken();
+	if (isAccessTokenValid(cached)) return cached.access_token;
+	if (cached?.refresh_token) return (await writeToken(await refreshToken(config, cached.refresh_token))).access_token;
+	throw new NotAuthenticatedError();
+}
+function buildUrl(apiBase, path, query) {
+	const url = new URL(path, apiBase);
+	if (query) for (const [k, v] of Object.entries(query)) url.searchParams.set(k, v);
+	return url.toString();
+}
+async function doFetch(url, method, token, opts) {
+	const headers = {
+		Accept: "application/json",
+		Authorization: `Bearer ${token}`,
+		...opts.headers ?? {}
+	};
+	let body;
+	if (opts.body != null && method !== "GET" && method !== "DELETE") if (typeof opts.body === "string") body = opts.body;
+	else {
+		body = JSON.stringify(opts.body);
+		if (!headers["Content-Type"]) headers["Content-Type"] = "application/json";
+	}
+	const resp = await fetch(url, {
+		method,
+		headers,
+		body,
+		signal: AbortSignal.timeout(opts.timeoutMs ?? 3e4)
+	});
+	return {
+		resp,
+		parsed: (resp.headers.get("content-type") || "").includes("application/json") ? await resp.json() : await resp.text()
+	};
+}
+/**
+* Make an authenticated request to the wangxiaobao API. Refreshes on 401 once.
+*/
+async function xbApiFetch(config, method, path, opts = {}) {
+	const url = buildUrl(config.apiBase, path, opts.query);
+	let token = await ensureAccessToken(config);
+	let { resp, parsed } = await doFetch(url, method, token, opts);
+	if (resp.status === 401) {
+		const cached = await readToken();
+		if (cached?.refresh_token) {
+			token = (await writeToken(await refreshToken(config, cached.refresh_token))).access_token;
+			({resp, parsed} = await doFetch(url, method, token, opts));
+		}
+	}
+	return {
+		status: resp.status,
+		ok: resp.ok,
+		data: parsed
+	};
+}
+//#endregion
+export { xbApiFetch as t };

package/dist/audio-VmDQMq59.mjs

@@ -0,0 +1,14 @@
+import { defineCommand } from "citty";
+//#region src/commands/audio/index.ts
+var audio_default = defineCommand({
+	meta: {
+		name: "audio",
+		description: "录音元数据分页 / 单条文本查询"
+	},
+	subCommands: {
+		list: () => import("./list--o5Q_PI8.mjs").then((m) => m.default),
+		text: () => import("./text-BLH4R3xv.mjs").then((m) => m.default)
+	}
+});
+//#endregion
+export { audio_default as default };

package/dist/auth-ChHvqjCS.mjs

@@ -0,0 +1,15 @@
+import { defineCommand } from "citty";
+//#region src/commands/auth/index.ts
+var auth_default = defineCommand({
+	meta: {
+		name: "auth",
+		description: "OAuth 登录 / 身份查询 / 登出（device flow）"
+	},
+	subCommands: {
+		login: () => import("./login-BwkrByMm.mjs").then((m) => m.default),
+		whoami: () => import("./whoami-DwTHvI4B.mjs").then((m) => m.default),
+		logout: () => import("./logout-BJm9pjje.mjs").then((m) => m.default)
+	}
+});
+//#endregion
+export { auth_default as default };

package/dist/cli.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/cli.mjs

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import { defineCommand, runMain } from "citty";
+//#region src/cli.ts
+/**
+* xiaobao-cli entrypoint.
+*
+* 14 capabilities mapped 1:1 from openclaw-xiaobao plugin tools to CLI
+* subcommands. See README for full command map.
+*/
+runMain(defineCommand({
+	meta: {
+		name: "xiaobao-cli",
+		version: "0.1.0",
+		description: "旺小宝 CLI — host-agnostic 14 tools (openclaw-xiaobao plugin 的 CLI 等价物)"
+	},
+	subCommands: {
+		auth: () => import("./auth-ChHvqjCS.mjs").then((m) => m.default),
+		project: () => import("./project-Ba05YzJ5.mjs").then((m) => m.default),
+		consultant: () => import("./consultant-ABFTL_jx.mjs").then((m) => m.default),
+		audio: () => import("./audio-VmDQMq59.mjs").then((m) => m.default),
+		customer: () => import("./customer-DtSnQqy_.mjs").then((m) => m.default),
+		visit: () => import("./visit-Ct3Vea8I.mjs").then((m) => m.default),
+		focus: () => import("./focus-BDYuP2vZ.mjs").then((m) => m.default),
+		resistance: () => import("./resistance-Cf7zsdB3.mjs").then((m) => m.default),
+		qa: () => import("./qa-D-B9FV9W.mjs").then((m) => m.default),
+		api: () => import("./api-Ccj5dLMo.mjs").then((m) => m.default)
+	}
+}));
+//#endregion
+export {};

package/dist/consultant-ABFTL_jx.mjs

@@ -0,0 +1,11 @@
+import { defineCommand } from "citty";
+//#region src/commands/consultant/index.ts
+var consultant_default = defineCommand({
+	meta: {
+		name: "consultant",
+		description: "查询有权限的置业顾问列表"
+	},
+	subCommands: { list: () => import("./list-iwd9cH1I.mjs").then((m) => m.default) }
+});
+//#endregion
+export { consultant_default as default };

package/dist/customer-DtSnQqy_.mjs

@@ -0,0 +1,11 @@
+import { defineCommand } from "citty";
+//#region src/commands/customer/index.ts
+var customer_default = defineCommand({
+	meta: {
+		name: "customer",
+		description: "客户画像分页查询"
+	},
+	subCommands: { list: () => import("./list-DW6KAAaC.mjs").then((m) => m.default) }
+});
+//#endregion
+export { customer_default as default };

package/dist/device-flow-BgsZipYA.mjs

@@ -0,0 +1,166 @@
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+//#region src/core/config.ts
+/**
+* CLI configuration resolution — flat, host-agnostic version of
+* openclaw-xiaobao/src/core/config.ts.
+*
+* Sources (precedence high → low):
+*   1. CLI flags `--api-base`, `--auth-base` (passed in via the `overrides` arg)
+*   2. Env vars `XIAOBAO_API_BASE`, `XIAOBAO_AUTH_BASE`, `XIAOBAO_SCOPES`
+*   3. ~/.xiaobao/config.json { authBase?, apiBase?, scopes? } if present
+*   4. Hardcoded defaults (same phoenix endpoints + client_id as plugin)
+*
+* client_id / client_secret are hardcoded — they're app-level secrets owned
+* by the publisher (xiaobao-cli), not per-user. Identical to the plugin's
+* `open-ai-gateway` RegisteredClient seeded by phoenix DevClientBootstrap.
+*/
+const DEFAULT_AUTH_BASE = "https://admin.wangxiaobao.com";
+const DEFAULT_API_BASE = "https://open-ai.wangxiaobao.com";
+const DEFAULT_SCOPES = "openid profile read write";
+const DEFAULT_CLIENT_ID = "open-ai-gateway";
+const DEFAULT_CLIENT_SECRET = "open-ai-gateway-secret";
+const USER_CONFIG_FILE = join(homedir(), ".xiaobao", "config.json");
+function loadUserConfig() {
+	try {
+		return JSON.parse(readFileSync(USER_CONFIG_FILE, "utf8"));
+	} catch {
+		return {};
+	}
+}
+function resolveConfig(overrides = {}) {
+	const user = loadUserConfig();
+	return {
+		clientId: DEFAULT_CLIENT_ID,
+		clientSecret: DEFAULT_CLIENT_SECRET,
+		authBase: overrides.authBase || process.env.XIAOBAO_AUTH_BASE || user.authBase || DEFAULT_AUTH_BASE,
+		apiBase: overrides.apiBase || process.env.XIAOBAO_API_BASE || user.apiBase || DEFAULT_API_BASE,
+		scopes: overrides.scopes || process.env.XIAOBAO_SCOPES || user.scopes || DEFAULT_SCOPES
+	};
+}
+function basicAuth(clientId, clientSecret) {
+	return Buffer.from(`${clientId}:${clientSecret}`).toString("base64");
+}
+//#endregion
+//#region src/core/device-flow.ts
+/**
+* OAuth 2.0 Device Authorization Grant (RFC 8628) client.
+*
+* Copied verbatim from openclaw-xiaobao/src/core/device-flow.ts — this module
+* is host-agnostic (no OpenClaw imports), so it ports as-is.
+*/
+const POLL_HARD_DEADLINE_MS = 600 * 1e3;
+function authHeaders(config) {
+	return {
+		Authorization: `Basic ${basicAuth(config.clientId, config.clientSecret)}`,
+		"Content-Type": "application/x-www-form-urlencoded",
+		Accept: "application/json"
+	};
+}
+async function postForm(url, headers, body) {
+	const resp = await fetch(url, {
+		method: "POST",
+		headers,
+		body: body.toString()
+	});
+	const parsed = (resp.headers.get("content-type") || "").includes("application/json") ? await resp.json() : await resp.text();
+	if (!resp.ok) throw {
+		code: "HTTP_ERROR",
+		status: resp.status,
+		body: parsed,
+		url
+	};
+	return parsed;
+}
+/** RFC 8628 §3.1 */
+async function initiateDeviceAuthorization(config) {
+	const data = await postForm(`${config.authBase}/oauth2/device_authorization`, authHeaders(config), new URLSearchParams({ scope: config.scopes }));
+	for (const f of [
+		"device_code",
+		"user_code",
+		"verification_uri",
+		"expires_in"
+	]) if (data[f] == null) throw {
+		code: "DEVICE_AUTH_BAD_RESPONSE",
+		message: `Missing field '${f}' in device_authorization response`,
+		body: data
+	};
+	return data;
+}
+/** RFC 8628 §3.4 — poll the token endpoint until success / denial / expiry. */
+async function pollForToken(config, deviceCode, intervalSeconds, expiresInSeconds) {
+	const serverDeadline = Date.now() + expiresInSeconds * 1e3;
+	const hardDeadline = Date.now() + POLL_HARD_DEADLINE_MS;
+	let pollIntervalMs = Math.max(1, intervalSeconds) * 1e3;
+	while (Date.now() < Math.min(serverDeadline, hardDeadline)) {
+		await sleep(pollIntervalMs);
+		const url = `${config.authBase}/oauth2/token`;
+		const body = new URLSearchParams({
+			grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+			device_code: deviceCode
+		});
+		const resp = await fetch(url, {
+			method: "POST",
+			headers: authHeaders(config),
+			body: body.toString()
+		});
+		const parsed = await resp.json();
+		if (resp.ok) return parsed;
+		const err = parsed.error;
+		if (err === "authorization_pending") continue;
+		if (err === "slow_down") {
+			pollIntervalMs += 5e3;
+			continue;
+		}
+		if (err === "access_denied") throw {
+			code: "ACCESS_DENIED",
+			message: "User declined authorization",
+			body: parsed
+		};
+		if (err === "expired_token") throw {
+			code: "EXPIRED_TOKEN",
+			message: "Device code expired before user approved",
+			body: parsed
+		};
+		throw {
+			code: "TOKEN_POLL_FAILED",
+			status: resp.status,
+			body: parsed
+		};
+	}
+	throw {
+		code: "TIMEOUT",
+		message: "Device authorization expired before completion",
+		expires_in: expiresInSeconds
+	};
+}
+/** RFC 6749 §6 */
+async function refreshToken(config, refresh) {
+	const data = await postForm(`${config.authBase}/oauth2/token`, authHeaders(config), new URLSearchParams({
+		grant_type: "refresh_token",
+		refresh_token: refresh
+	}));
+	if (!data.refresh_token) data.refresh_token = refresh;
+	return data;
+}
+/** RFC 7009 — best-effort refresh-token revocation. */
+async function revokeRefreshToken(config, refresh) {
+	try {
+		return (await fetch(`${config.authBase}/oauth2/revoke`, {
+			method: "POST",
+			headers: authHeaders(config),
+			body: new URLSearchParams({
+				token: refresh,
+				token_type_hint: "refresh_token"
+			}).toString()
+		})).ok;
+	} catch {
+		return false;
+	}
+}
+function sleep(ms) {
+	return new Promise((r) => setTimeout(r, ms));
+}
+//#endregion
+export { resolveConfig as a, revokeRefreshToken as i, pollForToken as n, refreshToken as r, initiateDeviceAuthorization as t };

package/dist/focus-BDYuP2vZ.mjs

@@ -0,0 +1,11 @@
+import { defineCommand } from "citty";
+//#region src/commands/focus/index.ts
+var focus_default = defineCommand({
+	meta: {
+		name: "focus",
+		description: "客户关注点标签分页查询"
+	},
+	subCommands: { list: () => import("./list-CVKSGNu4.mjs").then((m) => m.default) }
+});
+//#endregion
+export { focus_default as default };