@puyinkai/xiaobao-cli 0.1.0 → 0.1.8

package/dist/{api-Ccj5dLMo.mjs → api-CX99_4K7.mjs}

@@ -1,6 +1,8 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { t as loadActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/api.ts
 /**
@@ -56,7 +58,12 @@ var api_default = defineCommand({
 		},
 		headers: {
 			type: "string",
-			description: "自定义 headers，`K1=V1&K2=V2` 或 `K=V,K=V`（如 X-Tenant-Id=...&X-Project-Id=...）"
+			description: "自定义 headers，`K1=V1&K2=V2` 或 `K=V,K=V`。与默认注入的 tenant/project headers 合并（同名 key 用户传入优先）"
+		},
+		"default-headers": {
+			type: "boolean",
+			default: true,
+			description: "默认按当前激活项目自动注入 X-Tenant-Id / X-Project-Id headers（调 /ai-open/* 开箱即用）；`--no-default-headers` 关闭注入"
 		},
 		"api-base": { type: "string" },
 		"auth-base": { type: "string" },
@@ -85,10 +92,20 @@ var api_default = defineCommand({
 			} catch {
 				body = args.body;
 			}
+			let mergedHeaders;
+			const userHeaders = parseKV(args.headers);
+			if (args["default-headers"]) {
+				const active = await loadActiveProject();
+				if (active) mergedHeaders = {
+					...tenantProjectHeaders(active),
+					...userHeaders ?? {}
+				};
+			}
+			mergedHeaders = mergedHeaders ?? userHeaders;
 			writeResult(await xbApiFetch(config, method, String(args.path), {
 				query: parseKV(args.query),
 				body,
-				headers: parseKV(args.headers)
+				headers: mergedHeaders
 			}), args.format);
 		} catch (err) {
 			writeError(err, args.format);

package/dist/{api-client-DwySN6x-.mjs → api-client-zDBFgk0y.mjs}

@@ -1,5 +1,5 @@
-import { r as refreshToken } from "./device-flow-BgsZipYA.mjs";
-import { a as writeToken, i as readToken, r as isAccessTokenValid } from "./token-store-CHZ_rJQk.mjs";
+import { r as refreshToken } from "./device-flow-D6JVcEap.mjs";
+import { a as isAccessTokenValid, l as writeToken, s as readToken } from "./token-store-CXizLE2_.mjs";
 //#region src/core/api-client.ts
 /**
 * HTTP client for wangxiaobao open API endpoints.
@@ -13,8 +13,10 @@ import { a as writeToken, i as readToken, r as isAccessTokenValid } from "./toke
 */
 var NotAuthenticatedError = class extends Error {
 	code = "NOT_AUTHENTICATED";
+	hint = "运行 `xiaobao-cli auth login` 完成 OAuth device flow 登录。";
 	constructor() {
-		super("No valid token cached. Run `xiaobao-cli auth login` first.");
+		super("当前未登录或 token 已过期");
+		this.name = "NotAuthenticatedError";
 	}
 };
 async function ensureAccessToken(config) {

package/dist/{audio-VmDQMq59.mjs → audio-ShfvRomP.mjs}

@@ -6,8 +6,8 @@ var audio_default = defineCommand({
 		description: "录音元数据分页 / 单条文本查询"
 	},
 	subCommands: {
-		list: () => import("./list--o5Q_PI8.mjs").then((m) => m.default),
-		text: () => import("./text-BLH4R3xv.mjs").then((m) => m.default)
+		list: () => import("./list-DCcCS6LM.mjs").then((m) => m.default),
+		text: () => import("./text-C3jhdPoe.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/{auth-ChHvqjCS.mjs → auth-DpK81Vp5.mjs}

@@ -6,9 +6,9 @@ var auth_default = defineCommand({
 		description: "OAuth 登录 / 身份查询 / 登出（device flow）"
 	},
 	subCommands: {
-		login: () => import("./login-BwkrByMm.mjs").then((m) => m.default),
-		whoami: () => import("./whoami-DwTHvI4B.mjs").then((m) => m.default),
-		logout: () => import("./logout-BJm9pjje.mjs").then((m) => m.default)
+		login: () => import("./login-CUUcjWPd.mjs").then((m) => m.default),
+		whoami: () => import("./whoami-CZVez-rm.mjs").then((m) => m.default),
+		logout: () => import("./logout-DP7REhCd.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/cli.mjs

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
 import { defineCommand, runMain } from "citty";
 //#region src/cli.ts
 /**
@@ -7,23 +10,24 @@ import { defineCommand, runMain } from "citty";
 * 14 capabilities mapped 1:1 from openclaw-xiaobao plugin tools to CLI
 * subcommands. See README for full command map.
 */
+const pkgPath = join(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
 runMain(defineCommand({
 	meta: {
 		name: "xiaobao-cli",
-		version: "0.1.0",
+		version: JSON.parse(readFileSync(pkgPath, "utf8")).version,
 		description: "旺小宝 CLI — host-agnostic 14 tools (openclaw-xiaobao plugin 的 CLI 等价物)"
 	},
 	subCommands: {
-		auth: () => import("./auth-ChHvqjCS.mjs").then((m) => m.default),
-		project: () => import("./project-Ba05YzJ5.mjs").then((m) => m.default),
-		consultant: () => import("./consultant-ABFTL_jx.mjs").then((m) => m.default),
-		audio: () => import("./audio-VmDQMq59.mjs").then((m) => m.default),
-		customer: () => import("./customer-DtSnQqy_.mjs").then((m) => m.default),
-		visit: () => import("./visit-Ct3Vea8I.mjs").then((m) => m.default),
-		focus: () => import("./focus-BDYuP2vZ.mjs").then((m) => m.default),
-		resistance: () => import("./resistance-Cf7zsdB3.mjs").then((m) => m.default),
-		qa: () => import("./qa-D-B9FV9W.mjs").then((m) => m.default),
-		api: () => import("./api-Ccj5dLMo.mjs").then((m) => m.default)
+		auth: () => import("./auth-DpK81Vp5.mjs").then((m) => m.default),
+		project: () => import("./project-BuQQewOs.mjs").then((m) => m.default),
+		consultant: () => import("./consultant-CS9B42d3.mjs").then((m) => m.default),
+		audio: () => import("./audio-ShfvRomP.mjs").then((m) => m.default),
+		customer: () => import("./customer-B1cxRbJ9.mjs").then((m) => m.default),
+		visit: () => import("./visit-CX0Mc1n6.mjs").then((m) => m.default),
+		focus: () => import("./focus-DfNPPhm5.mjs").then((m) => m.default),
+		resistance: () => import("./resistance-DsE-Ha6Y.mjs").then((m) => m.default),
+		qa: () => import("./qa-CKsKiQIm.mjs").then((m) => m.default),
+		api: () => import("./api-CX99_4K7.mjs").then((m) => m.default)
 	}
 }));
 //#endregion

package/dist/{consultant-ABFTL_jx.mjs → consultant-CS9B42d3.mjs}

@@ -5,7 +5,7 @@ var consultant_default = defineCommand({
 		name: "consultant",
 		description: "查询有权限的置业顾问列表"
 	},
-	subCommands: { list: () => import("./list-iwd9cH1I.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-Cu6WzPpA.mjs").then((m) => m.default) }
 });
 //#endregion
 export { consultant_default as default };

package/dist/current-CfDExInT.mjs

@@ -0,0 +1,33 @@
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
+import { defineCommand } from "citty";
+//#region src/commands/project/current.ts
+/**
+* `xiaobao-cli project current` — show the currently active project.
+*
+* Reads ~/.xiaobao/active-project.json (or fallback
+* ~/.openclaw/state/wangxiaobao/active-project.json) and prints the
+* tenant/project record. If none is set, errors out with NO_ACTIVE_PROJECT
+* + hint (same error shape as other commands that need an active project,
+* so agents handle it uniformly).
+*/
+var current_default = defineCommand({
+	meta: {
+		name: "current",
+		description: "显示当前激活的租户/项目"
+	},
+	args: { format: {
+		type: "string",
+		default: "json"
+	} },
+	async run({ args }) {
+		try {
+			writeResult(await requireActiveProject(), args.format);
+		} catch (err) {
+			writeError(err, args.format);
+			process.exit(1);
+		}
+	}
+});
+//#endregion
+export { current_default as default };

package/dist/{customer-DtSnQqy_.mjs → customer-B1cxRbJ9.mjs}

@@ -5,7 +5,7 @@ var customer_default = defineCommand({
 		name: "customer",
 		description: "客户画像分页查询"
 	},
-	subCommands: { list: () => import("./list-DW6KAAaC.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-CnlFIFiY.mjs").then((m) => m.default) }
 });
 //#endregion
 export { customer_default as default };

package/dist/{focus-BDYuP2vZ.mjs → focus-DfNPPhm5.mjs}

@@ -5,7 +5,7 @@ var focus_default = defineCommand({
 		name: "focus",
 		description: "客户关注点标签分页查询"
 	},
-	subCommands: { list: () => import("./list-CVKSGNu4.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-D56gEqiB.mjs").then((m) => m.default) }
 });
 //#endregion
 export { focus_default as default };

package/dist/{format-BZvv8lYc.mjs → format-yjmxrbNm.mjs}

@@ -573,13 +573,16 @@ function writeResult(data, format = "json") {
 	const text = normalize(format) === "toon" ? encode(data) : JSON.stringify(data, null, 2);
 	process.stdout.write(text + "\n");
 }
-/** Print an error structurally to stdout (still parseable) and a hint to stderr. */
+/** Print an error structurally to stdout (still parseable) and human hint to stderr. */
 function writeError(error, format = "json") {
 	const payload = serializeError(error);
 	const text = normalize(format) === "toon" ? encode(payload) : JSON.stringify(payload, null, 2);
 	process.stdout.write(text + "\n");
-	const hint = payload.message;
-	if (hint) process.stderr.write(`error: ${hint}\n`);
+	const err = payload;
+	const errCode = err.error;
+	const msg = err.message;
+	if (msg) process.stderr.write(`error: ${errCode ? `[${errCode}] ` : ""}${msg}\n`);
+	if (err.hint) process.stderr.write(`hint:  ${err.hint}\n`);
 }
 function normalize(f) {
 	if (f === "toon") return "toon";
@@ -587,10 +590,15 @@ function normalize(f) {
 	return "json";
 }
 function serializeError(error) {
-	if (error instanceof Error) return {
-		error: error.name,
-		message: error.message
-	};
+	if (error instanceof Error) {
+		const codeAttr = error.code;
+		const hint = error.hint;
+		return {
+			error: codeAttr ?? (error.name !== "Error" ? error.name : "Error"),
+			message: error.message,
+			...hint ? { hint } : {}
+		};
+	}
 	if (error && typeof error === "object") {
 		const obj = error;
 		const errorKey = obj.code ?? obj.error ?? "UNKNOWN";

package/dist/{list-Bkyi95YO.mjs → list-CD08BRLk.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
-import { t as requireActiveProject } from "./project-store-Bz5kf-EI.mjs";
-import { r as toLocalDateTime } from "./util-DgwkUfV9.mjs";
-import { t as tenantProjectHeaders } from "./headers-D79npewp.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
+import { r as toLocalDateTime } from "./util-CaPQBlNa.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/visit/list.ts
 /**

package/dist/{list-CzB9_Jho.mjs → list-CKlx8YuL.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
-import { t as requireActiveProject } from "./project-store-Bz5kf-EI.mjs";
-import { r as toLocalDateTime, t as csvToArray } from "./util-DgwkUfV9.mjs";
-import { t as tenantProjectHeaders } from "./headers-D79npewp.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
+import { r as toLocalDateTime, t as csvToArray } from "./util-CaPQBlNa.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/resistance/list.ts
 /**

package/dist/{list-DW6KAAaC.mjs → list-CnlFIFiY.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
-import { t as requireActiveProject } from "./project-store-Bz5kf-EI.mjs";
-import { r as toLocalDateTime } from "./util-DgwkUfV9.mjs";
-import { t as tenantProjectHeaders } from "./headers-D79npewp.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
+import { r as toLocalDateTime } from "./util-CaPQBlNa.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/customer/list.ts
 /**

package/dist/{list-iwd9cH1I.mjs → list-Cu6WzPpA.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
-import { t as requireActiveProject } from "./project-store-Bz5kf-EI.mjs";
-import { t as tenantProjectHeaders } from "./headers-D79npewp.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/consultant/list.ts
 /**

package/dist/{list-CVKSGNu4.mjs → list-D56gEqiB.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
-import { t as requireActiveProject } from "./project-store-Bz5kf-EI.mjs";
-import { r as toLocalDateTime, t as csvToArray } from "./util-DgwkUfV9.mjs";
-import { t as tenantProjectHeaders } from "./headers-D79npewp.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
+import { r as toLocalDateTime, t as csvToArray } from "./util-CaPQBlNa.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/focus/list.ts
 /**

package/dist/{list--o5Q_PI8.mjs → list-DCcCS6LM.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
-import { t as requireActiveProject } from "./project-store-Bz5kf-EI.mjs";
-import { n as mergeUserIds, r as toLocalDateTime, t as csvToArray } from "./util-DgwkUfV9.mjs";
-import { t as tenantProjectHeaders } from "./headers-D79npewp.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
+import { n as mergeUserIds, r as toLocalDateTime, t as csvToArray } from "./util-CaPQBlNa.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/audio/list.ts
 /**

package/dist/{list-CGACp0y-.mjs → list-DI1OD95x.mjs}

@@ -1,6 +1,6 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/project/list.ts
 /**

package/dist/login-CUUcjWPd.mjs

@@ -0,0 +1,156 @@
+import { a as resolveConfig, n as pollForToken, r as refreshToken, t as initiateDeviceAuthorization } from "./device-flow-D6JVcEap.mjs";
+import { a as isAccessTokenValid, c as writePendingAuth, l as writeToken, n as clearPendingAuth, o as readPendingAuth, r as clearToken, s as readToken, t as NoPendingAuthError } from "./token-store-CXizLE2_.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
+import { defineCommand } from "citty";
+//#region src/commands/auth/login.ts
+/**
+* `xiaobao-cli auth login` — OAuth 2.0 Device Authorization Grant.
+*
+* Three modes:
+*
+*   1. Default (blocking)  — cache hit / refresh / else initiate the device
+*      flow and synchronously poll until success/denial/expiry. Best for a
+*      human running it directly in a terminal.
+*
+*   2. `--no-wait` (non-blocking, agent-friendly split-flow step 1) — cache
+*      hit / refresh as usual; otherwise initiate the device flow, persist
+*      the device_code locally (~/.xiaobao/pending-auth.json, mode 0600) and
+*      return immediately with the verification URL — WITHOUT polling and
+*      WITHOUT exposing the credential-grade device_code on stdout. The agent
+*      forwards the URL to the user, ends its turn, then runs step 2.
+*
+*   3. `--resume` (split-flow step 2) — read the locally-saved device_code
+*      and exchange it for a token; no argument needed. `--device-code <code>`
+*      remains as an explicit escape hatch and takes precedence when given.
+*/
+var login_default = defineCommand({
+	meta: {
+		name: "login",
+		description: "走 OAuth device flow 登录（--no-wait 非阻塞发起 / --resume 完成）"
+	},
+	args: {
+		force: {
+			type: "boolean",
+			description: "强制清除缓存并重新发起设备授权流程"
+		},
+		wait: {
+			type: "boolean",
+			default: true,
+			description: "默认阻塞轮询直到授权完成。`--no-wait` 则发起 device flow 后立即返回 verification_uri 不轮询（device_code 安全存本地，不进 stdout）；用户授权后 再用 `auth login --resume` 完成换 token。"
+		},
+		resume: {
+			type: "boolean",
+			description: "split-flow 第二步：用上次 `--no-wait` 本地保存的 device_code 换 token，用户在浏览器授权后跑，无需手动传 device_code。"
+		},
+		"device-code": {
+			type: "string",
+			description: "（高级 escape hatch）显式传入 device_code 换 token；一般用 `--resume` 即可，CLI 会自动读取本地保存的 device_code。"
+		},
+		"api-base": {
+			type: "string",
+			description: "覆盖 API base URL"
+		},
+		"auth-base": {
+			type: "string",
+			description: "覆盖 auth base URL"
+		},
+		format: {
+			type: "string",
+			default: "json"
+		}
+	},
+	async run({ args }) {
+		const config = resolveConfig({
+			apiBase: args["api-base"],
+			authBase: args["auth-base"]
+		});
+		const fmt = args.format;
+		try {
+			if (args.resume || args["device-code"]) {
+				let deviceCode;
+				let remainingSeconds = 300;
+				if (args["device-code"]) deviceCode = String(args["device-code"]);
+				else {
+					const pending = await readPendingAuth();
+					if (!pending) throw new NoPendingAuthError();
+					if (pending.expires_at <= Date.now()) {
+						await clearPendingAuth();
+						throw new NoPendingAuthError("设备授权已过期，device_code 失效");
+					}
+					deviceCode = pending.device_code;
+					remainingSeconds = Math.max(1, Math.ceil((pending.expires_at - Date.now()) / 1e3));
+				}
+				const saved = await writeToken(await pollForToken(config, deviceCode, 2, remainingSeconds));
+				await clearPendingAuth();
+				writeResult({
+					source: "device-flow",
+					expires_at: saved.expires_at,
+					scope: saved.scope,
+					message: "登录成功，可以正常使用别的命令了"
+				}, fmt);
+				return;
+			}
+			if (!args.force) {
+				const cached = await readToken();
+				if (isAccessTokenValid(cached)) {
+					writeResult({
+						source: "cache",
+						expires_at: cached.expires_at,
+						scope: cached.scope
+					}, fmt);
+					return;
+				}
+				if (cached?.refresh_token) try {
+					const saved = await writeToken(await refreshToken(config, cached.refresh_token));
+					writeResult({
+						source: "refresh",
+						expires_at: saved.expires_at,
+						scope: saved.scope
+					}, fmt);
+					return;
+				} catch {
+					await clearToken();
+				}
+			} else await clearToken();
+			const init = await initiateDeviceAuthorization(config);
+			const verificationUri = init.verification_uri_complete || init.verification_uri;
+			const expiresMinutes = Math.max(1, Math.round(init.expires_in / 60));
+			const interval = init.interval ?? 5;
+			if (!args.wait) {
+				await writePendingAuth({
+					device_code: init.device_code,
+					user_code: init.user_code,
+					verification_uri: verificationUri,
+					interval,
+					expires_at: Date.now() + init.expires_in * 1e3
+				});
+				writeResult({
+					awaiting_authorization: true,
+					verification_uri: verificationUri,
+					user_code: init.user_code,
+					expires_in: init.expires_in,
+					interval,
+					message: "请在浏览器打开 verification_uri 完成授权，然后跑 `xiaobao-cli auth login --resume` 完成登录。device_code 已安全保存在本地，无需手动传。"
+				}, fmt);
+				return;
+			}
+			process.stderr.write(`
+请在浏览器中打开以下链接完成登录并授权访问你的旺小宝账号:
+\n  🔗 ${verificationUri}\n\n  设备验证码: ${init.user_code}\n  有效期约 ${expiresMinutes} 分钟\n\n等待你在浏览器中确认 ...
+`);
+			const saved = await writeToken(await pollForToken(config, init.device_code, interval, init.expires_in));
+			await clearPendingAuth();
+			writeResult({
+				source: "device-flow",
+				expires_at: saved.expires_at,
+				scope: saved.scope,
+				message: "登录成功，token 已缓存到 ~/.xiaobao/token.json"
+			}, fmt);
+		} catch (err) {
+			writeError(err, fmt);
+			process.exit(1);
+		}
+	}
+});
+//#endregion
+export { login_default as default };

package/dist/{logout-BJm9pjje.mjs → logout-DP7REhCd.mjs}

@@ -1,13 +1,15 @@
-import { a as resolveConfig, i as revokeRefreshToken } from "./device-flow-BgsZipYA.mjs";
-import { i as readToken, t as clearToken } from "./token-store-CHZ_rJQk.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
+import { a as resolveConfig, i as revokeRefreshToken } from "./device-flow-D6JVcEap.mjs";
+import { n as clearPendingAuth, r as clearToken, s as readToken } from "./token-store-CXizLE2_.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/auth/logout.ts
 /**
 * `xiaobao-cli auth logout` — clear local token + best-effort revoke remote
-* refresh_token. Only touches the primary path (~/.xiaobao/token.json) —
-* legacy ~/.openclaw/state/wangxiaobao/token.json is left intact so this
-* doesn't silently nuke the plugin's session.
+* refresh_token. Clears BOTH ~/.xiaobao/token.json and the legacy fallback
+* ~/.openclaw/state/wangxiaobao/token.json — otherwise `auth whoami` would
+* read the legacy file via fallback and report logged_in true even after
+* logout. The refresh_token is revoked server-side first so the legacy file
+* is already a dead token by the time it's unlinked.
 */
 var logout_default = defineCommand({
 	meta: {
@@ -31,10 +33,11 @@ var logout_default = defineCommand({
 			let revoked = false;
 			if (cached?.refresh_token) revoked = await revokeRefreshToken(config, cached.refresh_token);
 			await clearToken();
+			await clearPendingAuth();
 			writeResult({
 				message: "Logged out",
 				remote_revoked: revoked,
-				note: "Only ~/.xiaobao/token.json was cleared. Legacy ~/.openclaw/state/wangxiaobao/token.json (if present) was left intact."
+				note: "Cleared ~/.xiaobao/token.json and legacy ~/.openclaw/state/wangxiaobao/token.json (if existed)."
 			}, args.format);
 		} catch (err) {
 			try {

package/dist/{project-Ba05YzJ5.mjs → project-BuQQewOs.mjs}

@@ -6,8 +6,9 @@ var project_default = defineCommand({
 		description: "查询 / 切换激活项目"
 	},
 	subCommands: {
-		list: () => import("./list-CGACp0y-.mjs").then((m) => m.default),
-		use: () => import("./use-DV9Ii3Tn.mjs").then((m) => m.default)
+		list: () => import("./list-DI1OD95x.mjs").then((m) => m.default),
+		use: () => import("./use-BZES4FZC.mjs").then((m) => m.default),
+		current: () => import("./current-CfDExInT.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/{project-store-Bz5kf-EI.mjs → project-store-CKVJa54T.mjs}

@@ -1,6 +1,6 @@
 import { existsSync } from "node:fs";
-import { homedir } from "node:os";
 import { join } from "node:path";
+import { homedir } from "node:os";
 import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
 //#region src/core/project-store.ts
 /**
@@ -48,8 +48,9 @@ async function saveActiveProject(p) {
 }
 var NoActiveProjectError = class extends Error {
 	code = "NO_ACTIVE_PROJECT";
+	hint = "先用 `xiaobao-cli project list [--keyword <kw>]` 查看可选项目，再用 `xiaobao-cli project use --tenant-id ... --tenant-name ... --project-id ... --project-name ...` 激活。";
 	constructor() {
-		super("当前未设置激活项目。请先运行 `xiaobao-cli project list` 查看可选项目，再用 `xiaobao-cli project use --tenant-id ... --project-id ...` 激活。");
+		super("当前未设置激活项目");
 		this.name = "NoActiveProjectError";
 	}
 };
@@ -59,4 +60,4 @@ async function requireActiveProject() {
 	return p;
 }
 //#endregion
-export { saveActiveProject as n, requireActiveProject as t };
+export { requireActiveProject as n, saveActiveProject as r, loadActiveProject as t };

package/dist/{qa-D-B9FV9W.mjs → qa-CKsKiQIm.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
-import { t as requireActiveProject } from "./project-store-Bz5kf-EI.mjs";
-import { t as tenantProjectHeaders } from "./headers-D79npewp.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/qa.ts
 /**

package/dist/{resistance-Cf7zsdB3.mjs → resistance-DsE-Ha6Y.mjs}

@@ -5,7 +5,7 @@ var resistance_default = defineCommand({
 		name: "resistance",
 		description: "客户抗性点标签分页查询"
 	},
-	subCommands: { list: () => import("./list-CzB9_Jho.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-CKlx8YuL.mjs").then((m) => m.default) }
 });
 //#endregion
 export { resistance_default as default };

package/dist/{text-BLH4R3xv.mjs → text-C3jhdPoe.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-BgsZipYA.mjs";
-import { t as xbApiFetch } from "./api-client-DwySN6x-.mjs";
-import { n as writeResult, t as writeError } from "./format-BZvv8lYc.mjs";
-import { t as requireActiveProject } from "./project-store-Bz5kf-EI.mjs";
-import { t as tenantProjectHeaders } from "./headers-D79npewp.mjs";
+import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
+import { t as xbApiFetch } from "./api-client-zDBFgk0y.mjs";
+import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
+import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/audio/text.ts
 /**