@puyinkai/xiaobao-cli 0.1.6 → 0.1.9

package/dist/{api-client-DWbwtQbl.mjs → api-client-CDNjkArS.mjs}

@@ -1,5 +1,5 @@
 import { r as refreshToken } from "./device-flow-D6JVcEap.mjs";
-import { a as writeToken, i as readToken, r as isAccessTokenValid } from "./token-store-D2umpIk-.mjs";
+import { a as isAccessTokenValid, l as writeToken, s as readToken } from "./token-store-CXizLE2_.mjs";
 //#region src/core/api-client.ts
 /**
 * HTTP client for wangxiaobao open API endpoints.
@@ -13,7 +13,7 @@ import { a as writeToken, i as readToken, r as isAccessTokenValid } from "./toke
 */
 var NotAuthenticatedError = class extends Error {
 	code = "NOT_AUTHENTICATED";
-	hint = "运行 `xiaobao-cli auth login` 完成 OAuth device flow 登录。";
+	hint = "运行 `xiaobao-cli auth login --no-wait` 发起登录，授权后运行 `xiaobao-cli auth login --resume` 完成。";
 	constructor() {
 		super("当前未登录或 token 已过期");
 		this.name = "NotAuthenticatedError";

package/dist/{api-JZnABA4y.mjs → api-fsHHWWa3.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { t as loadActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
@@ -60,9 +60,10 @@ var api_default = defineCommand({
 			type: "string",
 			description: "自定义 headers，`K1=V1&K2=V2` 或 `K=V,K=V`。与默认注入的 tenant/project headers 合并（同名 key 用户传入优先）"
 		},
-		"no-default-headers": {
+		"default-headers": {
 			type: "boolean",
-			description: "不要默认注入 X-Tenant-Id / X-Project-Id headers（默认会按当前激活项目自动注入，调 /ai-open/* 开箱即用）"
+			default: true,
+			description: "默认按当前激活项目自动注入 X-Tenant-Id / X-Project-Id headers（调 /ai-open/* 开箱即用）；`--no-default-headers` 关闭注入"
 		},
 		"api-base": { type: "string" },
 		"auth-base": { type: "string" },
@@ -93,7 +94,7 @@ var api_default = defineCommand({
 			}
 			let mergedHeaders;
 			const userHeaders = parseKV(args.headers);
-			if (!args["no-default-headers"]) {
+			if (args["default-headers"]) {
 				const active = await loadActiveProject();
 				if (active) mergedHeaders = {
 					...tenantProjectHeaders(active),

package/dist/{audio-BHWH6uhw.mjs → audio-CRSMqaKo.mjs}

@@ -6,8 +6,8 @@ var audio_default = defineCommand({
 		description: "录音元数据分页 / 单条文本查询"
 	},
 	subCommands: {
-		list: () => import("./list-VpZkzTEE.mjs").then((m) => m.default),
-		text: () => import("./text-5q8lIWi8.mjs").then((m) => m.default)
+		list: () => import("./list-CnlQdzPp.mjs").then((m) => m.default),
+		text: () => import("./text-C3Ap6L5n.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/{auth-BpzWivxf.mjs → auth-_3hBh87U.mjs}

@@ -6,9 +6,9 @@ var auth_default = defineCommand({
 		description: "OAuth 登录 / 身份查询 / 登出（device flow）"
 	},
 	subCommands: {
-		login: () => import("./login-DtDxISE8.mjs").then((m) => m.default),
-		whoami: () => import("./whoami-Uv7GBtGB.mjs").then((m) => m.default),
-		logout: () => import("./logout-DVJX8_x6.mjs").then((m) => m.default)
+		login: () => import("./login-CUUcjWPd.mjs").then((m) => m.default),
+		whoami: () => import("./whoami-z-76WaCP.mjs").then((m) => m.default),
+		logout: () => import("./logout-DP7REhCd.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/cli.mjs

@@ -18,16 +18,16 @@ runMain(defineCommand({
 		description: "旺小宝 CLI — host-agnostic 14 tools (openclaw-xiaobao plugin 的 CLI 等价物)"
 	},
 	subCommands: {
-		auth: () => import("./auth-BpzWivxf.mjs").then((m) => m.default),
-		project: () => import("./project-CJkTgGOq.mjs").then((m) => m.default),
-		consultant: () => import("./consultant-kV5r8Wj8.mjs").then((m) => m.default),
-		audio: () => import("./audio-BHWH6uhw.mjs").then((m) => m.default),
-		customer: () => import("./customer-B2OV8BTR.mjs").then((m) => m.default),
-		visit: () => import("./visit-CUI2ov-H.mjs").then((m) => m.default),
-		focus: () => import("./focus-BjWD5PRV.mjs").then((m) => m.default),
-		resistance: () => import("./resistance-Ss-eUZoN.mjs").then((m) => m.default),
-		qa: () => import("./qa-CQDRFw-g.mjs").then((m) => m.default),
-		api: () => import("./api-JZnABA4y.mjs").then((m) => m.default)
+		auth: () => import("./auth-_3hBh87U.mjs").then((m) => m.default),
+		project: () => import("./project-BD0g4oAW.mjs").then((m) => m.default),
+		consultant: () => import("./consultant-E33hTGUO.mjs").then((m) => m.default),
+		audio: () => import("./audio-CRSMqaKo.mjs").then((m) => m.default),
+		customer: () => import("./customer-DcQ83oKD.mjs").then((m) => m.default),
+		visit: () => import("./visit-DoeECi8w.mjs").then((m) => m.default),
+		focus: () => import("./focus-XMRxnHPw.mjs").then((m) => m.default),
+		resistance: () => import("./resistance-6_V6At3T.mjs").then((m) => m.default),
+		qa: () => import("./qa-CdMcxCE_.mjs").then((m) => m.default),
+		api: () => import("./api-fsHHWWa3.mjs").then((m) => m.default)
 	}
 }));
 //#endregion

package/dist/{consultant-kV5r8Wj8.mjs → consultant-E33hTGUO.mjs}

@@ -5,7 +5,7 @@ var consultant_default = defineCommand({
 		name: "consultant",
 		description: "查询有权限的置业顾问列表"
 	},
-	subCommands: { list: () => import("./list-CVMSGK08.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-dm9YaCG1.mjs").then((m) => m.default) }
 });
 //#endregion
 export { consultant_default as default };

package/dist/{customer-B2OV8BTR.mjs → customer-DcQ83oKD.mjs}

@@ -5,7 +5,7 @@ var customer_default = defineCommand({
 		name: "customer",
 		description: "客户画像分页查询"
 	},
-	subCommands: { list: () => import("./list-h1nuSJiN.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-DFdDcHFq.mjs").then((m) => m.default) }
 });
 //#endregion
 export { customer_default as default };

package/dist/{focus-BjWD5PRV.mjs → focus-XMRxnHPw.mjs}

@@ -5,7 +5,7 @@ var focus_default = defineCommand({
 		name: "focus",
 		description: "客户关注点标签分页查询"
 	},
-	subCommands: { list: () => import("./list-Bw8dFf8a.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-CrMOrnS-.mjs").then((m) => m.default) }
 });
 //#endregion
 export { focus_default as default };

package/dist/{list-C30zFN6h.mjs → list-B3nN4pd2.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/project/list.ts

package/dist/{list-CHububT5.mjs → list-CXquxzex.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";

package/dist/{list-FM3vkQJa.mjs → list-Cc4zcaNz.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";

package/dist/{list-VpZkzTEE.mjs → list-CnlQdzPp.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";

package/dist/{list-Bw8dFf8a.mjs → list-CrMOrnS-.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";

package/dist/{list-h1nuSJiN.mjs → list-DFdDcHFq.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";

package/dist/{list-CVMSGK08.mjs → list-dm9YaCG1.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";

package/dist/login-CUUcjWPd.mjs

@@ -0,0 +1,156 @@
+import { a as resolveConfig, n as pollForToken, r as refreshToken, t as initiateDeviceAuthorization } from "./device-flow-D6JVcEap.mjs";
+import { a as isAccessTokenValid, c as writePendingAuth, l as writeToken, n as clearPendingAuth, o as readPendingAuth, r as clearToken, s as readToken, t as NoPendingAuthError } from "./token-store-CXizLE2_.mjs";
+import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
+import { defineCommand } from "citty";
+//#region src/commands/auth/login.ts
+/**
+* `xiaobao-cli auth login` — OAuth 2.0 Device Authorization Grant.
+*
+* Three modes:
+*
+*   1. Default (blocking)  — cache hit / refresh / else initiate the device
+*      flow and synchronously poll until success/denial/expiry. Best for a
+*      human running it directly in a terminal.
+*
+*   2. `--no-wait` (non-blocking, agent-friendly split-flow step 1) — cache
+*      hit / refresh as usual; otherwise initiate the device flow, persist
+*      the device_code locally (~/.xiaobao/pending-auth.json, mode 0600) and
+*      return immediately with the verification URL — WITHOUT polling and
+*      WITHOUT exposing the credential-grade device_code on stdout. The agent
+*      forwards the URL to the user, ends its turn, then runs step 2.
+*
+*   3. `--resume` (split-flow step 2) — read the locally-saved device_code
+*      and exchange it for a token; no argument needed. `--device-code <code>`
+*      remains as an explicit escape hatch and takes precedence when given.
+*/
+var login_default = defineCommand({
+	meta: {
+		name: "login",
+		description: "走 OAuth device flow 登录（--no-wait 非阻塞发起 / --resume 完成）"
+	},
+	args: {
+		force: {
+			type: "boolean",
+			description: "强制清除缓存并重新发起设备授权流程"
+		},
+		wait: {
+			type: "boolean",
+			default: true,
+			description: "默认阻塞轮询直到授权完成。`--no-wait` 则发起 device flow 后立即返回 verification_uri 不轮询（device_code 安全存本地，不进 stdout）；用户授权后 再用 `auth login --resume` 完成换 token。"
+		},
+		resume: {
+			type: "boolean",
+			description: "split-flow 第二步：用上次 `--no-wait` 本地保存的 device_code 换 token，用户在浏览器授权后跑，无需手动传 device_code。"
+		},
+		"device-code": {
+			type: "string",
+			description: "（高级 escape hatch）显式传入 device_code 换 token；一般用 `--resume` 即可，CLI 会自动读取本地保存的 device_code。"
+		},
+		"api-base": {
+			type: "string",
+			description: "覆盖 API base URL"
+		},
+		"auth-base": {
+			type: "string",
+			description: "覆盖 auth base URL"
+		},
+		format: {
+			type: "string",
+			default: "json"
+		}
+	},
+	async run({ args }) {
+		const config = resolveConfig({
+			apiBase: args["api-base"],
+			authBase: args["auth-base"]
+		});
+		const fmt = args.format;
+		try {
+			if (args.resume || args["device-code"]) {
+				let deviceCode;
+				let remainingSeconds = 300;
+				if (args["device-code"]) deviceCode = String(args["device-code"]);
+				else {
+					const pending = await readPendingAuth();
+					if (!pending) throw new NoPendingAuthError();
+					if (pending.expires_at <= Date.now()) {
+						await clearPendingAuth();
+						throw new NoPendingAuthError("设备授权已过期，device_code 失效");
+					}
+					deviceCode = pending.device_code;
+					remainingSeconds = Math.max(1, Math.ceil((pending.expires_at - Date.now()) / 1e3));
+				}
+				const saved = await writeToken(await pollForToken(config, deviceCode, 2, remainingSeconds));
+				await clearPendingAuth();
+				writeResult({
+					source: "device-flow",
+					expires_at: saved.expires_at,
+					scope: saved.scope,
+					message: "登录成功，可以正常使用别的命令了"
+				}, fmt);
+				return;
+			}
+			if (!args.force) {
+				const cached = await readToken();
+				if (isAccessTokenValid(cached)) {
+					writeResult({
+						source: "cache",
+						expires_at: cached.expires_at,
+						scope: cached.scope
+					}, fmt);
+					return;
+				}
+				if (cached?.refresh_token) try {
+					const saved = await writeToken(await refreshToken(config, cached.refresh_token));
+					writeResult({
+						source: "refresh",
+						expires_at: saved.expires_at,
+						scope: saved.scope
+					}, fmt);
+					return;
+				} catch {
+					await clearToken();
+				}
+			} else await clearToken();
+			const init = await initiateDeviceAuthorization(config);
+			const verificationUri = init.verification_uri_complete || init.verification_uri;
+			const expiresMinutes = Math.max(1, Math.round(init.expires_in / 60));
+			const interval = init.interval ?? 5;
+			if (!args.wait) {
+				await writePendingAuth({
+					device_code: init.device_code,
+					user_code: init.user_code,
+					verification_uri: verificationUri,
+					interval,
+					expires_at: Date.now() + init.expires_in * 1e3
+				});
+				writeResult({
+					awaiting_authorization: true,
+					verification_uri: verificationUri,
+					user_code: init.user_code,
+					expires_in: init.expires_in,
+					interval,
+					message: "请在浏览器打开 verification_uri 完成授权，然后跑 `xiaobao-cli auth login --resume` 完成登录。device_code 已安全保存在本地，无需手动传。"
+				}, fmt);
+				return;
+			}
+			process.stderr.write(`
+请在浏览器中打开以下链接完成登录并授权访问你的旺小宝账号:
+\n  🔗 ${verificationUri}\n\n  设备验证码: ${init.user_code}\n  有效期约 ${expiresMinutes} 分钟\n\n等待你在浏览器中确认 ...
+`);
+			const saved = await writeToken(await pollForToken(config, init.device_code, interval, init.expires_in));
+			await clearPendingAuth();
+			writeResult({
+				source: "device-flow",
+				expires_at: saved.expires_at,
+				scope: saved.scope,
+				message: "登录成功，token 已缓存到 ~/.xiaobao/token.json"
+			}, fmt);
+		} catch (err) {
+			writeError(err, fmt);
+			process.exit(1);
+		}
+	}
+});
+//#endregion
+export { login_default as default };

package/dist/{logout-DVJX8_x6.mjs → logout-DP7REhCd.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig, i as revokeRefreshToken } from "./device-flow-D6JVcEap.mjs";
-import { i as readToken, t as clearToken } from "./token-store-D2umpIk-.mjs";
+import { n as clearPendingAuth, r as clearToken, s as readToken } from "./token-store-CXizLE2_.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/auth/logout.ts
@@ -33,6 +33,7 @@ var logout_default = defineCommand({
 			let revoked = false;
 			if (cached?.refresh_token) revoked = await revokeRefreshToken(config, cached.refresh_token);
 			await clearToken();
+			await clearPendingAuth();
 			writeResult({
 				message: "Logged out",
 				remote_revoked: revoked,

package/dist/{project-CJkTgGOq.mjs → project-BD0g4oAW.mjs}

@@ -6,7 +6,7 @@ var project_default = defineCommand({
 		description: "查询 / 切换激活项目"
 	},
 	subCommands: {
-		list: () => import("./list-C30zFN6h.mjs").then((m) => m.default),
+		list: () => import("./list-B3nN4pd2.mjs").then((m) => m.default),
 		use: () => import("./use-BZES4FZC.mjs").then((m) => m.default),
 		current: () => import("./current-CfDExInT.mjs").then((m) => m.default)
 	}

package/dist/{qa-CQDRFw-g.mjs → qa-CdMcxCE_.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";

package/dist/{resistance-Ss-eUZoN.mjs → resistance-6_V6At3T.mjs}

@@ -5,7 +5,7 @@ var resistance_default = defineCommand({
 		name: "resistance",
 		description: "客户抗性点标签分页查询"
 	},
-	subCommands: { list: () => import("./list-FM3vkQJa.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-Cc4zcaNz.mjs").then((m) => m.default) }
 });
 //#endregion
 export { resistance_default as default };

package/dist/{text-5q8lIWi8.mjs → text-C3Ap6L5n.mjs}

@@ -1,5 +1,5 @@
 import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-DWbwtQbl.mjs";
+import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
 import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
 import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";

package/dist/{token-store-D2umpIk-.mjs → token-store-CXizLE2_.mjs}

@@ -19,6 +19,7 @@ import { chmod, mkdir, readFile, unlink, writeFile } from "node:fs/promises";
 const PRIMARY_DIR = join(homedir(), ".xiaobao");
 const PRIMARY_TOKEN_FILE = join(PRIMARY_DIR, "token.json");
 const LEGACY_TOKEN_FILE = join(homedir(), ".openclaw", "state", "wangxiaobao", "token.json");
+const PENDING_AUTH_FILE = join(PRIMARY_DIR, "pending-auth.json");
 /**
 * Read order: primary → legacy fallback. Returns null if both missing.
 */
@@ -85,5 +86,40 @@ function decodeJwtPayload(jwt) {
 		return null;
 	}
 }
+async function writePendingAuth(p) {
+	await mkdir(PRIMARY_DIR, {
+		recursive: true,
+		mode: 448
+	});
+	await writeFile(PENDING_AUTH_FILE, JSON.stringify(p, null, 2), { mode: 384 });
+	try {
+		await chmod(PENDING_AUTH_FILE, 384);
+	} catch {}
+}
+async function readPendingAuth() {
+	if (!existsSync(PENDING_AUTH_FILE)) return null;
+	try {
+		return JSON.parse(await readFile(PENDING_AUTH_FILE, "utf-8"));
+	} catch (e) {
+		if (e.code === "ENOENT") return null;
+		throw e;
+	}
+}
+async function clearPendingAuth() {
+	try {
+		await unlink(PENDING_AUTH_FILE);
+	} catch (e) {
+		if (e.code !== "ENOENT") throw e;
+	}
+}
+/** Thrown by `auth login --resume` when there is no usable pending device_code. */
+var NoPendingAuthError = class extends Error {
+	code = "NO_PENDING_AUTH";
+	hint = "先跑 `xiaobao-cli auth login --no-wait` 发起设备授权，在浏览器完成授权后再跑 `xiaobao-cli auth login --resume`。";
+	constructor(message = "没有待完成的设备授权（从未发起，或 device_code 已过期）") {
+		super(message);
+		this.name = "NoPendingAuthError";
+	}
+};
 //#endregion
-export { writeToken as a, readToken as i, decodeJwtPayload as n, isAccessTokenValid as r, clearToken as t };
+export { isAccessTokenValid as a, writePendingAuth as c, decodeJwtPayload as i, writeToken as l, clearPendingAuth as n, readPendingAuth as o, clearToken as r, readToken as s, NoPendingAuthError as t };

package/dist/{visit-CUI2ov-H.mjs → visit-DoeECi8w.mjs}

@@ -5,7 +5,7 @@ var visit_default = defineCommand({
 		name: "visit",
 		description: "客户来访分页查询"
 	},
-	subCommands: { list: () => import("./list-CHububT5.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-CXquxzex.mjs").then((m) => m.default) }
 });
 //#endregion
 export { visit_default as default };

package/dist/{whoami-Uv7GBtGB.mjs → whoami-z-76WaCP.mjs}

@@ -1,4 +1,4 @@
-import { i as readToken, n as decodeJwtPayload } from "./token-store-D2umpIk-.mjs";
+import { i as decodeJwtPayload, s as readToken } from "./token-store-CXizLE2_.mjs";
 import { n as writeResult, t as writeError } from "./format-yjmxrbNm.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/auth/whoami.ts
@@ -23,7 +23,7 @@ var whoami_default = defineCommand({
 			if (!token) {
 				writeResult({
 					logged_in: false,
-					message: "No token cached. Run `xiaobao-cli auth login` to log in."
+					message: "No token cached. Run `xiaobao-cli auth login --no-wait` then `xiaobao-cli auth login --resume` to log in."
 				}, args.format);
 				return;
 			}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@puyinkai/xiaobao-cli",
-  "version": "0.1.6",
+  "version": "0.1.9",
   "description": "旺小宝 CLI — host-agnostic 14 tools (openclaw-xiaobao plugin 的 CLI 等价物)",
   "type": "module",
   "bin": {
@@ -10,6 +10,10 @@
     "dist/**/*.mjs",
     "dist/**/*.d.mts",
     "skills/**/*.md",
+    "skills/**/*.py",
+    "skills/**/*.html",
+    "skills/**/*.png",
+    "skills/**/*.json",
     "README.md"
   ],
   "engines": {

package/skills/wangxiaobao-audio-query/SKILL.md

@@ -17,7 +17,7 @@ metadata:
 
 ## 执行前必读
 
-- 必须有有效 token：先调 `xiaobao-cli auth whoami`，未登录 / 过期就调 `xiaobao-cli auth login`
+- 必须有有效 token：先调 `xiaobao-cli auth whoami`，未登录 / 过期就走 `auth login --no-wait` split-flow（见 wangxiaobao-shared）
 - **必须有激活项目**：tenant/project 由 命令内部从
   `~/.xiaobao/active-project.json` 读，调用方不需要传任何
   tenant/project 参数。如果 命令 返回 `error: 'NO_ACTIVE_PROJECT'`，
@@ -184,7 +184,7 @@ xiaobao-cli audio list --from "2026-05-06 00:00:00" --to "2026-05-13 00:00:00" -
 
 - **`code: "400"` / `msg: "消息转换异常"`** — fromDate/toDate 格式不对。
   必须 `yyyy-MM-dd HH:mm:ss` 空格分隔，不带时区。
-- **401 / token 过期** — 调 `xiaobao-cli auth login --force` 重登，重试一次。
+- **401 / token 过期** — 走 `auth login --no-wait --force` split-flow 重登，重试一次。
 - **`total: 0`** — 时间窗口里确实没数据，或激活的租户/项目错了。
   让用户跑 `wangxiaobao-switch-project` skill 确认或重新激活项目。
 - **`error: 'NO_ACTIVE_PROJECT'`** — 还没设过激活项目。让用户跑

package/skills/wangxiaobao-audio-wiki/SKILL.md

@@ -25,7 +25,7 @@ Layer 2 知识页**。
 
 ## 执行前必读
 
-1. **登录**：先调 `xiaobao-cli auth whoami`；未登录 / 过期就调 `xiaobao-cli auth login`。
+1. **登录**：先调 `xiaobao-cli auth whoami`；未登录 / 过期就走 `auth login --no-wait` split-flow（见 wangxiaobao-shared）。
 2. **激活项目**：命令内部从 `~/.xiaobao/active-project.json`
    读 tenant/project。如果任何 命令 返回 `error: 'NO_ACTIVE_PROJECT'`，
    先走 `wangxiaobao-switch-project` skill 让用户选。
@@ -84,7 +84,7 @@ for each window [winStart, winEnd):
     否则 page += 1
 ```
 
-若 命令 返回 401 → 调 `xiaobao-cli auth login --force` 后重试当前窗口
+若 命令 返回 401 → 走 `auth login --no-wait --force` split-flow 重登后重试当前窗口
 （最多重试一次）。
 
 ### 第 3 步：逐条取文本
@@ -243,7 +243,7 @@ wiki/projects/{projectId}-{projectName}/
 ## 完整链路
 
 ```
-1. xiaobao-cli auth login             — 拿到 token
+1. xiaobao-cli auth login --no-wait → --resume   — 拿到 token
 2. wangxiaobao-switch-project    — 选好租户/项目，写 ~/.xiaobao/active-project.json
 3. 本 skill - sync 阶段          — 翻页拉 → 逐条取文本 → 按 顾问/日期 写 raw → 推进游标
 4. 本 skill - ingest 阶段         — 读 raw/ → 提炼 4 层 Layer 2 知识页 → 更新 index/log
@@ -271,7 +271,7 @@ wiki/projects/{projectId}-{projectName}/
 
 ## 常见错误与排查
 
-- **`xiaobao-cli audio list` 返回 401** — token 过期 → `xiaobao-cli auth login --force` 重登
+- **`xiaobao-cli audio list` 返回 401** — token 过期 → 走 `auth login --no-wait --force` split-flow 重登
 - **`xiaobao-cli audio text` 返回 `data: null` / `texts: []`** — 转录未就绪 / 录音异常 → 跳过该条
 - **page 翻不动 / 重复返回同一页** — 检查 page 是否从 1 开始；`total = 0` 直接结束窗口
 - **fromDate/toDate 报参数错** — 用空格分隔的 `yyyy-MM-dd HH:mm:ss`，不带时区

package/skills/wangxiaobao-customer-focus-query/SKILL.md

@@ -17,7 +17,7 @@ metadata:
 
 ## 执行前必读
 
-- 必须有有效 token：先调 `xiaobao-cli auth whoami`；未登录就 `xiaobao-cli auth login`
+- 必须有有效 token：先调 `xiaobao-cli auth whoami`；未登录就走 `auth login --no-wait` split-flow（见 wangxiaobao-shared）
 - **必须有激活项目**：命令内部自动读，缺失返回 `NO_ACTIVE_PROJECT`
 - **数据权限隔离**：按当前用户授权可见顾问范围过滤（普通顾问看自己 /
   团队长看团队 / 项目管理员看全项目）
@@ -156,7 +156,7 @@ xiaobao-cli focus list --audio-ids 507494047338729472 --page 1 --size 50
 ## 常见错误与排查
 
 - **`error: 'NO_ACTIVE_PROJECT'`** — 跑 `wangxiaobao-switch-project` skill
-- **401 / token 过期** — 调 `xiaobao-cli auth login --force` 重登
+- **401 / token 过期** — 走 `auth login --no-wait --force` split-flow 重登
 - **`total: 0`** — 过滤条件没匹配 / 该时段没数据 / 当前用户授权范围内没匹配的接待顾问
 - **传入的 ID 找不到对应数据** — 数据权限隔离把不属于授权顾问的 tag 过滤掉了；
   这是预期行为，不是 bug

package/skills/wangxiaobao-customer-query/SKILL.md

@@ -17,7 +17,7 @@ metadata:
 
 ## 执行前必读
 
-- 必须有有效 token：先调 `xiaobao-cli auth whoami`；未登录就 `xiaobao-cli auth login`
+- 必须有有效 token：先调 `xiaobao-cli auth whoami`；未登录就走 `auth login --no-wait` split-flow（见 wangxiaobao-shared）
 - **必须有激活项目**：命令内部自动读，如果返回 `NO_ACTIVE_PROJECT` 就跑
   `wangxiaobao-switch-project` skill
 - **数据权限隔离**：后端按"当前用户授权可见的顾问范围"过滤（普通顾问看自己 /
@@ -158,7 +158,7 @@ xiaobao-cli customer list --page 1 --size 1
 ## 常见错误与排查
 
 - **`error: 'NO_ACTIVE_PROJECT'`** — 跑 `wangxiaobao-switch-project` skill
-- **401 / token 过期** — 调 `xiaobao-cli auth login --force` 重登
+- **401 / token 过期** — 走 `auth login --no-wait --force` split-flow 重登
 - **`total: 0`** — 时间窗口 / 过滤条件没匹配到，**或**当前用户授权范围为空
   （新人顾问刚入职 / 团队成员被移走等）
 - **顾问名找不到** — 不在当前用户授权可见范围内；不要硬调 list_customers 试

package/skills/wangxiaobao-customer-resistance-query/SKILL.md

@@ -18,7 +18,7 @@ metadata:
 
 ## 执行前必读
 
-- 必须有有效 token：先调 `xiaobao-cli auth whoami`；未登录就 `xiaobao-cli auth login`
+- 必须有有效 token：先调 `xiaobao-cli auth whoami`；未登录就走 `auth login --no-wait` split-flow（见 wangxiaobao-shared）
 - **必须有激活项目**：命令内部自动读，缺失返回 `NO_ACTIVE_PROJECT`
 - **数据权限隔离**：按当前用户授权可见顾问范围过滤（普通顾问看自己 /
   团队长看团队 / 项目管理员看全项目）
@@ -150,7 +150,7 @@ xiaobao-cli resistance list --category 户型 --from "2026-05-01 00:00:00" --to
 ## 常见错误与排查
 
 - **`error: 'NO_ACTIVE_PROJECT'`** — 跑 `wangxiaobao-switch-project` skill
-- **401 / token 过期** — 调 `xiaobao-cli auth login --force` 重登
+- **401 / token 过期** — 走 `auth login --no-wait --force` split-flow 重登
 - **`total: 0`** — 过滤条件没匹配 / 该时段没数据 / 当前用户授权范围内没匹配的接待顾问
 - **抗性点 vs 关注点**：跟 LLM 强调"抗性"是负面（疑虑/反对），"关注"是中性偏正
   （主动关心）；用户说"嫌弃 / 担心 / 不满"走抗性，"在意 / 关心 / 偏好"走关注