@puyinkai/xiaobao-cli 0.3.0 → 0.5.0

package/README.md

@@ -56,8 +56,17 @@ xiaobao-cli audio list --from "2026-05-01 00:00:00" --to "2026-05-02 00:00:00" -
 | `kb doc <doc-id>` | 新增 · 知识库文档详情 |
 | `kb doc-content <doc-id> [--offset] [--limit]` | 新增 · 知识库文档正文分页 |
 | `quantum <metric> [--view] [--visit-type] …` | 新增 · 量子看板 / KPI 统计（20 指标） |
+| `admin sales-report --from --to [--by project\|zone]` | 新增 · 公司经营数据 出库/回款（super-admin，独立白名单） |
+| `admin token-usage --from --to [--model] …` | 新增 · LLM token 用量（super-admin，独立白名单） |
 | `api <METHOD> <path>` | `xiaobao_api` |
 
+## WorkBuddy Connector
+
+`workbuddy/` 是按《WorkBuddy Connector 对接规范》方案二（CLI + Skill）准备的连接器配置
+（`connector-meta.json` / `cli.json` / `icon.svg`）；`npm run workbuddy:pack` 会连同 `skills/`
+打成 `dist-workbuddy/wangxiaobao-connector.zip` 供提交审核。认证走 `auth login`（device flow）
++ `auth status`（exit 0 = 已登录，可完成待授权的 device code 换 token）+ `auth logout`。
+
 ## 通用 flags
 
 - `--format toon|json|table` —— 默认 `toon`（省 token，适合 LLM 上下文）；`json` 严格 JSON、agent/人类友好；`table` 暂未实现（回退 JSON）

package/dist/admin-BOL_otwc.mjs

@@ -0,0 +1,14 @@
+import { defineCommand } from "citty";
+//#region src/commands/admin/index.ts
+var admin_default = defineCommand({
+	meta: {
+		name: "admin",
+		description: "super-admin 经营报表：公司经营数据（出库/回款）/ LLM token 用量（独立白名单）"
+	},
+	subCommands: {
+		"sales-report": () => import("./sales-report-BIfyfucO.mjs").then((m) => m.default),
+		"token-usage": () => import("./token-usage-y46b3_7C.mjs").then((m) => m.default)
+	}
+});
+//#endregion
+export { admin_default as default };

package/dist/{api-DtFEKH3I.mjs → api-BaX_r5S5.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { t as loadActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { t as loadActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/api.ts
 /**

package/dist/{api-client-CDNjkArS.mjs → api-client-D3sCv6L3.mjs}

@@ -1,5 +1,5 @@
-import { r as refreshToken } from "./device-flow-D6JVcEap.mjs";
-import { a as isAccessTokenValid, l as writeToken, s as readToken } from "./token-store-CXizLE2_.mjs";
+import { i as refreshToken } from "./device-flow-j10PFOQL.mjs";
+import { a as isAccessTokenValid, l as writeToken, s as readToken } from "./token-store-BB7n-fwJ.mjs";
 //#region src/core/api-client.ts
 /**
 * HTTP client for wangxiaobao open API endpoints.

package/dist/{audio-DhEiStuy.mjs → audio-DzcmDYVu.mjs}

@@ -6,8 +6,8 @@ var audio_default = defineCommand({
 		description: "录音元数据分页 / 单条文本查询"
 	},
 	subCommands: {
-		list: () => import("./list-CZVU6EVq.mjs").then((m) => m.default),
-		text: () => import("./text-bgoI1KC-.mjs").then((m) => m.default)
+		list: () => import("./list-CTSX1XuK.mjs").then((m) => m.default),
+		text: () => import("./text-K7uP8bat.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/{auth-BYWDBat3.mjs → auth-DvvYyJBK.mjs}

@@ -6,9 +6,10 @@ var auth_default = defineCommand({
 		description: "OAuth 登录 / 身份查询 / 登出（device flow）"
 	},
 	subCommands: {
-		login: () => import("./login-B5e9tJbS.mjs").then((m) => m.default),
-		whoami: () => import("./whoami-BMAFa4es.mjs").then((m) => m.default),
-		logout: () => import("./logout-Dz_FFIRP.mjs").then((m) => m.default)
+		login: () => import("./login-COK74GKN.mjs").then((m) => m.default),
+		whoami: () => import("./whoami-CtuWBu20.mjs").then((m) => m.default),
+		status: () => import("./status-DR0tFzju.mjs").then((m) => m.default),
+		logout: () => import("./logout-BQnDwD5-.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/cli.mjs

@@ -19,18 +19,19 @@ runMain(defineCommand({
 		description: "旺小宝 CLI — host-agnostic 业务数据 / 问数 / 来访总结 / 知识库 能力 (openclaw-xiaobao plugin 的 CLI 等价物)"
 	},
 	subCommands: {
-		auth: () => import("./auth-BYWDBat3.mjs").then((m) => m.default),
-		project: () => import("./project-C2fvEuDl.mjs").then((m) => m.default),
-		consultant: () => import("./consultant-DvH6ezCT.mjs").then((m) => m.default),
-		audio: () => import("./audio-DhEiStuy.mjs").then((m) => m.default),
-		customer: () => import("./customer-BtAtJyM8.mjs").then((m) => m.default),
-		visit: () => import("./visit-vRqOvBv5.mjs").then((m) => m.default),
-		focus: () => import("./focus-BmLvFWII.mjs").then((m) => m.default),
-		resistance: () => import("./resistance-B0gVs7-5.mjs").then((m) => m.default),
-		qa: () => import("./qa-C2TSTS-m.mjs").then((m) => m.default),
-		kb: () => import("./kb-B9IY8-fu.mjs").then((m) => m.default),
-		quantum: () => import("./quantum-4m2WGRWI.mjs").then((m) => m.default),
-		api: () => import("./api-DtFEKH3I.mjs").then((m) => m.default)
+		auth: () => import("./auth-DvvYyJBK.mjs").then((m) => m.default),
+		project: () => import("./project-CYA9qd8k.mjs").then((m) => m.default),
+		consultant: () => import("./consultant-Ccnjnhzz.mjs").then((m) => m.default),
+		audio: () => import("./audio-DzcmDYVu.mjs").then((m) => m.default),
+		customer: () => import("./customer-D_LctjqX.mjs").then((m) => m.default),
+		visit: () => import("./visit-qf8Lwf_s.mjs").then((m) => m.default),
+		focus: () => import("./focus-BPPyRCBb.mjs").then((m) => m.default),
+		resistance: () => import("./resistance-BhlYgeUx.mjs").then((m) => m.default),
+		qa: () => import("./qa-CDYWW-19.mjs").then((m) => m.default),
+		kb: () => import("./kb-DpBUFdFV.mjs").then((m) => m.default),
+		quantum: () => import("./quantum-Dyhp2Clf.mjs").then((m) => m.default),
+		admin: () => import("./admin-BOL_otwc.mjs").then((m) => m.default),
+		api: () => import("./api-BaX_r5S5.mjs").then((m) => m.default)
 	}
 }));
 //#endregion

package/dist/{consultant-DvH6ezCT.mjs → consultant-Ccnjnhzz.mjs}

@@ -5,7 +5,7 @@ var consultant_default = defineCommand({
 		name: "consultant",
 		description: "查询有权限的置业顾问列表"
 	},
-	subCommands: { list: () => import("./list-CiBpxZFs.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-Ikc5mo6a.mjs").then((m) => m.default) }
 });
 //#endregion
 export { consultant_default as default };

package/dist/{current-gZDEGEmi.mjs → current-CaUOiS5G.mjs}

@@ -1,5 +1,5 @@
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/project/current.ts
 /**

package/dist/{customer-BtAtJyM8.mjs → customer-D_LctjqX.mjs}

@@ -5,7 +5,7 @@ var customer_default = defineCommand({
 		name: "customer",
 		description: "客户画像分页查询"
 	},
-	subCommands: { list: () => import("./list-DDGGG2p2.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-xbJZbyGQ.mjs").then((m) => m.default) }
 });
 //#endregion
 export { customer_default as default };

package/dist/{device-flow-D6JVcEap.mjs → device-flow-j10PFOQL.mjs}

@@ -88,6 +88,43 @@ async function initiateDeviceAuthorization(config) {
 	};
 	return data;
 }
+/**
+* RFC 8628 §3.4 — ONE token-endpoint attempt. `'pending'` / `'slow_down'`
+* mean "not yet"; anything else terminal is thrown. Shared by the blocking
+* poll loop and by `auth status` (which must return within seconds).
+*/
+async function exchangeDeviceCode(config, deviceCode) {
+	const url = `${config.authBase}/oauth2/token`;
+	const body = new URLSearchParams({
+		grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+		device_code: deviceCode
+	});
+	const resp = await fetch(url, {
+		method: "POST",
+		headers: authHeaders(config),
+		body: body.toString()
+	});
+	const parsed = await resp.json();
+	if (resp.ok) return parsed;
+	const err = parsed.error;
+	if (err === "authorization_pending") return "pending";
+	if (err === "slow_down") return "slow_down";
+	if (err === "access_denied") throw {
+		code: "ACCESS_DENIED",
+		message: "User declined authorization",
+		body: parsed
+	};
+	if (err === "expired_token") throw {
+		code: "EXPIRED_TOKEN",
+		message: "Device code expired before user approved",
+		body: parsed
+	};
+	throw {
+		code: "TOKEN_POLL_FAILED",
+		status: resp.status,
+		body: parsed
+	};
+}
 /** RFC 8628 §3.4 — poll the token endpoint until success / denial / expiry. */
 async function pollForToken(config, deviceCode, intervalSeconds, expiresInSeconds) {
 	const serverDeadline = Date.now() + expiresInSeconds * 1e3;
@@ -95,39 +132,13 @@ async function pollForToken(config, deviceCode, intervalSeconds, expiresInSecond
 	let pollIntervalMs = Math.max(1, intervalSeconds) * 1e3;
 	while (Date.now() < Math.min(serverDeadline, hardDeadline)) {
 		await sleep(pollIntervalMs);
-		const url = `${config.authBase}/oauth2/token`;
-		const body = new URLSearchParams({
-			grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-			device_code: deviceCode
-		});
-		const resp = await fetch(url, {
-			method: "POST",
-			headers: authHeaders(config),
-			body: body.toString()
-		});
-		const parsed = await resp.json();
-		if (resp.ok) return parsed;
-		const err = parsed.error;
-		if (err === "authorization_pending") continue;
-		if (err === "slow_down") {
+		const result = await exchangeDeviceCode(config, deviceCode);
+		if (result === "pending") continue;
+		if (result === "slow_down") {
 			pollIntervalMs += 5e3;
 			continue;
 		}
-		if (err === "access_denied") throw {
-			code: "ACCESS_DENIED",
-			message: "User declined authorization",
-			body: parsed
-		};
-		if (err === "expired_token") throw {
-			code: "EXPIRED_TOKEN",
-			message: "Device code expired before user approved",
-			body: parsed
-		};
-		throw {
-			code: "TOKEN_POLL_FAILED",
-			status: resp.status,
-			body: parsed
-		};
+		return result;
 	}
 	throw {
 		code: "TIMEOUT",
@@ -163,4 +174,4 @@ function sleep(ms) {
 	return new Promise((r) => setTimeout(r, ms));
 }
 //#endregion
-export { resolveConfig as a, revokeRefreshToken as i, pollForToken as n, refreshToken as r, initiateDeviceAuthorization as t };
+export { revokeRefreshToken as a, refreshToken as i, initiateDeviceAuthorization as n, resolveConfig as o, pollForToken as r, exchangeDeviceCode as t };

package/dist/{doc--iAF-laM.mjs → doc-CC08fj8m.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/kb/doc.ts
 /**

package/dist/{doc-content-CqDVEgwX.mjs → doc-content-DktnDECM.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/kb/doc-content.ts
 /**

package/dist/{docs-C_sC8m3F.mjs → docs-DtQy3Zoc.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/kb/docs.ts
 /**

package/dist/{focus-BmLvFWII.mjs → focus-BPPyRCBb.mjs}

@@ -5,7 +5,7 @@ var focus_default = defineCommand({
 		name: "focus",
 		description: "客户关注点标签分页查询"
 	},
-	subCommands: { list: () => import("./list-VJImXOzy.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-D_8QLOZ1.mjs").then((m) => m.default) }
 });
 //#endregion
 export { focus_default as default };

package/dist/{kb-B9IY8-fu.mjs → kb-DpBUFdFV.mjs}

@@ -6,10 +6,10 @@ var kb_default = defineCommand({
 		description: "项目知识库：语义检索 / 文档列表 / 文档详情 / 文档正文分页"
 	},
 	subCommands: {
-		search: () => import("./search-CBWh8yKE.mjs").then((m) => m.default),
-		docs: () => import("./docs-C_sC8m3F.mjs").then((m) => m.default),
-		doc: () => import("./doc--iAF-laM.mjs").then((m) => m.default),
-		"doc-content": () => import("./doc-content-CqDVEgwX.mjs").then((m) => m.default)
+		search: () => import("./search-ChFFOKV4.mjs").then((m) => m.default),
+		docs: () => import("./docs-DtQy3Zoc.mjs").then((m) => m.default),
+		doc: () => import("./doc-CC08fj8m.mjs").then((m) => m.default),
+		"doc-content": () => import("./doc-content-DktnDECM.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/{list-CZVU6EVq.mjs → list-CTSX1XuK.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
-import { n as mergeUserIds, r as toLocalDateTime, t as csvToArray } from "./util-CaPQBlNa.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { n as mergeUserIds, r as toLocalDateTime, t as csvToArray } from "./util-pyTg7qwY.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/audio/list.ts
 /**

package/dist/{list-D2qM7Ghn.mjs → list-Ca5Fvq_e.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
-import { r as toLocalDateTime } from "./util-CaPQBlNa.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { r as toLocalDateTime } from "./util-pyTg7qwY.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/visit/list.ts
 /**

package/dist/{list-DW4Sk-76.mjs → list-DPyzRkq4.mjs}

@@ -1,6 +1,6 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/project/list.ts
 /**

package/dist/{list-VJImXOzy.mjs → list-D_8QLOZ1.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
-import { r as toLocalDateTime, t as csvToArray } from "./util-CaPQBlNa.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { r as toLocalDateTime, t as csvToArray } from "./util-pyTg7qwY.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/focus/list.ts
 /**

package/dist/{list-D94oyNpR.mjs → list-DciEIXpx.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
-import { r as toLocalDateTime, t as csvToArray } from "./util-CaPQBlNa.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { r as toLocalDateTime, t as csvToArray } from "./util-pyTg7qwY.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/resistance/list.ts
 /**

package/dist/{list-CiBpxZFs.mjs → list-Ikc5mo6a.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/consultant/list.ts
 /**

package/dist/{list-DDGGG2p2.mjs → list-xbJZbyGQ.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
-import { r as toLocalDateTime } from "./util-CaPQBlNa.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { r as toLocalDateTime } from "./util-pyTg7qwY.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/customer/list.ts
 /**

package/dist/{login-B5e9tJbS.mjs → login-COK74GKN.mjs}

@@ -1,6 +1,6 @@
-import { a as resolveConfig, n as pollForToken, r as refreshToken, t as initiateDeviceAuthorization } from "./device-flow-D6JVcEap.mjs";
-import { a as isAccessTokenValid, c as writePendingAuth, l as writeToken, n as clearPendingAuth, o as readPendingAuth, r as clearToken, s as readToken, t as NoPendingAuthError } from "./token-store-CXizLE2_.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { i as refreshToken, n as initiateDeviceAuthorization, o as resolveConfig, r as pollForToken } from "./device-flow-j10PFOQL.mjs";
+import { a as isAccessTokenValid, c as writePendingAuth, l as writeToken, n as clearPendingAuth, o as readPendingAuth, r as clearToken, s as readToken, t as NoPendingAuthError } from "./token-store-BB7n-fwJ.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/auth/login.ts
 /**
@@ -135,6 +135,13 @@ var login_default = defineCommand({
 				}, fmt);
 				return;
 			}
+			await writePendingAuth({
+				device_code: init.device_code,
+				user_code: init.user_code,
+				verification_uri: verificationUri,
+				interval,
+				expires_at: Date.now() + init.expires_in * 1e3
+			});
 			process.stderr.write(`
 请在浏览器中打开以下链接完成登录并授权访问你的旺小宝账号:
 \n  🔗 ${verificationUri}\n\n  设备验证码: ${init.user_code}\n  有效期约 ${expiresMinutes} 分钟\n\n等待你在浏览器中确认 ...

package/dist/{logout-Dz_FFIRP.mjs → logout-BQnDwD5-.mjs}

@@ -1,6 +1,6 @@
-import { a as resolveConfig, i as revokeRefreshToken } from "./device-flow-D6JVcEap.mjs";
-import { n as clearPendingAuth, r as clearToken, s as readToken } from "./token-store-CXizLE2_.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { a as revokeRefreshToken, o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { n as clearPendingAuth, r as clearToken, s as readToken } from "./token-store-BB7n-fwJ.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/auth/logout.ts
 /**

package/dist/{project-C2fvEuDl.mjs → project-CYA9qd8k.mjs}

@@ -6,9 +6,9 @@ var project_default = defineCommand({
 		description: "查询 / 切换激活项目"
 	},
 	subCommands: {
-		list: () => import("./list-DW4Sk-76.mjs").then((m) => m.default),
-		use: () => import("./use-xbTXVwXb.mjs").then((m) => m.default),
-		current: () => import("./current-gZDEGEmi.mjs").then((m) => m.default)
+		list: () => import("./list-DPyzRkq4.mjs").then((m) => m.default),
+		use: () => import("./use-DwoZynR9.mjs").then((m) => m.default),
+		current: () => import("./current-CaUOiS5G.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/{qa-C2TSTS-m.mjs → qa-CDYWW-19.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/qa.ts
 /**

package/dist/{quantum-4m2WGRWI.mjs → quantum-Dyhp2Clf.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
-import { r as toLocalDateTime, t as csvToArray } from "./util-CaPQBlNa.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { r as toLocalDateTime, t as csvToArray } from "./util-pyTg7qwY.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/quantum.ts
 /**

package/dist/{resistance-B0gVs7-5.mjs → resistance-BhlYgeUx.mjs}

@@ -5,7 +5,7 @@ var resistance_default = defineCommand({
 		name: "resistance",
 		description: "客户抗性点标签分页查询"
 	},
-	subCommands: { list: () => import("./list-D94oyNpR.mjs").then((m) => m.default) }
+	subCommands: { list: () => import("./list-DciEIXpx.mjs").then((m) => m.default) }
 });
 //#endregion
 export { resistance_default as default };

package/dist/sales-report-BIfyfucO.mjs

@@ -0,0 +1,70 @@
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { t as loadActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { defineCommand } from "citty";
+//#region src/commands/admin/sales-report.ts
+/**
+* `xiaobao-cli admin sales-report` — 旺小宝公司经营数据（出库 / 回款）。
+*
+* super-admin 能力：按项目组（type 1，默认）或战区（type 2）返回指定日期区间的
+* 出库金额（outStockAmount）与回款/入库金额（receiveAmount）。数据来自内网金蝶
+* 报表，经 ai-open `POST /super-admin/sales-report` 代理；访问由独立白名单控制
+* （空名单 = 全拒），不在名单会收到引导文案。
+*
+* 公司级数据：不要求激活项目（有激活项目则顺带传 tenant headers）。
+*/
+var sales_report_default = defineCommand({
+	meta: {
+		name: "sales-report",
+		description: "公司经营数据：出库/回款金额，按 项目组(project) 或 战区(zone) 分组（独立白名单）"
+	},
+	args: {
+		from: {
+			type: "string",
+			required: true,
+			description: "开始日期 yyyy-MM-dd（闭区间）"
+		},
+		to: {
+			type: "string",
+			required: true,
+			description: "结束日期 yyyy-MM-dd（闭区间）"
+		},
+		by: {
+			type: "string",
+			default: "project",
+			description: "分组维度：project=项目组(type 1，默认) / zone=战区(type 2)"
+		},
+		"api-base": { type: "string" },
+		"auth-base": { type: "string" },
+		format: {
+			type: "string",
+			default: "toon"
+		}
+	},
+	async run({ args }) {
+		try {
+			const config = resolveConfig({
+				apiBase: args["api-base"],
+				authBase: args["auth-base"]
+			});
+			const by = String(args.by);
+			if (by !== "project" && by !== "zone") throw new Error(`--by 仅支持 project 或 zone，收到: ${by}`);
+			const active = await loadActiveProject();
+			writeResult(await xbApiFetch(config, "POST", "/ai-open/super-admin/sales-report", {
+				headers: active ? tenantProjectHeaders(active) : void 0,
+				body: {
+					startDate: args.from,
+					endDate: args.to,
+					type: by === "zone" ? 2 : 1
+				}
+			}), args.format);
+		} catch (err) {
+			writeError(err, args.format);
+			process.exit(1);
+		}
+	}
+});
+//#endregion
+export { sales_report_default as default };

package/dist/{search-CBWh8yKE.mjs → search-ChFFOKV4.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
-import { t as csvToArray } from "./util-CaPQBlNa.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { t as csvToArray } from "./util-pyTg7qwY.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/kb/search.ts
 /**

package/dist/status-DR0tFzju.mjs

@@ -0,0 +1,65 @@
+import { i as refreshToken, o as resolveConfig, t as exchangeDeviceCode } from "./device-flow-j10PFOQL.mjs";
+import { a as isAccessTokenValid, i as decodeJwtPayload, l as writeToken, n as clearPendingAuth, o as readPendingAuth, r as clearToken, s as readToken } from "./token-store-BB7n-fwJ.mjs";
+import { defineCommand } from "citty";
+//#region src/commands/auth/status.ts
+/**
+* `xiaobao-cli auth status` — host-friendly auth check (WorkBuddy cli.json
+* `status` command; also handy for scripts).
+*
+* Contract (WorkBuddy Connector spec §12.4): exit 0 + "Logged in as ..." on
+* stdout when authenticated, non-zero otherwise; must return within seconds
+* and be safe to poll every 3s.
+*
+* If a device authorization is pending (`auth login` was started and the host
+* killed it after reading the URL), one token-endpoint attempt finishes the
+* exchange here — this is what lets WorkBuddy's "kill auth, poll status"
+* flow complete without the auth process staying alive.
+*/
+function loggedIn(token) {
+	const c = decodeJwtPayload(token.id_token) ?? {};
+	const who = c.name ?? c.preferred_username ?? c.sub ?? "unknown";
+	process.stdout.write(`Logged in as ${String(who)}\n`);
+	process.exit(0);
+}
+function notLoggedIn(reason) {
+	process.stdout.write(`Not authenticated: ${reason}\n`);
+	process.exit(1);
+}
+var status_default = defineCommand({
+	meta: {
+		name: "status",
+		description: "认证状态检测（exit 0 = 已登录；可完成待授权的 device flow）"
+	},
+	args: { "auth-base": {
+		type: "string",
+		description: "覆盖 auth base URL"
+	} },
+	async run({ args }) {
+		const config = resolveConfig({ authBase: args["auth-base"] });
+		const cached = await readToken();
+		if (isAccessTokenValid(cached)) loggedIn(cached);
+		if (cached?.refresh_token) try {
+			loggedIn(await writeToken(await refreshToken(config, cached.refresh_token)));
+		} catch {
+			await clearToken();
+		}
+		const pending = await readPendingAuth();
+		if (!pending) notLoggedIn("run `xiaobao-cli auth login`");
+		if (pending.expires_at <= Date.now()) {
+			await clearPendingAuth();
+			notLoggedIn("device authorization expired, run `xiaobao-cli auth login` again");
+		}
+		try {
+			const result = await exchangeDeviceCode(config, pending.device_code);
+			if (result === "pending" || result === "slow_down") notLoggedIn("awaiting authorization in browser");
+			const saved = await writeToken(result);
+			await clearPendingAuth();
+			loggedIn(saved);
+		} catch (err) {
+			await clearPendingAuth();
+			notLoggedIn(`device authorization failed (${err?.code ?? "error"}), run \`xiaobao-cli auth login\` again`);
+		}
+	}
+});
+//#endregion
+export { status_default as default };

package/dist/{summary-CcLTV5wr.mjs → summary-C3poiB2C.mjs}

@@ -1,9 +1,9 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
-import { r as toLocalDateTime } from "./util-CaPQBlNa.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { r as toLocalDateTime } from "./util-pyTg7qwY.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/visit/summary.ts
 /**

package/dist/{text-bgoI1KC-.mjs → text-K7uP8bat.mjs}

@@ -1,8 +1,8 @@
-import { a as resolveConfig } from "./device-flow-D6JVcEap.mjs";
-import { t as xbApiFetch } from "./api-client-CDNjkArS.mjs";
-import { n as requireActiveProject } from "./project-store-CKVJa54T.mjs";
-import { t as tenantProjectHeaders } from "./headers-DSnR4sjk.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { n as requireActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/audio/text.ts
 /**

package/dist/token-usage-y46b3_7C.mjs

@@ -0,0 +1,102 @@
+import { o as resolveConfig } from "./device-flow-j10PFOQL.mjs";
+import { t as xbApiFetch } from "./api-client-D3sCv6L3.mjs";
+import { t as loadActiveProject } from "./project-store-CudTRvbA.mjs";
+import { t as tenantProjectHeaders } from "./headers-Dy5gROBB.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
+import { defineCommand } from "citty";
+//#region src/commands/admin/token-usage.ts
+/**
+* `xiaobao-cli admin token-usage` — 旺小宝 LLM token 用量汇总。
+*
+* super-admin 能力：返回指定日期区间（闭区间）的输入 / 输出 / 总量 tokens，可按
+* 模型、供应商、API Key、接入点、标签、状态过滤。数据来自内网 AI Portal，经
+* ai-open `POST /super-admin/token-usage` 代理；访问由独立白名单控制（空名单 =
+* 全拒），不在名单会收到引导文案。
+*
+* 公司级数据：不要求激活项目（有激活项目则顺带传 tenant headers）。
+*/
+var token_usage_default = defineCommand({
+	meta: {
+		name: "token-usage",
+		description: "LLM token 用量：输入/输出/总量，可按模型/供应商/Key 过滤（独立白名单）"
+	},
+	args: {
+		from: {
+			type: "string",
+			required: true,
+			description: "开始日期 yyyy-MM-dd（闭区间）"
+		},
+		to: {
+			type: "string",
+			required: true,
+			description: "结束日期 yyyy-MM-dd（闭区间）"
+		},
+		model: {
+			type: "string",
+			description: "模型过滤，如 gpt-4.1-mini"
+		},
+		provider: {
+			type: "string",
+			description: "供应商过滤，如 openai"
+		},
+		upstream: {
+			type: "string",
+			description: "上游过滤"
+		},
+		"api-key": {
+			type: "string",
+			description: "API Key 过滤"
+		},
+		endpoint: {
+			type: "string",
+			description: "接入点过滤"
+		},
+		"tag-key": {
+			type: "string",
+			description: "标签 key"
+		},
+		"tag-value": {
+			type: "string",
+			description: "标签 value"
+		},
+		status: {
+			type: "string",
+			description: "状态过滤，如 error（只看失败请求）"
+		},
+		"api-base": { type: "string" },
+		"auth-base": { type: "string" },
+		format: {
+			type: "string",
+			default: "toon"
+		}
+	},
+	async run({ args }) {
+		try {
+			const config = resolveConfig({
+				apiBase: args["api-base"],
+				authBase: args["auth-base"]
+			});
+			const active = await loadActiveProject();
+			writeResult(await xbApiFetch(config, "POST", "/ai-open/super-admin/token-usage", {
+				headers: active ? tenantProjectHeaders(active) : void 0,
+				body: {
+					startDate: args.from,
+					endDate: args.to,
+					model: args.model,
+					provider: args.provider,
+					upstream: args.upstream,
+					apiKey: args["api-key"],
+					endpoint: args.endpoint,
+					tagKey: args["tag-key"],
+					tagValue: args["tag-value"],
+					status: args.status
+				}
+			}), args.format);
+		} catch (err) {
+			writeError(err, args.format);
+			process.exit(1);
+		}
+	}
+});
+//#endregion
+export { token_usage_default as default };

package/dist/{use-xbTXVwXb.mjs → use-DwoZynR9.mjs}

@@ -1,5 +1,5 @@
-import { r as saveActiveProject } from "./project-store-CKVJa54T.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { r as saveActiveProject } from "./project-store-CudTRvbA.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/project/use.ts
 /**

package/dist/{visit-vRqOvBv5.mjs → visit-qf8Lwf_s.mjs}

@@ -6,8 +6,8 @@ var visit_default = defineCommand({
 		description: "客户来访分页查询 / 来访接待总结"
 	},
 	subCommands: {
-		list: () => import("./list-D2qM7Ghn.mjs").then((m) => m.default),
-		summary: () => import("./summary-CcLTV5wr.mjs").then((m) => m.default)
+		list: () => import("./list-Ca5Fvq_e.mjs").then((m) => m.default),
+		summary: () => import("./summary-C3poiB2C.mjs").then((m) => m.default)
 	}
 });
 //#endregion

package/dist/{whoami-BMAFa4es.mjs → whoami-CtuWBu20.mjs}

@@ -1,5 +1,5 @@
-import { i as decodeJwtPayload, s as readToken } from "./token-store-CXizLE2_.mjs";
-import { n as writeResult, t as writeError } from "./format-CvKe7-yU.mjs";
+import { i as decodeJwtPayload, s as readToken } from "./token-store-BB7n-fwJ.mjs";
+import { n as writeResult, t as writeError } from "./format-DfVypHID.mjs";
 import { defineCommand } from "citty";
 //#region src/commands/auth/whoami.ts
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@puyinkai/xiaobao-cli",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "旺小宝 CLI — host-agnostic 业务数据 / 问数 / 来访总结 / 知识库 能力 (openclaw-xiaobao plugin 的 CLI 等价物)",
   "type": "module",
   "bin": {
@@ -23,7 +23,8 @@
   "scripts": {
     "build": "tsdown",
     "typecheck": "tsc --noEmit",
-    "dev": "node --import tsx src/cli.ts"
+    "dev": "node --import tsx src/cli.ts",
+    "workbuddy:pack": "rm -rf dist-workbuddy && mkdir -p dist-workbuddy/wangxiaobao && cp workbuddy/connector-meta.json workbuddy/cli.json workbuddy/icon.svg dist-workbuddy/wangxiaobao/ && cp -R skills dist-workbuddy/wangxiaobao/skills && cd dist-workbuddy && zip -qr wangxiaobao-connector.zip wangxiaobao && echo dist-workbuddy/wangxiaobao-connector.zip"
   },
   "dependencies": {
     "citty": "^0.1.6"

package/skills/wangxiaobao-admin-sales-report/SKILL.md

@@ -0,0 +1,54 @@
+---
+name: wangxiaobao-admin-sales-report
+version: 0.1.0
+description: "旺小宝公司经营数据查询（super-admin，独立白名单）：按日期区间返回 出库金额(outStockAmount) 与 回款/入库金额(receiveAmount)，按 项目组(--by project，默认) 或 战区(--by zone) 分组。只读。高频命令: xiaobao-cli admin sales-report --from <yyyy-MM-dd> --to <yyyy-MM-dd> [--by project|zone]。何时用：用户问 公司业绩/经营数据/出库/回款/入库金额/各项目组业绩/各战区业绩/业绩排名/某月做了多少。注：独立白名单控制（与其它命令的白名单无关），返回引导文案时原样告知用户并停止；不需要激活项目；两个维度出库合计存在口径差，汇报须注明口径。"
+metadata:
+  requires:
+    bins: ["xiaobao-cli"]
+  cliHelp: "xiaobao-cli admin sales-report --help"
+---
+
+# 旺小宝公司经营数据（出库 / 回款）
+
+> **CRITICAL** —— 跑命令前 MUST 先用 Read tool 读取 [`../wangxiaobao-shared/SKILL.md`](../wangxiaobao-shared/SKILL.md)（登录 / 输出协议 / 错误码 等通用约定）。
+
+`xiaobao-cli admin sales-report` 查询公司级经营数据（数据源：内网金蝶报表，经 ai-open 代理）。
+
+## 执行前必读
+- **super-admin 能力，独立白名单**：与其它命令的白名单**互相独立**，且**名单为空 = 全拒**。若返回 `data: "不在白名单中，若有需求请联系19136123281"`，**原样告知用户并停止，不要重试**。
+- 需要登录（token），**不需要激活项目**。
+- 日期为**闭区间**（`--from 2026-07-01 --to 2026-07-31` 含首尾两天），格式 `yyyy-MM-dd`。
+- 只读，不写文件。
+
+## 快速索引
+| 用户意图 | 命令 |
+| --- | --- |
+| 某月各项目组业绩 | `admin sales-report --from 2026-07-01 --to 2026-07-31`（默认 --by project） |
+| 某月各战区业绩 | `admin sales-report --from ... --to ... --by zone` |
+| 两个维度都要 | 调两次（--by project + --by zone），并注意口径差（见下） |
+| 时间说法（本月/上月/最近 7 天） | 换算成 from/to 再调 |
+
+## 核心约束与坑（来自实测）
+1. **出库 vs 回款口径**：`outStockAmount` = 出库，`receiveAmount` = 回款（入库）。
+2. **两个维度合计对不上是数据源特性不是 bug**：入库合计两维度一致，但**出库合计恒是项目组 > 战区**（每月差 0.4~3.6 万，部分出库单归得到项目组归不到战区）。**汇报公司总业绩必须注明口径**（建议用项目组口径）。
+3. **负数是正常的**：出库可为负（退货/红字冲销），如实呈现，不要过滤。
+4. **返回 0 不等于失败**：未来区间、无业务区间正常返回 0；先确认区间合理再下结论。
+5. **日期写反**：ai-open 已拦截（返回 400 "startDate 不能晚于 endDate"），不会再静默返回全 0。
+
+## 响应字段
+```jsonc
+{ "code": "0", "data": {
+    "totalReceiveAmount": 7546423.51,      // 回款(入库)合计
+    "totalOutStockAmount": 7809705.90,     // 出库合计
+    "data": [                               // 按出库金额降序（接口原序）
+      { "name": "人脸识别项目组",
+        "values": { "receiveAmount": 4102679.69, "outStockAmount": 4176741.33 } }
+    ] } }
+```
+CLI 再包一层 → 读 `resp.data.data.*`。展示时给出 名称 / 回款 / 出库 / 出库占比，负数保留。
+
+## 常见错误
+- **`data` 是"不在白名单中…"文案** → 原样转告用户，停止（联系 19136123281 开通）。
+- **401** → `auth login --no-wait --force` 重登。
+- **400 日期问题** → 检查 yyyy-MM-dd 格式与 from<=to。
+- **全 0** → 先确认区间是否合理（未来区间/无业务），不要报"接口挂了"。

package/skills/wangxiaobao-admin-token-usage/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: wangxiaobao-admin-token-usage
+version: 0.1.0
+description: "旺小宝 LLM token 用量查询（super-admin，独立白名单）：按日期区间返回 输入(promptTokens)/输出(completionTokens)/总量(totalTokens) tokens，可按 模型/供应商/API Key/接入点/标签/状态 过滤。只读。高频命令: xiaobao-cli admin token-usage --from <yyyy-MM-dd> --to <yyyy-MM-dd> [--model <m>] [--provider <p>]。何时用：用户问 token 用量/token 消耗/用了多少 token/AI 用量统计/某模型或某供应商的用量/成本核算输入数据。注：独立白名单控制，返回引导文案时原样告知并停止；不需要激活项目；数据从 2026-04 起；日期闭区间；按月对比=逐月调多次。"
+metadata:
+  requires:
+    bins: ["xiaobao-cli"]
+  cliHelp: "xiaobao-cli admin token-usage --help"
+---
+
+# 旺小宝 LLM Token 用量
+
+> **CRITICAL** —— 跑命令前 MUST 先用 Read tool 读取 [`../wangxiaobao-shared/SKILL.md`](../wangxiaobao-shared/SKILL.md)（登录 / 输出协议 / 错误码 等通用约定）。
+
+`xiaobao-cli admin token-usage` 查询公司级 LLM token 用量（数据源：内网 AI Portal，经 ai-open 代理）。
+
+## 执行前必读
+- **super-admin 能力，独立白名单**：与其它命令的白名单**互相独立**，且**名单为空 = 全拒**。若返回 `data: "不在白名单中，若有需求请联系19136123281"`，**原样告知用户并停止，不要重试**。
+- 需要登录（token），**不需要激活项目**。
+- 日期为**闭区间**，格式 `yyyy-MM-dd`。
+- 只读，不写文件。
+
+## 快速索引
+| 用户意图 | 命令 |
+| --- | --- |
+| 某月总用量 | `admin token-usage --from 2026-07-01 --to 2026-07-31` |
+| 只看某模型 / 供应商 | `--model gpt-4.1-mini` / `--provider openai` |
+| 只看某 Key / 接入点 | `--api-key <KEY>` / `--endpoint <EP>` |
+| 按标签 | `--tag-key team --tag-value ai` |
+| 只看失败请求 | `--status error` |
+| 按月对比 | 逐月调多次（每月一个 from/to），自己汇总 |
+
+## 核心约束与坑（来自实测）
+1. **数据从 2026-04 开始**：更早区间一律返回 0——那是没数据，不是查询出错。
+2. **闭区间**：`--from 2026-07-01 --to 2026-07-31` 含首尾两天。
+3. **当天数据仍在增长**：含今天的区间两次调用结果会有差异；做对账用截至昨天的区间。
+4. **接口返回整区间汇总，无分页**：要按月/按天拆分就按段多次调用（按天拆一年 = 300+ 次，不要这么干，按月拆）。
+5. 筛选条件可任意组合。
+
+## 响应字段
+```jsonc
+{ "code": "0", "data": {
+    "promptTokens": 296215003449,       // 输入
+    "completionTokens": 34882240321,    // 输出
+    "totalTokens": 331097243770 } }     // 总量
+```
+CLI 再包一层 → 读 `resp.data.data.*`。大数字建议换算（如 331.10 B）展示。
+
+## 常见错误
+- **`data` 是"不在白名单中…"文案** → 原样转告用户，停止（联系 19136123281 开通）。
+- **401** → `auth login --no-wait --force` 重登。
+- **查 2026-04 之前区间得 0** → 说明"无数据"，不要说成"没用量/接口挂了"。
+- **含今天的区间数字对不上** → 正常，当天数据在涨；对账用截至昨天。

package/skills/wangxiaobao-shared/SKILL.md

@@ -169,6 +169,11 @@ openclaw 的副本（保留 plugin session 完整性）。`auth logout` 例外
 返回该项目知识，不按顾问授权范围细分；`kb doc` / `kb doc-content` 按 docId 直取。
 知识库面向全项目，不存在"看不到别人名下"的概念。
 
+**例外 —— `admin *`（super-admin 经营报表）**：`admin sales-report` / `admin token-usage`
+是**公司级**数据（经营出库/回款、LLM token 用量），**不需要激活项目**，且走**独立白名单**
+（与上面按顾问授权的隔离无关；名单为空 = 全拒）。不在名单会收到
+`data: "不在白名单中，若有需求请联系19136123281"` —— 原样转告用户并停止，不要重试。
+
 > 后端链路：上述命令统一经 `ai-open`（公网开放层 / 鉴权）代理到内网业务层
 > `wang-ai-mcp`，对调用方透明，命令用法不变。