diffcat-cli 0.2.1

package/.agents/plugins/marketplace.json

@@ -0,0 +1,20 @@
+{
+  "name": "diffcat-cli",
+  "interface": {
+    "displayName": "DiffCat CLI"
+  },
+  "plugins": [
+    {
+      "name": "diffcat",
+      "source": {
+        "source": "local",
+        "path": "./plugins/diffcat"
+      },
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      },
+      "category": "Productivity"
+    }
+  ]
+}

package/README.md

@@ -0,0 +1,135 @@
+# diffcat-cli
+
+供 AI 智能体和本地自动化使用的 Diffcat CLI。CLI 只能调用服务端登记的能力，不能传入任意 URL 或 SQL。
+
+## 安装
+
+```bash
+npm install -g diffcat-cli
+```
+
+要求 Node.js 22 或更高版本，并需要可用的系统凭据库（Windows Credential Manager、macOS Keychain 或 Linux Secret Service）。首期不支持把长期授权以明文文件形式放入容器或 CI。
+
+npm 包同时包含 Agent 通用操作指南、DiffCat Codex Plugin 和 WorkBuddy CLI Connector。安装脚本会在检测到 Codex 时自动登记插件；如果安装时未检测到 Codex、npm 使用了 `--ignore-scripts`，或需要修复安装，可执行：
+
+```bash
+diffcat setup codex
+```
+
+安装或升级后应新建 Agent 会话，以加载当前 npm 包内的 DiffCat Skill。CLI、各 Agent 适配清单和 Skill 使用同一个 npm 版本发布，不需要从其他仓库重复安装。
+
+当前包按公开 npm 包配置，以便 WorkBuddy 托管运行时无需私有 Registry 凭据即可一键安装。正式发布由流水线执行 `pnpm build && pnpm test && pnpm publish`，不要把 Registry Token 打进安装包。npm tarball 必须同时包含 `plugins/diffcat`、`.agents/plugins/marketplace.json`、`connectors/workbuddy` 和安装脚本。
+
+### Agent 集成
+
+- **通用 Agent**：只要能够执行本机命令并读取 `SKILL.md`，即可使用 `diffcat` 的 JSON 命令、动态能力目录和指南，不依赖 Codex API。
+- **Codex**：npm `postinstall` 自动登记随包 Plugin；也可运行 `diffcat setup codex` 修复。
+- **WorkBuddy**：`connectors/workbuddy` 是符合[官方 CLI + Skill 规范](https://open.workbuddy.cn/docs/connector)的连接器提交目录。连接器市场审核发布后，用户点击一次即可由 WorkBuddy 托管 Node 22 并安装本 npm 包。正式环境默认连接生产 API；只有用户明确选择测试或私有部署时，Skill 才通过 `--server` 覆盖地址并使用独立 profile。
+
+WorkBuddy 连接器的版本必须与 npm 包版本同步。提交 WorkBuddy 审核前，应先发布对应 npm 版本，再将 `connectors/workbuddy` 目录打包提交。
+
+## 最小权限登录
+
+正式环境地址如下：
+
+| 用途                          | 地址                               |
+| ----------------------------- | ---------------------------------- |
+| CLI / 服务端 API              | `https://diffcat-api.howcat.cn`    |
+| 后台 PC 端与 CLI 浏览器授权页 | `https://diffcat.howcat.cn`        |
+| 移动端                        | `https://diffcat-mobile.howcat.cn` |
+
+CLI 默认使用正式 API，连接其他部署时可显式传入 `--server <url>`。
+
+```bash
+diffcat auth login \
+  --capability pm.projects.read \
+  --capability sales.orders.read
+```
+
+CLI 会输出浏览器授权地址。只有用户在网页中确认的能力才会被授予；用户当前业务权限或管理员策略不允许的能力会从授权中剔除。
+
+## 常用命令
+
+```bash
+diffcat --pretty auth status
+diffcat --pretty capability list
+diffcat --pretty capability catalog
+diffcat auth login --preset master-data-read
+diffcat resource list md.customers --query '{"pageSize":20}'
+diffcat resource get md.materials 123 --include bomLines
+diffcat document list inv.purchase_requests --query '{"status":"DRAFT"}'
+diffcat document create-draft inv.purchase_requests --input @draft.json
+diffcat project list --query '{"pageSize":20}'
+diffcat sales-order get 123
+diffcat sales-order create-draft --input @draft.json
+diffcat stats query --input @widgets.json
+diffcat task list --query '{"status":"PENDING"}'
+diffcat task approve 456 --comment "同意"
+diffcat operation resume <operation-id>
+```
+
+标准输出始终是 JSON，登录提示和进度写入标准错误。写操作自动携带幂等键；也可以通过 `--idempotency-key` 指定。高风险审批第一次调用只创建五分钟有效的确认意图，用户在网页二次认证后再运行 `operation resume`。
+
+## 凭据与协议
+
+- 登录采用 OAuth 2.0 Device Authorization Grant 风格的设备授权流程；CLI 不能读取浏览器登录态。
+- 每台设备生成独立 ES256 密钥，设备授权、令牌签发和能力调用都携带 DPoP proof。
+- 十分钟访问令牌、轮换刷新令牌和设备私钥只进入系统凭据库；普通配置文件不含任何令牌或私钥。
+- 刷新令牌连续 30 天未使用失效，且最长 90 天必须重新授权；检测到旧刷新令牌复用时整条授权立即撤销。
+- `auth logout` 同时请求服务端撤销授权并清除本机凭据；用户也可在网页“已连接 Agent”中远程撤销。
+- 同一 profile 的刷新和凭据更新通过跨进程锁串行化，支持多个 AI 进程并发调用而不误触发刷新令牌复用告警。
+
+## 面向 AI 的稳定输出
+
+所有业务结果只写到 stdout，且始终是单个 JSON 文档；提示、浏览器授权地址和轮询进度写到 stderr。命令非零退出码表示请求未成功，AI 不应从自然语言日志推断成功。
+
+写操作应让 CLI 自动生成幂等键，或由调用者提供稳定的 `--idempotency-key`。网络中断后不要盲目重试高风险操作，应先运行：
+
+```bash
+diffcat operation status <operation-id>
+diffcat operation resume <operation-id>
+```
+
+## 资源名称
+
+`resource` 支持以下基础资料资源：
+
+```text
+sys.users                           sys.departments
+sys.roles                           sys.dict_types
+sys.dict_entries                    md.companies
+md.currencies                       fin.exchange_rates
+md.uoms                             md.encoding_rules
+md.fee_subjects                     md.customers
+md.customer_contacts                md.customer_invoice_profiles
+md.stores                           md.contracts
+md.products                         md.price_lists
+md.price_list_lines                 md.warehouses
+md.warehouse_members                md.suppliers
+md.supplier_contacts                md.materials
+md.bom_lines                        adm.supplies
+fin.bank_accounts                   sales.crowdfunding_platforms
+```
+
+`document` 支持以下单据资源，每种都可 `list`、`get` 和 `create-draft`：
+
+```text
+sales.orders                        sales.direct_orders
+sales.consignment_reconciliations   sales.crowdfunding_orders
+inv.purchase_requests               inv.inbound_orders
+inv.outbound_orders                 inv.stocktake_orders
+fin.expense_requests                fin.invoice_requests
+fin.refund_requests                 adm.supply_entry_orders
+adm.supply_issue_requests           adm.supply_purchase_requests
+adm.supply_stocktake_orders
+```
+
+`create-draft` 会复用对应业务模块的 Create DTO 校验并在创建后回查状态；只有状态确认为 `DRAFT` 才报告成功。它不会提交单据、发起流程、记账或变更库存。
+
+## 当前约束
+
+- 不接受任意 HTTP URL、GraphQL、SQL 或脚本，只能调用服务端能力目录中的已登记能力。
+- `resource` 与 `document` 的资源名会映射为固定能力 ID，最终仍由服务端目录、用户实时权限、组织策略和授权范围共同校验。
+- 首期不支持无交互 CI/容器凭据；需要机器身份时应另行建设 workload identity，而不是导出个人刷新令牌。
+- 高风险确认当前使用 Diffcat 本地账号密码进行二次校验；仅使用飞书或 NAS 登录且没有本地密码的用户暂时不能确认此类操作。
+- Device Flow 适合不能稳定接收浏览器回调的 CLI；在浏览器与 CLI 同机且能监听 loopback 回调的场景，后续版本应优先增加 Authorization Code + PKCE，Device Flow 保留为受限的 headless fallback。

package/connectors/workbuddy/cli.json

@@ -0,0 +1,11 @@
+{
+  "runtime": {
+    "type": "node",
+    "version": "22"
+  },
+  "init": {
+    "darwin": "npm install -g diffcat-cli@0.2.1",
+    "linux": "npm install -g diffcat-cli@0.2.1",
+    "win32": "npm install -g diffcat-cli@0.2.1"
+  }
+}

package/connectors/workbuddy/connector-meta.json

@@ -0,0 +1,22 @@
+{
+  "name": "DiffCat",
+  "name_zh": "DiffCat 企业管理",
+  "name_en": "DiffCat",
+  "description": "Securely query authorized DiffCat data and perform controlled business operations.",
+  "description_zh": "通过最小授权查询 DiffCat 基础资料和单据，并创建草稿、办理受控审批。",
+  "description_en": "Query authorized DiffCat master data and documents, create drafts, and handle controlled approvals.",
+  "source": "diffcat-cli",
+  "type": "cli",
+  "version": "0.2.1",
+  "minWorkbuddyVersion": "4.24.0",
+  "examples_zh": [
+    "查询我有权查看的客户和最近销售订单",
+    "根据现有基础资料创建一张采购申请草稿并核对结果",
+    "查看我的采购申请待办，在我明确确认后再审批"
+  ],
+  "examples_en": [
+    "List the customers and recent sales orders I can access",
+    "Create a purchase request draft from existing master data and verify it",
+    "Show my purchase request tasks and approve only after I explicitly confirm"
+  ]
+}

package/connectors/workbuddy/icon.svg

@@ -0,0 +1,11 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-label="DiffCat">
+  <defs>
+    <linearGradient id="background" x1="8" y1="6" x2="56" y2="58" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#165DFF" />
+      <stop offset="1" stop-color="#722ED1" />
+    </linearGradient>
+  </defs>
+  <rect width="64" height="64" rx="15" fill="url(#background)" />
+  <path d="M18 17h13c10.5 0 18 5.8 18 15s-7.5 15-18 15H18V17Zm12.5 23c6.8 0 10.5-2.7 10.5-8s-3.7-8-10.5-8H26v16h4.5Z" fill="#fff" />
+  <path d="m45.5 13 1.8 4.1 4.2.6-3.1 3 .8 4.3-3.7-2-3.7 2 .8-4.3-3.1-3 4.2-.6 1.8-4.1Z" fill="#69E0FF" />
+</svg>

package/connectors/workbuddy/skills/diffcat/SKILL.md

@@ -0,0 +1,94 @@
+---
+name: diffcat
+display_name: DiffCat 企业管理
+display_name_en: DiffCat Business Operations
+description: Use the DiffCat CLI for authorized business queries, document drafts, and controlled workflow approvals.
+description_zh: 使用 DiffCat CLI 查询获授权的基础资料和业务单据、创建单据草稿，并办理受控流程审批。
+description_en: Query authorized DiffCat master data and documents, create drafts, and handle controlled workflow approvals with the DiffCat CLI.
+category: productivity
+version: 0.2.1
+author: DiffCat
+---
+
+# DiffCat CLI
+
+Use the installed `diffcat` command as the only DiffCat business execution surface. Do not bypass it with internal REST endpoints, SQL, browser automation, or direct database access.
+
+## Inputs
+
+1. The user's requested DiffCat business task.
+2. A DiffCat HTTPS API root for the target deployment when the `workbuddy` profile is not logged in.
+3. Explicit user intent and complete business fields before any draft creation or approval.
+
+## Output
+
+Return the requested authorized data or a verified operation result. For writes, include the operation ID, affected entity ID, terminal status, and independent post-write verification outcome.
+
+## Process
+
+### 1. Check installation and authorization
+
+Run:
+
+```bash
+diffcat --version
+diffcat --profile workbuddy --pretty auth status
+```
+
+If the profile is not logged in, use the CLI's default production API unless the user explicitly requests another environment. Discover the public catalog, select only the capabilities needed for the user's workflow, and start Device Flow:
+
+```bash
+diffcat --pretty capability catalog
+diffcat --profile workbuddy auth login --capability md.customers.read
+```
+
+The default production API is `https://diffcat-api.howcat.cn`; use `--server <url>` only when the user explicitly chooses another deployment. The user must inspect and approve the browser authorization at `https://diffcat.howcat.cn`. Never request all capabilities by default, operate the authorization page for the user, or ask them to paste tokens, passwords, cookies, or DPoP keys into chat.
+
+After authorization, run `auth status`, `grant list`, and `capability list`. A public capability is not automatically granted. Effective access is the intersection of the registered capability, explicit grant, live menu/action permissions, administrator policy constraints, and object-level business checks.
+
+### 2. Discover the live contract
+
+Before constructing unfamiliar input, run:
+
+```bash
+diffcat --profile workbuddy --pretty capability describe <capability-id>
+```
+
+Treat the returned `inputSchema`, operations, risk level, and confirmation flag as authoritative. Read @references/operations.md for command routing and implemented resources.
+
+### 3. Execute reads conservatively
+
+Use authorized reads to resolve human names to IDs. Never guess a customer, supplier, company, department, product, material, warehouse, account, currency, project, document, or workflow-task ID. If multiple valid matches remain, show stable identifiers and scope fields, then ask the user to choose.
+
+Follow pagination deliberately. State when the result is partial because of page limits, authorization scope, or filters. Use only query and relation fields allowed by the live schema.
+
+### 4. Execute writes only on clear intent
+
+A request to inspect, plan, prepare, explain, or validate does not authorize a mutation. Before writing, read @references/safety.md.
+
+Keep quantities, prices, exchange rates, and money values as JSON strings. Generate one stable idempotency key before the first write and reuse it only for the identical capability and logical input. Prefer `--input @file` or stdin for nontrivial JSON; never place credentials in payload files.
+
+### 5. Verify and report
+
+Treat stdout as a single JSON document and stderr as progress. Require exit code zero and operation status `succeeded`. Independently re-read every created or affected object and compare its status, scope, parties, currency, totals, and line identifiers/count as applicable.
+
+Never report success for `running`, `unknown`, `awaiting_confirmation`, `failed`, `verification_failed`, `rejected`, or `expired`. Use `operation status` and the recovery rules in @references/safety.md rather than replaying a write.
+
+## Examples
+
+- “查询客户海猫科技最近的销售订单” → verify grant, resolve the unique customer ID, query authorized sales orders, and report pagination coverage.
+- “创建采购申请草稿” → describe the create capability, resolve material/company/department data, ask for missing business choices, create with a stable idempotency key, then re-read and verify `DRAFT`.
+- “审批 456” → read the task and related purchase request, show decision-relevant details, invoke only after explicit approval intent, wait for user browser confirmation, resume the same operation, and verify completion.
+
+## Troubleshooting
+
+- Missing capability: explain the blocked operation and request only that additional capability after user agreement.
+- Schema or DTO error: re-run `capability describe`; correct only authoritative, user-supported fields.
+- Network interruption or unknown state: query the known operation ID; never retry with a new idempotency key.
+- Verification failure: data may have changed. Re-read the entity, report uncertainty, and require human review instead of automatic retry.
+- Disconnect request: run `diffcat --profile workbuddy auth logout`; do not delete or copy credential-store records manually.
+
+## Reference
+
+- @references/operations.md — available resources, commands, and query routes.
+- @references/safety.md — least privilege, draft, approval, idempotency, recovery, and secret-handling rules.

package/connectors/workbuddy/skills/diffcat/references/operations.md

@@ -0,0 +1,64 @@
+# DiffCat operations
+
+The live output of `capability list` and `capability describe` overrides this routing snapshot.
+
+## Discovery and credentials
+
+```bash
+diffcat --profile workbuddy --pretty auth status
+diffcat --pretty capability catalog --server <https-api-root>
+diffcat --profile workbuddy --pretty capability list
+diffcat --profile workbuddy --pretty capability describe <capability-id>
+diffcat --profile workbuddy grant list
+diffcat --profile workbuddy auth logout
+```
+
+## Base and master data
+
+Use `resource list <resource> --query <json>` and, when the live schema permits `get`, `resource get <resource> <id>`.
+
+```text
+sys.users                           sys.departments
+sys.roles                           sys.dict_types
+sys.dict_entries                    md.companies
+md.currencies                       fin.exchange_rates
+md.uoms                             md.encoding_rules
+md.fee_subjects                     md.customers
+md.customer_contacts                md.customer_invoice_profiles
+md.stores                           md.contracts
+md.products                         md.price_lists
+md.price_list_lines                 md.warehouses
+md.warehouse_members                md.suppliers
+md.supplier_contacts                md.materials
+md.bom_lines                        adm.supplies
+fin.bank_accounts                   sales.crowdfunding_platforms
+```
+
+`md.warehouse_members` currently supports list only. Each base-data capability ID is `<resource>.read`.
+
+## Business documents
+
+Use `document list`, `document get`, and `document create-draft` after confirming the live capability. Each resource has `<resource>.read` and `<resource>.create_draft` in the current implementation.
+
+```text
+sales.orders                        sales.direct_orders
+sales.consignment_reconciliations   sales.crowdfunding_orders
+inv.purchase_requests               inv.inbound_orders
+inv.outbound_orders                 inv.stocktake_orders
+fin.expense_requests                fin.invoice_requests
+fin.refund_requests                 adm.supply_entry_orders
+adm.supply_issue_requests           adm.supply_purchase_requests
+adm.supply_stocktake_orders
+```
+
+All current create abilities produce `DRAFT` only. They do not submit, start approval, post finance, or change inventory.
+
+## Specialized routes
+
+- `project list/get` → `pm.projects.read`.
+- `sales-order list/get/create-draft` → the same capabilities as generic `document sales.orders`.
+- `stats list/query` → `data_center.stats.read`; registered widgets only, never SQL.
+- `task list/get` → `flow.tasks.read` when allowed by the live schema.
+- `task approve` → `flow.tasks.approve`; currently limited to the current user's pending purchase-request `APPROVE/APPROVAL` task.
+
+List handlers default to 20 rows and cap a page at 100; a grant can impose a lower limit. Project or statistics queries can additionally require allowed project/department IDs.

package/connectors/workbuddy/skills/diffcat/references/safety.md

@@ -0,0 +1,37 @@
+# DiffCat safety and recovery
+
+## Least privilege
+
+- Prefer individual `--capability` values. Use `master-data-read`, `document-read`, or `document-draft` presets only for a clearly requested recurring workflow.
+- Never switch profiles or environments to evade a denial.
+- Do not export personal credentials for CI or containers. Credentials and DPoP keys stay in the operating-system credential store.
+
+## Draft creation
+
+1. Require explicit intent to create the identified document.
+2. Describe `<resource>.create_draft` and resolve all referenced IDs through authorized reads.
+3. Ask about every missing business choice; do not invent scope, party, warehouse, account, currency, date, quantity, price, rate, or line data.
+4. Generate a stable idempotency key before the first attempt.
+5. Run `document create-draft <resource> --input @draft.json --idempotency-key <key>`.
+6. Require `succeeded`, then re-read the returned ID and compare `DRAFT` plus relevant business fields.
+
+## Approval
+
+Approval is irreversible. The current high-risk capability only accepts a `PENDING` purchase-request task with grant function `APPROVE`, node type `APPROVAL`, and the current user as handler.
+
+1. Read the task and related purchase request; present decision-relevant scope, requester, lines, quantities, and amounts.
+2. Invoke only when the user explicitly chooses approval.
+3. The first call creates an `awaiting_confirmation` intent. Present its operation ID and URL; never open or operate the page or enter the user's password.
+4. After the user says they confirmed, run `operation status <id>` and then `operation resume <id>` using the same `workbuddy` profile.
+5. Re-read the task and document. Never replace resume with a new approve call.
+
+## Failure handling
+
+- Access denied: inspect current grant and live capability list; request additional access only with user agreement.
+- Validation failure: correct against the live schema and business source data; reuse the same key only for identical logical input.
+- `running` or `unknown`: poll the known operation at a reasonable interval; do not replay.
+- `verification_failed`: execution may have changed data. Re-read and escalate uncertainty; do not claim success or automatically retry.
+- `rejected` or `expired`: do not resume. A new attempt needs renewed explicit intent and a new key.
+- Rate limit: reduce pagination/concurrency and wait; do not rotate identities.
+
+Keep request and operation IDs for diagnosis, but redact bounded error details. Never print passwords, tokens, cookies, authorization headers, DPoP proofs/keys, credential-store records, or complete sensitive payloads.

package/dist/client.d.ts

@@ -0,0 +1,38 @@
+import type { OperationResponse, PendingOperation } from './types.js';
+export declare class DiffcatApiError extends Error {
+    readonly status: number;
+    readonly body: unknown;
+    constructor(message: string, status: number, body: unknown);
+}
+export declare class DiffcatClient {
+    readonly profile: string;
+    readonly server: string;
+    readonly keyringAccount: string;
+    private credential;
+    private constructor();
+    static load(profile: string): Promise<DiffcatClient>;
+    getStatus(): {
+        profile: string;
+        server: string;
+        authenticated: boolean;
+        accessExpiresAt: string;
+        scope: string[];
+        pendingOperationIds: string[];
+    };
+    getRefreshToken(): string;
+    get<T>(path: string, query?: Record<string, string>): Promise<T>;
+    post<T>(path: string, body: Record<string, unknown>, headers?: Record<string, string>): Promise<T>;
+    invoke(capabilityId: string, input: Record<string, unknown>, options?: {
+        operationId?: string;
+        idempotencyKey?: string;
+    }): Promise<OperationResponse>;
+    getPendingOperation(id: string): PendingOperation | null;
+    private apiRequest;
+    private ensureAccessToken;
+    private refresh;
+    private fetchWithDpop;
+    private applyToken;
+    private persistPendingOperation;
+}
+export declare function parseResponse(response: Response): Promise<unknown>;
+export declare function errorMessage(payload: unknown, status: number): string;

package/dist/client.js

@@ -0,0 +1,199 @@
+import { randomUUID } from 'node:crypto';
+import { buildServerUrl, getProfileConfig, normalizeServer, withProfileLock, } from './config-store.js';
+import { loadCredential, saveCredential } from './credential-store.js';
+import { createDpopProof } from './dpop.js';
+export class DiffcatApiError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.status = status;
+        this.body = body;
+        this.name = 'DiffcatApiError';
+    }
+}
+export class DiffcatClient {
+    profile;
+    server;
+    keyringAccount;
+    credential;
+    constructor(profile, server, keyringAccount, credential) {
+        this.profile = profile;
+        this.server = server;
+        this.keyringAccount = keyringAccount;
+        this.credential = credential;
+    }
+    static async load(profile) {
+        const config = await getProfileConfig(profile);
+        if (!config)
+            throw new Error(`配置 ${profile} 尚未登录，请先运行 diffcat auth login`);
+        const credential = loadCredential(config.keyringAccount);
+        if (!credential)
+            throw new Error(`系统凭据库中没有配置 ${profile} 的授权`);
+        return new DiffcatClient(profile, normalizeServer(config.server), config.keyringAccount, credential);
+    }
+    getStatus() {
+        return {
+            profile: this.profile,
+            server: this.server,
+            authenticated: true,
+            accessExpiresAt: this.credential.accessExpiresAt,
+            scope: this.credential.scope,
+            pendingOperationIds: Object.keys(this.credential.pendingOperations ?? {}),
+        };
+    }
+    getRefreshToken() {
+        return this.credential.refreshToken;
+    }
+    async get(path, query) {
+        const suffix = query ? `?${new URLSearchParams(query).toString()}` : '';
+        return this.apiRequest('GET', `${path}${suffix}`);
+    }
+    async post(path, body, headers = {}) {
+        return this.apiRequest('POST', path, body, headers);
+    }
+    async invoke(capabilityId, input, options = {}) {
+        const idempotencyKey = options.idempotencyKey ?? randomUUID();
+        const result = await this.post('/agent/v1/commands/execute', { capabilityId, input, operationId: options.operationId }, { 'Idempotency-Key': idempotencyKey });
+        if (result.status === 'awaiting_confirmation') {
+            await this.persistPendingOperation(result.operationId, {
+                capabilityId,
+                input,
+                idempotencyKey,
+                createdAt: new Date().toISOString(),
+            });
+        }
+        else if (['succeeded', 'failed', 'verification_failed', 'rejected', 'expired'].includes(result.status)) {
+            await this.persistPendingOperation(result.operationId, null);
+        }
+        return result;
+    }
+    getPendingOperation(id) {
+        return this.credential.pendingOperations?.[id] ?? null;
+    }
+    async apiRequest(method, path, body, headers = {}, retry = true) {
+        await this.ensureAccessToken();
+        const response = await this.fetchWithDpop(method, path, this.credential.accessToken, body, headers);
+        if (response.status === 401 && retry) {
+            await this.refresh(this.credential.accessToken);
+            return this.apiRequest(method, path, body, headers, false);
+        }
+        const payload = await parseResponse(response);
+        if (!response.ok) {
+            throw new DiffcatApiError(errorMessage(payload, response.status), response.status, payload);
+        }
+        const envelope = payload;
+        if (envelope &&
+            typeof envelope === 'object' &&
+            'success' in envelope &&
+            envelope.success === false) {
+            throw new DiffcatApiError(typeof envelope.msg === 'string' ? envelope.msg : 'Diffcat 业务调用失败', response.status, payload);
+        }
+        return envelope && typeof envelope === 'object' && 'data' in envelope
+            ? envelope.data
+            : payload;
+    }
+    async ensureAccessToken() {
+        if (new Date(this.credential.accessExpiresAt).getTime() > Date.now() + 30_000)
+            return;
+        await this.refresh();
+    }
+    async refresh(rejectedAccessToken) {
+        await withProfileLock(this.profile, async () => {
+            const latest = loadCredential(this.keyringAccount);
+            if (!latest)
+                throw new Error(`系统凭据库中没有配置 ${this.profile} 的授权`);
+            this.credential = latest;
+            const latestIsUsable = new Date(latest.accessExpiresAt).getTime() > Date.now() + 30_000 &&
+                (!rejectedAccessToken || latest.accessToken !== rejectedAccessToken);
+            if (latestIsUsable)
+                return;
+            const path = '/agent/v1/oauth/token';
+            const url = buildServerUrl(this.server, path);
+            const proof = await createDpopProof({
+                method: 'POST',
+                htu: url,
+                privateJwk: this.credential.privateJwk,
+                publicJwk: this.credential.publicJwk,
+            });
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json', DPoP: proof },
+                body: JSON.stringify({
+                    grant_type: 'refresh_token',
+                    client_id: 'diffcat-cli',
+                    refresh_token: this.credential.refreshToken,
+                }),
+            });
+            const payload = await parseResponse(response);
+            if (!response.ok) {
+                throw new DiffcatApiError(errorMessage(payload, response.status), response.status, payload);
+            }
+            this.applyToken(payload);
+            saveCredential(this.keyringAccount, this.credential);
+        });
+    }
+    async fetchWithDpop(method, path, accessToken, body, headers = {}) {
+        const url = new URL(buildServerUrl(this.server, path));
+        const proof = await createDpopProof({
+            method,
+            htu: `${url.origin}${url.pathname}`,
+            privateJwk: this.credential.privateJwk,
+            publicJwk: this.credential.publicJwk,
+            accessToken,
+        });
+        return fetch(url, {
+            method,
+            headers: {
+                Accept: 'application/json',
+                ...(body ? { 'Content-Type': 'application/json' } : {}),
+                Authorization: `DPoP ${accessToken}`,
+                DPoP: proof,
+                ...headers,
+            },
+            body: body ? JSON.stringify(body) : undefined,
+        });
+    }
+    applyToken(token) {
+        this.credential.accessToken = token.access_token;
+        this.credential.refreshToken = token.refresh_token;
+        this.credential.accessExpiresAt = new Date(Date.now() + token.expires_in * 1000).toISOString();
+        this.credential.scope = token.scope.split(' ').filter(Boolean);
+    }
+    async persistPendingOperation(operationId, pending) {
+        await withProfileLock(this.profile, async () => {
+            const latest = loadCredential(this.keyringAccount);
+            if (!latest)
+                throw new Error(`系统凭据库中没有配置 ${this.profile} 的授权`);
+            latest.pendingOperations ??= {};
+            if (pending)
+                latest.pendingOperations[operationId] = pending;
+            else
+                delete latest.pendingOperations[operationId];
+            saveCredential(this.keyringAccount, latest);
+            this.credential = latest;
+        });
+    }
+}
+export async function parseResponse(response) {
+    const text = await response.text();
+    if (!text)
+        return null;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return { error: 'invalid_response', error_description: text.slice(0, 500) };
+    }
+}
+export function errorMessage(payload, status) {
+    if (payload && typeof payload === 'object') {
+        const value = payload;
+        for (const key of ['error_description', 'msg', 'message', 'error']) {
+            if (typeof value[key] === 'string')
+                return value[key];
+        }
+    }
+    return `Diffcat 请求失败（HTTP ${status}）`;
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAe5C,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAG7B;IACA;IAHX,YACE,OAAe,EACN,MAAc,EACd,IAAa;QAEtB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAGtB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,aAAa;IAEb;IACA;IACA;IACD;IAJV,YACW,OAAe,EACf,MAAc,EACd,cAAsB,EACvB,UAA4B;QAH3B,YAAO,GAAP,OAAO,CAAQ;QACf,WAAM,GAAN,MAAM,CAAQ;QACd,mBAAc,GAAd,cAAc,CAAQ;QACvB,eAAU,GAAV,UAAU,CAAkB;IACnC,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAe;QAC/B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,OAAO,+BAA+B,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACzD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,OAAO,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,aAAa,CACtB,OAAO,EACP,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAC9B,MAAM,CAAC,cAAc,EACrB,UAAU,CACX,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,IAAI,CAAC,UAAU,CAAC,eAAe;YAChD,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,IAAI,EAAE,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,IAAY,EAAE,KAA8B;QACvD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC,UAAU,CAAI,KAAK,EAAE,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,IAAI,CACR,IAAY,EACZ,IAA6B,EAC7B,UAAkC,EAAE;QAEpC,OAAO,IAAI,CAAC,UAAU,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,YAAoB,EACpB,KAA8B,EAC9B,UAA6D,EAAE;QAE/D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,UAAU,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAC5B,4BAA4B,EAC5B,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EACzD,EAAE,iBAAiB,EAAE,cAAc,EAAE,CACtC,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;YAC9C,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,EAAE;gBACrD,YAAY;gBACZ,KAAK;gBACL,cAAc;gBACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;aAAM,IACL,CAAC,WAAW,EAAE,QAAQ,EAAE,qBAAqB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAC7F,CAAC;YACD,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mBAAmB,CAAC,EAAU;QAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,MAAc,EACd,IAAY,EACZ,IAA8B,EAC9B,UAAkC,EAAE,EACpC,KAAK,GAAG,IAAI;QAEZ,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CACvC,MAAM,EACN,IAAI,EACJ,IAAI,CAAC,UAAU,CAAC,WAAW,EAC3B,IAAI,EACJ,OAAO,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,UAAU,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,QAAQ,GAAG,OAAkC,CAAC;QACpD,IACE,QAAQ;YACR,OAAO,QAAQ,KAAK,QAAQ;YAC5B,SAAS,IAAI,QAAQ;YACrB,QAAQ,CAAC,OAAO,KAAK,KAAK,EAC1B,CAAC;YACD,MAAM,IAAI,eAAe,CACvB,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,EAClE,QAAQ,CAAC,MAAM,EACf,OAAO,CACR,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,IAAI,QAAQ;YACnE,CAAC,CAAE,QAAQ,CAAC,IAAU;YACtB,CAAC,CAAE,OAAa,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO;QACtF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,mBAA4B;QAChD,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,OAAO,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;YACzB,MAAM,cAAc,GAClB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBAChE,CAAC,CAAC,mBAAmB,IAAI,MAAM,CAAC,WAAW,KAAK,mBAAmB,CAAC,CAAC;YACvE,IAAI,cAAc;gBAAE,OAAO;YAE3B,MAAM,IAAI,GAAG,uBAAuB,CAAC;YACrC,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;gBAClC,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,GAAG;gBACR,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;gBACtC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;aACrC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,EAAE;gBAC5D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,UAAU,EAAE,eAAe;oBAC3B,SAAS,EAAE,aAAa;oBACxB,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY;iBAC5C,CAAC;aACH,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,eAAe,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,OAA6B,CAAC,CAAC;YAC/C,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,MAAc,EACd,IAAY,EACZ,WAAmB,EACnB,IAA8B,EAC9B,UAAkC,EAAE;QAEpC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC;YAClC,MAAM;YACN,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;YACtC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;YACpC,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,GAAG,EAAE;YAChB,MAAM;YACN,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,aAAa,EAAE,QAAQ,WAAW,EAAE;gBACpC,IAAI,EAAE,KAAK;gBACX,GAAG,OAAO;aACX;YACD,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,KAAyB;QAC1C,IAAI,CAAC,UAAU,CAAC,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,YAAY,GAAG,KAAK,CAAC,aAAa,CAAC;QACnD,IAAI,CAAC,UAAU,CAAC,eAAe,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/F,IAAI,CAAC,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjE,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,WAAmB,EACnB,OAAgC;QAEhC,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,OAAO,MAAM,CAAC,CAAC;YAC/D,MAAM,CAAC,iBAAiB,KAAK,EAAE,CAAC;YAChC,IAAI,OAAO;gBAAE,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC;;gBACxD,OAAO,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAClD,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAkB;IACpD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAgB,EAAE,MAAc;IAC3D,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAkC,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YACnE,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,OAAO,qBAAqB,MAAM,GAAG,CAAC;AACxC,CAAC"}