diffcat-cli 0.2.1

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAkBxC,MAAM,cAAc,GAClB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAG7E,CAAC,OAAO,CAAC;AAEV,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;KAC1B,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,uBAAuB,CAAC;KACpC,OAAO,CAAC,cAAc,CAAC;KACvB,MAAM,CAAC,sBAAsB,EAAE,QAAQ,EAAE,SAAS,CAAC;KACnD,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC;KACxC,wBAAwB,EAAE,CAAC;AAE9B,SAAS,OAAO;IACd,OAAO,OAAO,CAAC,IAAI,EAAiB,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,QAAkB;IAChD,OAAO,CAAC,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,MAAM;IACnB,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc;IACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,OAAO,OAAkC,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;AACrE,KAAK;KACF,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,+CAA+C,CAAC;KAC5D,MAAM,CAAC,GAAG,EAAE;IACX,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;QAC3E,KAAK,EAAE,SAAS;QAChB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,MAAM,CAAC,KAAK,CAAC;IACrC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEL,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;AAC5D,IAAI;KACD,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,6BAA6B,CAAC;KAC1C,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,GAAG,CAAC;KAC7E,SAAS,CACR,IAAI,MAAM,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAChF;KACA,SAAS,CACR,IAAI,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAC5E;KACA,MAAM,CAAC,sBAAsB,EAAE,YAAY,CAAC;KAC5C,MAAM,CACL,KAAK,EAAE,OAKN,EAAE,EAAE;IACH,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,EAAE,CAAC,CAAC;YACnD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa;gBAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,CACJ,MAAM,mBAAmB,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,CAAC,OAAO;QAC1B,MAAM;QACN,YAAY,EAAE,CAAC,GAAG,SAAS,CAAC;QAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEJ,IAAI;KACD,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,eAAe,CAAC;KAC5B,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,IAAI,CAAsB,6BAA6B,EAAE,EAAE,CAAC,CAAC;IAC5F,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC,CAAC;AAEL,IAAI;KACD,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,eAAe,CAAC;KAC5B,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACrD,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAAE;gBACpF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,MAAM,CAAC,YAAY;oBAC1B,SAAS,EAAE,aAAa;iBACzB,CAAC;aACH,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1E,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEL,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;AACrE,KAAK;KACF,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,cAAc,CAAC;KAC3B,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1F,KAAK;KACF,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,cAAc,CAAC;KAC3B,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,MAAM,EAAE,CAAC;QACX,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,iBAAiB,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,CAAC;AACjB,CAAC,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;AAC1E,UAAU;KACP,OAAO,CAAC,MAAM,CAAC;KACf,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9F,UAAU;KACP,OAAO,CAAC,eAAe,CAAC;KACxB,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,+BAA+B,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAC5E,CAAC;AACJ,UAAU;KACP,OAAO,CAAC,aAAa,CAAC;KACtB,cAAc,CAAC,wBAAwB,EAAE,uBAAuB,CAAC;KACjE,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC;KAC1C,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,OAAmD,EAAE,EAAE;IAChF,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QAChD,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,UAAU;KACP,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,sBAAsB,CAAC;KACnC,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,4BAA4B,CAAC,GAAG,CAAC;KAC7E,MAAM,CAAC,KAAK,EAAE,OAA2B,EAAE,EAAE,CAC5C,MAAM,CAAC,MAAM,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAC7D,CAAC;AAEJ,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;AACrE,QAAQ;KACL,OAAO,CAAC,iBAAiB,CAAC;KAC1B,MAAM,CAAC,wBAAwB,EAAE,WAAW,EAAE,IAAI,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,OAA0B,EAAE,EAAE,CACjE,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,GAAG,YAAY,OAAO,EAAE;IAC/B,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;CAC3C,CAAC,CACH,CACF,CAAC;AACJ,QAAQ;KACL,OAAO,CAAC,qBAAqB,CAAC;KAC9B,SAAS,CAAC,IAAI,MAAM,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;KACvF,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,EAAU,EAAE,OAA8B,EAAE,EAAE,CACjF,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,GAAG,YAAY,OAAO,EAAE;IAC/B,MAAM,EAAE,KAAK;IACb,EAAE;IACF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChE,CAAC,CACH,CACF,CAAC;AAEJ,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;AAC1E,QAAQ;KACL,OAAO,CAAC,iBAAiB,CAAC;KAC1B,MAAM,CAAC,wBAAwB,EAAE,WAAW,EAAE,IAAI,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,OAA0B,EAAE,EAAE,CACjE,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,GAAG,YAAY,OAAO,EAAE;IAC/B,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;CAC3C,CAAC,CACH,CACF,CAAC;AACJ,QAAQ;KACL,OAAO,CAAC,qBAAqB,CAAC;KAC9B,SAAS,CAAC,IAAI,MAAM,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;KACvF,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,EAAU,EAAE,OAA8B,EAAE,EAAE,CACjF,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,GAAG,YAAY,OAAO,EAAE;IAC/B,MAAM,EAAE,KAAK;IACb,EAAE;IACF,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChE,CAAC,CACH,CACF,CAAC;AACJ,QAAQ;KACL,OAAO,CAAC,yBAAyB,CAAC;KAClC,cAAc,CAAC,wBAAwB,EAAE,WAAW,CAAC;KACrD,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC;KAC1C,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,OAAmD,EAAE,EAAE,CAC1F,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,GAAG,YAAY,eAAe,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;IAC5E,cAAc,EAAE,OAAO,CAAC,cAAc;CACvC,CAAC,CACH,CACF,CAAC;AAEJ,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AAC/D,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,MAAM,CAAC,wBAAwB,EAAE,WAAW,EAAE,IAAI,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,OAA0B,EAAE,EAAE,CAC3C,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,kBAAkB,EAAE;IAC3B,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;CAC3C,CAAC,CACH,CACF,CAAC;AACJ,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CACjF,CAAC;AAEJ,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;AAC7E,UAAU;KACP,OAAO,CAAC,MAAM,CAAC;KACf,MAAM,CAAC,wBAAwB,EAAE,WAAW,EAAE,IAAI,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,OAA0B,EAAE,EAAE,CAC3C,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,mBAAmB,EAAE;IAC5B,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;CAC3C,CAAC,CACH,CACF,CAAC;AACJ,UAAU;KACP,OAAO,CAAC,UAAU,CAAC;KACnB,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAClF,CAAC;AACJ,UAAU;KACP,OAAO,CAAC,cAAc,CAAC;KACvB,cAAc,CAAC,wBAAwB,EAAE,aAAa,CAAC;KACvD,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC;KAC1C,MAAM,CAAC,KAAK,EAAE,OAAmD,EAAE,EAAE,CACpE,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,2BAA2B,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;IACzE,cAAc,EAAE,OAAO,CAAC,cAAc;CACvC,CAAC,CACH,CACF,CAAC;AAEJ,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;AAC/D,KAAK;KACF,OAAO,CAAC,MAAM,CAAC;KACf,MAAM,CAAC,gBAAgB,EAAE,cAAc,CAAC;KACxC,MAAM,CAAC,KAAK,EAAE,OAA4B,EAAE,EAAE,CAC7C,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,wBAAwB,EAAE;IACjC,MAAM,EAAE,MAAM;IACd,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACtD,CAAC,CACH,CACF,CAAC;AACJ,KAAK;KACF,OAAO,CAAC,OAAO,CAAC;KAChB,cAAc,CAAC,wBAAwB,EAAE,0BAA0B,CAAC;KACpE,MAAM,CAAC,KAAK,EAAE,OAA0B,EAAE,EAAE,CAC3C,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,wBAAwB,EAAE;IACjC,MAAM,EAAE,OAAO;IACf,GAAG,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;CACzC,CAAC,CACH,CACF,CAAC;AAEJ,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;AAC9D,IAAI;KACD,OAAO,CAAC,MAAM,CAAC;KACf,MAAM,CAAC,wBAAwB,EAAE,WAAW,EAAE,IAAI,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,OAA0B,EAAE,EAAE,CAC3C,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CAAC,iBAAiB,EAAE;IAC1B,MAAM,EAAE,MAAM;IACd,KAAK,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;CAC3C,CAAC,CACH,CACF,CAAC;AACJ,IAAI;KACD,OAAO,CAAC,UAAU,CAAC;KACnB,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAChF,CAAC;AACJ,IAAI;KACD,OAAO,CAAC,cAAc,CAAC;KACvB,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC;KAClC,MAAM,CAAC,yBAAyB,EAAE,OAAO,CAAC;KAC1C,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,OAAsD,EAAE,EAAE,CACnF,MAAM,CACJ,MAAM,CACJ,MAAM,MAAM,EAAE,CACf,CAAC,MAAM,CACN,oBAAoB,EACpB;IACE,MAAM,EAAE,EAAE;IACV,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CACzD,EACD,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAC3C,CACF,CACF,CAAC;AAEJ,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;AAC3E,SAAS;KACN,OAAO,CAAC,aAAa,CAAC;KACtB,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE,CAC3B,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,6BAA6B,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAC1E,CAAC;AACJ,SAAS;KACN,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,yBAAyB,CAAC;KACtC,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;IAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,CACJ,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,EAAE;QACpD,WAAW,EAAE,EAAE;QACf,cAAc,EAAE,OAAO,CAAC,cAAc;KACvC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,WAAW,CACjB,OAAO,EACP,8KAA8K,CAC/K,CAAC;AAEF,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC5C,SAAS,CACP;QACE,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;QACpD,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/D,SAAS,EAAE,UAAU,EAAE;KACxB,EACD,OAAO,EAAE,CAAC,MAAM,CACjB,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/json-input.d.ts

@@ -0,0 +1 @@
+export declare function parseJsonInput(value: string | undefined): Promise<Record<string, unknown>>;

package/dist/json-input.js

@@ -0,0 +1,28 @@
+import { readFile } from 'node:fs/promises';
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin)
+        chunks.push(Buffer.from(chunk));
+    return Buffer.concat(chunks).toString('utf8');
+}
+export async function parseJsonInput(value) {
+    if (!value)
+        return {};
+    const source = value === '-'
+        ? await readStdin()
+        : value.startsWith('@')
+            ? await readFile(value.slice(1), 'utf8')
+            : value;
+    let parsed;
+    try {
+        parsed = JSON.parse(source);
+    }
+    catch (error) {
+        throw new Error(`无法解析 JSON 输入：${String(error)}`);
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new Error('能力输入必须是 JSON 对象');
+    }
+    return parsed;
+}
+//# sourceMappingURL=json-input.js.map

package/dist/json-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-input.js","sourceRoot":"","sources":["../src/json-input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAyB;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GACV,KAAK,KAAK,GAAG;QACX,CAAC,CAAC,MAAM,SAAS,EAAE;QACnB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;YACxC,CAAC,CAAC,KAAK,CAAC;IACd,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAiC,CAAC;AAC3C,CAAC"}

package/dist/output.d.ts

@@ -0,0 +1,2 @@
+export declare function writeJson(value: unknown, pretty: boolean): void;
+export declare function writeProgress(message: string): void;

package/dist/output.js

@@ -0,0 +1,7 @@
+export function writeJson(value, pretty) {
+    process.stdout.write(`${JSON.stringify(value, null, pretty ? 2 : undefined)}\n`);
+}
+export function writeProgress(message) {
+    process.stderr.write(`${message}\n`);
+}
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,SAAS,CAAC,KAAc,EAAE,MAAe;IACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACvC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,37 @@
+import type { JWK } from 'jose';
+export interface PendingOperation {
+    capabilityId: string;
+    input: Record<string, unknown>;
+    idempotencyKey: string;
+    createdAt: string;
+}
+export interface StoredCredential {
+    privateJwk: JWK;
+    publicJwk: JWK;
+    refreshToken: string;
+    accessToken: string;
+    accessExpiresAt: string;
+    scope: string[];
+    pendingOperations: Record<string, PendingOperation>;
+}
+export interface CliProfileConfig {
+    server: string;
+    keyringAccount: string;
+}
+export interface CliConfig {
+    profiles: Record<string, CliProfileConfig>;
+}
+export interface OAuthTokenResponse {
+    access_token: string;
+    token_type: 'DPoP';
+    expires_in: number;
+    refresh_token: string;
+    scope: string;
+}
+export interface OperationResponse {
+    operationId: string;
+    status: string;
+    confirmationUrl?: string | null;
+    result?: unknown;
+    [key: string]: unknown;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "diffcat-cli",
+  "version": "0.2.1",
+  "description": "Security-first CLI for AI agents to invoke registered Diffcat capabilities",
+  "homepage": "https://diffcat.howcat.cn",
+  "type": "module",
+  "bin": {
+    "diffcat": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    ".agents/plugins/marketplace.json",
+    "connectors/workbuddy",
+    "plugins/diffcat",
+    "scripts/codex-plugin.mjs",
+    "!dist/**/*.test.*"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "node --test dist/**/*.test.js",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "postinstall": "node scripts/codex-plugin.mjs install --automatic",
+    "preuninstall": "node scripts/codex-plugin.mjs uninstall --automatic"
+  },
+  "dependencies": {
+    "@napi-rs/keyring": "^2.0.0",
+    "commander": "^14.0.0",
+    "jose": "^6.2.12"
+  },
+  "devDependencies": {
+    "@types/node": "^24.0.0",
+    "prettier": "^3.9.6",
+    "typescript": "^5.7.3"
+  }
+}

package/plugins/diffcat/.codex-plugin/plugin.json

@@ -0,0 +1,24 @@
+{
+  "name": "diffcat",
+  "version": "0.2.1",
+  "description": "Use the DiffCat CLI with capability discovery, least-privilege authorization, controlled business reads, draft creation, and verified approvals.",
+  "author": {
+    "name": "DiffCat"
+  },
+  "keywords": ["diffcat", "erp", "cli", "business-automation", "agent"],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "DiffCat",
+    "shortDescription": "安全查询 DiffCat 数据并办理受控业务操作",
+    "longDescription": "通过 DiffCat CLI 发现已登记能力，以最小权限查询基础资料、项目、统计和业务单据，创建草稿，并在用户二次确认后办理受支持的高风险操作。",
+    "developerName": "DiffCat",
+    "category": "Productivity",
+    "capabilities": ["Read", "Write"],
+    "defaultPrompt": [
+      "查询我在 DiffCat 中有权查看的客户和最近销售订单。",
+      "根据现有基础资料创建一张 DiffCat 单据草稿，并核对创建结果。",
+      "查看我的 DiffCat 待办；只有我明确指定后才发起受支持的审批。"
+    ],
+    "brandColor": "#165DFF"
+  }
+}

package/plugins/diffcat/README.md

@@ -0,0 +1,45 @@
+# DiffCat Codex Plugin
+
+这个插件随 `diffcat-cli` npm 包发布，为 Codex 提供 `$diffcat` Companion Skill。它不会绕过 DiffCat 的服务端权限，也不包含 MCP Server；所有业务操作都由同一 npm 包安装的 `diffcat` CLI 调用服务端登记能力。
+
+## 安装 CLI
+
+要求 Node.js 22 或更高版本，以及可用的系统凭据库。
+
+正常安装会同时携带并自动登记这个插件：
+
+```powershell
+npm install -g diffcat-cli
+```
+
+如果 npm 禁用了 lifecycle scripts、安装 CLI 时 Codex 尚不存在，或者自动登记失败，可在 Codex 可用后显式重试：
+
+```powershell
+diffcat setup codex
+```
+
+安装或更新后新建一个 Codex 会话，让 Codex 重新加载 Skill。CLI 默认连接 `https://diffcat-api.howcat.cn`，并通过 `https://diffcat.howcat.cn` 完成浏览器设备授权；第一次连接或切换环境时需要重新授权。
+
+## 从仓库验证 npm 安装物
+
+在 `cli` 目录执行：
+
+```powershell
+pnpm install
+pnpm typecheck
+pnpm build
+pnpm test
+$package = npm pack --silent
+npm install -g ".\$package"
+diffcat setup codex
+```
+
+## 开发校验
+
+从仓库根目录执行：
+
+```powershell
+$codexSkillRoot = Join-Path $env:USERPROFILE '.codex\skills\.system'
+python "$codexSkillRoot\skill-creator\scripts\quick_validate.py" plugins\diffcat\skills\diffcat
+python "$codexSkillRoot\plugin-creator\scripts\validate_plugin.py" plugins\diffcat
+```

package/plugins/diffcat/skills/diffcat/SKILL.md

@@ -0,0 +1,41 @@
+---
+name: diffcat
+description: Use the installed DiffCat CLI to query authorized business data, discover capability schemas, create supported document drafts, or handle supported workflow approvals. Trigger for DiffCat users, departments, roles, companies, currencies, exchange rates, dictionaries, accounts, units, customers, suppliers, products, materials, warehouses, projects, statistics, documents, and workflow tasks; do not use for arbitrary HTTP, SQL, or unrelated repository development.
+---
+
+# DiffCat CLI
+
+Use `diffcat` as the only business execution surface. The server capability catalog, the current grant, the user's live menu/action permissions, policy constraints, and object-level checks jointly determine access. Never bypass the CLI with internal REST endpoints, database access, browser form automation, GraphQL, SQL, or scripts.
+
+## Start safely
+
+1. Check that `diffcat` is on `PATH` with `diffcat --version`. If it is missing, explain that Node.js 22+ and `npm install -g diffcat-cli` are required, or ask permission to install the local packed CLI. Do not install packages implicitly.
+2. Use the requested profile with the global `--profile <name>` option. Keep environments in separate profiles and never silently switch a request from test to production.
+3. Run `diffcat --pretty auth status`. If the profile is not logged in, read [references/authentication.md](references/authentication.md). Request only the capabilities needed for the user's current and reasonably stated recurring workflow.
+4. Run `diffcat --pretty capability list` and, before constructing unfamiliar input, `diffcat --pretty capability describe <capability-id>`. Treat the returned capability definition and `inputSchema` as authoritative over examples or cached knowledge.
+
+## Route the task
+
+- For base/master data, identifiers, projects, documents, workflow tasks, or statistics, read [references/querying.md](references/querying.md).
+- For creating a business document draft, read [references/drafts-and-approvals.md](references/drafts-and-approvals.md#creating-a-draft).
+- For approving a workflow task, read [references/drafts-and-approvals.md](references/drafts-and-approvals.md#approving-a-task).
+- For the implemented capability/resource map, read [references/capabilities.md](references/capabilities.md). The live catalog remains authoritative.
+- For errors, interrupted writes, pending confirmations, idempotent retries, revocation, or verification failures, read [references/recovery.md](references/recovery.md).
+
+## Universal operating rules
+
+- Interpret authorization narrowly. A capability appearing in the public catalog does not mean the user has granted it. A login grant also does not replace live DiffCat permissions or object-level access.
+- Preserve least privilege. Prefer individual `--capability` requests. Use a preset only when the user asks for the corresponding broad, recurring access; never request every preset by default.
+- Reads may run when they are needed to answer the user's request. Mutations require clear user intent to create or approve the specific business object; a request to inspect, explain, plan, validate, or preview does not authorize a write.
+- Resolve human names to IDs through authorized read capabilities. Never guess an ID, company, department, customer, supplier, product, material, warehouse, currency, account, project, amount, date, or workflow decision. Ask the user when multiple valid matches remain or a business choice is missing.
+- Keep decimal quantities, prices, rates, and money values as JSON strings. Do not convert them through floating-point arithmetic.
+- Use `--input @file` or `--input -` for nontrivial JSON. Do not expose credentials in arguments, files, stdout, chat, logs, or generated artifacts.
+- Treat stdout as one JSON result document and stderr as human progress. Require exit code zero and inspect the JSON operation `status`; never infer success from prose or from an HTTP 200 alone.
+- Never report a write as successful when its status is `running`, `unknown`, `awaiting_confirmation`, `failed`, `verification_failed`, `rejected`, or `expired`.
+- Do not export or copy access tokens, refresh tokens, or DPoP keys. Do not adapt personal credentials for CI or containers. Use `diffcat auth logout` or `diffcat grant revoke` when the user asks to disconnect.
+
+## Complete the result
+
+For a read, summarize only the requested facts, retain returned identifiers needed for follow-up, and state when pagination or authorization limits make the result incomplete.
+
+For a write, use a stable idempotency key from the first attempt through every retry. After a `succeeded` result, independently read the created or affected object and verify its ID, status, company/department scope, business parties, currency, amounts, and line count as applicable. Report both the operation ID and the verification outcome.

package/plugins/diffcat/skills/diffcat/agents/openai.yaml

@@ -0,0 +1,6 @@
+interface:
+  display_name: 'DiffCat CLI'
+  short_description: '安全查询业务数据、创建草稿并办理受控审批'
+  default_prompt: 'Use $diffcat to query authorized business data and perform only the explicitly requested, supported operation.'
+policy:
+  allow_implicit_invocation: true

package/plugins/diffcat/skills/diffcat/references/authentication.md

@@ -0,0 +1,75 @@
+# DiffCat authentication and profiles
+
+Read this reference when a profile is not logged in, the requested capability is absent from the current grant, the user wants to change environments, or authorization must be revoked.
+
+## Discover before requesting access
+
+The public catalog does not require a login:
+
+```powershell
+diffcat --pretty capability catalog
+```
+
+Use its capability IDs and presets instead of inventing names. The catalog describes what the server can offer, not what the current user is entitled to receive.
+
+The CLI defaults to the production API at `https://diffcat-api.howcat.cn`. Use `--server <url>` only when the user explicitly chooses another deployment; keep different deployments in separate profiles.
+
+## Request minimum access
+
+Request individual capabilities for a narrow task:
+
+```powershell
+diffcat --profile default auth login `
+  --capability md.customers.read `
+  --capability sales.orders.read
+```
+
+For a clearly requested recurring workflow, the server currently advertises these convenience presets:
+
+- `master-data-read`: all registered base/master-data reads.
+- `document-read`: all 15 registered document reads.
+- `document-draft`: all 15 registered document draft-create abilities; no submit or approval.
+
+Do not request a preset merely to avoid deciding which capability is needed. Device authorization accepts at most 32 capability IDs; always use the live catalog to see what a preset expands to.
+
+The CLI prints the verification URL and progress to stderr. Production authorization opens on `https://diffcat.howcat.cn`. The user must open the DiffCat authorization page, inspect the device name, requested capabilities, constraints, and duration, then approve or deny them. Never approve the browser page for the user or ask for their password, verification code, token, cookie, or DPoP key in chat.
+
+The server grants only the intersection of:
+
+- registered client capabilities;
+- capabilities explicitly approved by the user;
+- the user's current menu and action permissions;
+- global, department, and role policies;
+- authorization constraints and object-level business checks.
+
+Some requested capabilities can therefore be omitted from the final grant. Verify the result:
+
+```powershell
+diffcat --pretty auth status
+diffcat --pretty grant list
+diffcat --pretty capability list
+```
+
+If a needed capability is absent, explain which operation cannot proceed. Start another login only after the user agrees to request that specific additional access.
+
+## Profiles and environments
+
+Use named profiles to isolate environments:
+
+```powershell
+diffcat --profile test --pretty auth status
+diffcat --profile production --pretty auth status
+```
+
+Repeat the same global `--profile` on every command in a multi-step workflow. Do not infer that two profiles represent the same tenant, and do not copy credentials between them.
+
+## Disconnect
+
+`auth logout` revokes the refresh token and deletes the local profile credentials. `grant revoke` revokes the current DPoP-bound grant and also clears the local profile:
+
+```powershell
+diffcat --profile default auth logout
+diffcat --profile default grant revoke
+```
+
+Revocation is an external state change. Execute it only when the user asks to disconnect or revoke access.

package/plugins/diffcat/skills/diffcat/references/capabilities.md

@@ -0,0 +1,75 @@
+# DiffCat implemented capabilities
+
+This is a routing snapshot of the current implementation. Always confirm availability, risk level, operations, and input schema with `capability list` and `capability describe` because server deployments and grants can differ.
+
+## Base and master data
+
+Use `diffcat resource list <resource>` and, where the described schema allows `get`, `diffcat resource get <resource> <id>`.
+
+| Resource                       | Business object          |
+| ------------------------------ | ------------------------ |
+| `sys.users`                    | 用户                     |
+| `sys.departments`              | 部门                     |
+| `sys.roles`                    | 角色                     |
+| `sys.dict_types`               | 字典类型                 |
+| `sys.dict_entries`             | 字典项                   |
+| `md.companies`                 | 公司                     |
+| `md.currencies`                | 币种                     |
+| `fin.exchange_rates`           | 汇率                     |
+| `md.uoms`                      | 计量单位                 |
+| `md.encoding_rules`            | 编码规则                 |
+| `md.fee_subjects`              | 费用科目                 |
+| `md.customers`                 | 客户                     |
+| `md.customer_contacts`         | 客户联系人               |
+| `md.customer_invoice_profiles` | 客户开票资料             |
+| `md.stores`                    | 门店                     |
+| `md.contracts`                 | 合同                     |
+| `md.products`                  | 商品                     |
+| `md.price_lists`               | 价目表                   |
+| `md.price_list_lines`          | 价目行                   |
+| `md.warehouses`                | 仓库                     |
+| `md.warehouse_members`         | 仓库成员；当前只支持列表 |
+| `md.suppliers`                 | 供应商                   |
+| `md.supplier_contacts`         | 供应商联系人             |
+| `md.materials`                 | 物料                     |
+| `md.bom_lines`                 | 物料清单行               |
+| `adm.supplies`                 | 行政用品                 |
+| `fin.bank_accounts`            | 银行账户                 |
+| `sales.crowdfunding_platforms` | 众筹平台                 |
+
+The capability ID is `<resource>.read`.
+
+## Business documents
+
+Each resource currently has `<resource>.read` and `<resource>.create_draft`. Use `document list`, `document get`, and `document create-draft` only after the live description confirms the operation.
+
+| Resource                            | Document     |
+| ----------------------------------- | ------------ |
+| `sales.orders`                      | 销售订单     |
+| `sales.direct_orders`               | 直销订单     |
+| `sales.consignment_reconciliations` | 代销对账单   |
+| `sales.crowdfunding_orders`         | 众筹履约订单 |
+| `inv.purchase_requests`             | 采购申请     |
+| `inv.inbound_orders`                | 入库单       |
+| `inv.outbound_orders`               | 出库单       |
+| `inv.stocktake_orders`              | 盘存单       |
+| `fin.expense_requests`              | 费用申请     |
+| `fin.invoice_requests`              | 开票申请     |
+| `fin.refund_requests`               | 退款申请     |
+| `adm.supply_entry_orders`           | 用品录入单   |
+| `adm.supply_issue_requests`         | 用品领用申请 |
+| `adm.supply_purchase_requests`      | 用品采购申请 |
+| `adm.supply_stocktake_orders`       | 用品盘点单   |
+
+All current create abilities create `DRAFT` only. They do not submit, start approval, post finance, or change inventory.
+
+## Specialized capabilities
+
+| Capability               | CLI route                           | Current boundary                                                                                    |
+| ------------------------ | ----------------------------------- | --------------------------------------------------------------------------------------------------- |
+| `pm.projects.read`       | `project list/get`                  | Authorized project list and detail                                                                  |
+| `data_center.stats.read` | `stats list/query`                  | Registered widgets only; no arbitrary SQL                                                           |
+| `flow.tasks.read`        | `task list/get` when schema permits | Tasks visible to the current handler user                                                           |
+| `flow.tasks.approve`     | `task approve`                      | Current user's pending purchase-request APPROVE/APPROVAL task only; high-risk confirmation required |
+
+`sales.orders.read` and `sales.orders.create_draft` also have specialized `sales-order` commands, but the generic `document` commands use the same capability IDs.

package/plugins/diffcat/skills/diffcat/references/drafts-and-approvals.md

@@ -0,0 +1,58 @@
+# DiffCat drafts and approvals
+
+Read only the relevant section for the requested mutation.
+
+## Creating a draft
+
+A request to research, list, inspect, prepare, preview, explain, or validate a document does not authorize creation. Proceed only when the user clearly asks to create the specific document draft.
+
+1. Confirm `<resource>.create_draft` is in the current grant and run `capability describe`.
+2. Resolve every referenced business object through authorized reads. Do not infer IDs from names or reuse an ID from a different profile/environment.
+3. Build input from the returned schema and its `inputModel`. The server additionally validates the corresponding business Create DTO, so schema acceptance alone does not prove business validity.
+4. Present unresolved business choices to the user. Do not invent missing company, party, warehouse, account, currency, tax, date, quantity, price, exchange rate, or line data.
+5. Generate one stable idempotency key before the first invocation and retain it until the operation has a terminal status.
+6. Put nontrivial JSON in a temporary input file without credentials, or pass it on stdin. Execute:
+
+```powershell
+diffcat --pretty document create-draft <resource> `
+  --input @draft.json `
+  --idempotency-key <stable-key>
+```
+
+7. Require exit code zero and operation status `succeeded`.
+8. Read the returned entity by ID. Confirm at least `status === "DRAFT"`, then compare the scope, parties, currency, totals, and line count/identifiers relevant to the user's request.
+
+The current handlers create a draft and internally re-read it to verify `DRAFT`. This does not replace the Agent's external comparison of the returned business fields. Draft creation never implies permission to submit, approve, post finance, or change inventory.
+
+If execution is interrupted or the status is not terminal, do not issue a fresh write with a new key. Read [recovery.md](recovery.md).
+
+## Approving a task
+
+Approval is irreversible and always requires both explicit user intent for the identified task and DiffCat's browser step-up confirmation. The currently implemented capability is intentionally narrow: it accepts only a `PENDING` purchase-request task whose grant function is `APPROVE`, node type is `APPROVAL`, and handler is the current user.
+
+1. Query the task and related purchase request. Show the user the task ID, document ID/number, requester, company/department, material lines, quantities, amounts, and any anomaly relevant to the decision.
+2. If the user has not explicitly chosen approval, stop after presenting the information. Never infer approval from “处理一下”“看看待办” or similar wording.
+3. Generate a stable idempotency key and invoke once:
+
+```powershell
+diffcat --pretty task approve 456 `
+  --comment "同意" `
+  --idempotency-key <stable-key>
+```
+
+4. The first response should be `awaiting_confirmation` with an operation ID and confirmation URL. Present those to the user. Do not open or operate the confirmation page for them, do not enter a password, and do not claim the approval occurred.
+5. After the user says they completed confirmation, check:
+
+```powershell
+diffcat --pretty operation status <operation-id>
+```
+
+6. Only when the operation is confirmed and the same local profile still contains its pending input, continue:
+
+```powershell
+diffcat --pretty operation resume <operation-id>
+```
+
+7. Require `succeeded`, then read the task and related purchase request again. Verify the task is completed by the current user and report the resulting document/workflow state.
+
+Never replace `operation resume` with another `task approve` call. Reject, expiry, missing local pending input, changed business state, or `verification_failed` requires recovery, not an improvised bypass.

package/plugins/diffcat/skills/diffcat/references/querying.md

@@ -0,0 +1,74 @@
+# Querying DiffCat safely
+
+Read this reference for authorized base/master data, document, project, statistics, and workflow-task reads.
+
+## Inspect the contract
+
+Before using a resource for the first time in the task:
+
+```powershell
+diffcat --pretty capability describe md.customers.read
+```
+
+Use only fields allowed by `inputSchema`. Query fields vary by resource. `include` accepts only named relation fields supported by the underlying resource model; do not invent them from database names.
+
+List requests default to 20 rows and are capped by both the capability schema and authorization constraints. The generic handlers cap a page at 100 even when a lower grant limit does not apply. Follow pagination deliberately and stop once the user's question is answered.
+
+## Base/master data
+
+```powershell
+diffcat --pretty resource list md.customers --query '{"page":1,"pageSize":20,"keyword":"示例"}'
+diffcat --pretty resource get md.materials 123 --include bomLines
+```
+
+Use list queries to resolve a human name or business number to an ID. If the result has multiple plausible matches, show a compact disambiguation using stable identifiers and relevant scope fields, then ask the user to choose.
+
+## Documents
+
+```powershell
+diffcat --pretty document list inv.purchase_requests --query '{"page":1,"pageSize":20,"status":"DRAFT"}'
+diffcat --pretty document get inv.purchase_requests 123
+```
+
+Do not assume all document types share filter fields or relation names. Describe each capability and use its deployed schema.
+
+## Projects
+
+```powershell
+diffcat --pretty project list --query '{"page":1,"pageSize":20,"keyword":"新品"}'
+diffcat --pretty project get 123
+```
+
+If the grant contains `allowedProjectIds`, list access can be rejected and the project must be queried by a permitted primary key. If it contains `allowedDepartmentIds`, project lists must specify an allowed `departmentId`.
+
+## Statistics
+
+First list the registered widgets for the current or target authorized role:
+
+```powershell
+diffcat --pretty stats list
+```
+
+Then query only returned widget codes:
+
+```powershell
+diffcat --pretty stats query --input @widgets.json
+```
+
+The input contains `roleId` and one to 24 `widgets`. Supported filters include an ISO date-time `dateRange`, a natural month/year period, `departmentId`, and a three-letter uppercase `currencyCode`, as allowed by the described schema. This ability never accepts SQL. Under a department constraint, every requested widget must specify an allowed department.
+
+## Workflow tasks
+
+```powershell
+diffcat --pretty task list --query '{"page":1,"pageSize":20,"status":"PENDING"}'
+diffcat --pretty task get 456
+```
+
+Use `task get` only if the live input schema permits `get`. Reading a task does not authorize completing it.
+
+## Interpret responses
+
+- A successful list may still be empty because no authorized rows match.
+- Keep strings such as IDs, decimals, currencies, and status codes in their returned representation.
+- If the response includes `total`, `page`, and `pageSize`, state whether all pages were examined.
+- A nonzero exit code or a JSON failure is not an empty result; report the failure and follow recovery guidance.

package/plugins/diffcat/skills/diffcat/references/recovery.md

@@ -0,0 +1,44 @@
+# DiffCat recovery and failure handling
+
+Read this reference for nonzero exits, authorization failures, network interruption, pending confirmation, an unknown/running operation, result verification failure, or revocation.
+
+## Classify before retrying
+
+- `401` or an expired access token: the CLI performs one synchronized refresh automatically. If it still fails, do not extract tokens or repeatedly retry; inspect `auth status` and ask the user to reauthorize if necessary.
+- Missing capability/access denied: inspect `auth status`, `grant list`, and `capability list`. Do not request broader access without user agreement, switch profiles, or bypass the CLI.
+- Schema/DTO validation failure: run `capability describe`, correct only fields supported by the user's intent and authoritative source data, then reuse the original idempotency key for the same logical write.
+- Rate limit/slow down: reduce pagination/concurrency and wait for the indicated server window. Do not rotate profiles or credentials to evade limits.
+- Business conflict or stale state: re-read the affected object. Ask the user before changing the intended business action.
+
+## Operations and idempotency
+
+Every write must have a stable idempotency key chosen before the first attempt. Reuse it only for the identical capability and identical logical input. Never reuse it for edited input or a different object.
+
+When an operation ID is known, inspect it before any retry:
+
+```powershell
+diffcat --pretty operation status <operation-id>
+```
+
+Interpret states conservatively:
+
+- `succeeded`: independently re-read and compare the business object before reporting completion.
+- `awaiting_confirmation`: wait for the user to complete or reject the browser confirmation; do not recreate the operation.
+- `running` or externally reported `unknown`: poll status at a reasonable interval. The server treats work running longer than two minutes as unknown to callers; do not replay it as a fresh write.
+- `failed`: report the bounded error and operation/request IDs. Re-read business state before deciding whether an identical idempotent retry is safe.
+- `verification_failed`: state that execution may have changed data but verification did not pass. Do not report success or automatically retry; read the target entity and escalate for human review if state remains uncertain.
+- `rejected` or `expired`: do not resume. A new attempt requires renewed explicit user intent and a new idempotency key.
+
+For a confirmed high-risk operation, use only:
+
+```powershell
+diffcat --pretty operation resume <operation-id>
+```
+
+`resume` depends on encrypted pending input retained in the same profile's operating-system credential store. If it is missing, do not reconstruct or execute the operation silently.
+
+## Safe diagnostics
+
+Capture the CLI's generated `requestId` and server `operationId` when reporting a problem. Output only bounded, redacted error details. Never print profile credential-store records, authorization headers, tokens, cookies, DPoP proofs/keys, passwords, or full sensitive inputs.
+
+Use `auth logout` or `grant revoke` only when requested or when the user explicitly chooses revocation as the recovery action; both disconnect the profile.