gaoding-cli 1.0.0-alpha.7 → 1.0.0-alpha.8

package/CHANGELOG.md

@@ -5,6 +5,26 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [1.0.0-alpha.8] - 2026-08-01
+
+### Added
+
+- 新增统一 `creative` 创作入口及可发现的输入输出 Schema、调用示例和连续创作支持。
+- 新增集中式鉴权前置层，按命令声明凭证或当前组织要求，并在请求前透明刷新当前组织授权。
+
+### Changed
+
+- `org credits` 取代顶层 `usage`，组织绑定与刷新有效期不再作为公开概念展示。
+- DAM 素材格式筛选统一使用 `--asset-format`，全局 `--format` 仅控制输出格式。
+
+### Removed
+
+- 删除公开的 `tools`、`models` 以及顶层 `usage`、`manifest` 和 `examples` 命令。
+
+### Fixed
+
+- 升级 `brace-expansion` 补丁版本，修复 production 依赖链中的高危拒绝服务漏洞。
+
 ## [1.0.0-alpha.7] - 2026-07-23
 
 ### Fixed

package/README.md

@@ -1,6 +1,6 @@
 # gaoding-cli
 
-GD CLI 是稿定设计能力的命令行入口，为用户、脚本、CI 和 Agent 提供登录、组织切换、单项 AI Tool、多步骤 Workflow 和 DAM 素材管理能力。
+GD CLI 是稿定设计能力的命令行入口，为用户、脚本、CI 和 Agent 提供登录、组织切换、统一 Creative 创作、多步骤 Workflow 和 DAM 素材管理能力。
 
 ## Requirements
 
@@ -36,9 +36,9 @@ gd-cli auth status
 gd-cli org list
 gd-cli org switch --org <org-id>
 
-gd-cli tools list
-gd-cli tools call image.cutout --image ./product.jpg --mode product
-gd-cli tools call text.title --brief "夏季运动鞋，轻量缓震，适合通勤"
+gd-cli creative schema --format json
+gd-cli creative examples --format json
+gd-cli creative run --prompt "为夏季运动鞋生成一张户外通勤广告图" --format json
 
 gd-cli workflows list
 gd-cli workflows run listing-gallery \
@@ -54,26 +54,30 @@ gd-cli dam upload ./product.jpg
 | --- | --- |
 | `auth` | 登录、退出和查看本地认证状态 |
 | `org` | 查看和切换当前组织 |
-| `tools` | 调用单项 AI 创意能力 |
+| `creative` | 统一发起图片、视频和文本创作 |
 | `workflows` | 运行多步骤创意生产流程 |
 | `skills` | 安装和管理 `gd-cli` Agent Skill |
 | `dam` | 上传、查询和删除 DAM 素材 |
 | `update` | 检查和升级全局 CLI |
-| `manifest` | 输出 Agent 可解析的能力清单 |
-| `examples` | 查看常用命令示例 |
+| `org credits` | 查询当前组织稿豆余额 |
 
 ## Agent And Script Usage
 
-核心命令支持 `--format json`，便于脚本和 Agent 解析。Agent 自身有语言模型时，标题、正文、标签和 prompt 草稿可优先由 Agent 生成；`gd-cli` 负责上传、抠图、生图、生视频、高清化和完整 Workflow 交付。
+核心命令支持 `--format json`，便于脚本和 Agent 解析。Creative 接收目标描述、媒体、结构化约束和连续会话信息，由 GD Agent 理解并完成创作；CLI 对使用者表现为一次输入、一次最终输出。
 
-单项能力使用 `tools call`：
+Creative 的完整输入和输出结构使用本地静态 Schema 发现：
 
 ```bash
-gd-cli tools call image.generate \
-  --prompt "电商主图，白底，突出轻量缓震" \
-  --image ./product.jpg \
-  --ratio 1:1 \
-  --format json
+gd-cli creative schema --format json
+gd-cli creative examples --format json
+```
+
+纯文本请求可以直接使用 `--prompt`；包含媒体、`parameters` 或连续会话信息时使用 JSON 输入：
+
+```bash
+gd-cli creative run --prompt "为夏季运动鞋生成三条简洁的电商标题" --format json
+gd-cli creative run --input creative-request.json --format json
+cat creative-request.json | gd-cli creative run --input - --format json
 ```
 
 多步骤交付使用 `workflows run`：

package/dist/src/api/app-runner.js

@@ -752,9 +752,8 @@ function normalizeAppStepError(error, step) {
             : "business",
         message: `${step.step_name} 执行失败：${friendlyErrorMessage(rawMessage)}`,
         raw_message: rawMessage,
-        hint: "可根据失败步骤单独调用对应 Tool 验证输入，也可以调整图片或 brief 后重试 App。",
+        hint: "请调整图片或 brief 后重试当前 Workflow；内部步骤由 Workflow 自动编排。",
         next_steps: [
-            `单独验证该步骤：gd-cli tools call ${step.tool}`,
             "调整输入后重试原 workflows run 命令。",
         ],
     };

package/dist/src/api/creative-client.d.ts

@@ -0,0 +1,34 @@
+import { DamClient, type DamUploadOptions } from "./dam-client.js";
+import { type DirectRequestOptions } from "./direct-client.js";
+import { type CreativeAgentMessage, type CreativeAgentRequest } from "../creative/protocol.js";
+import { type CreativeInput, type CreativeResult } from "../creative/contract.js";
+export declare const CREATIVE_COMPLETION_PATH: "/ai-agent/v1/thread/completion";
+export interface CreativeStreamClient {
+    postStream(path: string, body?: unknown, options?: DirectRequestOptions): Promise<Response>;
+}
+export interface CreativeUploadClient {
+    uploadLocalAsset(file: string, options?: DamUploadOptions): Promise<Awaited<ReturnType<DamClient["uploadLocalAsset"]>>>;
+}
+export interface CreativeClientDeps {
+    api?: CreativeStreamClient;
+    dam?: CreativeUploadClient;
+    idFactory?: () => string;
+}
+export declare class CreativeClient {
+    private readonly api;
+    private readonly dam;
+    private readonly idFactory;
+    constructor(deps?: CreativeClientDeps);
+    run(value: unknown): Promise<CreativeResult>;
+}
+/**
+ * Consume the Editor completion body without exposing transport events to the
+ * CLI caller. The Editor currently emits JSON arrays, sometimes as adjacent
+ * JSON values and sometimes wrapped in `data:` SSE records, so both forms are
+ * accepted here.
+ */
+export declare function parseCreativeSse(stream: ReadableStream<Uint8Array>): Promise<CreativeAgentMessage[]>;
+export declare function buildCreativeRequestForTest(input: CreativeInput, request: CreativeAgentRequest): {
+    input: CreativeInput;
+    request: CreativeAgentRequest;
+};

package/dist/src/api/creative-client.js

@@ -0,0 +1,184 @@
+import { randomUUID } from "node:crypto";
+import { DamClient } from "./dam-client.js";
+import { DirectApiClient } from "./direct-client.js";
+import { buildCreativeAgentRequest, normalizeCreativeMessages, } from "../creative/protocol.js";
+import { validateCreativeInput } from "../creative/contract.js";
+import { prepareCreativeMedia } from "../creative/media.js";
+export const CREATIVE_COMPLETION_PATH = "/ai-agent/v1/thread/completion";
+export class CreativeClient {
+    api;
+    dam;
+    idFactory;
+    constructor(deps = {}) {
+        this.api = deps.api ?? new DirectApiClient();
+        this.dam = deps.dam ?? new DamClient();
+        this.idFactory = deps.idFactory ?? randomUUID;
+    }
+    async run(value) {
+        const input = validateCreativeInput(value);
+        const uploader = (file, options) => this.dam.uploadLocalAsset(file, options);
+        const media = await prepareCreativeMedia(input.media ?? [], uploader);
+        const request = buildCreativeAgentRequest(input, media, {
+            local_thread_id: this.idFactory(),
+            local_message_id: this.idFactory(),
+        });
+        const response = await this.api.postStream(CREATIVE_COMPLETION_PATH, request, {
+            headers: { Accept: "text/event-stream" },
+        });
+        if (!response.body) {
+            throw new Error("Creative completion 没有返回流式响应");
+        }
+        const messages = await parseCreativeSse(response.body);
+        return normalizeCreativeMessages(messages, input.conversation_id ?? "");
+    }
+}
+/**
+ * Consume the Editor completion body without exposing transport events to the
+ * CLI caller. The Editor currently emits JSON arrays, sometimes as adjacent
+ * JSON values and sometimes wrapped in `data:` SSE records, so both forms are
+ * accepted here.
+ */
+export async function parseCreativeSse(stream) {
+    const reader = stream.getReader();
+    const decoder = new TextDecoder();
+    let raw = "";
+    try {
+        while (true) {
+            const result = await reader.read();
+            if (result.done)
+                break;
+            raw += decoder.decode(result.value, { stream: true });
+        }
+        raw += decoder.decode();
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const payloads = extractSsePayloads(raw);
+    const messages = [];
+    for (const payload of payloads) {
+        for (const value of parseJsonSequence(payload)) {
+            if (Array.isArray(value)) {
+                for (const item of value) {
+                    if (isMessage(item))
+                        messages.push(item);
+                }
+            }
+            else if (isMessage(value)) {
+                messages.push(value);
+            }
+        }
+    }
+    return messages;
+}
+function extractSsePayloads(raw) {
+    const normalized = raw.replace(/\r\n?/g, "\n");
+    const lines = normalized.split("\n");
+    const payloads = [];
+    let dataLines = [];
+    let foundDataLine = false;
+    const flush = () => {
+        if (dataLines.length > 0) {
+            payloads.push(dataLines.join("\n"));
+            dataLines = [];
+        }
+    };
+    for (const line of lines) {
+        if (line.startsWith("data:")) {
+            foundDataLine = true;
+            dataLines.push(line.slice(5).replace(/^ /, ""));
+        }
+        else if (line === "") {
+            flush();
+        }
+        else if (line.startsWith(":") || line.startsWith("event:") || line.startsWith("id:")) {
+            // SSE metadata/heartbeats do not contain completion messages.
+            continue;
+        }
+        else if (!foundDataLine) {
+            // The current backend may send raw JSON arrays without an SSE prefix.
+            dataLines.push(line);
+        }
+        else {
+            // A continuation line belongs to the current data record according to
+            // the SSE grammar.
+            dataLines.push(line);
+        }
+    }
+    flush();
+    return payloads;
+}
+function parseJsonSequence(payload) {
+    const values = [];
+    let index = 0;
+    while (index < payload.length) {
+        while (index < payload.length && /[\s,]/.test(payload[index] ?? ""))
+            index += 1;
+        if (index >= payload.length)
+            break;
+        const remaining = payload.slice(index).trim();
+        if (remaining === "[DONE]")
+            break;
+        const start = findJsonStart(payload, index);
+        if (start < 0)
+            break;
+        const end = findJsonEnd(payload, start);
+        if (end < 0)
+            break;
+        const text = payload.slice(start, end + 1);
+        try {
+            values.push(JSON.parse(text));
+        }
+        catch {
+            // A malformed event is ignored here; valid later events can still be
+            // delivered and the final normalizer will report an empty completion.
+        }
+        index = end + 1;
+    }
+    return values;
+}
+function findJsonStart(value, from) {
+    for (let index = from; index < value.length; index += 1) {
+        if (value[index] === "{" || value[index] === "[")
+            return index;
+    }
+    return -1;
+}
+function findJsonEnd(value, start) {
+    const stack = [];
+    let inString = false;
+    let escaped = false;
+    for (let index = start; index < value.length; index += 1) {
+        const char = value[index];
+        if (inString) {
+            if (escaped)
+                escaped = false;
+            else if (char === "\\")
+                escaped = true;
+            else if (char === '"')
+                inString = false;
+            continue;
+        }
+        if (char === '"') {
+            inString = true;
+            continue;
+        }
+        if (char === "{" || char === "[")
+            stack.push(char);
+        else if (char === "}" || char === "]") {
+            const opening = stack.pop();
+            if ((char === "}" && opening !== "{") || (char === "]" && opening !== "[")) {
+                return -1;
+            }
+            if (stack.length === 0)
+                return index;
+        }
+    }
+    return -1;
+}
+function isMessage(value) {
+    return !!value && typeof value === "object" && !Array.isArray(value);
+}
+export function buildCreativeRequestForTest(input, request) {
+    return { input, request };
+}

package/dist/src/api/direct-client.d.ts

@@ -1,4 +1,5 @@
 import { CredentialStoreV2 } from "../auth/credential-store-v2.js";
+import { type AuthGuardLike } from "../core/auth/auth-guard.js";
 type QueryValue = string | number | boolean | readonly (string | number | boolean)[] | undefined;
 export interface DirectRequestOptions {
     query?: Record<string, QueryValue>;
@@ -13,10 +14,16 @@ export declare class DirectApiError extends Error {
 }
 export declare class DirectApiClient {
     private baseUrl;
-    private storeV2;
-    constructor(baseUrl?: string, storeV2?: CredentialStoreV2);
+    private authGuard;
+    constructor(baseUrl?: string, storeV2?: CredentialStoreV2, authGuard?: AuthGuardLike);
     get<T>(path: string, options?: DirectRequestOptions): Promise<T>;
     post<T>(path: string, body?: unknown, options?: DirectRequestOptions): Promise<T>;
+    /**
+     * Start a streaming POST and leave the response body untouched for the
+     * caller. JSON requests use `post`; Creative uses this method for the
+     * Editor-compatible completion stream.
+     */
+    postStream(path: string, body?: unknown, options?: DirectRequestOptions): Promise<Response>;
     delete<T>(path: string, options?: DirectRequestOptions): Promise<T>;
     private request;
     private attachAuthHeaders;

package/dist/src/api/direct-client.js

@@ -1,7 +1,6 @@
-import chalk from "chalk";
 import { CredentialStoreV2 } from "../auth/credential-store-v2.js";
+import { AuthGuard, } from "../core/auth/auth-guard.js";
 import { signApiRequest } from "../core/auth/signature.js";
-import { isCredentialsV2 } from "../core/auth/types.js";
 import { CLI_USER_AGENT, resolveApiBase, resolveEndpoints } from "../utils/config.js";
 import { readEnv } from "./direct-auth.js";
 import { redactSensitiveText } from "../utils/redact.js";
@@ -20,10 +19,10 @@ export class DirectApiError extends Error {
 }
 export class DirectApiClient {
     baseUrl;
-    storeV2;
-    constructor(baseUrl = resolveApiBase(), storeV2 = new CredentialStoreV2()) {
+    authGuard;
+    constructor(baseUrl = resolveApiBase(), storeV2 = new CredentialStoreV2(), authGuard = new AuthGuard({ store: storeV2 })) {
         this.baseUrl = normalizeBaseUrl(baseUrl);
-        this.storeV2 = storeV2;
+        this.authGuard = authGuard;
     }
     async get(path, options) {
         return this.request("GET", path, undefined, options);
@@ -31,6 +30,39 @@ export class DirectApiClient {
     async post(path, body, options) {
         return this.request("POST", path, body, options);
     }
+    /**
+     * Start a streaming POST and leave the response body untouched for the
+     * caller. JSON requests use `post`; Creative uses this method for the
+     * Editor-compatible completion stream.
+     */
+    async postStream(path, body, options = {}) {
+        const url = buildUrl(this.baseUrl, path, options.query);
+        const headers = new Headers({
+            Accept: "text/event-stream",
+            "User-Agent": CLI_USER_AGENT,
+            ...defaultBusinessHeaders(this.baseUrl),
+            ...(options.headers ?? {}),
+        });
+        if (body !== undefined) {
+            headers.set("Content-Type", "application/json");
+        }
+        if (options.auth !== false) {
+            await this.attachAuthHeaders(headers, "POST", url);
+        }
+        const response = await fetch(url.toString(), {
+            method: "POST",
+            headers,
+            body: body === undefined ? undefined : JSON.stringify(body),
+        });
+        if (!response.ok) {
+            const parsed = await parseResponse(response);
+            throw new DirectApiError(response.status, parsed, url.toString());
+        }
+        if (!response.body) {
+            throw new DirectApiError(response.status, { message: "流式接口没有返回响应 body" }, url.toString());
+        }
+        return response;
+    }
     async delete(path, options) {
         return this.request("DELETE", path, undefined, options);
     }
@@ -60,20 +92,15 @@ export class DirectApiClient {
         return parsed;
     }
     async attachAuthHeaders(headers, method, url) {
-        const v2 = this.storeV2.read();
-        if (v2 && isCredentialsV2(v2)) {
-            if (!v2.current_org?.id) {
-                throw new Error(chalk.yellow("当前未绑定组织：请先执行 gd-cli org switch\n"));
-            }
-            const { signature, timestamp } = signApiRequest(method, url.pathname, url.searchParams.toString(), v2.sk);
-            headers.set("X-AccessKey", v2.ak);
-            headers.set("X-Signature", signature);
-            headers.set("X-Timestamp", timestamp);
-            headers.set("X-Org-Id", v2.current_org.id);
-            return;
+        const credentials = await this.authGuard.ensure("current-org");
+        if (!credentials?.current_org?.id) {
+            throw new Error("AuthGuard 未返回当前组织凭证。");
         }
-        console.log("");
-        throw new Error(chalk.yellow("先登录并绑定组织：gd-cli auth login\n"));
+        const { signature, timestamp } = signApiRequest(method, url.pathname, url.searchParams.toString(), credentials.sk);
+        headers.set("X-AccessKey", credentials.ak);
+        headers.set("X-Signature", signature);
+        headers.set("X-Timestamp", timestamp);
+        headers.set("X-Org-Id", credentials.current_org.id);
     }
 }
 export function unwrapEnvelope(value) {

package/dist/src/api/hub-client.d.ts

@@ -1,20 +1,23 @@
 import { CredentialStoreV2 } from "../auth/credential-store-v2.js";
+import { type AuthGuardLike } from "../core/auth/auth-guard.js";
 export declare class HubClient {
     private baseUrl;
-    private storeV2;
-    constructor(baseUrl?: string, storeV2?: CredentialStoreV2);
-    get<T>(path: string, options?: {
-        auth?: boolean;
-    }): Promise<T>;
-    post<T>(path: string, body?: unknown, options?: {
-        auth?: boolean;
-    }): Promise<T>;
+    private authGuard;
+    constructor(baseUrl?: string, storeV2?: CredentialStoreV2, authGuard?: AuthGuardLike);
+    get<T>(path: string, options?: HubRequestOptions): Promise<T>;
+    post<T>(path: string, body?: unknown, options?: HubRequestOptions): Promise<T>;
     private request;
     private attachAuthHeaders;
 }
+export interface HubRequestOptions {
+    auth?: boolean;
+    authRequirement?: AuthenticatedRequirement;
+}
+type AuthenticatedRequirement = "credential" | "current-org";
 export declare class ApiError extends Error {
     statusCode: number;
     body: string;
     path: string;
     constructor(statusCode: number, body: string, path: string);
 }
+export {};

package/dist/src/api/hub-client.js

@@ -1,6 +1,6 @@
 import { CredentialStoreV2 } from "../auth/credential-store-v2.js";
 import { resolveApiBase, CLI_USER_AGENT } from "../utils/config.js";
-import { isCredentialsV2 } from "../core/auth/types.js";
+import { AuthGuard, } from "../core/auth/auth-guard.js";
 import { signApiRequest } from "../core/auth/signature.js";
 import { redactSensitiveText } from "../utils/redact.js";
 function collectErrorCodes(err, out) {
@@ -27,10 +27,10 @@ function fetchFailureHint(baseUrl, requestUrl) {
 }
 export class HubClient {
     baseUrl;
-    storeV2;
-    constructor(baseUrl, storeV2) {
+    authGuard;
+    constructor(baseUrl, storeV2 = new CredentialStoreV2(), authGuard = new AuthGuard({ store: storeV2 })) {
         this.baseUrl = baseUrl ?? resolveApiBase();
-        this.storeV2 = storeV2 ?? new CredentialStoreV2();
+        this.authGuard = authGuard;
     }
     async get(path, options) {
         return this.request("GET", path, undefined, options);
@@ -46,7 +46,7 @@ export class HubClient {
         };
         const needsAuth = options?.auth !== false;
         if (needsAuth) {
-            await this.attachAuthHeaders(headers, method, path);
+            await this.attachAuthHeaders(headers, method, path, options?.authRequirement ?? "current-org");
         }
         let response;
         try {
@@ -69,20 +69,19 @@ export class HubClient {
         }
         return response.json();
     }
-    async attachAuthHeaders(headers, method, path) {
-        const v2 = this.storeV2.read();
-        if (v2 && isCredentialsV2(v2)) {
-            const url = new URL(path.replace(/^\//, ""), `${this.baseUrl.replace(/\/$/, "")}/`);
-            const { signature, timestamp } = signApiRequest(method, url.pathname, url.searchParams.toString(), v2.sk);
-            headers["X-AccessKey"] = v2.ak;
-            headers["X-Signature"] = signature;
-            headers["X-Timestamp"] = timestamp;
-            if (v2.current_org?.id) {
-                headers["X-Org-Id"] = v2.current_org.id;
-            }
-            return;
+    async attachAuthHeaders(headers, method, path, requirement) {
+        const credentials = await this.authGuard.ensure(requirement);
+        if (!credentials) {
+            throw new Error("AuthGuard 未返回签名凭证。");
+        }
+        const url = new URL(path.replace(/^\//, ""), `${this.baseUrl.replace(/\/$/, "")}/`);
+        const { signature, timestamp } = signApiRequest(method, url.pathname, url.searchParams.toString(), credentials.sk);
+        headers["X-AccessKey"] = credentials.ak;
+        headers["X-Signature"] = signature;
+        headers["X-Timestamp"] = timestamp;
+        if (requirement === "current-org" && credentials.current_org?.id) {
+            headers["X-Org-Id"] = credentials.current_org.id;
         }
-        throw new Error("AK/SK 模式需要先登录并绑定组织：\n  gd-cli auth login\n  gd-cli org switch --org <org-id>");
     }
 }
 export class ApiError extends Error {

package/dist/src/api/usage-client.d.ts

@@ -1,4 +1,5 @@
 import { CredentialStoreV2 } from "../auth/credential-store-v2.js";
+import { type AuthGuardLike } from "../core/auth/auth-guard.js";
 declare const RIGHTS_OVERVIEW_ENDPOINT = "/trade/rights-overview";
 declare const GAODOU = "GAODOU";
 export interface UsageCredits {
@@ -28,12 +29,11 @@ interface DirectGetClient {
     }): Promise<T>;
 }
 export declare class UsageClient {
-    private store;
-    private client;
-    constructor(store?: CredentialStoreV2, client?: DirectGetClient);
+    private readonly client;
+    private readonly authGuard;
+    constructor(store?: CredentialStoreV2, client?: DirectGetClient, authGuard?: AuthGuardLike);
     getCreditsOverview(): Promise<UsageOverview>;
     private fetchRightsOverview;
-    private readUsableCredentials;
 }
 export declare function normalizeUsageCredits(response: unknown): UsageCredits;
 export {};

package/dist/src/api/usage-client.js

@@ -1,17 +1,21 @@
 import { CredentialStoreV2 } from "../auth/credential-store-v2.js";
+import { AuthGuard, } from "../core/auth/auth-guard.js";
 import { CliUsageError } from "../core/output/cli-error.js";
 import { DirectApiClient, DirectApiError } from "./direct-client.js";
 const RIGHTS_OVERVIEW_ENDPOINT = "/trade/rights-overview";
 const GAODOU = "GAODOU";
 export class UsageClient {
-    store;
     client;
-    constructor(store = new CredentialStoreV2(), client = new DirectApiClient(undefined, store)) {
-        this.store = store;
-        this.client = client;
+    authGuard;
+    constructor(store = new CredentialStoreV2(), client, authGuard = new AuthGuard({ store })) {
+        this.authGuard = authGuard;
+        this.client = client ?? new DirectApiClient(undefined, store, authGuard);
     }
     async getCreditsOverview() {
-        const credentials = this.readUsableCredentials();
+        const credentials = await this.authGuard.ensure("current-org");
+        if (!credentials?.current_org?.id) {
+            throw new Error("AuthGuard 未返回当前组织凭证。");
+        }
         const response = await this.fetchRightsOverview();
         return {
             status: "completed",
@@ -53,50 +57,6 @@ export class UsageClient {
             throw error;
         }
     }
-    readUsableCredentials() {
-        const credentials = this.store.read();
-        if (!credentials) {
-            throw new CliUsageError({
-                code: "AUTH_MISSING",
-                type: "auth",
-                message: "未找到 AK/SK 凭证，请先登录。",
-                hint: "请先登录：gd-cli auth login",
-                retryable: false,
-                next_steps: ["gd-cli auth login"],
-            });
-        }
-        if (this.store.isAkExpired()) {
-            throw new CliUsageError({
-                code: "AUTH_EXPIRED",
-                type: "auth",
-                message: "AK/SK 凭证已过期，请重新登录。",
-                hint: "请重新登录：gd-cli auth login",
-                retryable: false,
-                next_steps: ["gd-cli auth login"],
-            });
-        }
-        if (!credentials.current_org?.id) {
-            throw new CliUsageError({
-                code: "ORG_REQUIRED",
-                type: "auth",
-                message: "当前未绑定组织，无法查询稿豆余额。",
-                hint: "请先切换组织：gd-cli org switch",
-                retryable: false,
-                next_steps: ["gd-cli org list", "gd-cli org switch"],
-            });
-        }
-        if (this.store.isBindExpired()) {
-            throw new CliUsageError({
-                code: "ORG_BIND_EXPIRED",
-                type: "auth",
-                message: "当前组织绑定已过期，无法查询稿豆余额。",
-                hint: "请重新切换组织：gd-cli org switch",
-                retryable: false,
-                next_steps: ["gd-cli org switch"],
-            });
-        }
-        return credentials;
-    }
 }
 export function normalizeUsageCredits(response) {
     const record = findGaodouRecord(response) ?? {};

package/dist/src/auth/credential-store-v2.d.ts

@@ -8,5 +8,4 @@ export declare class CredentialStoreV2 {
     write(credentials: CredentialsV2): void;
     delete(): void;
     isAkExpired(): boolean;
-    isBindExpired(): boolean;
 }

package/dist/src/auth/credential-store-v2.js

@@ -50,10 +50,4 @@ export class CredentialStoreV2 {
             return true;
         return new Date(creds.expires_at) <= new Date();
     }
-    isBindExpired() {
-        const creds = this.read();
-        if (!creds?.current_org?.bind_expires_at)
-            return false;
-        return new Date(creds.current_org.bind_expires_at) <= new Date();
-    }
 }