gaoding-cli 1.0.0-alpha.7 → 1.0.0-alpha.9

package/dist/src/commands/workflows.js

@@ -1,181 +1,109 @@
 import { AppRunner } from "../api/app-runner.js";
 import { withErrorHandler } from "../middleware/error-handler.js";
 import { formatOutput, rowsForAppList } from "../middleware/output.js";
-import { resolveInvokeOutputFormat, resolveListOutputFormat, } from "../utils/list-output-format.js";
 import { resolveAppActivityLabel } from "../utils/tool-display.js";
 import { createSpinner } from "../utils/spinner.js";
-import { appendAppRunQuickExample } from "../utils/help-verify.js";
 import { writeAppDeliverables } from "../utils/write-app-deliverables.js";
-import { emitJson, wrapEnvelope, shouldEmitEnvelope } from "../core/output/envelope.js";
+import { emitJson, failedEnvelope, publicCliErrorBody, wrapEnvelope, } from "../core/output/envelope.js";
 import { DIRECT_APPS, resolveAppSpec, } from "../registry/direct-registry.js";
-import { buildWorkflowExamples, buildWorkflowSchema, buildManifest, rowsForManifest, } from "../registry/agent-contracts.js";
-import { applySetEntries, collectArg, readJsonInput } from "../utils/input-json.js";
-import { setStaticHelp } from "../utils/static-help.js";
+import { buildWorkflowExamples, buildWorkflowSchema, PUBLIC_WORKFLOW_MEDIA_PATTERN, resolvePublicWorkflowOutputDefinition, } from "../registry/agent-contracts.js";
+import { readJsonInput } from "../utils/input-json.js";
 import { printCapabilityExamples, printCapabilitySchema, } from "../utils/capability-presenter.js";
-import { capabilityMetadata } from "../utils/capability-metadata.js";
+import { CliUsageError } from "../core/output/cli-error.js";
 import { assertReferenceImageAvailable, firstReferenceImage, } from "../utils/reference-image.js";
 import { buildEcommerceInputGuidance } from "../utils/ecommerce-input-guidance.js";
 import { resolveSafeOutputDir } from "../utils/output-path.js";
-const INTERNAL_OPTS = new Set([
-    "outputDir",
-    "save",
-    "async",
-    "timeout",
-    "dryRun",
-    "set",
-    "asset",
-]);
+import { setAuthRequirement } from "../middleware/auth.js";
+const PUBLIC_WORKFLOW_MEDIA_KEY = new RegExp(PUBLIC_WORKFLOW_MEDIA_PATTERN);
 export function registerWorkflowsCommand(program) {
-    const apps = program
+    const workflows = program
         .command("workflows")
         .usage("<command> [options]")
-        .description("完整创意场景 Workflows")
-        .configureHelp({ showGlobalOptions: true });
-    setStaticHelp(apps, WORKFLOWS_HELP);
-    apps
+        .description("完整创意场景 Workflows");
+    const list = workflows
         .command("list")
-        .alias("ls")
         .description("列出内置 Workflows")
+        .option("--json", "输出机器可读 JSON")
         .action(withErrorHandler(async (_options, command) => {
         const cmd = command;
-        const publicItems = DIRECT_APPS.map(toPublicAppPayload);
-        const format = resolveListOutputFormat(cmd);
-        if (shouldEmitEnvelope(format)) {
+        const publicItems = DIRECT_APPS.map(toPublicWorkflowPayload);
+        if (cmd.opts().json === true) {
             emitJson(wrapEnvelope({ workflows: publicItems }, { command: "workflows list" }));
         }
-        else if (format === "json") {
-            formatOutput(publicItems, format);
-        }
         else {
-            formatOutput(rowsForAppList(publicItems), format);
+            formatOutput(rowsForAppList(publicItems), "table");
         }
     }));
-    apps
-        .command("info <workflow-id>")
-        .description("查看 Workflow 详情")
-        .action(withErrorHandler(async (appId, _opts, command) => {
-        const cmd = command;
-        const detail = resolveAppSpec(String(appId));
-        if (!detail)
-            throw new Error(`未找到应用: ${String(appId)}`);
-        const payload = toPublicAppPayload(detail);
-        const format = cmd.parent?.parent?.opts().format ?? "json";
-        if (shouldEmitEnvelope(format)) {
-            emitJson(wrapEnvelope(payload, { command: "workflows info", workflow_id: appId }));
-        }
-        else {
-            formatOutput(payload, format);
-        }
-    }));
-    apps
+    setAuthRequirement(list, "none");
+    const schema = workflows
         .command("schema <workflow-id>")
         .description("查看 Workflow 输入/输出 JSON Schema")
+        .option("--json", "输出完整 JSON Schema")
         .action(withErrorHandler(async (appId, _opts, command) => {
         const cmd = command;
         const payload = buildWorkflowSchema(String(appId));
-        const format = resolveListOutputFormat(cmd);
-        if (format === "json") {
+        if (cmd.opts().json === true) {
             formatOutput(payload, "json");
         }
         else {
             printCapabilitySchema(payload);
         }
     }));
-    apps
+    setAuthRequirement(schema, "none");
+    const examples = workflows
         .command("examples <workflow-id>")
         .description("查看 Workflow 调用示例")
-        .action(withErrorHandler(async (appId, _opts, command) => {
-        const cmd = command;
+        .action(withErrorHandler(async (appId) => {
         const payload = buildWorkflowExamples(String(appId));
-        const format = resolveListOutputFormat(cmd);
-        if (format === "json") {
-            formatOutput(payload, "json");
-        }
-        else {
-            printCapabilityExamples(payload);
-        }
+        printCapabilityExamples(payload);
     }));
-    apps
-        .command("manifest")
-        .description("输出 Workflows 机器可读能力清单")
-        .action((_opts, command) => {
-        const manifest = buildManifest("workflows");
-        const format = resolveListOutputFormat(command);
-        formatOutput(format === "json" ? manifest : rowsForManifest(manifest), format);
-    });
-    const callCmd = apps
-        .command("run <workflow-id> [input]")
-        .usage("<workflow-id> [input] [options]")
+    setAuthRequirement(examples, "none");
+    const callCmd = workflows
+        .command("run <workflow-id>")
+        .usage("<workflow-id> [options]")
         .description("运行 Workflow（场景编排）")
         .option("--image <path>", "输入图片路径")
-        .option("--images <paths>", "多张图片（逗号分隔）")
-        .option("--prompt <text>", "文字描述 / brief")
-        .option("--brief <text>", "同 --prompt")
-        .option("--platforms <list>", "目标平台（逗号分隔）")
-        .option("--style <style>", "风格")
+        .option("--brief <text>", "创作需求说明")
         .option("--ratio <ratio>", "画面比例")
         .option("--ratios <list>", "多比例输出列表，如 16:9,1:1,4:5")
         .option("--copy-mode <mode>", "文案模式: auto / render-text / layout-copy / no-text / ask")
         .option("--model <code-or-name>", "生图模型 code / 名称 / auto")
-        .option("--duration <value>", "视频时长参数")
-        .option("--input <path>", "从 JSON 文件读取输入；非 .json 文件作为 Workflow input 参数")
-        .option("--set <key=value>", "直接传入单个字段，可重复", collectArg)
-        .option("--asset <id-or-url>", "传入 DAM asset_id 或 CDN URL，可重复", collectArg)
-        .option("--assets-dir <dir>", "商品图片目录")
-        .option("--count <n>", "目标产出数量", parseInt)
-        .option("--concurrency <n>", "并发数", parseInt)
+        .option("--input <path>", "从 JSON 文件读取完整输入；传 - 表示读取 stdin")
         .option("--dry-run", "只输出计划，不实际调用业务接口", false)
-        .option("--save <dir>", "同 --output-dir")
         .option("-o, --output-dir <dir>", "结果输出目录", "./output")
         .option("--allow-sensitive-path", "确认上传默认受保护的本地路径", false)
-        .option("--async", "异步模式", false)
-        .option("--timeout <seconds>", "同步等待超时", "600")
-        .allowUnknownOption(true)
+        .option("--json", "输出机器可读 JSON")
         .allowExcessArguments(false);
-    callCmd.action(withErrorHandler(async (appId, input, options, command) => {
-        await runAppCall(appId, input, options, command);
+    callCmd.action(withErrorHandler(async (appId, options) => {
+        await runAppCall(appId, options);
     }));
-    appendAppRunQuickExample(callCmd, "gd-cli workflows run");
-    callCmd.addHelpText("afterAll", WORKFLOW_RUN_HELP);
+    setAuthRequirement(callCmd, (command) => command.opts().dryRun === true ? "none" : "current-org");
 }
-export async function runAppCall(appId, inputRef, opts, cmd) {
+export async function runAppCall(appId, opts) {
     const spec = resolveAppSpec(appId);
     if (!spec)
-        throw new Error(`未找到应用: ${appId}`);
-    const inputOption = optionalString(opts.input);
-    const inputOptionIsJson = inputOption ? shouldReadJsonInput(inputOption) : false;
-    const inputArgIsJson = inputRef ? shouldReadJsonInput(inputRef) : false;
-    let params = {};
-    if (inputArgIsJson && inputRef) {
-        params = { ...params, ...(await readJsonInput(inputRef)) };
-    }
-    if (inputOptionIsJson && inputOption) {
-        params = { ...params, ...(await readJsonInput(inputOption)) };
-    }
-    params = {
-        ...params,
-        ...extractAppParams(cmd, opts, { skipInput: inputOptionIsJson }),
+        throw new Error(`未找到 Workflow: ${appId}`);
+    const inputRef = optionalString(opts.input);
+    const inputParams = inputRef
+        ? stripSensitiveWorkflowInput(await readJsonInput(inputRef))
+        : {};
+    const params = {
+        ...inputParams,
+        ...workflowFlagParams(opts),
     };
-    if (inputRef && !inputArgIsJson)
-        params.input = inputRef;
-    applySetEntries(params, opts.set);
-    applyAssetEntries(params, opts.asset);
-    if (opts.save)
-        opts.outputDir = opts.save;
+    validateWorkflowInput(spec, params);
+    const json = opts.json === true;
     if (opts.dryRun) {
         const payload = buildAppDryRunPlan(spec.id, params, opts);
-        const format = resolveInvokeOutputFormat(cmd);
-        if (shouldEmitEnvelope(format)) {
+        if (json) {
             emitJson(wrapEnvelope(payload, { command: "workflows run", workflow_id: spec.id }));
         }
         else {
-            formatOutput(payload, format);
+            formatOutput(payload, "human");
         }
         return;
     }
-    if (!opts.async) {
-        resolveSafeOutputDir(String(opts.outputDir ?? "./output"));
-    }
+    resolveSafeOutputDir(String(opts.outputDir ?? "./output"));
     assertAppReferenceImageAvailable(spec, params);
     const label = await resolveAppActivityLabel(spec.id);
     const spinner = createSpinner(`${label} · 处理中…`);
@@ -185,10 +113,7 @@ export async function runAppCall(appId, inputRef, opts, cmd) {
     let result;
     try {
         result = await runner.run(spec.id, params, {
-            async: !!opts.async,
-            timeout: parseInt(String(opts.timeout)),
-            outputDir: opts.outputDir,
-            concurrency: typeof opts.concurrency === "number" ? opts.concurrency : undefined,
+            allowSensitivePath: opts.allowSensitivePath === true,
             onStepStart: (step) => {
                 if (process.stderr.isTTY)
                     spinner.text = `${label} · ${step.step_name}…`;
@@ -221,7 +146,7 @@ export async function runAppCall(appId, inputRef, opts, cmd) {
             spinner.fail(`${label} · 失败`);
         throw error;
     }
-    if (result.status === "completed" && result.outputs && !opts.async) {
+    if (result.status === "completed" && result.outputs) {
         try {
             const pack = await writeAppDeliverables({
                 appId: spec.id,
@@ -249,13 +174,205 @@ export async function runAppCall(appId, inputRef, opts, cmd) {
         else
             spinner.stop();
     }
-    const format = resolveInvokeOutputFormat(cmd);
-    if (shouldEmitEnvelope(format)) {
-        emitJson(wrapEnvelope(result, { command: "workflows run", workflow_id: spec.id }));
+    if (json) {
+        emitPublicWorkflowJson(spec.id, result);
     }
     else {
-        formatOutput(result, format, { activityLabel: label });
+        formatPublicWorkflowHuman(spec.id, result, label);
     }
+    if (result.status === "failed") {
+        process.exitCode = 1;
+    }
+}
+function emitPublicWorkflowJson(workflowId, result) {
+    const meta = { command: "workflows run", workflow_id: workflowId };
+    if (result.status === "failed") {
+        const envelope = failedEnvelope(projectPublicWorkflowError(result.error), meta);
+        envelope.task_id = result.task_id;
+        emitJson(envelope);
+        return;
+    }
+    const envelope = wrapEnvelope(projectPublicWorkflowResult(workflowId, result), meta);
+    envelope.task_id = result.task_id;
+    emitJson(envelope);
+}
+function formatPublicWorkflowHuman(workflowId, result, activityLabel) {
+    if (result.status === "failed") {
+        formatOutput({
+            status: "failed",
+            task_id: result.task_id,
+            error: projectPublicWorkflowError(result.error),
+        }, "human", { activityLabel });
+        return;
+    }
+    const projected = projectPublicWorkflowResult(workflowId, result);
+    formatOutput({
+        status: "completed",
+        task_id: result.task_id,
+        outputs: projected.outputs,
+        deliverable_dir: projected.deliverable_dir,
+        deliverable_zip: projected.deliverable_zip,
+        deliverable_readme: projected.deliverable_readme,
+    }, "human", { activityLabel });
+}
+function projectPublicWorkflowResult(workflowId, result) {
+    return {
+        workflow_id: workflowId,
+        outputs: projectPublicWorkflowOutputs(workflowId, result.outputs),
+        ...(result.deliverable_dir ? { deliverable_dir: result.deliverable_dir } : {}),
+        ...(result.deliverable_zip ? { deliverable_zip: result.deliverable_zip } : {}),
+        ...(result.deliverable_readme ? { deliverable_readme: result.deliverable_readme } : {}),
+    };
+}
+function projectPublicWorkflowOutputs(workflowId, value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return {};
+    const definition = resolvePublicWorkflowOutputDefinition(workflowId);
+    return Object.fromEntries(Object.entries(value)
+        .flatMap(([key, item]) => {
+        const projected = projectPublicWorkflowOutput(definition, key, item);
+        return projected === undefined ? [] : [[key, projected]];
+    }));
+}
+function projectPublicWorkflowOutput(definition, key, value) {
+    if (definition.textFields.includes(key))
+        return publicString(value);
+    if (definition.mediaFields.includes(key) ||
+        (definition.mediaPattern !== undefined && isPublicKvKey(key))) {
+        return projectPublicWorkflowDeliverable(value);
+    }
+    if (key === "assets")
+        return projectPublicWorkflowAssets(value);
+    if (key === "copy_plan")
+        return projectPublicCopyPlan(value);
+    if (key === "overlay_copy") {
+        return projectPublicNamedStringRecord(value, definition.overlayFields, definition.mediaPattern !== undefined);
+    }
+    if (key === "category_profile")
+        return projectPublicCategoryProfile(value);
+    if (key === "ratios")
+        return projectPublicWorkflowRatios(definition, value);
+    if (key === "selling_points" && definition.sellingPoints) {
+        return publicStringArray(value);
+    }
+    return undefined;
+}
+function projectPublicWorkflowAssets(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value
+        .filter((item) => item && typeof item === "object" && !Array.isArray(item))
+        .map((item) => {
+        const asset = item;
+        return compactPublicRecord({
+            label: publicString(asset.label),
+            role: publicString(asset.role),
+            type: publicString(asset.type),
+            url: publicString(asset.url),
+        });
+    });
+}
+function projectPublicWorkflowDeliverable(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const deliverable = value;
+    return compactPublicRecord({
+        url: publicString(deliverable.url),
+        mime_type: publicString(deliverable.mime_type),
+        urls: publicStringArray(deliverable.urls),
+    });
+}
+function projectPublicCopyPlan(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const plan = value;
+    return compactPublicRecord({
+        mode: publicString(plan.mode),
+        render_text: typeof plan.render_text === "boolean" ? plan.render_text : undefined,
+        image_model: publicString(plan.image_model),
+    });
+}
+function projectPublicCategoryProfile(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const profile = value;
+    return compactPublicRecord({
+        id: publicString(profile.id),
+        label: publicString(profile.label),
+        guidance: publicString(profile.guidance),
+    });
+}
+function projectPublicWorkflowRatios(definition, value) {
+    if (definition.ratios === "array") {
+        return Array.isArray(value) ? publicStringArray(value) : undefined;
+    }
+    return projectPublicNamedStringRecord(value, definition.ratioFields);
+}
+function projectPublicNamedStringRecord(value, allowedKeys, allowDynamicKv = false) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const entries = Object.entries(value)
+        .flatMap(([key, item]) => (allowedKeys.includes(key) || (allowDynamicKv && isPublicKvKey(key))) &&
+        typeof item === "string"
+        ? [[key, item]]
+        : []);
+    return Object.fromEntries(entries);
+}
+function isPublicKvKey(key) {
+    return PUBLIC_WORKFLOW_MEDIA_KEY.test(key);
+}
+function projectPublicWorkflowError(value) {
+    if (typeof value === "string") {
+        return { code: "WORKFLOW_FAILED", type: "business", message: value };
+    }
+    const error = value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
+    const type = publicErrorType(error.type);
+    return publicCliErrorBody({
+        code: publicString(error.code) ?? "WORKFLOW_FAILED",
+        type,
+        message: publicString(error.message) ?? "Workflow 执行失败",
+        reason: publicString(error.reason),
+        hint: publicString(error.hint),
+        retryable: typeof error.retryable === "boolean" ? error.retryable : undefined,
+        diagnostic_context: error.diagnostic_context && typeof error.diagnostic_context === "object" &&
+            !Array.isArray(error.diagnostic_context)
+            ? error.diagnostic_context
+            : undefined,
+        next_command: publicString(error.next_command),
+        next_steps: publicStringArray(error.next_steps),
+        pricing_url: publicString(error.pricing_url),
+        user_action_required: publicString(error.user_action_required),
+        forbidden_actions: publicStringArray(error.forbidden_actions),
+        allow_org_check: typeof error.allow_org_check === "boolean" ? error.allow_org_check : undefined,
+        agent_message_template: publicString(error.agent_message_template),
+    });
+}
+function publicErrorType(value) {
+    return value === "business" ||
+        value === "auth" ||
+        value === "network" ||
+        value === "validation" ||
+        value === "unknown"
+        ? value
+        : "unknown";
+}
+function publicString(value) {
+    return typeof value === "string" && value ? value : undefined;
+}
+function publicStringArray(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    const items = value.filter((item) => typeof item === "string");
+    return items.length > 0 ? items : undefined;
+}
+function compactPublicRecord(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== undefined));
+}
+function stripSensitiveWorkflowInput(input) {
+    const { allow_sensitive_path: _allowSensitivePath, "allow-sensitive-path": _allowSensitivePathKebab, ...safeInput } = input;
+    return safeInput;
 }
 function buildAppDryRunPlan(appId, params, opts) {
     const spec = resolveAppSpec(appId);
@@ -263,16 +380,14 @@ function buildAppDryRunPlan(appId, params, opts) {
         throw new Error(`未找到应用: ${appId}`);
     const inputGuidance = buildEcommerceInputGuidance({
         appId: spec.id,
-        brief: params.brief ?? params.prompt,
-        hasReferenceImage: !appNeedsReferenceImage(spec) || Boolean(firstReferenceImage(params.image ?? params.images)),
+        brief: params.brief,
+        hasReferenceImage: !appNeedsReferenceImage(spec) || Boolean(firstReferenceImage(params.image)),
     });
     return {
         workflow: spec.id,
         dry_run: true,
         description: spec.description,
         inputs: params,
-        required_tools: spec.required_tools,
-        asset_operations: spec.asset_operations ?? [],
         outputs: spec.outputs ?? ["manifest.json", "README.md", "assets/"],
         estimated_duration: spec.estimated_duration,
         supports_batch: spec.supports_batch ?? false,
@@ -287,7 +402,7 @@ function buildAppDryRunPlan(appId, params, opts) {
 function assertAppReferenceImageAvailable(spec, params) {
     if (!appNeedsReferenceImage(spec))
         return;
-    assertReferenceImageAvailable(params.image ?? params.images, {
+    assertReferenceImageAvailable(params.image, {
         context: `${spec.id} / ${spec.name}`,
     });
 }
@@ -305,11 +420,14 @@ function stepResultUrl(stepResult) {
 }
 function buildNextAppCommand(appId, params, opts) {
     const pieces = ["gd-cli", "workflows", "run", appId];
-    for (const [key, value] of Object.entries({ ...params, ...opts })) {
-        if (INTERNAL_OPTS.has(key) || value === undefined || value === false)
-            continue;
+    for (const [key, value] of Object.entries(params)) {
         pieces.push(`--${kebabCase(key)}`, quoteShell(String(value)));
     }
+    if (opts.allowSensitivePath === true)
+        pieces.push("--allow-sensitive-path");
+    if (opts.outputDir && opts.outputDir !== "./output") {
+        pieces.push("--output-dir", quoteShell(String(opts.outputDir)));
+    }
     return pieces.join(" ");
 }
 function kebabCase(key) {
@@ -318,25 +436,47 @@ function kebabCase(key) {
 function quoteShell(value) {
     return /^[\w./:=,-]+$/.test(value) ? value : `"${value.replace(/"/g, '\\"')}"`;
 }
-function extractAppParams(command, opts, options = {}) {
+function workflowFlagParams(opts) {
     const params = {};
-    for (const [key, value] of Object.entries(opts)) {
-        if (key === "input" && options.skipInput)
-            continue;
-        if (!INTERNAL_OPTS.has(key) && value !== undefined && value !== false) {
-            params[key] = value;
-        }
-    }
-    const rawArgs = command.args.slice(1);
-    for (let i = 0; i < rawArgs.length; i += 2) {
-        if (rawArgs[i]?.startsWith("--")) {
-            params[rawArgs[i].replace(/^--/, "")] = rawArgs[i + 1];
-        }
+    for (const [option, field] of [
+        ["image", "image"],
+        ["brief", "brief"],
+        ["ratio", "ratio"],
+        ["ratios", "ratios"],
+        ["copyMode", "copy_mode"],
+        ["model", "model"],
+    ]) {
+        const value = optionalString(opts[option]);
+        if (value !== undefined)
+            params[field] = value;
     }
     return params;
 }
-function shouldReadJsonInput(value) {
-    return value === "-" || /\.json$/i.test(value);
+function validateWorkflowInput(spec, params) {
+    const known = new Set(spec.input.map((param) => param.name));
+    const unknown = Object.keys(params).filter((key) => !known.has(key));
+    if (unknown.length > 0) {
+        throw new CliUsageError({
+            code: "PARAM_INVALID",
+            type: "validation",
+            message: `Workflow 输入不支持字段: ${unknown.join(", ")}`,
+            hint: `运行 gd-cli workflows schema ${spec.id} --json 查看完整输入结构。`,
+            retryable: false,
+        });
+    }
+    const missing = spec.input
+        .filter((param) => param.required)
+        .map((param) => param.name)
+        .filter((name) => typeof params[name] !== "string" || !String(params[name]).trim());
+    if (missing.length > 0) {
+        throw new CliUsageError({
+            code: "PARAM_MISSING",
+            type: "validation",
+            message: `Workflow 缺少必填输入: ${missing.join(", ")}`,
+            hint: `运行 gd-cli workflows schema ${spec.id} 查看输入说明。`,
+            retryable: false,
+        });
+    }
 }
 function optionalString(value) {
     if (typeof value !== "string")
@@ -344,55 +484,17 @@ function optionalString(value) {
     const trimmed = value.trim();
     return trimmed ? trimmed : undefined;
 }
-function applyAssetEntries(target, entries) {
-    if (!Array.isArray(entries) || entries.length === 0)
-        return;
-    const assets = entries.map(String).filter(Boolean);
-    if (assets.length === 0)
-        return;
-    target.assets = assets;
-    if (!target.image && assets.length === 1)
-        target.image = assets[0];
-    if (!target.images && assets.length > 1)
-        target.images = assets;
-}
-function toPublicAppPayload(app) {
+function toPublicWorkflowPayload(app) {
     return {
-        ...app,
-        ...capabilityMetadata("app", app.id),
+        id: app.id,
+        name: app.name,
+        description: app.description,
+        category: app.category,
+        estimated_duration: app.estimated_duration,
+        deliverables: app.outputs ?? [],
+        consumes_quota: app.consumes_quota ?? false,
         canonical_command: `gd-cli workflows run ${app.id}`,
-        schema_command: `gd-cli workflows schema ${app.id} --format json`,
-        examples_command: `gd-cli workflows examples ${app.id} --format json`,
+        schema_command: `gd-cli workflows schema ${app.id} --json`,
+        examples_command: `gd-cli workflows examples ${app.id}`,
     };
 }
-const WORKFLOWS_HELP = `
-gd-cli workflows <command> [options]
-
-用于运行完整业务场景，例如商品图库素材包、详情页/A+模块素材包、小红书种草图文包。
-一个 Workflow 通常会编排多个 Tools，并输出一组可交付物料。
-
-常用命令:
-  list/ls                   列出内置 Workflows
-  info <workflow-id>        查看 Workflow 详情
-  run <workflow-id>         运行 Workflow，适合 Agent / 脚本
-  manifest                  输出 Workflows 能力清单
-  schema <workflow-id>      查看 Workflow 输入/输出 Schema
-  examples <workflow-id>    查看 Workflow 调用示例
-
-示例:
-  gd-cli workflows list
-  gd-cli workflows info listing-gallery
-  gd-cli workflows schema pdp-a-plus
-  gd-cli workflows run social-seeding-pack --input brief.json --format json
-`;
-const WORKFLOW_RUN_HELP = `
-
-JSON 输入:
-  gd-cli workflows run listing-gallery --input brief.json --format json
-  cat brief.json | gd-cli workflows run social-seeding-pack - --format json
-  gd-cli workflows run campaign-kv-pack --set brief="城市跑鞋新品 Campaign" --set image=./sku.png --format json
-
-说明:
-  --input <file> 传入 .json 时作为参数对象读取；其他文件类型会作为 Workflow 的 input 字段。
-  --dry-run 只校验输入和执行计划，不真正生成。
-`;

package/dist/src/core/auth/auth-guard.d.ts

@@ -0,0 +1,21 @@
+import { CredentialStoreV2 } from "../../auth/credential-store-v2.js";
+import type { CredentialsV2, OrgBinding } from "./types.js";
+export type AuthRequirement = "none" | "credential" | "current-org";
+export interface AuthGuardOptions {
+    store?: CredentialStoreV2;
+    now?: () => Date;
+    refreshCurrentOrg?: (organization: OrgBinding) => Promise<void>;
+    onRefreshWarning?: (error: unknown) => void;
+}
+export interface AuthGuardLike {
+    ensure(requirement: AuthRequirement): Promise<CredentialsV2 | null>;
+}
+export declare class AuthGuard {
+    private readonly store;
+    private readonly now;
+    private readonly refreshCurrentOrg;
+    private readonly onRefreshWarning;
+    constructor(options?: AuthGuardOptions);
+    ensure(requirement: AuthRequirement): Promise<CredentialsV2 | null>;
+    private clearCurrentOrganization;
+}