pdlab-cli 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 shadowcz007
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,91 @@
+# pdlab
+
+[1836 开源共建平台](https://github.com/shadowcz007/problem-driven-lab)的命令行工具。
+
+它是平台现有 REST API 的**薄封装**——没有任何绕过后端的旁路，权限、审核、积分规则一律由服务端判定。
+你在网页上是什么角色，在命令行里就是什么角色。
+
+```bash
+npm install -g pdlab-cli
+```
+
+需要 Node 18 或更高（用到了全局 `fetch`）。
+
+> 包名是 `pdlab-cli`，但装完之后敲的命令是 `pdlab`。
+> （包名叫 `pdlab` 会被 npm 的防仿冒过滤判定为与已有包 `lab` 过于相似，无法发布。）
+
+## 快速开始
+
+```bash
+# 首次使用需要告诉它服务器地址，之后会记住
+pdlab login --api-url https://your-1836-instance.example.com
+```
+
+`login` 会打印一个 8 位授权码并打开浏览器。你在网页上确认「以 XX 身份授权 pdlab 命令行工具」之后，
+终端会自动拿到凭证。整个过程不需要在命令行里输入密码。
+
+```bash
+pdlab whoami          # 看看当前是谁
+pdlab project list    # 列出项目
+```
+
+## 命令
+
+| 命令 | 说明 |
+|---|---|
+| `pdlab login` | 浏览器授权登录。凭证长期有效，直到被撤销 |
+| `pdlab register` | 提交注册申请。注册后需管理员审核，**不会**自动登录 |
+| `pdlab logout` | 清除本地凭证（不撤销服务端的，见下方「撤销凭证」） |
+| `pdlab whoami` | 查看当前登录账号 |
+| `pdlab config get` / `set api-url <url>` | 查看/修改本地配置 |
+| `pdlab project list \| get \| create \| update \| delete` | 项目的增删改查 |
+| `pdlab post list \| get \| create \| update \| delete` | 内容的增删改查 |
+
+任何命令加 `--help` 看具体参数。
+
+### 例子
+
+```bash
+# 按状态筛选项目
+pdlab project list --status active
+
+# 创建项目（需要项目创建权限，即「1836发起人」角色）
+pdlab project create --title "钠电储能原型" --description "第一阶段验证"
+
+# 往自己参与的项目发布内容（共建者发布后进待审队列）
+pdlab post create \
+  --project-id <项目 id> \
+  --title "第三周进展" \
+  --body "本周完成了……" \
+  --media-links "https://example.com/a.pdf,https://example.com/b.mp4"
+
+# 只看某个项目下的内容
+pdlab post list --project-id <项目 id>
+```
+
+## 配置
+
+配置存在 `~/.pdlab/config.json`（目录 `0700`、文件 `0600`）：
+
+```json
+{ "apiUrl": "https://your-1836-instance.example.com", "token": "pdlab_…" }
+```
+
+API 地址的解析顺序：`--api-url` 参数 > `PDLAB_API_URL` 环境变量 > 配置文件。
+在 CI 里可以只给环境变量，不落配置文件。
+
+## 凭证与安全
+
+- **凭证怎么来的**：走设备码授权——CLI 生成一次性 code，你在浏览器里确认后服务端才签发。
+  code 十分钟内有效、只能兑换一次。
+- **存的是什么**：服务端只保存凭证的 SHA-256 哈希，明文只在签发那一刻交付给 CLI 一次。
+  丢了就只能重新 `pdlab login`，任何人都无法从服务端把它读回来。
+- **撤销凭证**：`pdlab logout` 只清本地文件，服务端的凭证仍然有效。
+  要彻底作废请到网页的**个人中心 → API Token**，那里能看到每个凭证的签发时间、最近使用时间，并逐个撤销。
+- **注意**：每执行一次 `pdlab login` 都会**新签发一个**凭证，旧的不会自动失效。
+  换机器、换终端之后记得回上面那个页面清理。
+- 账号被禁用时，它名下的所有凭证会立刻失去写权限。
+
+## 许可证
+
+MIT

package/dist/index.js

@@ -0,0 +1,476 @@
+#!/usr/bin/env node
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/index.ts
+var import_fs2 = require("fs");
+var import_path2 = require("path");
+var import_commander = require("commander");
+
+// src/commands/login.ts
+var import_open = __toESM(require("open"));
+
+// src/config.ts
+var import_fs = require("fs");
+var import_os = require("os");
+var import_path = require("path");
+var CONFIG_DIR = (0, import_path.join)((0, import_os.homedir)(), ".pdlab");
+var CONFIG_FILE = (0, import_path.join)(CONFIG_DIR, "config.json");
+function readConfig() {
+  if (!(0, import_fs.existsSync)(CONFIG_FILE)) return {};
+  try {
+    return JSON.parse((0, import_fs.readFileSync)(CONFIG_FILE, "utf8"));
+  } catch {
+    return {};
+  }
+}
+function writeConfig(config) {
+  if (!(0, import_fs.existsSync)(CONFIG_DIR)) (0, import_fs.mkdirSync)(CONFIG_DIR, { recursive: true, mode: 448 });
+  (0, import_fs.writeFileSync)(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 });
+}
+function updateConfig(patch) {
+  const next = { ...readConfig(), ...patch };
+  writeConfig(next);
+  return next;
+}
+function resolveApiUrl(flagValue) {
+  const apiUrl = flagValue ?? process.env.PDLAB_API_URL ?? readConfig().apiUrl;
+  if (!apiUrl) {
+    console.error("\u672A\u914D\u7F6E API \u5730\u5740\u3002\u8BF7\u5148\u8FD0\u884C `pdlab login` / `pdlab register`\uFF0C\u6216\u8BBE\u7F6E PDLAB_API_URL \u73AF\u5883\u53D8\u91CF\u3002");
+    process.exit(1);
+  }
+  return apiUrl.replace(/\/+$/, "");
+}
+function requireToken() {
+  const token = readConfig().token;
+  if (!token) {
+    console.error("\u5C1A\u672A\u767B\u5F55\u3002\u8BF7\u5148\u8FD0\u884C `pdlab login`\u3002");
+    process.exit(1);
+  }
+  return token;
+}
+
+// src/api-client.ts
+var ApiRequestError = class extends Error {
+  constructor(message, status, details) {
+    super(message);
+    this.status = status;
+    this.details = details;
+  }
+  status;
+  details;
+};
+async function apiRequest(path, options = {}) {
+  const apiUrl = resolveApiUrl(options.apiUrl);
+  const url = new URL(path.replace(/^\/+/, ""), apiUrl + "/");
+  if (options.query) {
+    for (const [key, value] of Object.entries(options.query)) {
+      if (value !== void 0) url.searchParams.set(key, value);
+    }
+  }
+  const headers = {};
+  if (options.token) headers.Authorization = `Bearer ${options.token}`;
+  if (options.body !== void 0) headers["Content-Type"] = "application/json";
+  let res;
+  try {
+    res = await fetch(url, {
+      method: options.method ?? "GET",
+      headers,
+      body: options.body !== void 0 ? JSON.stringify(options.body) : void 0
+    });
+  } catch (cause) {
+    const reason = cause instanceof Error ? cause.message : String(cause);
+    throw new ApiRequestError(`\u65E0\u6CD5\u8FDE\u63A5\u5230 ${apiUrl}\uFF08${reason}\uFF09\u3002\u8BF7\u68C0\u67E5\u5730\u5740\u662F\u5426\u6B63\u786E\u3001\u670D\u52A1\u662F\u5426\u53EF\u8BBF\u95EE\u3002`, 0);
+  }
+  const text = await res.text();
+  let data = {};
+  if (text) {
+    try {
+      data = JSON.parse(text);
+    } catch {
+      const snippet = text.trim().slice(0, 120).replace(/\s+/g, " ");
+      throw new ApiRequestError(
+        `\u670D\u52A1\u7AEF\u8FD4\u56DE\u4E86\u975E JSON \u54CD\u5E94\uFF08HTTP ${res.status}\uFF09\uFF1A${snippet}${text.length > 120 ? "\u2026" : ""}`,
+        res.status
+      );
+    }
+  }
+  if (!res.ok) {
+    const body = data;
+    throw new ApiRequestError(body.error ?? `\u8BF7\u6C42\u5931\u8D25\uFF08HTTP ${res.status}\uFF09`, res.status, body.details);
+  }
+  return data;
+}
+
+// src/poll.ts
+var POLL_INTERVAL_MS = 2e3;
+var TERMINAL_STATUSES = /* @__PURE__ */ new Set(["consumed", "registered", "denied", "expired"]);
+async function pollCliAuth(code, apiUrl) {
+  for (; ; ) {
+    const result = await apiRequest("/api/cli/auth/poll", {
+      query: { code },
+      apiUrl
+    });
+    if (result.status === "approved" || TERMINAL_STATUSES.has(result.status)) return result;
+    await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));
+  }
+}
+
+// src/commands/login.ts
+function registerLoginCommand(program2) {
+  program2.command("login").description("\u5728\u6D4F\u89C8\u5668\u91CC\u5B8C\u6210\u4E00\u6B21\u6027\u6388\u6743\uFF0C\u767B\u5F55 pdlab CLI\uFF08token \u957F\u671F\u6709\u6548\uFF0C\u76F4\u5230\u88AB\u64A4\u9500\uFF09").option("--api-url <url>", "API \u670D\u52A1\u5668\u5730\u5740\uFF0C\u672A\u914D\u7F6E\u8FC7\u65F6\u5FC5\u987B\u63D0\u4F9B\u4E00\u6B21").action(async (opts) => {
+    const apiUrl = resolveApiUrl(opts.apiUrl);
+    const start = await apiRequest("/api/cli/auth/start", {
+      method: "POST",
+      body: { mode: "login" },
+      apiUrl
+    });
+    console.log(`\u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u5B8C\u6210\u6388\u6743\uFF1A${start.verifyUrl}`);
+    try {
+      await (0, import_open.default)(start.verifyUrl);
+    } catch {
+      console.log("\uFF08\u65E0\u6CD5\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF0C\u8BF7\u624B\u52A8\u590D\u5236\u4E0A\u9762\u7684\u94FE\u63A5\uFF09");
+    }
+    console.log("\u7B49\u5F85\u6388\u6743\u4E2D\u2026");
+    const result = await pollCliAuth(start.code, apiUrl);
+    if (result.status === "approved" && result.token) {
+      updateConfig({ token: result.token, apiUrl });
+      console.log("\u767B\u5F55\u6210\u529F\u3002");
+      return;
+    }
+    if (result.status === "expired") {
+      console.error("\u6388\u6743\u8BF7\u6C42\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C pdlab login\u3002");
+    } else {
+      console.error(`\u767B\u5F55\u672A\u5B8C\u6210\uFF08\u72B6\u6001\uFF1A${result.status}\uFF09\u3002`);
+    }
+    process.exit(1);
+  });
+}
+
+// src/commands/register.ts
+var import_open2 = __toESM(require("open"));
+function registerRegisterCommand(program2) {
+  program2.command("register").description("\u5728\u6D4F\u89C8\u5668\u91CC\u5B8C\u6210\u6CE8\u518C\u7533\u8BF7\uFF08\u6CE8\u518C\u540E\u9700\u7BA1\u7406\u5458\u5BA1\u6838\uFF0CCLI \u4E0D\u4F1A\u81EA\u52A8\u767B\u5F55\uFF09").option("--api-url <url>", "API \u670D\u52A1\u5668\u5730\u5740\uFF0C\u672A\u914D\u7F6E\u8FC7\u65F6\u5FC5\u987B\u63D0\u4F9B\u4E00\u6B21").action(async (opts) => {
+    const apiUrl = resolveApiUrl(opts.apiUrl);
+    const start = await apiRequest("/api/cli/auth/start", {
+      method: "POST",
+      body: { mode: "register" },
+      apiUrl
+    });
+    console.log(`\u8BF7\u5728\u6D4F\u89C8\u5668\u4E2D\u5B8C\u6210\u6CE8\u518C\uFF1A${start.verifyUrl}`);
+    try {
+      await (0, import_open2.default)(start.verifyUrl);
+    } catch {
+      console.log("\uFF08\u65E0\u6CD5\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF0C\u8BF7\u624B\u52A8\u590D\u5236\u4E0A\u9762\u7684\u94FE\u63A5\uFF09");
+    }
+    console.log("\u7B49\u5F85\u6CE8\u518C\u5B8C\u6210\u2026");
+    const result = await pollCliAuth(start.code, apiUrl);
+    if (result.status === "registered") {
+      console.log("\u6CE8\u518C\u7533\u8BF7\u5DF2\u63D0\u4EA4\uFF0C\u8BF7\u7B49\u5F85\u7BA1\u7406\u5458\u5BA1\u6838\u3002\u5BA1\u6838\u901A\u8FC7\u540E\u8FD0\u884C `pdlab login` \u767B\u5F55\u3002");
+      return;
+    }
+    if (result.status === "expired") {
+      console.error("\u6CE8\u518C\u8BF7\u6C42\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C pdlab register\u3002");
+    } else {
+      console.error(`\u6CE8\u518C\u672A\u5B8C\u6210\uFF08\u72B6\u6001\uFF1A${result.status}\uFF09\u3002`);
+    }
+    process.exit(1);
+  });
+}
+
+// src/commands/logout.ts
+function registerLogoutCommand(program2) {
+  program2.command("logout").description("\u6E05\u9664\u672C\u5730\u4FDD\u5B58\u7684\u767B\u5F55\u72B6\u6001\uFF08\u4E0D\u64A4\u9500\u670D\u52A1\u7AEF token\uFF0C\u64A4\u9500\u8BF7\u5230\u7F51\u9875\u300C\u4E2A\u4EBA\u4E2D\u5FC3 \u2192 API Token\u300D\uFF09").action(() => {
+    updateConfig({ token: void 0 });
+    console.log("\u5DF2\u9000\u51FA\u767B\u5F55\u3002\n\u6CE8\u610F\uFF1A\u670D\u52A1\u7AEF\u7684 token \u4ECD\u7136\u6709\u6548\uFF0C\u5982\u9700\u5F7B\u5E95\u4F5C\u5E9F\u8BF7\u5230\u7F51\u9875\u300C\u4E2A\u4EBA\u4E2D\u5FC3 \u2192 API Token\u300D\u64A4\u9500\u3002");
+  });
+}
+
+// src/commands/whoami.ts
+function registerWhoamiCommand(program2) {
+  program2.command("whoami").description("\u67E5\u770B\u5F53\u524D\u767B\u5F55\u7684\u8D26\u53F7").action(async () => {
+    const token = requireToken();
+    const { user } = await apiRequest("/api/auth/me", { token });
+    if (!user) {
+      console.error("token \u65E0\u6548\u6216\u5DF2\u88AB\u64A4\u9500\uFF0C\u8BF7\u91CD\u65B0\u8FD0\u884C pdlab login\u3002");
+      process.exit(1);
+    }
+    console.log(`${user.username} <${user.email}>\uFF08${user.status}\uFF0C${user.roleLabels.join("\u3001") || "\u65E0\u89D2\u8272"}\uFF09`);
+  });
+}
+
+// src/commands/config-cmd.ts
+function registerConfigCommand(program2) {
+  const config = program2.command("config").description("\u67E5\u770B/\u4FEE\u6539\u672C\u5730\u914D\u7F6E\uFF08~/.pdlab/config.json\uFF09");
+  config.command("get").description("\u6253\u5370\u5F53\u524D\u914D\u7F6E").action(() => {
+    const { token, ...rest } = readConfig();
+    console.log(JSON.stringify({ ...rest, token: token ? "***" : void 0 }, null, 2));
+  });
+  config.command("set <key> <value>").description("\u8BBE\u7F6E\u4E00\u9879\u914D\u7F6E\uFF0C\u76EE\u524D\u652F\u6301\uFF1Aapi-url").action((key, value) => {
+    if (key !== "api-url") {
+      console.error(`\u4E0D\u652F\u6301\u7684\u914D\u7F6E\u9879\uFF1A${key}\uFF08\u76EE\u524D\u53EA\u652F\u6301 api-url\uFF09`);
+      process.exit(1);
+    }
+    updateConfig({ apiUrl: value });
+    console.log(`\u5DF2\u5C06 api-url \u8BBE\u7F6E\u4E3A ${value}`);
+  });
+}
+
+// ../shared-schemas/src/safe-url.ts
+var import_zod = require("zod");
+var ALLOWED_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]);
+function isSafeHttpUrl(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return false;
+  }
+  return ALLOWED_PROTOCOLS.has(url.protocol);
+}
+var safeHttpUrl = import_zod.z.string().trim().max(2048, "\u94FE\u63A5\u8FC7\u957F").refine(isSafeHttpUrl, "\u53EA\u652F\u6301 http/https \u5F00\u5934\u7684\u94FE\u63A5");
+
+// ../shared-schemas/src/projects.ts
+var import_zod2 = require("zod");
+var PROJECT_STATUS_VALUES = ["planning", "active", "review", "completed"];
+var projectCreateSchema = import_zod2.z.object({
+  title: import_zod2.z.string().trim().min(1, "\u9879\u76EE\u6807\u9898\u4E0D\u80FD\u4E3A\u7A7A").max(200).describe("\u9879\u76EE\u6807\u9898"),
+  description: import_zod2.z.string().max(2e4).optional().describe("\u9879\u76EE\u63CF\u8FF0"),
+  coverImage: safeHttpUrl.optional().describe("\u5C01\u9762\u56FE http/https \u94FE\u63A5"),
+  commercialType: import_zod2.z.string().max(100).optional().describe("\u5546\u4E1A\u5C5E\u6027"),
+  status: import_zod2.z.enum(PROJECT_STATUS_VALUES).optional().describe("\u9879\u76EE\u72B6\u6001\uFF1Aplanning/active/review/completed"),
+  progress: import_zod2.z.number().int().min(0).max(100).optional().describe("\u9879\u76EE\u8FDB\u5EA6\u767E\u5206\u6BD4 0-100"),
+  taxonomyIds: import_zod2.z.array(import_zod2.z.string().min(1)).max(50).optional().default([]).describe("\u5206\u7C7B\u6807\u7B7E id \u5217\u8868")
+});
+var projectUpdateSchema = import_zod2.z.object({
+  title: import_zod2.z.string().trim().min(1, "\u9879\u76EE\u6807\u9898\u4E0D\u80FD\u4E3A\u7A7A").max(200).optional().describe("\u9879\u76EE\u6807\u9898"),
+  description: import_zod2.z.string().max(2e4).nullable().optional().describe("\u9879\u76EE\u63CF\u8FF0"),
+  coverImage: safeHttpUrl.nullable().optional().describe("\u5C01\u9762\u56FE http/https \u94FE\u63A5"),
+  commercialType: import_zod2.z.string().max(100).nullable().optional().describe("\u5546\u4E1A\u5C5E\u6027"),
+  progress: import_zod2.z.number().int().min(0).max(100).optional().describe("\u9879\u76EE\u8FDB\u5EA6\u767E\u5206\u6BD4 0-100"),
+  status: import_zod2.z.enum(PROJECT_STATUS_VALUES).optional().describe("\u9879\u76EE\u72B6\u6001\uFF1Aplanning/active/review/completed"),
+  taxonomyIds: import_zod2.z.array(import_zod2.z.string().min(1)).max(50).optional().describe("\u5206\u7C7B\u6807\u7B7E id \u5217\u8868\uFF08\u5168\u91CF\u66FF\u6362\uFF09")
+}).refine((v) => Object.keys(v).length > 0, "\u6CA1\u6709\u9700\u8981\u66F4\u65B0\u7684\u5B57\u6BB5");
+
+// ../shared-schemas/src/posts.ts
+var import_zod3 = require("zod");
+var postCreateSchema = import_zod3.z.object({
+  title: import_zod3.z.string().min(1).describe("\u5185\u5BB9\u6807\u9898"),
+  body: import_zod3.z.string().min(1).describe("\u5185\u5BB9\u6B63\u6587"),
+  projectId: import_zod3.z.string().describe("\u6240\u5C5E\u9879\u76EE id"),
+  mediaLinks: import_zod3.z.array(safeHttpUrl).max(20, "\u5A92\u4F53\u94FE\u63A5\u6700\u591A 20 \u6761").optional().default([]).describe("\u5A92\u4F53\u94FE\u63A5\u5217\u8868")
+});
+var postUpdateSchema = import_zod3.z.object({
+  title: import_zod3.z.string().trim().min(1, "\u6807\u9898\u4E0D\u80FD\u4E3A\u7A7A").max(200).describe("\u5185\u5BB9\u6807\u9898"),
+  body: import_zod3.z.string().trim().min(1, "\u6B63\u6587\u4E0D\u80FD\u4E3A\u7A7A").max(5e4).describe("\u5185\u5BB9\u6B63\u6587"),
+  mediaLinks: import_zod3.z.array(safeHttpUrl).max(20).optional().default([]).describe("\u5A92\u4F53\u94FE\u63A5\u5217\u8868")
+});
+var postReviewSchema = import_zod3.z.object({
+  action: import_zod3.z.enum(["approve", "reject"]).describe("\u5BA1\u6838\u7ED3\u679C\uFF1Aapprove/reject"),
+  reviewComment: import_zod3.z.string().trim().max(500, "\u5BA1\u6838\u610F\u89C1\u6700\u591A 500 \u5B57").optional().describe("\u5BA1\u6838\u610F\u89C1\uFF08\u9A73\u56DE\u65F6\u5FC5\u586B\uFF09")
+});
+
+// src/errors.ts
+var import_zod4 = require("zod");
+function printValidationError(error, examples) {
+  console.error("\u53C2\u6570\u9519\u8BEF\uFF1A");
+  for (const issue of error.issues) {
+    const path = issue.path.length > 0 ? issue.path.join(".") : "(\u6839)";
+    console.error(`  - ${path}: ${issue.message}`);
+  }
+  printExamples(examples);
+}
+function printExamples(examples) {
+  if (examples.length === 0) return;
+  console.error("\n\u793A\u4F8B\uFF1A");
+  for (const example of examples) {
+    console.error(`  $ ${example.command}`);
+    if (example.note) console.error(`    ${example.note}`);
+  }
+}
+function printApiError(error) {
+  console.error(`\u9519\u8BEF\uFF1A${error.message}`);
+  if (error.details && typeof error.details === "object") {
+    const flat = error.details;
+    for (const [field, messages] of Object.entries(flat.fieldErrors ?? {})) {
+      for (const message of messages) console.error(`  - ${field}: ${message}`);
+    }
+    for (const message of flat.formErrors ?? []) console.error(`  - ${message}`);
+  }
+}
+function handleCommandError(error, examples) {
+  if (error instanceof import_zod4.ZodError) {
+    printValidationError(error, examples);
+  } else if (error instanceof ApiRequestError) {
+    printApiError(error);
+  } else {
+    console.error(error);
+  }
+  process.exit(1);
+}
+
+// src/commands/project.ts
+var CREATE_EXAMPLES = [
+  {
+    command: 'pdlab project create --title "\u94A0\u7535\u56DE\u6536\u5DE5\u827A\u4F18\u5316" --description "..." --status planning --taxonomy-ids tax_1,tax_2',
+    note: "title \u5FC5\u586B\uFF0C\u5176\u4F59\u5B57\u6BB5\u53EF\u7701\u7565"
+  }
+];
+var UPDATE_EXAMPLES = [
+  { command: "pdlab project update proj_123 --progress 60 --status active", note: "\u53EA\u4F20\u8981\u6539\u7684\u5B57\u6BB5" }
+];
+function toBody(opts) {
+  const body = {};
+  if (opts.title !== void 0) body.title = opts.title;
+  if (opts.description !== void 0) body.description = opts.description;
+  if (opts.coverImage !== void 0) body.coverImage = opts.coverImage;
+  if (opts.commercialType !== void 0) body.commercialType = opts.commercialType;
+  if (opts.status !== void 0) body.status = opts.status;
+  if (opts.progress !== void 0) body.progress = Number(opts.progress);
+  if (opts.taxonomyIds !== void 0) {
+    body.taxonomyIds = opts.taxonomyIds.split(",").map((id) => id.trim()).filter(Boolean);
+  }
+  return body;
+}
+function withProjectFlags(cmd) {
+  return cmd.option("--title <title>", "\u9879\u76EE\u6807\u9898").option("--description <description>", "\u9879\u76EE\u63CF\u8FF0").option("--cover-image <url>", "\u5C01\u9762\u56FE http/https \u94FE\u63A5").option("--commercial-type <type>", "\u5546\u4E1A\u5C5E\u6027").option("--status <status>", "planning | active | review | completed").option("--progress <percent>", "\u8FDB\u5EA6 0-100").option("--taxonomy-ids <ids>", "\u9017\u53F7\u5206\u9694\u7684\u5206\u7C7B\u6807\u7B7E id \u5217\u8868");
+}
+function registerProjectCommand(program2) {
+  const project = program2.command("project").description("\u9879\u76EE\u7684\u589E\u5220\u6539\u67E5");
+  project.command("list").description("\u5217\u51FA\u9879\u76EE").option("--status <status>", "\u6309\u72B6\u6001\u7B5B\u9009\uFF1Aplanning | active | review | completed").action(async (opts) => {
+    const data = await apiRequest("/api/projects", { query: { status: opts.status } });
+    console.log(JSON.stringify(data, null, 2));
+  });
+  project.command("get <id>").description("\u67E5\u770B\u9879\u76EE\u8BE6\u60C5").action(async (id) => {
+    const data = await apiRequest(`/api/projects/${id}`);
+    console.log(JSON.stringify(data, null, 2));
+  });
+  withProjectFlags(project.command("create").description("\u521B\u5EFA\u9879\u76EE\uFF08\u9700\u8981\u9879\u76EE\u521B\u5EFA\u6743\u9650\uFF09")).action(
+    async (opts) => {
+      const token = requireToken();
+      try {
+        const body = projectCreateSchema.parse(toBody(opts));
+        const data = await apiRequest("/api/projects", { method: "POST", body, token });
+        console.log(JSON.stringify(data, null, 2));
+      } catch (error) {
+        handleCommandError(error, CREATE_EXAMPLES);
+      }
+    }
+  );
+  withProjectFlags(project.command("update <id>").description("\u66F4\u65B0\u9879\u76EE")).action(
+    async (id, opts) => {
+      const token = requireToken();
+      try {
+        const body = projectUpdateSchema.parse(toBody(opts));
+        const data = await apiRequest(`/api/projects/${id}`, { method: "PATCH", body, token });
+        console.log(JSON.stringify(data, null, 2));
+      } catch (error) {
+        handleCommandError(error, UPDATE_EXAMPLES);
+      }
+    }
+  );
+  project.command("delete <id>").description("\u5220\u9664\u9879\u76EE\uFF08\u9700\u8981\u662F\u9879\u76EE\u53D1\u8D77\u4EBA\uFF0C\u4E14\u9879\u76EE\u4E0B\u6CA1\u6709\u5185\u5BB9/\u79EF\u5206\u8BB0\u5F55\uFF09").action(async (id) => {
+    const token = requireToken();
+    const data = await apiRequest(`/api/projects/${id}`, { method: "DELETE", token });
+    console.log(JSON.stringify(data, null, 2));
+  });
+}
+
+// src/commands/post.ts
+var CREATE_EXAMPLES2 = [
+  {
+    command: 'pdlab post create --title "\u7B2C\u4E00\u5468\u8FDB\u5C55" --body "..." --project-id proj_123 --media-links https://example.com/a.png',
+    note: "title / body / project-id \u5FC5\u586B"
+  }
+];
+var UPDATE_EXAMPLES2 = [{ command: 'pdlab post update post_123 --title "..." --body "..."', note: "title \u548C body \u90FD\u5FC5\u987B\u4F20" }];
+function toMediaLinks(value) {
+  if (value === void 0) return void 0;
+  return value.split(",").map((url) => url.trim()).filter(Boolean);
+}
+function registerPostCommand(program2) {
+  const post = program2.command("post").description("\u5185\u5BB9\uFF08\u5E16\u5B50\uFF09\u7684\u589E\u5220\u6539\u67E5");
+  post.command("list").description("\u5217\u51FA\u5185\u5BB9").option("--project-id <id>", "\u6309\u9879\u76EE\u7B5B\u9009").option("--status <status>", "pending | approved | rejected\uFF08\u67E5\u770B\u975E approved \u9700\u8981\u5BA1\u6838\u6743\u9650\uFF09").action(async (opts) => {
+    const data = await apiRequest("/api/posts", { query: { projectId: opts.projectId, status: opts.status } });
+    console.log(JSON.stringify(data, null, 2));
+  });
+  post.command("get <id>").description("\u67E5\u770B\u5185\u5BB9\u8BE6\u60C5").action(async (id) => {
+    const data = await apiRequest(`/api/posts/${id}`);
+    console.log(JSON.stringify(data, null, 2));
+  });
+  post.command("create").description("\u53D1\u5E03\u5185\u5BB9\uFF08\u9700\u8981\u5185\u5BB9\u521B\u5EFA\u6743\u9650\uFF0C\u4E14\u662F\u9879\u76EE\u53D1\u8D77\u4EBA\u6216\u5DF2\u62A5\u540D\u5171\u5EFA\uFF09").option("--title <title>", "\u5185\u5BB9\u6807\u9898").option("--body <body>", "\u5185\u5BB9\u6B63\u6587").option("--project-id <id>", "\u6240\u5C5E\u9879\u76EE id").option("--media-links <urls>", "\u9017\u53F7\u5206\u9694\u7684\u5A92\u4F53\u94FE\u63A5").action(async (opts) => {
+    const token = requireToken();
+    try {
+      const body = postCreateSchema.parse({
+        title: opts.title,
+        body: opts.body,
+        projectId: opts.projectId,
+        mediaLinks: toMediaLinks(opts.mediaLinks)
+      });
+      const data = await apiRequest("/api/posts", { method: "POST", body, token });
+      console.log(JSON.stringify(data, null, 2));
+    } catch (error) {
+      handleCommandError(error, CREATE_EXAMPLES2);
+    }
+  });
+  post.command("update <id>").description("\u7F16\u8F91\u5185\u5BB9\uFF08\u4F5C\u8005\u672C\u4EBA\uFF0C\u6216\u6709\u7F16\u8F91\u4EFB\u610F\u5185\u5BB9\u7684\u6743\u9650\uFF09").option("--title <title>", "\u5185\u5BB9\u6807\u9898").option("--body <body>", "\u5185\u5BB9\u6B63\u6587").option("--media-links <urls>", "\u9017\u53F7\u5206\u9694\u7684\u5A92\u4F53\u94FE\u63A5").action(async (id, opts) => {
+    const token = requireToken();
+    try {
+      const body = postUpdateSchema.parse({
+        title: opts.title,
+        body: opts.body,
+        mediaLinks: toMediaLinks(opts.mediaLinks)
+      });
+      const data = await apiRequest(`/api/posts/${id}`, { method: "PATCH", body, token });
+      console.log(JSON.stringify(data, null, 2));
+    } catch (error) {
+      handleCommandError(error, UPDATE_EXAMPLES2);
+    }
+  });
+  post.command("delete <id>").description("\u5220\u9664\u5185\u5BB9\uFF08\u4F5C\u8005\u672C\u4EBA\uFF0C\u6216\u6709\u5220\u9664\u4EFB\u610F\u5185\u5BB9\u7684\u6743\u9650\uFF09").action(async (id) => {
+    const token = requireToken();
+    const data = await apiRequest(`/api/posts/${id}`, { method: "DELETE", token });
+    console.log(JSON.stringify(data, null, 2));
+  });
+}
+
+// src/index.ts
+var pkg = JSON.parse((0, import_fs2.readFileSync)((0, import_path2.join)(__dirname, "../package.json"), "utf8"));
+var program = new import_commander.Command();
+program.name("pdlab").description("1836 \u5F00\u6E90\u5171\u5EFA\u5E73\u53F0\u547D\u4EE4\u884C\u5DE5\u5177\u2014\u2014\u662F\u73B0\u6709 REST API \u7684\u8584\u5C01\u88C5").version(pkg.version);
+registerLoginCommand(program);
+registerRegisterCommand(program);
+registerLogoutCommand(program);
+registerWhoamiCommand(program);
+registerConfigCommand(program);
+registerProjectCommand(program);
+registerPostCommand(program);
+program.parseAsync(process.argv).catch((error) => {
+  if (error instanceof ApiRequestError) {
+    console.error(`\u9519\u8BEF\uFF1A${error.message}`);
+  } else {
+    console.error(error);
+  }
+  process.exit(1);
+});

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "pdlab-cli",
+  "version": "0.1.0",
+  "private": false,
+  "description": "1836 开源共建平台（problem-driven-lab）的命令行工具：项目、内容的增删改查，浏览器授权登录",
+  "keywords": [
+    "cli",
+    "1836",
+    "problem-driven-lab",
+    "pdlab"
+  ],
+  "license": "MIT",
+  "homepage": "https://github.com/shadowcz007/problem-driven-lab/tree/main/packages/cli#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/shadowcz007/problem-driven-lab.git",
+    "directory": "packages/cli"
+  },
+  "bugs": {
+    "url": "https://github.com/shadowcz007/problem-driven-lab/issues"
+  },
+  "bin": {
+    "pdlab": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsx src/index.ts"
+  },
+  "dependencies": {
+    "commander": "^14.0.0",
+    "open": "^10.1.0",
+    "zod": "^4.5.4"
+  },
+  "devDependencies": {
+    "@types/node": "^24.13.3",
+    "tsup": "^8.3.5",
+    "tsx": "^4.23.13",
+    "typescript": "^5",
+    "@pdlab/shared-schemas": "0.1.0"
+  }
+}