weaver-work-cli 0.1.36 → 0.1.39

package/dist/chunks/{project-6J63MK33.js → project-MDVZUYQW.js}

@@ -3,12 +3,13 @@ const require = __esbuildCreateRequire(import.meta.url);
 import {
   E10ApiError,
   createE10RequestRuntime,
+  isE10SessionExpiredResponse,
   requireE10Session
-} from "./chunk-JUXVYKII.js";
+} from "./chunk-EZGFHJFW.js";
 import {
   E10_SESSION_EXPIRED_MESSAGE,
   getActiveProfile
-} from "./chunk-JNG42JKG.js";
+} from "./chunk-XXJOSZTQ.js";
 import {
   CliError,
   isCliError,
@@ -266,7 +267,7 @@ function createProjectHost(ctx, dependencies = {}) {
     } catch (error) {
       mapRuntimeNetworkError(error);
     }
-    if (response.status === 401 || response.status === 302) {
+    if (isE10SessionExpiredResponse(response)) {
       throw projectAuthError("session_expired", E10_SESSION_EXPIRED_MESSAGE, {
         httpStatus: response.status
       });

package/dist/chunks/{registry-VRTNC6UR.js → registry-QCLZEDAP.js}

@@ -4,14 +4,14 @@ import {
   getMeetingOperation,
   hasMeetingOperation,
   meetingOperationDefinitions
-} from "./chunk-QHFANTX7.js";
-import "./chunk-BPE37FPB.js";
-import "./chunk-XMGSYD6S.js";
-import "./chunk-F746NKNF.js";
-import "./chunk-WXFPWCXG.js";
-import "./chunk-HXJQI5NM.js";
-import "./chunk-5DQEEGCC.js";
-import "./chunk-TC6MZAO3.js";
+} from "./chunk-NLK2RZKG.js";
+import "./chunk-T7JDJJ7H.js";
+import "./chunk-L4N7B7ZD.js";
+import "./chunk-P2DAISYW.js";
+import "./chunk-EINRJHQ3.js";
+import "./chunk-KTCB5R5H.js";
+import "./chunk-YS5DPN4T.js";
+import "./chunk-CQHGNCK2.js";
 import "./chunk-LUSPKZKY.js";
 import "./chunk-BUSC6UAE.js";
 export {

package/dist/chunks/{registry-KDD7DHNK.js → registry-VT5Y2HLA.js}

@@ -4,11 +4,11 @@ import {
   esbOperationDefinitions,
   getEsbOperation,
   hasEsbOperation
-} from "./chunk-6LLJFKJE.js";
-import "./chunk-I6QGIBDM.js";
+} from "./chunk-HJYVHXUQ.js";
+import "./chunk-BJGXMFGD.js";
 import "./chunk-GPMFD4RD.js";
-import "./chunk-JUXVYKII.js";
-import "./chunk-JNG42JKG.js";
+import "./chunk-EZGFHJFW.js";
+import "./chunk-XXJOSZTQ.js";
 import "./chunk-LUSPKZKY.js";
 import "./chunk-BUSC6UAE.js";
 export {

package/dist/chunks/{registry-TKX2E7C7.js → registry-YX4CSEMD.js}

@@ -4,12 +4,12 @@ import {
   getWorkflowOperation,
   hasWorkflowOperation,
   workflowOperationDefinitions
-} from "./chunk-VPUTVEMC.js";
+} from "./chunk-F2EQXUEE.js";
 import "./chunk-EZALDOQH.js";
 import "./chunk-FMPJJYYI.js";
-import "./chunk-EG6ZU444.js";
+import "./chunk-ZUX3P6BQ.js";
 import "./chunk-AJ62BGAW.js";
-import "./chunk-JNG42JKG.js";
+import "./chunk-XXJOSZTQ.js";
 import "./chunk-LUSPKZKY.js";
 import "./chunk-BUSC6UAE.js";
 export {

package/dist/chunks/{room-recommend-XCWRMB5P.js → room-recommend-L3MWH4JW.js}

@@ -6,10 +6,10 @@ import {
   loadRooms,
   recommendRooms,
   rememberFrequentRoom
-} from "./chunk-BPE37FPB.js";
-import "./chunk-F746NKNF.js";
-import "./chunk-5DQEEGCC.js";
-import "./chunk-TC6MZAO3.js";
+} from "./chunk-T7JDJJ7H.js";
+import "./chunk-P2DAISYW.js";
+import "./chunk-YS5DPN4T.js";
+import "./chunk-CQHGNCK2.js";
 import "./chunk-LUSPKZKY.js";
 import "./chunk-BUSC6UAE.js";
 export {

package/dist/chunks/{schedule-IVBICP32.js → schedule-UASAVDVD.js}

@@ -8,10 +8,10 @@ import {
   resolveMeetingScheduleTypeIds,
   resolveMemberIdsByName,
   runScheduleConflictFlow
-} from "./chunk-XMGSYD6S.js";
-import "./chunk-F746NKNF.js";
-import "./chunk-5DQEEGCC.js";
-import "./chunk-TC6MZAO3.js";
+} from "./chunk-L4N7B7ZD.js";
+import "./chunk-P2DAISYW.js";
+import "./chunk-YS5DPN4T.js";
+import "./chunk-CQHGNCK2.js";
 import "./chunk-LUSPKZKY.js";
 import "./chunk-BUSC6UAE.js";
 export {

package/dist/chunks/{workflow-D74NFK3C.js → workflow-KDGIUCNW.js}

@@ -2,7 +2,7 @@ import { createRequire as __esbuildCreateRequire } from 'node:module';
 const require = __esbuildCreateRequire(import.meta.url);
 import {
   createWorkflowHost
-} from "./chunk-VPXOPQJI.js";
+} from "./chunk-K3RUEEOL.js";
 import {
   USER_INTENT_RULE_FILE,
   aigroupUserDir,
@@ -17,7 +17,7 @@ import {
   validateRuleFile,
   workflowOperationDefinitions,
   workflowSuccess
-} from "./chunk-VPUTVEMC.js";
+} from "./chunk-F2EQXUEE.js";
 import {
   createWorkflowContinuationSigner
 } from "./chunk-EZALDOQH.js";
@@ -26,10 +26,10 @@ import {
   WorkflowCliError,
   workflowValidationError
 } from "./chunk-FMPJJYYI.js";
-import "./chunk-EG6ZU444.js";
+import "./chunk-ZUX3P6BQ.js";
 import "./chunk-AJ62BGAW.js";
-import "./chunk-JUXVYKII.js";
-import "./chunk-JNG42JKG.js";
+import "./chunk-EZGFHJFW.js";
+import "./chunk-XXJOSZTQ.js";
 import {
   isCliError,
   toErrorEnvelope
@@ -166,6 +166,7 @@ function namesOf(rule) {
 }
 function saveUserIntents(payload, options = {}) {
   const dir = options.dir ?? aigroupUserDir(options.ctx);
+  if (!dir) throw workflowValidationError("aigroup_no_skill_context", "\u65E0\u5F53\u524D skill \u4E0A\u4E0B\u6587\uFF08WEAVER_WORK_CLI_SKILL_DIR \u672A\u8BBE\u7F6E\uFF09\uFF1A\u7528\u6237\u610F\u56FE\u4E0D\u53EF\u8BFB\u5199");
   const warnings = [];
   const entries = normalizeIntentPayload(payload);
   if (entries.length === 0) throw workflowValidationError("aigroup_invalid", "\u5165\u53C2\u91CC\u6CA1\u6709\u89C4\u5219\u6761\u76EE");
@@ -206,6 +207,7 @@ function saveUserIntents(payload, options = {}) {
 }
 function readUserIntents(options = {}) {
   const dir = options.dir ?? aigroupUserDir(options.ctx);
+  if (!dir) return { dir: null, file: "", exists: false, error: "\u65E0\u5F53\u524D skill \u4E0A\u4E0B\u6587\uFF08WEAVER_WORK_CLI_SKILL_DIR \u672A\u8BBE\u7F6E\uFF09", rules: [] };
   const file = join(dir, USER_INTENT_RULE_FILE);
   if (!existsSync(file)) return { dir, file, exists: false, error: null, rules: [] };
   const loaded = loadRuleFile(file);
@@ -213,6 +215,7 @@ function readUserIntents(options = {}) {
 }
 function clearUserIntents(options = {}) {
   const dir = options.dir ?? aigroupUserDir(options.ctx);
+  if (!dir) throw workflowValidationError("aigroup_no_skill_context", "\u65E0\u5F53\u524D skill \u4E0A\u4E0B\u6587\uFF08WEAVER_WORK_CLI_SKILL_DIR \u672A\u8BBE\u7F6E\uFF09\uFF1A\u7528\u6237\u610F\u56FE\u4E0D\u53EF\u8BFB\u5199");
   const file = join(dir, USER_INTENT_RULE_FILE);
   mkdirSync(dir, { recursive: true, mode: 448 });
   writeFileSync(file, `${JSON.stringify({ schemaVersion: 2, rules: [] }, null, 2)}
@@ -382,7 +385,7 @@ var workflowShortcut = {
       const user = readUserIntents({ ctx });
       ctx.output.write({
         dir: loaded.dir,
-        defaultFile: join2(loaded.dir, "default.json"),
+        defaultFile: loaded.dir ? join2(loaded.dir, "default.json") : null,
         userIntentFile: user.file,
         userIntentExists: user.exists,
         userIntentError: user.error,

package/dist/core/output.js

@@ -63,21 +63,31 @@ export function refMaxBytes(ctx) {
 export function bytesOf(value) {
     return Buffer.byteLength(JSON.stringify(value ?? null, null, 2), 'utf8');
 }
-function compactValue(value, arrayLimit, stringLimit, depth = 0) {
+/** 链接类字段不参与截断：被截断的 URL 无法点击或调用。 */
+function isLinkField(key) {
+    if (!key)
+        return false;
+    return /(?:^|[a-z0-9])(?:url|urls|uri|href|link|links)$/i.test(key);
+}
+function compactValue(value, arrayLimit, stringLimit, depth = 0, key) {
     if (depth > 6)
         return '<omitted: too deep>';
+    // 链接字段整体豁免；数组元素继承父字段名，因此 openUrls / links 里的每条 URL 也完整保留
+    const limit = isLinkField(key) ? Number.MAX_SAFE_INTEGER : stringLimit;
     if (typeof value === 'string') {
-        return value.length > stringLimit
-            ? `${value.slice(0, stringLimit)}…(truncated ${value.length - stringLimit} chars)`
+        return value.length > limit
+            ? `${value.slice(0, limit)}…(truncated ${value.length - limit} chars)`
             : value;
     }
     if (Array.isArray(value)) {
-        return value.slice(0, arrayLimit).map((item) => compactValue(item, arrayLimit, stringLimit, depth + 1));
+        return value
+            .slice(0, arrayLimit)
+            .map((item) => compactValue(item, arrayLimit, limit, depth + 1, key));
     }
     if (value && typeof value === 'object') {
         const out = {};
-        for (const [key, inner] of Object.entries(value)) {
-            out[key] = compactValue(inner, arrayLimit, stringLimit, depth + 1);
+        for (const [name, inner] of Object.entries(value)) {
+            out[name] = compactValue(inner, arrayLimit, stringLimit, depth + 1, name);
         }
         return out;
     }

package/dist/index.js

@@ -7,12 +7,12 @@ import {
   firstPositionalToken,
   registerCommands,
   toCommandMetadata
-} from "./chunks/chunk-JYKABYCV.js";
-import "./chunks/chunk-EG6ZU444.js";
+} from "./chunks/chunk-GVPJZXJ2.js";
+import "./chunks/chunk-ZUX3P6BQ.js";
 import "./chunks/chunk-AJ62BGAW.js";
-import "./chunks/chunk-JCSN3JGM.js";
-import "./chunks/chunk-JUXVYKII.js";
-import "./chunks/chunk-JNG42JKG.js";
+import "./chunks/chunk-ZXRNHZTE.js";
+import "./chunks/chunk-EZGFHJFW.js";
+import "./chunks/chunk-XXJOSZTQ.js";
 import "./chunks/chunk-LUSPKZKY.js";
 import "./chunks/chunk-BUSC6UAE.js";
 
@@ -29,7 +29,7 @@ function lazyShortcut(definition) {
       placeholder.allowExcessArguments(true);
       placeholder.helpOption(false);
       placeholder.action(async () => {
-        const { dispatchLazyShortcut } = await import("./chunks/lazy-dispatch-QXW7P4X3.js");
+        const { dispatchLazyShortcut } = await import("./chunks/lazy-dispatch-NLZ5UQQI.js");
         await dispatchLazyShortcut(definition, shortcutMetadata());
       });
     }
@@ -39,112 +39,117 @@ var builtinShortcuts = [
   lazyShortcut({
     name: "invoice",
     description: "E10 \u4E1A\u7968\u901A\u53D1\u7968\u7BA1\u7406 CLI",
-    load: async () => (await import("./chunks/invoice-2Z6YPMIS.js")).invoiceShortcut
+    load: async () => (await import("./chunks/invoice-WNBS2B4C.js")).invoiceShortcut
   }),
   lazyShortcut({
     name: "ehr",
     description: "\u6CDB\u5FAEE10\u805A\u624D\u6797\uFF08\u4EBA\u4E8B/\u51FA\u52E4/\u85AA\u916C\uFF09CLI",
-    load: async () => (await import("./chunks/ehr-EAP77IMT.js")).ehrShortcut
+    load: async () => (await import("./chunks/ehr-RAQNEQO7.js")).ehrShortcut
   }),
   lazyShortcut({
     name: "cowork",
     description: "\u6CDB\u5FAEE10\u534F\u4F5C\u533A\uFF08\u534F\u4F5C\u4E8B\u9879/\u8BA8\u8BBA/\u5BA1\u6279/\u5171\u4EAB\u6743\u9650\uFF09CLI",
-    load: async () => (await import("./chunks/cowork-SCPGLBA4.js")).coworkShortcut
+    load: async () => (await import("./chunks/cowork-HNGBPD7A.js")).coworkShortcut
   }),
   lazyShortcut({
     name: "archive",
     description: "E10 \u6587\u4E66\u5B9A\u6863\u6848\u7BA1\u7406 CLI",
-    load: async () => (await import("./chunks/archive-XBVH7JU7.js")).archiveShortcut
+    load: async () => (await import("./chunks/archive-ENZYBBME.js")).archiveShortcut
   }),
   lazyShortcut({
     name: "archive-oa",
     description: "E10 \u6863\u6848\u5B9A\u4F4D\u4E0E OA \u5546\u52A1\u5408\u540C\u501F\u9605 CLI",
-    load: async () => (await import("./chunks/archive-oa-MZM3EKFQ.js")).archiveOaShortcut
+    load: async () => (await import("./chunks/archive-oa-YWLEC5V4.js")).archiveOaShortcut
   }),
   lazyShortcut({
     name: "calendar",
     description: "\u6CDB\u5FAEE10\u65E5\u7A0B\u7BA1\u7406 CLI\uFF08\u521B\u5EFA/\u67E5\u8BE2/\u66F4\u65B0/\u5220\u9664/\u5B57\u5178\uFF09",
-    load: async () => (await import("./chunks/calendar-MXEMTIO4.js")).calendarShortcut
+    load: async () => (await import("./chunks/calendar-CIARBAOX.js")).calendarShortcut
   }),
   lazyShortcut({
     name: "fna",
     description: "\u6CDB\u5FAEE10\u9F50\u4E1A\u6210\u8D39\u63A7\u4E2D\u5FC3\uFF08\u9884\u7B97/\u8D39\u7528\u4E2D\u5FC3/\u501F\u6B3E\u7BA1\u7406/\u53D1\u7968\u6838\u9500\uFF09CLI",
-    load: async () => (await import("./chunks/fna-2X7ZE7BU.js")).fnaShortcut
+    load: async () => (await import("./chunks/fna-XTSRB7G7.js")).fnaShortcut
   }),
   lazyShortcut({
     name: "hrm",
     description: "\u6CDB\u5FAEE10\u7EC4\u7EC7\u7BA1\u7406\uFF08\u5458\u5DE5/\u7EC4\u7EC7/\u5C97\u4F4D\u67E5\u8BE2\uFF09CLI",
-    load: async () => (await import("./chunks/hrm-YXERJM76.js")).hrmShortcut
+    load: async () => (await import("./chunks/hrm-TLHKC545.js")).hrmShortcut
   }),
   lazyShortcut({
     name: "mail",
     description: "\u6CDB\u5FAEE10\u90AE\u4EF6\u7BA1\u7406 CLI",
-    load: async () => (await import("./chunks/mail-7GZ6CPBJ.js")).mailShortcut
+    load: async () => (await import("./chunks/mail-LRYMBFNL.js")).mailShortcut
   }),
   lazyShortcut({
     name: "meeting",
     description: "\u6CDB\u5FAEE10\u4F1A\u8BAE\u7BA1\u7406 CLI\uFF08\u6807\u51C6\u7248\uFF1A\u67E5\u8BE2/\u51B2\u7A81/\u9884\u7EA6/\u56DE\u6267/\u7B7E\u5230\uFF09",
-    load: async () => (await import("./chunks/meeting-3NMGA3MB.js")).meetingShortcut
+    load: async () => (await import("./chunks/meeting-ESXL6MFI.js")).meetingShortcut
   }),
   lazyShortcut({
     name: "okr",
     description: "\u6CDB\u5FAEE10 OKR \u76EE\u6807\u7BA1\u7406 CLI\uFF08\u76EE\u6807\u67E5\u8BE2/\u65B0\u5EFA/\u7F16\u8F91\u3001\u5173\u952E\u6210\u679C\u3001\u76EE\u6807\u5BF9\u9F50\u3001\u8BC4\u8BBA\uFF09",
-    load: async () => (await import("./chunks/okr-BZ6XUOAG.js")).okrShortcut
+    load: async () => (await import("./chunks/okr-EOV65SSF.js")).okrShortcut
   }),
   lazyShortcut({
     name: "plan",
     description: "\u6CDB\u5FAEE10\u8BA1\u5212\u62A5\u544A CLI\uFF08\u67E5\u8BE2/\u65B0\u5EFA/\u4FEE\u6539/\u53D1\u5E03/\u64A4\u56DE/\u63D0\u4EA4\u63D0\u9192/\u8BC4\u8BBA\uFF09",
-    load: async () => (await import("./chunks/plan-DR5CMUYP.js")).planShortcut
+    load: async () => (await import("./chunks/plan-YFPVKW6Y.js")).planShortcut
   }),
   lazyShortcut({
     name: "esb",
     description: "\u6CDB\u5FAEE10 ESB \u4E2D\u5FC3\u81EA\u5B9A\u4E49\u89E6\u53D1\u52A8\u4F5C\u6D41 CLI",
-    load: async () => (await import("./chunks/esb-2TGGXEE7.js")).esbShortcut
+    load: async () => (await import("./chunks/esb-6XV7C7YV.js")).esbShortcut
   }),
   lazyShortcut({
     name: "ebuilder-form",
     description: "\u6CDB\u5FAEE10 eBuilder \u8868\u5355\u83DC\u5355\u3001\u5217\u8868\u548C\u8868\u5355\u6570\u636E CLI",
-    load: async () => (await import("./chunks/ebuilder-form-EYLHNOTA.js")).ebuilderFormShortcut
+    load: async () => (await import("./chunks/ebuilder-form-OY6DVNRK.js")).ebuilderFormShortcut
   }),
   lazyShortcut({
     name: "jiuchuanhui",
     description: "\u6CDB\u5FAEE10\u4E5D\u6C1A\u6C47\u8425\u9500\u7BA1\u7406 CLI\uFF08\u5BA2\u6237/\u8054\u7CFB\u4EBA/\u5546\u673A/\u7EBF\u7D22/\u8054\u7CFB\u8BA1\u5212/\u516C\u6D77\uFF09",
-    load: async () => (await import("./chunks/jiuchuanhui-AR5GMKZB.js")).jiuchuanhuiShortcut
+    load: async () => (await import("./chunks/jiuchuanhui-XABWS5RN.js")).jiuchuanhuiShortcut
   }),
   lazyShortcut({
     name: "asset",
     description: "E10 \u8D44\u4EA7\u7BA1\u7406\uFF08\u8D44\u7BA1\u5BB6\uFF09CLI",
-    load: async () => (await import("./chunks/asset-4XO7UOUW.js")).assetShortcut
+    load: async () => (await import("./chunks/asset-OOV6DWPA.js")).assetShortcut
+  }),
+  lazyShortcut({
+    name: "asset-idle",
+    description: "E10 \u95F2\u7F6E\u8D44\u4EA7\u5224\u5B9A\u7ED3\u679C\u67E5\u8BE2 CLI\uFF08\u5206\u9875\u83B7\u53D6/\u805A\u5408\u7EDF\u8BA1\uFF09",
+    load: async () => (await import("./chunks/asset-idle-RE632MY5.js")).assetIdleShortcut
   }),
   lazyShortcut({
     name: "im",
     description: "\u6CDB\u5FAEE10\u6613\u79D2\u529E\uFF08\u5373\u65F6\u901A\u8BAF\uFF09CLI",
-    load: async () => (await import("./chunks/im-A4VZN2TQ.js")).imShortcut
+    load: async () => (await import("./chunks/im-YOUCFMUK.js")).imShortcut
   }),
   lazyShortcut({
     name: "project",
     description: "\u6CDB\u5FAEE10\u4E8B\u4E95\u7136\u9879\u76EE\u7BA1\u7406 CLI\uFF08\u9879\u76EE/\u4EFB\u52A1\u67E5\u8BE2\u4E0E\u786E\u8BA4\u5199\u5165\uFF09",
-    load: async () => (await import("./chunks/project-6J63MK33.js")).projectShortcut
+    load: async () => (await import("./chunks/project-MDVZUYQW.js")).projectShortcut
   }),
   lazyShortcut({
     name: "workflow",
     description: "\u6CDB\u5FAEE10\u6D41\u7A0B\u667A\u80FD\u52A9\u624B CLI\uFF08\u67E5\u8BE2/\u67E5\u770B/\u64CD\u4F5C/\u6279\u91CF/\u53D1\u8D77/\u4FEE\u6539\uFF09",
-    load: async () => (await import("./chunks/workflow-D74NFK3C.js")).workflowShortcut
+    load: async () => (await import("./chunks/workflow-KDGIUCNW.js")).workflowShortcut
   }),
   lazyShortcut({
     name: "blog",
     description: "\u6CDB\u5FAEE10\u5DE5\u4F5C\u65E5\u62A5 CLI\uFF08\u67E5\u8BE2/\u53D1\u5E03/\u7F16\u8F91/\u8BC4\u8BBA/\u70B9\u8D5E/\u63D0\u9192/\u5BFC\u51FA\uFF09",
-    load: async () => (await import("./chunks/blog-PGZKOPSC.js")).blogShortcut
+    load: async () => (await import("./chunks/blog-PEPOJAL7.js")).blogShortcut
   }),
   lazyShortcut({
     name: "caizhilian",
     description: "\u6CDB\u5FAEE10\u91C7\u77E5\u8FDE\uFF08\u6587\u6863\u4E2D\u5FC3\uFF09CLI",
-    load: async () => (await import("./chunks/caizhilian-BH4ZVGUN.js")).caizhilianShortcut
+    load: async () => (await import("./chunks/caizhilian-WYIQDVPJ.js")).caizhilianShortcut
   }),
   lazyShortcut({
     name: "contract",
     description: "\u6CDB\u5FAEE10\u4ECA\u627F\u8FBE\u5408\u540C\u7BA1\u7406 CLI",
-    load: async () => (await import("./chunks/contract-XI2EEIZU.js")).contractShortcut
+    load: async () => (await import("./chunks/contract-73MERZWN.js")).contractShortcut
   })
 ];
 function shortcutMetadata() {

package/dist/internal/e10/auth/messages.js

@@ -1,3 +1,4 @@
 export const E10_REAUTH_GUIDANCE = '请结合当前宿主环境选择合适的登录方式，恢复登录后重试原请求。';
 export const E10_AUTH_REQUIRED_MESSAGE = `E10 登录态不可用。${E10_REAUTH_GUIDANCE}`;
+export const E10_XIAOE_RECOVERY_FAILED_MESSAGE = 'E10 登录态不可用。已尝试小 e 自动重新获取登录信息，但未取得可用登录态。请在小 e 中恢复登录后重试。';
 export const E10_SESSION_EXPIRED_MESSAGE = `E10 登录态已失效，本次操作已停止。${E10_REAUTH_GUIDANCE}`;

package/dist/internal/e10/auth-recovery.js

@@ -1,6 +1,6 @@
 import { isXiaoERuntimeAgent } from '../../core/runtime-agent.js';
-import { getActiveProfile } from './auth/session.js';
-import { hasXiaoEEnv, tryXiaoEUnifiedLogin } from './auth/xiaoe.js';
+import { getActiveProfile, readProfileConfig } from './auth/session.js';
+import { hasXiaoEEnv, resolveXiaoEPreferredBaseUrl, tryXiaoEUnifiedLogin } from './auth/xiaoe.js';
 const AUTH_REQUIRED_CODES = new Set(['-2', '401']);
 const AUTH_REQUIRED_MARKERS = [
     '未登录',
@@ -23,6 +23,116 @@ const AUTH_REQUIRED_MARKERS = [
     'not logged in',
     'not login',
 ];
+const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+/** Location 命中这些特征即为登录类跳转。 */
+const LOGIN_REDIRECT_MARKERS = [
+    'login',
+    'passport',
+    'sso',
+    'oauth',
+    'signin',
+    'sign-in',
+    'authorize',
+    'authn',
+    'atrust',
+    'checkticket',
+];
+/** Location 命中这些特征即为文件服务/对象存储交接。 */
+const FILE_REDIRECT_MARKERS = [
+    'fileservice',
+    '/file/download',
+    '/file/remotedownload',
+    '/remotedownload/',
+    '/api/file/',
+    '/download/',
+    'aliyuncs.com',
+    'myqcloud.com',
+    'qiniucdn.com',
+    'qbox.me',
+    'jdcloud.com',
+    'amazonaws.com',
+    'blob.core.windows.net',
+    'ctyunapi.cn',
+    'hiclouds.com',
+    'minio',
+    's3.',
+    'obs.',
+    'ks3',
+];
+/** 这些请求路径本身就是取文件：其 3xx 只要不是登录页，就是文件服务交接。 */
+const FILE_REQUEST_PATH_MARKERS = [
+    '/api/file/',
+    '/file/download',
+    '/remotedownload/',
+    '/fileservice',
+    '/download',
+];
+/** 跳转目标是前端页面骨架（如 wui/index.html#/main），不是文件直链。 */
+const APP_SHELL_REDIRECT = /(?:\.html?(?:[?#]|$)|#\/|wui\/)/u;
+export function isE10RedirectStatus(status) {
+    return REDIRECT_STATUSES.has(status);
+}
+/**
+ * 取跳转目标里「有语义」的部分：主机名 + 路径 + hash，**丢掉 query**。
+ * 对象存储的签名 query 是长随机串，拿去匹配关键词容易误伤（例如签名里恰好
+ * 出现 `sso`），所以只在主机与路径上判定。
+ */
+function redirectTarget(location) {
+    const raw = location.trim().toLowerCase();
+    if (!raw)
+        return '';
+    try {
+        const url = new URL(raw, 'https://e10.invalid');
+        return `${url.hostname}${url.pathname}${url.hash}`.toLowerCase();
+    }
+    catch {
+        return raw.split('?')[0];
+    }
+}
+/**
+ * 识别 3xx 的真实语义。登录跳转优先判定，避免对象存储地址里的参数误伤；
+ * 若是下载类请求且目标不像登录页，则认为是文件服务交接（对象存储的签名地址
+ * 不一定带 `fileservice` 之类的特征，只能靠请求路径反推）。
+ */
+export function classifyE10Redirect(response) {
+    if (!isE10RedirectStatus(response.status))
+        return 'other';
+    const target = redirectTarget(response.headers?.get('location') || '');
+    if (!target)
+        return 'other';
+    if (LOGIN_REDIRECT_MARKERS.some((marker) => target.includes(marker)))
+        return 'login';
+    if (FILE_REDIRECT_MARKERS.some((marker) => target.includes(marker)))
+        return 'file';
+    const requestPath = (response.requestPath || '').toLowerCase();
+    if (requestPath
+        && FILE_REQUEST_PATH_MARKERS.some((marker) => requestPath.includes(marker))
+        // 跳到前端页面骨架说明不是文件直链，继续按「无法判定」保守处理。
+        && !APP_SHELL_REDIRECT.test(target)) {
+        return 'file';
+    }
+    return 'other';
+}
+/** 3xx 指向文件服务：属于下载直传，登录态有效，不得触发重新登录。 */
+export function isE10FileRedirect(response) {
+    return classifyE10Redirect(response) === 'file';
+}
+/** 3xx 指向登录页：登录态确实失效。 */
+export function isE10LoginRedirect(response) {
+    return classifyE10Redirect(response) === 'login';
+}
+/**
+ * 业务层统一的「HTTP 层登录态失效」判定：401，或 3xx 且不是文件服务交接。
+ * 各 shortcut 用它替代原来的 `status === 401 || status === 302`，避免把下载
+ * 直传的 302 误报成登录失效。
+ */
+export function isE10SessionExpiredResponse(response) {
+    if (response.status === 401)
+        return true;
+    if (isE10RedirectStatus(response.status))
+        return !isE10FileRedirect(response);
+    return false;
+}
 const recoveryInFlight = new Map();
 function asRecord(value) {
     return value && typeof value === 'object' && !Array.isArray(value)
@@ -77,9 +187,12 @@ function responseText(response) {
  * Detect only explicit authentication rejection signals. A bare HTTP 403 is
  * deliberately excluded because E10 also uses it for ordinary permission
  * denials, which must never trigger a credential refresh.
+ *
+ * 3xx 只在「跳到登录页」或「无法判定」时才算认证失败：下载接口把文件交接给
+ * 文件服务时同样返回 302，那不是登录失效，重新登录既无用也会白白换一次票据。
  */
 export function isE10AuthenticationRequired(response) {
-    if (response.status === 401 || response.status === 302)
+    if (isE10SessionExpiredResponse(response))
         return true;
     if (responseCodes(response.value).some((code) => AUTH_REQUIRED_CODES.has(code)))
         return true;
@@ -112,8 +225,10 @@ export function canAutomaticallyRecoverXiaoE(ctx, currentSession) {
         || isXiaoERuntimeAgent(currentSession?.agentType);
 }
 /**
- * Silently refresh a stale XiaoE session. Concurrent requests for the same
- * profile/base URL share one credential exchange, so a burst of 401 responses
+ * Silently recover a stale or missing XiaoE session. Without a local session,
+ * current runtime evidence is required before obtaining credentials.
+ * Concurrent requests for the same profile/base URL share one credential
+ * exchange, so a burst of 401 responses
  * does not start a burst of login attempts.
  */
 export async function recoverXiaoEAuthSession(ctx, currentSession) {
@@ -121,7 +236,12 @@ export async function recoverXiaoEAuthSession(ctx, currentSession) {
         return null;
     const options = globalOptions(ctx);
     const profile = options.profile || getActiveProfile();
-    const baseUrl = currentSession.getBaseUrl();
+    const config = readProfileConfig(profile);
+    const baseUrl = resolveXiaoEPreferredBaseUrl({
+        explicitBaseUrl: currentSession?.getBaseUrl() || options.baseUrl,
+        profileBaseUrl: config.baseUrl,
+        env: ctx.env,
+    });
     const key = `${profile}\n${baseUrl}`;
     const existing = recoveryInFlight.get(key);
     if (existing)
@@ -133,7 +253,7 @@ export async function recoverXiaoEAuthSession(ctx, currentSession) {
             profileBaseUrl: baseUrl,
             allowBundledEnvScript: true,
             allowTokenScript: true,
-            tenantKeyFallback: currentSession.tenantKey,
+            tenantKeyFallback: currentSession?.tenantKey || config.tenantKey,
             profileHint: profile,
             // Intentionally no logger: transparent recovery must not leak an
             // intermediate "login" step into agent stdout/stderr or JSON output.

package/dist/internal/e10/client.js

@@ -1,4 +1,4 @@
-import { isE10AuthenticationRequired, sameE10SessionIdentity, } from './auth-recovery.js';
+import { isE10AuthenticationRequired, isE10LoginRedirect, isE10RedirectStatus, sameE10SessionIdentity, } from './auth-recovery.js';
 class E10AuthenticationContextChangedError extends Error {
 }
 export class E10ApiClient {
@@ -78,6 +78,7 @@ export class E10ApiClient {
                 if (!authenticationRecoveryAttempted && isE10AuthenticationRequired({
                     status: resp.status,
                     headers: resp.headers,
+                    requestPath: safePathname(url),
                     text,
                     value,
                 })) {
@@ -94,7 +95,12 @@ export class E10ApiClient {
                     }
                 }
                 // Preserve the legacy password-based refresh for non-XiaoE callers.
-                if (resp.status === 302) {
+                // 只有真的跳到登录页才刷新；3xx 交给文件服务（下载直传）时登录态仍有效。
+                if (isE10LoginRedirect({
+                    status: resp.status,
+                    headers: resp.headers,
+                    requestPath: safePathname(url),
+                }) || (isE10RedirectStatus(resp.status) && !resp.headers.get('location'))) {
                     const ok = await this.auth.ensureValid();
                     if (!ok)
                         throw new Error('E10 session expired; please login again');
@@ -134,3 +140,11 @@ function refreshAuthenticationHeaders(init, session) {
     headers['user-agent'] = session.uaHeader();
     init.headers = headers;
 }
+function safePathname(rawUrl) {
+    try {
+        return new URL(rawUrl).pathname;
+    }
+    catch {
+        return rawUrl.startsWith('/') ? rawUrl.split('?')[0] : '';
+    }
+}

package/dist/internal/e10/context.js

@@ -1,14 +1,27 @@
 import { CliError, ExitCode } from '../../core/errors.js';
-import { E10_AUTH_REQUIRED_MESSAGE } from './auth/messages.js';
+import { E10_AUTH_REQUIRED_MESSAGE, E10_XIAOE_RECOVERY_FAILED_MESSAGE } from './auth/messages.js';
 import { E10AuthSession } from './auth/session.js';
 import { E10ApiClient } from './client.js';
-import { recoverXiaoEAuthSession } from './auth-recovery.js';
+import { canAutomaticallyRecoverXiaoE, recoverXiaoEAuthSession } from './auth-recovery.js';
 export async function getE10Session(ctx, load = {}) {
     const options = ctx.getGlobalOptions();
     return E10AuthSession.fromOptions(options, ctx.cwd, load);
 }
 export async function requireE10Session(ctx, load = {}) {
-    const session = await getE10Session(ctx, load);
+    let session = await getE10Session(ctx, load);
+    if (!session && canAutomaticallyRecoverXiaoE(ctx)) {
+        // Read-only probes use getE10Session; only a command requiring a session
+        // may establish one from the current XiaoE host's credentials.
+        session = await recoverXiaoEAuthSession(ctx).catch(() => null);
+        if (!session) {
+            throw Object.assign(new CliError(E10_XIAOE_RECOVERY_FAILED_MESSAGE, ExitCode.AuthError), {
+                type: 'authentication',
+                subtype: 'xiaoe_credential_unavailable',
+                retryable: false,
+                stage: 'xiaoe_unified_login',
+            });
+        }
+    }
     if (!session) {
         throw new CliError(E10_AUTH_REQUIRED_MESSAGE, ExitCode.AuthError);
     }