weflow-cli 1.5.0

package/bin/weflow-cli.ts

@@ -0,0 +1,2311 @@
+#!/usr/bin/env node
+import { Command } from 'commander'
+import chalk from 'chalk'
+import inquirer from 'inquirer'
+import { join } from 'path'
+import { existsSync, readFileSync } from 'fs'
+import { homedir } from 'os'
+import { dbPathService } from '../src/core/dbPathService.js'
+import { keyService } from '../src/core/keyService.js'
+import { NtCore } from '../src/core/ntCore.js'
+import { configService } from '../src/services/configService.js'
+import { chatService } from '../src/services/chatService.js'
+import { exportService } from '../src/services/exportService.js'
+import { resolveTalker as resolveTalkerCore } from '../src/utils/talkerUtils.js'
+import { WechatMessageService } from '../src/services/wechatMessageService.js'
+import { whitelistService } from '../src/services/whitelistService.js'
+import type { ChatSession } from '../src/types.js'
+
+const program = new Command()
+
+/**
+ * 尝试从 WeFlow 桌面版配置中读取已保存的密钥
+ */
+function tryReadWeFlowKey(): string | null {
+  const candidates = [
+    join(homedir(), 'AppData', 'Roaming', 'WeFlow', 'WeFlow-config.json'),
+    join(homedir(), 'AppData', 'Roaming', 'weflow', 'WeFlow-config.json'),
+    join(homedir(), '.weflow', 'config.json'),
+  ]
+
+  for (const configPath of candidates) {
+    try {
+      if (!existsSync(configPath)) continue
+      const raw = readFileSync(configPath, 'utf8')
+      const config = JSON.parse(raw)
+
+      // WeFlow 使用 electron-store，decryptKey 可能是明文或加密的
+      let key = config.decryptKey || ''
+      // 如果是 lock: 前缀，说明是加密的，无法直接使用
+      if (typeof key === 'string' && key.startsWith('lock:')) {
+        continue
+      }
+      // 如果是 safe: 前缀，说明是 safeStorage 加密的，也无法直接使用
+      if (typeof key === 'string' && key.startsWith('safe:')) {
+        continue
+      }
+      // 明文 key
+      if (typeof key === 'string' && key.length === 64) {
+        return key
+      }
+
+      // 检查 wxidConfigs 中的 key
+      const wxidConfigs = config.wxidConfigs || {}
+      for (const [_wxid, cfg] of Object.entries(wxidConfigs) as [string, any][]) {
+        const cfgKey = cfg.decryptKey || ''
+        if (typeof cfgKey === 'string' && cfgKey.length === 64 && !cfgKey.startsWith('lock:') && !cfgKey.startsWith('safe:')) {
+          return cfgKey
+        }
+      }
+    } catch {
+      continue
+    }
+  }
+  return null
+}
+
+/**
+ * CLI 包装的 talker 解析 (wxid / 昵称 / 备注名 / 序号)。
+ * 委托给 src/utils/talkerUtils 的核心实现，外加 chalk 友好输出。
+ */
+async function resolveTalker(input: string): Promise<string> {
+  try {
+    const result = await resolveTalkerCore(input)
+    // 显示解析结果（已知格式跳过打印）
+    if (!input.startsWith('wxid_') && !input.includes('@chatroom') && !input.includes('@openim')) {
+      const isNum = /^\[?\d+\]?$/.test(input)
+      const sessions = await chatService.listSessions(undefined, 50)
+      const match = sessions.find(s => s.username === result)
+      if (match) {
+        const prefix = isNum ? `序号[${input.replace(/[\[\]]/g, '')}] ` : ''
+        console.log(chalk.gray(`  → ${prefix}${match.displayName} (${match.username})`))
+      }
+    }
+    return result
+  } catch (e: any) {
+    console.log(chalk.red(`\n❌ ${e.message}\n`))
+    process.exit(1)
+  }
+}
+
+program
+  .name('weflow-cli')
+  .description('WeFlow CLI - 微信聊天记录命令行查询与导出工具')
+  .version('1.5.0')
+
+// ==================== init ====================
+program
+  .command('init')
+  .description('自动检测微信数据目录并提取解密密钥')
+  .action(async () => {
+    console.log(chalk.cyan('🔧 WeFlow CLI 初始化\n'))
+
+    // Step 0: 检测微信版本
+    console.log(chalk.yellow('步骤 0/3: 检测微信版本...'))
+    const version = await keyService.detectWeChatVersion()
+
+    if (version) {
+      console.log(chalk.green(`✓ 检测到微信 ${version} 版本`))
+    } else {
+      // 没有运行中的微信，尝试已安装的版本
+      console.log(chalk.gray('  未检测到运行中的微信进程'))
+      // 检查已有配置或数据目录
+      const existingPath = configService.get('dbPath')
+      if (existingPath && existsSync(existingPath)) {
+        console.log(chalk.green(`  使用已配置的数据目录: ${existingPath}`))
+      }
+    }
+
+    if (version === '3.x') {
+      // ====== 3.x 初始化 ======
+      console.log(chalk.yellow('\n步骤 1/3: 提取 3.x 数据库密钥...'))
+      const result = await keyService.extract3xKey((msg) => {
+        console.log(chalk.gray(`  ${msg}`))
+      })
+
+      if (!result.success || !result.key) {
+        console.log(chalk.red(`\n✗ 密钥提取失败: ${result.error}`))
+        console.log(chalk.gray('\n解决方案:'))
+        console.log(chalk.gray('  1. 确保 WeChat 3.x (WeChat.exe) 已登录'))
+        console.log(chalk.gray('  2. 确保 Python + pywxdump 已安装'))
+        console.log(chalk.gray('  3. 或手动指定密钥: weflow-cli config set decryptKey3x <64位密钥>'))
+        process.exit(1)
+      }
+
+      const msgDir = result.msgDir || ''
+      const wxDir = result.wxDir || ''
+      const wxid = result.wxid || ''
+
+      configService.set('decryptKey3x', result.key)
+      configService.set('dataVersion', '3.x')
+
+      // 查找 MSG0.db
+      const msg0Path = join(msgDir, 'Multi', 'MSG0.db')
+      if (existsSync(msg0Path)) {
+        configService.set('dbPath3x', msg0Path)
+        console.log(chalk.green(`✓ 数据库: ${msg0Path}`))
+      }
+
+      if (wxid) configService.set('wxid', wxid)
+      if (wxDir) configService.set('dbPath', wxDir)
+
+      console.log(chalk.green('\n✓ 密钥获取成功!'))
+      console.log(chalk.cyan('\n=============================='))
+      console.log(chalk.cyan('初始化完成! (3.x 模式)'))
+      console.log(chalk.cyan('=============================='))
+      console.log(chalk.white(`数据目录: ${wxDir}`))
+      console.log(chalk.white(`消息数据库: ${msg0Path}`))
+      console.log(chalk.white(`账号: ${wxid}`))
+      console.log(chalk.white(`密钥: ${result.key.slice(0, 8)}...${result.key.slice(-8)}`))
+
+    } else {
+      // ====== 4.x 初始化 (原有逻辑) ======
+      console.log(chalk.yellow('\n步骤 1/3: 检测微信数据目录...'))
+      const detected = await dbPathService.autoDetect()
+      if (!detected.success || !detected.path) {
+        console.log(chalk.red('✗ 未检测到微信数据目录'))
+        console.log(chalk.gray('  请确保微信 4.x 已安装并登录过'))
+        console.log(chalk.gray('  或手动指定: weflow-cli config set dbPath <path>'))
+        process.exit(1)
+      }
+      console.log(chalk.green(`✓ 检测到数据目录: ${detected.path}`))
+      configService.set('dbPath', detected.path)
+      configService.set('dataVersion', '4.x')
+
+      // Step 2: 扫描账号
+      console.log(chalk.yellow('\n步骤 2/3: 扫描微信账号...'))
+      const wxids = dbPathService.scanWxidCandidates(detected.path)
+      if (wxids.length === 0) {
+        console.log(chalk.red('✗ 未找到微信账号目录'))
+        process.exit(1)
+      }
+
+      const selectedWxid = wxids[0]
+      console.log(chalk.green(`✓ 找到 ${wxids.length} 个账号`))
+      for (const w of wxids) {
+        const marker = w === selectedWxid ? chalk.green(' → ') : '   '
+        const nickname = w.nickname ? ` (${w.nickname})` : ''
+        console.log(`${marker}${w.wxid}${nickname}`)
+      }
+      configService.set('wxid', selectedWxid.wxid)
+
+      // Step 3: 提取密钥
+      console.log(chalk.yellow('\n步骤 3/3: 提取数据库解密密钥...'))
+
+      // 优先尝试从 WeFlow 配置读取
+      console.log(chalk.gray('  尝试从 WeFlow 桌面版配置读取...'))
+      let extractedKey = tryReadWeFlowKey()
+
+      if (extractedKey) {
+        console.log(chalk.green('  ✓ 从 WeFlow 配置读取到密钥'))
+      } else {
+        // 如果微信未运行，提示启动
+        if (!version) {
+          console.log(chalk.cyan('\n  ══════════════════════════════════════'))
+          console.log(chalk.cyan('  请现在启动微信 4.x 并登录！'))
+          console.log(chalk.cyan('  ══════════════════════════════════════\n'))
+        }
+        console.log(chalk.gray('  等待微信进程出现（启动后会自动 hook）...'))
+
+        const keyResult = await keyService.waitForKey(120000, (msg) => {
+          console.log(chalk.gray(`  ${msg}`))
+        })
+
+        if (keyResult.success && keyResult.key) {
+          extractedKey = keyResult.key
+        } else {
+          console.log(chalk.red(`\n✗ 密钥提取失败: ${keyResult.error}`))
+          console.log(chalk.gray('\n解决方案:'))
+          console.log(chalk.gray('  1. 确保微信已登录'))
+          console.log(chalk.gray('  2. 尝试在微信中发送一条消息'))
+          console.log(chalk.gray('  3. 或手动指定密钥: weflow-cli config set decryptKey <64位密钥>'))
+          process.exit(1)
+        }
+      }
+
+      configService.set('decryptKey', extractedKey)
+      console.log(chalk.green('\n✓ 密钥获取成功!'))
+
+      // Step 4: 尝试扫描 NT 格式数据库 (xwechat_files)
+      // 即使检测到传统路径，也可能存在 NT 格式数据库
+      if (version) {
+        console.log(chalk.yellow('\n步骤 4/4: 扫描 NT 格式数据库...'))
+        console.log(chalk.gray('  正在从微信内存中匹配数据库密钥...'))
+
+        const ntResult = await NtCore.scan()
+        if (ntResult.success && ntResult.matched && ntResult.matched.length > 0) {
+          console.log(chalk.green(`  ✓ 找到 ${ntResult.matched.length} 个 NT 数据库`))
+
+          // 优先选择 message_0.db (主聊天数据库)
+          let primaryDb = ntResult.matched.find((db: any) => db.name === 'message_0.db')
+          if (!primaryDb) {
+            // 按大小降序排序，选择最大的数据库
+            primaryDb = ntResult.matched.sort((a: any, b: any) => b.size - a.size)[0]
+          }
+
+          if (primaryDb) {
+            configService.set('ntDbPath', primaryDb.path)
+            configService.set('ntKey', primaryDb.key)
+            configService.set('ntSalt', primaryDb.salt)
+            console.log(chalk.green(`  ✓ 主数据库: ${primaryDb.name} (${(primaryDb.size / 1024 / 1024).toFixed(1)}MB)`))
+
+            // 检查 contact.db 是否已匹配
+            const contactDb = ntResult.matched.find((db: any) => db.name === 'contact/contact.db')
+            if (contactDb) {
+              configService.set('contactDbPath', contactDb.path)
+              configService.set('contactKey', contactDb.key)
+              configService.set('contactSalt', contactDb.salt)
+              console.log(chalk.green(`  ✓ 联系人数据库: ${contactDb.name} (${(contactDb.size / 1024 / 1024).toFixed(1)}MB)`))
+            }
+
+            // 显示所有匹配的数据库
+            for (const db of ntResult.matched) {
+              const marker = db === primaryDb || db === contactDb ? chalk.green('  → ') : '     '
+              console.log(chalk.gray(`${marker}${db.name} (${(db.size / 1024 / 1024).toFixed(1)}MB)`))
+            }
+          }
+        } else {
+          console.log(chalk.gray(`  NT 数据库扫描: ${ntResult.error || '未找到匹配的数据库'}`))
+          console.log(chalk.gray('  提示: 可以稍后运行 weflow-cli init 重新扫描'))
+        }
+      } else if (detected.path.toLowerCase().includes('xwechat_files')) {
+        console.log(chalk.yellow('\n步骤 4/4: NT 格式数据库'))
+        console.log(chalk.gray('  微信未运行，无法从内存中提取 NT 密钥'))
+        console.log(chalk.gray('  请启动微信后运行: weflow-cli init'))
+      }
+
+      console.log(chalk.cyan('\n=============================='))
+      console.log(chalk.cyan('初始化完成! (4.x 模式)'))
+      console.log(chalk.cyan('=============================='))
+      console.log(chalk.white(`数据目录: ${detected.path}`))
+      console.log(chalk.white(`账号: ${selectedWxid.wxid}${selectedWxid.nickname ? ` (${selectedWxid.nickname})` : ''}`))
+      console.log(chalk.white(`密钥: ${extractedKey.slice(0, 8)}...${extractedKey.slice(-8)}`))
+      const ntDbPath = configService.get('ntDbPath')
+      if (ntDbPath) {
+        console.log(chalk.white(`NT 数据库: ${ntDbPath}`))
+      }
+    }
+
+    console.log(chalk.gray('\n现在可以使用以下命令:'))
+    console.log(chalk.gray('  weflow-cli sessions        查看会话列表'))
+    console.log(chalk.gray('  weflow-cli messages <talker> 查看消息'))
+    console.log(chalk.gray('  weflow-cli contacts        查看联系人'))
+    console.log(chalk.gray('  weflow-cli export <talker> <format> 导出聊天记录'))
+  })
+
+// ==================== config ====================
+const configCmd = program
+  .command('config')
+  .description('查看或修改配置')
+
+configCmd
+  .command('show')
+  .description('显示当前配置')
+  .action(() => {
+    const config = configService.getAll()
+    console.log(chalk.cyan('当前配置:\n'))
+    console.log(`数据版本: ${config.dataVersion || chalk.gray('(自动检测)')}`)
+    console.log(`4.x 数据目录: ${config.dbPath || chalk.gray('(未设置)')}`)
+    console.log(`4.x 密钥: ${config.decryptKey ? '已设置' : chalk.gray('(未设置)')}`)
+    console.log(`3.x 数据库: ${config.dbPath3x || chalk.gray('(未设置)')}`)
+    console.log(`3.x 密钥: ${config.decryptKey3x ? '已设置' : chalk.gray('(未设置)')}`)
+    console.log(`NT 数据库: ${config.ntDbPath || chalk.gray('(未设置)')}`)
+    console.log(`NT 密钥: ${config.ntKey ? '已设置' : chalk.gray('(未设置)')}`)
+    console.log(`联系人DB: ${config.contactDbPath || chalk.gray('(未设置)')}`)
+    console.log(`联系人DB密钥: ${config.contactKey ? '已设置' : chalk.gray('(未设置)')}`)
+    console.log(`微信账号: ${config.wxid || chalk.gray('(未设置)')}`)
+  })
+
+configCmd
+  .command('set <key> <value>')
+  .description('设置配置项 (dbPath, decryptKey, dbPath3x, decryptKey3x, dataVersion, wxid)')
+  .action((key: string, value: string) => {
+    const validKeys = ['dbPath', 'decryptKey', 'dbPath3x', 'decryptKey3x', 'dataVersion', 'wxid', 'ntDbPath', 'ntKey', 'ntSalt', 'contactDbPath', 'contactKey', 'contactSalt', 'vaultRepo', 'aiEngine']
+    if (!validKeys.includes(key)) {
+      console.log(chalk.red(`无效的配置项: ${key}`))
+      console.log(chalk.gray(`可用: ${validKeys.join(', ')}`))
+      process.exit(1)
+    }
+    configService.set(key as any, value)
+    console.log(chalk.green(`✓ 已设置 ${key}`))
+  })
+
+configCmd
+  .command('clear')
+  .description('清除所有配置')
+  .action(() => {
+    configService.clear()
+    console.log(chalk.green('✓ 配置已清除'))
+  })
+
+// ==================== sessions ====================
+program
+  .command('sessions')
+  .description('查看会话列表')
+  .option('-k, --keyword <keyword>', '搜索关键词')
+  .option('-n, --limit <number>', '最大数量', '30')
+  .action(async (opts) => {
+    if (!configService.isConfigured()) {
+      console.log(chalk.red('请先运行 weflow-cli init'))
+      process.exit(1)
+    }
+
+    const sessions = await chatService.listSessions(opts.keyword, parseInt(opts.limit))
+    if (sessions.length === 0) {
+      console.log(chalk.gray('未找到会话'))
+      return
+    }
+
+    console.log(chalk.cyan(`会话列表 (${sessions.length} 条):\n`))
+    console.log(chalk.gray('序号  会话ID                昵称            最后消息'))
+    console.log(chalk.gray('─'.repeat(70)))
+
+    for (let i = 0; i < sessions.length; i++) {
+      const s = sessions[i]
+      const num = String(i + 1).padStart(3)
+      const id = (s.username || '').padEnd(20)
+      const name = (s.displayName || '').slice(0, 12).padEnd(12)
+      const summary = (s.summary || '').slice(0, 30)
+      console.log(`${num}  ${id} ${name} ${summary}`)
+    }
+  })
+
+// ==================== messages ====================
+program
+  .command('messages <talker>')
+  .description('查看指定会话的消息 (支持 wxid / 昵称 / 备注 / 序号)')
+  .option('-n, --limit <number>', '最大数量', '50')
+  .option('-o, --offset <number>', '偏移量', '0')
+  .option('-s, --start <timestamp>', '开始时间戳')
+  .option('-e, --end <timestamp>', '结束时间戳')
+  .action(async (talkerInput: string, opts) => {
+    if (!configService.isConfigured()) {
+      console.log(chalk.red('\n❌ 还没配置'))
+      console.log(chalk.gray('  运行: weflow-cli init\n'))
+      process.exit(1)
+    }
+
+    const talker = await resolveTalker(talkerInput)
+
+    const messages = await chatService.getMessages(
+      talker,
+      parseInt(opts.limit),
+      parseInt(opts.offset)
+    )
+
+    if (messages.length === 0) {
+      console.log(chalk.gray('未找到消息'))
+      return
+    }
+
+    console.log(chalk.cyan(`消息记录 - ${talker} (${messages.length} 条):\n`))
+
+    for (const m of messages) {
+      const time = new Date(m.createTime * 1000).toLocaleString('zh-CN')
+      const senderName = m.isSend ? chalk.green('我') : chalk.blue((m as any).senderDisplay || m.senderUsername || talker)
+      const content = (m.parsedContent || m.rawContent || '').replace(/\n/g, ' ').slice(0, 80)
+      console.log(chalk.gray(`[${time}]`) + ` ${senderName}: ${content}`)
+    }
+  })
+
+// ==================== contacts ====================
+program
+  .command('contacts')
+  .description('查看联系人列表')
+  .option('-k, --keyword <keyword>', '搜索关键词 (自动扩大搜索范围)')
+  .option('-n, --limit <number>', '最大数量', '500')
+  .action(async (opts) => {
+    if (!configService.isConfigured()) {
+      console.log(chalk.red('请先运行 weflow-cli init'))
+      process.exit(1)
+    }
+
+    const contacts = await chatService.listContacts(opts.keyword, parseInt(opts.limit))
+    if (contacts.length === 0) {
+      console.log(chalk.gray('未找到联系人'))
+      return
+    }
+
+    console.log(chalk.cyan(`联系人列表 (${contacts.length} 条):\n`))
+    console.log(chalk.gray('序号  用户ID                昵称/备注'))
+    console.log(chalk.gray('─'.repeat(60)))
+
+    for (let i = 0; i < contacts.length; i++) {
+      const c = contacts[i]
+      const num = String(i + 1).padStart(3)
+      const id = (c.username || '').padEnd(20)
+      const name = c.remark || c.displayName || c.nickname || ''
+      console.log(`${num}  ${id} ${name}`)
+    }
+  })
+
+// ==================== export ====================
+program
+  .command('export <talker> <format>')
+  .description('导出聊天记录 (支持 wxid / 昵称 / 备注 / 序号)')
+  .option('-o, --output <dir>', '输出目录', './output')
+  .option('-n, --limit <number>', '最大数量', '10000')
+  .action(async (talkerInput: string, format: string, opts) => {
+    if (!configService.isConfigured()) {
+      console.log(chalk.red('\n❌ 还没配置'))
+      console.log(chalk.gray('  运行: weflow-cli init\n'))
+      process.exit(1)
+    }
+
+    const talker = await resolveTalker(talkerInput)
+
+    const validFormats = ['json', 'txt', 'html', 'excel']
+    if (!validFormats.includes(format)) {
+      console.log(chalk.red(`无效格式: ${format}`))
+      console.log(chalk.gray(`可用: ${validFormats.join(', ')}`))
+      process.exit(1)
+    }
+
+    console.log(chalk.cyan(`正在导出 ${talker} 的聊天记录 (${format})...\n`))
+
+    let result
+    const limit = parseInt(opts.limit)
+
+    switch (format) {
+      case 'json':
+        result = await exportService.exportJson(talker, opts.output, limit)
+        break
+      case 'txt':
+        result = await exportService.exportTxt(talker, opts.output, limit)
+        break
+      case 'html':
+        result = await exportService.exportHtml(talker, opts.output, limit)
+        break
+      case 'excel':
+        result = await exportService.exportExcel(talker, opts.output, limit)
+        break
+    }
+
+    if (result?.success) {
+      console.log(chalk.green(`✓ 导出成功: ${result.path}`))
+    } else {
+      console.log(chalk.red(`✗ 导出失败: ${result?.error}`))
+      process.exit(1)
+    }
+  })
+
+// ==================== dbkey ====================
+program
+  .command('dbkey')
+  .description('从运行中的微信进程提取数据库解密密钥 (自动检测版本)')
+  .option('-t, --timeout <ms>', '超时时间(毫秒)', '60000')
+  .action(async (opts) => {
+    console.log(chalk.cyan('🔑 提取微信数据库密钥\n'))
+    console.log(chalk.gray('请确保微信已登录且正在运行...\n'))
+
+    const version = await keyService.detectWeChatVersion()
+    if (!version) {
+      console.log(chalk.red('未检测到微信进程 (WeChat.exe 或 Weixin.exe)'))
+      process.exit(1)
+    }
+    console.log(chalk.gray(`检测到微信 ${version} 版本\n`))
+
+    if (version === '3.x') {
+      const result = await keyService.extract3xKey((msg) => {
+        console.log(chalk.gray(`  ${msg}`))
+      })
+      if (result.success && result.key) {
+        console.log(chalk.green(`\n✓ 密钥: ${result.key}`))
+        console.log(chalk.green(`  wxid: ${result.wxid}`))
+        console.log(chalk.green(`  消息目录: ${result.msgDir}`))
+      } else {
+        console.log(chalk.red(`\n✗ 失败: ${result.error}`))
+        process.exit(1)
+      }
+    } else {
+      const result = await keyService.autoGetDbKey(parseInt(opts.timeout), (msg) => {
+        console.log(chalk.gray(`  ${msg}`))
+      })
+      if (result.success && result.key) {
+        console.log(chalk.green(`\n✓ 密钥: ${result.key}`))
+      } else {
+        console.log(chalk.red(`\n✗ 失败: ${result.error}`))
+        process.exit(1)
+      }
+    }
+  })
+
+// ==================== scan ====================
+program
+  .command('scan')
+  .description('扫描微信数据目录中的账号')
+  .option('-p, --path <path>', '数据目录路径')
+  .action(async (opts) => {
+    const path = opts.path || configService.get('dbPath') || dbPathService.getDefaultPath()
+    console.log(chalk.cyan(`扫描目录: ${path}\n`))
+
+    const wxids = dbPathService.scanWxidCandidates(path)
+    if (wxids.length === 0) {
+      console.log(chalk.gray('未找到账号'))
+      return
+    }
+
+    console.log(chalk.cyan(`找到 ${wxids.length} 个账号:\n`))
+    for (const w of wxids) {
+      const time = new Date(w.modifiedTime).toLocaleString('zh-CN')
+      const nickname = w.nickname ? ` (${w.nickname})` : ''
+      console.log(`  ${w.wxid}${nickname}  ${chalk.gray(time)}`)
+    }
+  })
+
+// ==================== login-wechat ====================
+program
+  .command('login-wechat')
+  .description('微信扫码登录，获取消息收发权限')
+  .option('--base-url <url>', 'ilink 服务地址')
+  .action(async (opts) => {
+    const token = configService.get('wechatOcToken')
+    if (token) {
+      const { reconfirm } = await inquirer.prompt([{
+        type: 'confirm',
+        name: 'reconfirm',
+        message: '已有登录状态，要重新登录吗？',
+        default: false,
+      }])
+      if (!reconfirm) {
+        console.log(chalk.gray('保持当前登录状态'))
+        return
+      }
+    }
+
+    console.log(chalk.cyan('正在获取登录二维码...\n'))
+    const service = new WechatMessageService({ baseUrl: opts.baseUrl })
+
+    try {
+      const { qrcodeContent } = await service.startLogin()
+      console.log(chalk.green('请用微信扫描以下二维码:\n'))
+
+      // Print QR in terminal
+      try {
+        const QRCode = (await import('qrcode-terminal')).default
+        QRCode.generate(qrcodeContent, { small: true })
+      } catch {
+        console.log(chalk.yellow('(终端二维码显示失败，请安装: npm install qrcode-terminal)'))
+      }
+
+      console.log(chalk.cyan('\n等待扫码 (约2分钟有效)...'))
+      const session = await service.waitForLogin()
+
+      if (session.status === 'confirmed') {
+        console.log(chalk.green('\n✓ 登录成功!'))
+        console.log(chalk.gray(`  account_id: ${session.accountId || '未知'}`))
+      } else {
+        console.log(chalk.red(`\n✗ 登录失败: ${session.error || '超时'}`))
+      }
+    } catch (e: any) {
+      console.log(chalk.red(`\n✗ 登录失败: ${e.message}`))
+    }
+  })
+
+// ==================== logout-wechat ====================
+program
+  .command('logout-wechat')
+  .description('退出微信消息通道登录')
+  .action(() => {
+    configService.set('wechatOcToken', '')
+    configService.set('wechatOcAccountId', '')
+    configService.set('wechatOcSyncBuf', '')
+    console.log(chalk.green('✓ 已退出登录'))
+  })
+
+// ==================== whitelist ====================
+const whitelistCmd = program
+  .command('whitelist')
+  .description('白名单管理 (不传参数显示列表)')
+
+whitelistCmd
+  .action(() => {
+    const list = whitelistService.getList()
+    if (list.length === 0) {
+      console.log(chalk.gray('白名单为空'))
+      console.log(chalk.gray('使用 weflow-cli whitelist add <昵称> 添加'))
+      return
+    }
+    console.log(chalk.cyan(`白名单 (${list.length}):\n`))
+    for (let i = 0; i < list.length; i++) {
+      console.log(`  ${String(i + 1).padStart(2)}. ${list[i]}`)
+    }
+  })
+
+whitelistCmd
+  .command('add <target>')
+  .description('添加白名单 (支持 wxid/昵称/备注名/序号)')
+  .action(async (target: string) => {
+    // 解析目标
+    let wxid: string
+    let displayName = target
+    if (target.startsWith('wxid_') || target.includes('@chatroom') || target.includes('@openim')) {
+      wxid = target
+    } else {
+      try {
+        wxid = await resolveTalker(target)
+        const sessions = await chatService.listSessions(undefined, 50)
+        const match = sessions.find(s => s.username === wxid)
+        if (match) displayName = match.displayName || target
+      } catch (e: any) {
+        console.log(chalk.red(`✗ ${e.message}`))
+        return
+      }
+    }
+
+    // 检查是否已在名单中
+    if (whitelistService.isAllowed(wxid)) {
+      console.log(chalk.yellow(`"${displayName}" (${wxid}) 已在白名单中`))
+      return
+    }
+
+    // 三重确认
+    console.log(chalk.cyan(`\n⚠️  即将添加以下联系人到白名单:`))
+    console.log(chalk.white(`  昵称: ${displayName}`))
+    console.log(chalk.gray(`  wxid: ${wxid}`))
+    console.log(chalk.yellow(`  添加后，该联系人可向你收发消息\n`))
+
+    const { q1 } = await inquirer.prompt([{
+      type: 'confirm',
+      name: 'q1',
+      message: `确认添加 "${displayName}" 到白名单？`,
+      default: false,
+    }])
+    if (!q1) { console.log(chalk.gray('已取消')); return }
+
+    // 再确认一次（防止误操作）
+    const { q2 } = await inquirer.prompt([{
+      type: 'input',
+      name: 'q2',
+      message: `请输入 "确认" 以继续:`,
+    }])
+    if (q2 !== '确认') { console.log(chalk.gray('已取消')); return }
+
+    whitelistService.addDirect(wxid)
+    console.log(chalk.green(`\n✓ 已添加 "${displayName}" 到白名单`))
+  })
+
+whitelistCmd
+  .command('rm <wxid>')
+  .description('移除白名单中的 wxid')
+  .action((wxid: string) => {
+    if (whitelistService.remove(wxid)) {
+      console.log(chalk.green(`✓ 已移除: ${wxid}`))
+    } else {
+      console.log(chalk.yellow(`未找到: ${wxid}`))
+    }
+  })
+
+whitelistCmd
+  .command('clear')
+  .description('清空白名单')
+  .action(async () => {
+    const { confirm } = await inquirer.prompt([{
+      type: 'confirm',
+      name: 'confirm',
+      message: '确定要清空所有白名单吗？',
+      default: false,
+    }])
+    if (confirm) {
+      whitelistService.clear()
+      console.log(chalk.green('✓ 白名单已清空'))
+    }
+  })
+
+// ==================== send ====================
+program
+  .command('send <target> <message>')
+  .description('发送文本消息给指定联系人')
+  .option('--image <path>', '发图片')
+  .option('--file <path>', '发文件')
+  .action(async (target: string, message: string, opts) => {
+    // Resolve target
+    let wxid: string
+    try {
+      wxid = await resolveTalker(target)
+    } catch (e: any) {
+      console.log(chalk.red(`${e.message}`))
+      process.exit(1)
+    }
+
+    // Whitelist check
+    if (!whitelistService.isAllowed(wxid)) {
+      console.log(chalk.red('\n❌ 目标不在白名单中，拒绝发送'))
+      console.log(chalk.gray(`  先运行: weflow-cli whitelist add ${target}`))
+      console.log(chalk.gray(`  查看名单: weflow-cli whitelist\n`))
+      process.exit(1)
+    }
+
+    // 二次确认
+    const { confirm } = await inquirer.prompt([{
+      type: 'confirm',
+      name: 'confirm',
+      message: `确认发送给 ${chalk.cyan(target)}？`,
+      default: false,
+    }])
+    if (!confirm) {
+      console.log(chalk.gray('已取消'))
+      return
+    }
+
+    // Login check
+    const token = configService.get('wechatOcToken')
+    if (!token) {
+      console.log(chalk.red('\n❌ 未登录消息通道'))
+      console.log(chalk.gray('  先运行: weflow-cli login-wechat\n'))
+      process.exit(1)
+    }
+
+    const service = new WechatMessageService({ token })
+
+    let success = false
+    if (opts.image) {
+      success = await service.sendImage(wxid, opts.image)
+    } else if (opts.file) {
+      success = await service.sendFile(wxid, opts.file)
+    } else {
+      success = await service.sendText(wxid, message)
+    }
+
+    if (success) {
+      console.log(chalk.green('✓ 发送成功'))
+    } else {
+      console.log(chalk.red('✗ 发送失败 — 可能需要先收到对方一条消息 (获取 context_token)'))
+    }
+  })
+
+// ==================== listen ====================
+program
+  .command('listen')
+  .description('监听微信消息 (Ctrl+C 退出)')
+  .option('--target <wxid>', '只显示指定用户的消息')
+  .action(async (opts) => {
+    const token = configService.get('wechatOcToken')
+    if (!token) {
+      console.log(chalk.red('\n❌ 未登录消息通道'))
+      console.log(chalk.gray('  先运行: weflow-cli login-wechat\n'))
+      process.exit(1)
+    }
+
+    // Whitelist must be non-empty before listening
+    const wl = whitelistService.getList()
+    if (wl.length === 0) {
+      console.log(chalk.red('\n❌ 白名单为空，拒绝监听'))
+      console.log(chalk.gray('  为了防止收到非预期消息，必须先配置白名单'))
+      console.log(chalk.gray('  运行: weflow-cli whitelist add <昵称>\n'))
+      process.exit(1)
+    }
+    console.log(chalk.gray(`当前白名单: ${wl.join(', ')}`))
+
+    const service = new WechatMessageService({ token })
+    console.log(chalk.cyan('\n开始监听消息... (Ctrl+C 退出)\n'))
+
+    service.onMessage((msg) => {
+      // Whitelist filter (strict)
+      if (!whitelistService.isAllowed(msg.fromUserId)) {
+        return
+      }
+      // Target filter
+      if (opts.target && msg.fromUserId !== opts.target) {
+        return
+      }
+
+      const time = new Date(msg.timestampMs).toLocaleString('zh-CN')
+      const kind = msg.messageKind !== 'text' ? ` [${msg.messageKind}]` : ''
+      console.log(chalk.gray(`[${time}]`) + ` ${chalk.blue(msg.senderNickname || msg.fromUserId)}:${kind} ${msg.messageStr}`)
+    })
+
+    // Graceful shutdown
+    process.on('SIGINT', async () => {
+      console.log(chalk.gray('\n正在停止监听...'))
+      await service.stop()
+      process.exit(0)
+    })
+
+    await service.startPolling()
+  })
+
+// ==================== report ====================
+program
+  .command('report')
+  .description('生成聊天月报（AI 分析任务和回复）')
+  .option('--month <YYYY-MM>', '指定月份')
+  .option('--talker <昵称>', '指定联系人（可多次使用）')
+  .option('--from-whitelist', '使用白名单中的联系人')
+  .option('--api-key <key>', 'DeepSeek API key')
+  .option('--no-ai', '仅统计，不调用 AI')
+  .option('-o, --output <dir>', '输出目录', './output')
+  .action(async (opts) => {
+    if (!configService.isConfigured()) {
+      console.log(chalk.red('\n❌ 还没配置\n  运行: weflow-cli init\n'))
+      process.exit(1)
+    }
+
+    const { execFile } = await import('child_process')
+    const { promisify } = await import('util')
+    const execFileAsync = promisify(execFile)
+    const { fileURLToPath } = await import('url')
+    const { dirname } = await import('path')
+    const __filename = fileURLToPath(import.meta.url)
+    const __dirname = dirname(__filename)
+    const pkgRoot = join(__dirname, '..', '..')
+    const script = join(pkgRoot, 'scripts', 'chat_report.py')
+
+    const args: string[] = [script]
+    if (opts.month) args.push('--month', opts.month)
+    if (opts.talker) {
+      // commander collects repeated --talker into array, single value is string
+      const talkers = Array.isArray(opts.talker) ? opts.talker : [opts.talker]
+      for (const t of talkers) args.push('--talker', t)
+    }
+    if (opts.fromWhitelist) args.push('--from-whitelist')
+    if (opts.apiKey) args.push('--api-key', opts.apiKey)
+    if (opts.ai === false) args.push('--no-ai')
+    if (opts.output) args.push('--output', opts.output)
+
+    try {
+      console.log(chalk.cyan('正在生成月报...\n'))
+      const { stdout } = await execFileAsync('python', args, {
+        timeout: 600_000,
+        maxBuffer: 50 * 1024 * 1024,
+        env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+      })
+      console.log(stdout)
+    } catch (e: any) {
+      console.error(chalk.red(`\n✗ 生成失败: ${e.message}`))
+      process.exit(1)
+    }
+  })
+
+  // vault init
+  program
+    .command('vault')
+    .description('Obsidian Vault 管理')
+    .addCommand(
+      new Command('init')
+        .description('初始化 Obsidian Vault 目录结构')
+        .option('-p, --path <dir>', 'Vault 路径', './output/wechat-vault')
+        .action(async (opts) => {
+          const { mkdirSync, writeFileSync } = await import('fs')
+          const { join } = await import('path')
+
+          const vaultPath = opts.path
+          console.log(chalk.cyan(`\n🔧 初始化 Obsidian Vault: ${vaultPath}\n`))
+
+          // Directory structure
+          const dirs = [
+            '.obsidian',
+            'Templates',
+            'Sources/WeChat',
+            'Wiki/Concepts',
+            'Wiki/Entities',
+            'Wiki/Topics',
+          ]
+          for (const d of dirs) {
+            mkdirSync(join(vaultPath, d), { recursive: true })
+            console.log(`  ✓ ${d}/`)
+          }
+
+          // .obsidian/app.json
+          writeFileSync(join(vaultPath, '.obsidian', 'app.json'), JSON.stringify({
+            "newFileLocation": "folder",
+            "newFileFolderPath": "Sources",
+            "attachmentFolderPath": "Assets",
+            "showInlineTitle": false,
+          }, null, 2), 'utf-8')
+
+          // Templates/article.md
+          writeFileSync(join(vaultPath, 'Templates', 'article.md'), [
+            '---',
+            'title: "{{title}}"',
+            'source: ""',
+            'date: {{date}}',
+            'topic: AI',
+            'tags: []',
+            'created: {{date}}',
+            '---',
+            '',
+            '# {{title}}',
+            '',
+            '> 来源：  ',
+            '> 时间：{{date}}  ',
+            '',
+            '---',
+            '',
+            '## AI 摘要',
+            '',
+            '',
+            '## 相关概念',
+            '',
+            '',
+            '---',
+            '',
+            '## 正文',
+            '',
+          ].join('\n'), 'utf-8')
+
+          // README.md
+          writeFileSync(join(vaultPath, 'README.md'), [
+            '# WeChat Knowledge Vault',
+            '',
+            '> 由 weflow-cli 自动生成，兼容 Obsidian。',
+            '',
+            '## 目录结构',
+            '',
+            '| 目录 | 说明 |',
+            '|------|------|',
+            '| `Sources/WeChat/` | 公众号文章（按日期+主题分类） |',
+            '| `Wiki/Concepts/` | 概念页（手动或 AI 生成） |',
+            '| `Wiki/Entities/` | 实体页（公众号、作者等） |',
+            '| `Wiki/Topics/` | 主题总览页 |',
+            '| `Templates/` | 模板文件 |',
+            '',
+            '## 快速查询',
+            '',
+            '使用 Obsidian Dataview 插件：',
+            '',
+            '```dataview',
+            'TABLE date, topic, tags',
+            'FROM "Sources/WeChat"',
+            'WHERE topic = "AI"',
+            'SORT date DESC',
+            '```',
+            '',
+            '```dataview',
+            'TABLE length(rows) as "篇数"',
+            'FROM "Sources/WeChat"',
+            'GROUP BY topic',
+            'SORT rows.length DESC',
+            '```',
+            '',
+            '## 每日更新',
+            '',
+            '```bash',
+            '# 生成今日日报',
+            'python scripts/biz_daily.py --api-key <key>',
+            '',
+            '# 后处理（广告清洗+深度摘要）',
+            'python scripts/classify_daily.py --api-key <key> --interest AI',
+            '',
+            '# 同步到 GitHub',
+            '# (见 OPERATIONS.md)',
+            '```',
+            '',
+            '---',
+            '',
+            '*由 weflow-cli vault init 生成*',
+          ].join('\n'), 'utf-8')
+
+          // .gitignore
+          writeFileSync(join(vaultPath, '.gitignore'), [
+            '.obsidian/workspace*.json',
+            '.obsidian/hotkeys.json',
+            '.trash/',
+            '.DS_Store',
+          ].join('\n'), 'utf-8')
+
+          console.log(chalk.green(`\n✓ Vault 创建完成!`))
+          console.log(`  用 Obsidian 打开: File → Open Vault → ${vaultPath}`)
+        })
+    )
+
+  // wiki compile
+  program
+    .command('wiki')
+    .description('概念图谱管理')
+    .addCommand(
+      new Command('compile')
+        .description('扫描文章 [[Wikilinks]] 聚合生成概念页')
+        .option('-l, --limit <n>', '最多生成概念数', '20')
+        .option('--source <dir>', '文章目录', './output/biz-daily')
+        .option('-o, --output <dir>', '概念页输出目录', './output/wechat-vault/Wiki/Concepts')
+        .option('--api-key <key>', 'DeepSeek API key')
+        .action(async (opts) => {
+          const { execFile } = await import('child_process')
+          const { promisify } = await import('util')
+          const execFileAsync = promisify(execFile)
+          const { fileURLToPath } = await import('url')
+          const { dirname } = await import('path')
+          const __filename = fileURLToPath(import.meta.url)
+          const __dirname = dirname(__filename)
+          const pkgRoot = join(__dirname, '..', '..')
+          const script = join(pkgRoot, 'scripts', 'compile_wiki.py')
+
+          const args: string[] = [script, '--limit', opts.limit, '--source', opts.source, '--output', opts.output]
+          if (opts.apiKey) args.push('--api-key', opts.apiKey)
+
+          try {
+            console.log(chalk.cyan('正在编译概念图谱...\n'))
+            const { stdout } = await execFileAsync('python', args, {
+              timeout: 300_000,
+              maxBuffer: 10 * 1024 * 1024,
+              env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+            })
+            console.log(stdout)
+          } catch (e: any) {
+            console.error(chalk.red(`\n✗ 编译失败: ${e.message}`))
+            process.exit(1)
+          }
+        })
+    )
+
+  // pipeline run
+  program
+    .command('pipeline')
+    .description('端到端自动化流水线')
+    .addCommand(
+      new Command('run')
+        .description('一键运行 biz_daily → classify → wiki compile')
+        .option('--date <YYYY-MM-DD>', '日期')
+        .option('--api-key <key>', 'DeepSeek API key')
+        .option('--interest <topic>', '兴趣主题', 'AI')
+        .option('--wiki-limit <n>', '概念编译数', '20')
+        .action(async (opts) => {
+          const { execFile } = await import('child_process')
+          const { promisify } = await import('util')
+          const execFileAsync = promisify(execFile)
+          const { fileURLToPath } = await import('url')
+          const { dirname } = await import('path')
+          const __filename = fileURLToPath(import.meta.url)
+          const __dirname = dirname(__filename)
+          const pkgRoot = join(__dirname, '..', '..')
+          const script = join(pkgRoot, 'scripts', 'pipeline.py')
+
+          const args: string[] = [script, '--api-key', opts.apiKey, '--interest', opts.interest, '--wiki-limit', opts.wikiLimit]
+          if (opts.date) args.push('--date', opts.date)
+
+          try {
+            console.log(chalk.cyan('\n启动端到端流水线...\n'))
+            const { stdout } = await execFileAsync('python', args, {
+              timeout: 600_000,
+              maxBuffer: 50 * 1024 * 1024,
+              env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+            })
+            console.log(stdout)
+          } catch (e: any) {
+            console.error(chalk.red(`\n✗ 流水线失败: ${e.message}`))
+            process.exit(1)
+          }
+        })
+    )
+
+  // vault sync — add to existing vault command
+  program.commands
+    .find(c => c.name() === 'vault')
+    ?.addCommand(
+      new Command('sync')
+        .description('增量提交 Vault 并推送到远端仓库')
+        .option('-r, --repo <url>', '远端 Git 仓库地址')
+        .option('-b, --branch <name>', '分支名', 'main')
+        .option('--include-chat', '包含聊天记录（默认不同步）')
+        .action(async (opts) => {
+          const { execFile } = await import('child_process')
+          const { promisify } = await import('util')
+          const execFileAsync = promisify(execFile)
+          const vaultPath = join(process.cwd(), 'output', 'wechat-vault')
+
+          const repo = opts.repo || configService.get('vaultRepo')
+          if (!repo) {
+            console.error(chalk.red('\n❌ 未指定远端仓库。运行: weflow-cli config set vaultRepo <url> 或使用 --repo 参数\n'))
+            process.exit(1)
+          }
+
+          try {
+            // Ensure vault is a git repo
+            const gitDir = join(vaultPath, '.git')
+            const { existsSync } = await import('fs')
+            if (!existsSync(gitDir)) {
+              console.log(chalk.cyan('初始化 Vault Git 仓库...'))
+              await execFileAsync('git', ['init'], { cwd: vaultPath })
+              await execFileAsync('git', ['remote', 'add', 'origin', repo], { cwd: vaultPath })
+            }
+
+            // Check for changes
+            try {
+              await execFileAsync('git', ['diff', '--cached', '--quiet'], { cwd: vaultPath })
+              await execFileAsync('git', ['diff', '--quiet'], { cwd: vaultPath })
+              console.log(chalk.yellow('没有变更，跳过同步'))
+              return
+            } catch {
+              // Has changes, proceed
+            }
+
+            const dateStr = new Date().toISOString().slice(0, 10)
+            const { stdout: statOut } = await execFileAsync('git', ['diff', '--stat'], { cwd: vaultPath })
+
+            console.log(chalk.cyan('提交变更...'))
+            await execFileAsync('git', ['add', '-A'], { cwd: vaultPath })
+            await execFileAsync('git', ['commit', '-m', `vault sync: ${dateStr} | ${statOut.split('\n').length} files`], { cwd: vaultPath })
+
+            console.log(chalk.cyan('推送到远端...'))
+            await execFileAsync('git', ['push', '-u', 'origin', opts.branch], { cwd: vaultPath, timeout: 60_000 })
+
+            console.log(chalk.green(`\n✓ Vault 已同步到 ${repo} (${opts.branch})`))
+          } catch (e: any) {
+            console.error(chalk.red(`\n✗ 同步失败: ${e.message}`))
+            process.exit(1)
+          }
+        })
+    )
+
+  // vault enrich — bidirectional backlinks
+  program.commands
+    .find(c => c.name() === 'vault')
+    ?.addCommand(
+      new Command('enrich')
+        .description('增强双向链接 — 为文章添加相关阅读段落')
+        .option('--date <YYYY-MM-DD>', '日期（默认今天）')
+        .action(async (opts) => {
+          const { fileURLToPath } = await import('url')
+          const { dirname } = await import('path')
+          const __filename = fileURLToPath(import.meta.url)
+          const __dirname = dirname(__filename)
+          const pkgRoot = join(__dirname, '..', '..')
+          const script = join(pkgRoot, 'scripts', 'enrich_backlinks.py')
+          if (!opts.date) {
+            const now = new Date()
+            opts.date = `${now.getFullYear()}-${String(now.getMonth()+1).padStart(2,'0')}-${String(now.getDate()).padStart(2,'0')}`
+          }
+          await runPythonCmd(script, ['--date', opts.date])
+        })
+    )
+
+  // vault notes — create reading notes
+  program.commands
+    .find(c => c.name() === 'vault')
+    ?.addCommand(
+      new Command('notes')
+        .description('创建阅读笔记 — 为文章生成 Vault 笔记页')
+        .option('--date <YYYY-MM-DD>', '日期（默认今天）')
+        .option('--vault <path>', 'Vault 路径', './output/wechat-vault')
+        .action(async (opts) => {
+          const { fileURLToPath } = await import('url')
+          const { dirname } = await import('path')
+          const __filename = fileURLToPath(import.meta.url)
+          const __dirname = dirname(__filename)
+          const pkgRoot = join(__dirname, '..', '..')
+          const script = join(pkgRoot, 'scripts', 'create_reading_notes.py')
+          if (!opts.date) {
+            const now = new Date()
+            opts.date = `${now.getFullYear()}-${String(now.getMonth()+1).padStart(2,'0')}-${String(now.getDate()).padStart(2,'0')}`
+          }
+          await runPythonCmd(script, ['--date', opts.date, '--vault', opts.vault])
+        })
+    )
+
+  // vault tag — auto tag
+  program.commands
+    .find(c => c.name() === 'vault')
+    ?.addCommand(
+      new Command('tag')
+        .description('自动标签 — AI 为文章补充标签')
+        .option('--date <YYYY-MM-DD>', '日期（默认今天）')
+        .action(async (opts) => {
+          const { fileURLToPath } = await import('url')
+          const { dirname } = await import('path')
+          const __filename = fileURLToPath(import.meta.url)
+          const __dirname = dirname(__filename)
+          const pkgRoot = join(__dirname, '..', '..')
+          const script = join(pkgRoot, 'scripts', 'auto_tag.py')
+          if (!opts.date) { const n=new Date(); opts.date=`${n.getFullYear()}-${String(n.getMonth()+1).padStart(2,'0')}-${String(n.getDate()).padStart(2,'0')}` }
+          await runPythonCmd(script, ['--date', opts.date])
+        })
+    )
+
+  // vault search — search across Vault
+  program.commands
+    .find(c => c.name() === 'vault')
+    ?.addCommand(
+      new Command('search')
+        .description('Vault 搜索 — 文章+概念+笔记')
+        .argument('<query>', '搜索关键词')
+        .option('--type <type>', 'all / article / concept / note', 'all')
+        .option('--top-k <n>', '返回数量', '10')
+        .action(async (query, opts) => {
+          const { fileURLToPath } = await import('url')
+          const { dirname } = await import('path')
+          const __filename = fileURLToPath(import.meta.url)
+          const __dirname = dirname(__filename)
+          const pkgRoot = join(__dirname, '..', '..')
+          const script = join(pkgRoot, 'scripts', 'vault_search.py')
+          await runPythonCmd(script, [query, '--type', opts.type, '--top-k', opts.topK, '--json'])
+        })
+    )
+
+  // vault rag — RAG dialog over Vault
+  program.commands
+    .find(c => c.name() === 'vault')
+    ?.addCommand(
+      new Command('rag')
+        .description('Vault 问答 — 基于知识库的 AI 对话')
+        .argument('<question>', '问题')
+        .option('--top-k <n>', '检索条数', '8')
+        .action(async (question, opts) => {
+          const { fileURLToPath } = await import('url')
+          const { dirname } = await import('path')
+          const __filename = fileURLToPath(import.meta.url)
+          const __dirname = dirname(__filename)
+          const pkgRoot = join(__dirname, '..', '..')
+          const script = join(pkgRoot, 'scripts', 'vault_rag.py')
+          await runPythonCmd(script, [question, '--top-k', opts.topK])
+        })
+    )
+
+  // vault sync-weread — sync WeRead to Vault
+  program.commands
+    .find(c => c.name() === 'vault')
+    ?.addCommand(
+      new Command('sync-weread')
+        .description('微信读书同步到 Vault')
+        .option('--type <type>', 'all / shelf / notes', 'all')
+        .action(async (opts) => {
+          const { fileURLToPath } = await import('url')
+          const { dirname } = await import('path')
+          const __filename = fileURLToPath(import.meta.url)
+          const __dirname = dirname(__filename)
+          const pkgRoot = join(__dirname, '..', '..')
+          const script = join(pkgRoot, 'scripts', 'sync_weread.py')
+          await runPythonCmd(script, ['--type', opts.type])
+        })
+    )
+
+  // chat-stats
+  program
+    .command('chat-stats')
+    .description('微信个人信息消费报告（支付 + 转账）')
+    .option('--period <week|month>', '报告周期', 'week')
+    .option('--month <YYYY-MM>', '指定月份（覆盖 --period）')
+    .option('-o, --output <path>', '输出路径')
+    .action(async (opts) => {
+      const { execFile } = await import('child_process')
+      const { promisify } = await import('util')
+      const execFileAsync = promisify(execFile)
+      const { fileURLToPath } = await import('url')
+      const { dirname } = await import('path')
+      const __filename = fileURLToPath(import.meta.url)
+      const __dirname = dirname(__filename)
+      const pkgRoot = join(__dirname, '..', '..')
+      const script = join(pkgRoot, 'scripts', 'chat_stats.py')
+      const args: string[] = [script, '--period', opts.period]
+      if (opts.month) { args.push('--month', opts.month) }
+      if (opts.output) { args.push('--output', opts.output) }
+      try {
+        const { stdout } = await execFileAsync('python', args, {
+          timeout: 600_000, maxBuffer: 50 * 1024 * 1024,
+          env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+        })
+        console.log(stdout)
+      } catch (e: any) {
+        console.error(chalk.red(`\n✗ 失败: ${e.message}`))
+        process.exit(1)
+      }
+    })
+
+  // generate-review
+  program
+    .command('review')
+    .description('生成 AI 学习日报')
+    .option('--date <YYYY-MM-DD>', '日期')
+    .option('--api-key <key>', 'DeepSeek API key')
+    .action(async (opts) => {
+      const { execFile } = await import('child_process')
+      const { promisify } = await import('util')
+      const execFileAsync = promisify(execFile)
+      const { fileURLToPath } = await import('url')
+      const { dirname } = await import('path')
+      const __filename = fileURLToPath(import.meta.url)
+      const __dirname = dirname(__filename)
+      const pkgRoot = join(__dirname, '..', '..')
+      const script = join(pkgRoot, 'scripts', 'generate_review.py')
+      const args: string[] = [script]
+      if (opts.date) args.push('--date', opts.date)
+      if (opts.apiKey) args.push('--api-key', opts.apiKey)
+      try {
+        const { stdout } = await execFileAsync('python', args, {
+          timeout: 120_000, maxBuffer: 10 * 1024 * 1024,
+          env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+        })
+        console.log(stdout)
+      } catch (e: any) {
+        console.error(chalk.red(`\n✗ 失败: ${e.message}`))
+        process.exit(1)
+      }
+    })
+
+  // fav-server
+  program
+    .command('fav-server')
+    .description('启动收藏服务器 — 浏览器访问 localhost 实时同步收藏夹')
+    .option('--date <YYYY-MM-DD>', '日期（默认今天）')
+    .option('--port <number>', '端口', '8765')
+    .option('--open', '自动打开浏览器')
+    .action(async (opts) => {
+      const { spawn } = await import('child_process')
+      const { fileURLToPath } = await import('url')
+      const { dirname } = await import('path')
+      const __filename = fileURLToPath(import.meta.url)
+      const __dirname = dirname(__filename)
+      const pkgRoot = join(__dirname, '..', '..')
+      const script = join(pkgRoot, 'scripts', 'fav_server.py')
+
+      if (!opts.date) {
+        const now = new Date()
+        const yyyy = now.getFullYear()
+        const mm = String(now.getMonth() + 1).padStart(2, '0')
+        const dd = String(now.getDate()).padStart(2, '0')
+        opts.date = `${yyyy}-${mm}-${dd}`
+      }
+
+      const args = [script, '--date', opts.date, '--port', opts.port]
+      console.log(chalk.cyan(`⭐ 启动收藏服务器 (${opts.date})\n`))
+      console.log(chalk.gray(`  按住 Ctrl 并点击: http://localhost:${opts.port}`))
+
+      if (opts.open) {
+        const { exec } = await import('child_process')
+        exec(`start http://localhost:${opts.port}`)
+      }
+
+      const child = spawn('python', args, {
+        stdio: 'inherit',
+        env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+      })
+      await new Promise<void>((resolve) => child.on('exit', (code) => {
+        if (code !== 0 && code !== null) process.exit(code)
+        resolve()
+      }))
+    })
+
+  // ==================== weread ====================
+  const wereadCmd = program
+    .command('weread')
+    .description('微信读书助手 — 书架、统计、笔记、搜索、书评、推荐')
+
+  wereadCmd
+    .command('shelf')
+    .description('查看书架')
+    .option('--json', 'JSON 输出')
+    .action(async (opts) => {
+      const weread = await getWereadService()
+      const res = await weread.shelf()
+      if (!res.ok) { console.log(chalk.red(`✗ ${res.error}`)); process.exit(1) }
+      const d = res.data!
+      if (opts.json) { console.log(JSON.stringify(d, null, 2)); return }
+
+      const total = d.books.length + d.albums.length + (d.mp ? 1 : 0)
+      console.log(chalk.cyan(`📚 书架 (${total} 条目):\n`))
+      console.log(chalk.gray(`  电子书: ${d.books.length} 本 | 有声书: ${d.albums.length} 个 | 文章收藏: ${d.mp ? '有' : '无'}`))
+      if (d.archive.length) {
+        console.log(chalk.gray(`  书单: ${d.archive.map((a: any) => a.name).join(', ')}`))
+      }
+      console.log()
+      const books = d.books.sort((a: any, b: any) => b.readUpdateTime - a.readUpdateTime)
+      for (let i = 0; i < Math.min(books.length, 30); i++) {
+        const b = books[i]
+        const num = String(i + 1).padStart(3)
+        const done = b.finishReading === 1 ? chalk.green('✓') : ' '
+        console.log(`${num}. ${done} ${b.title}  ${chalk.gray(b.author)}`)
+      }
+      if (d.books.length > 30) console.log(chalk.gray(`  ... 共 ${d.books.length} 本`))
+    })
+
+  wereadCmd
+    .command('stats')
+    .description('阅读统计')
+    .option('--mode <mode>', 'weekly | monthly | annually | overall', 'monthly')
+    .option('--json', 'JSON 输出')
+    .action(async (opts) => {
+      const weread = await getWereadService()
+      const res = await weread.readData(opts.mode)
+      if (!res.ok) { console.log(chalk.red(`✗ ${res.error}`)); process.exit(1) }
+      const d = res.data!
+      if (opts.json) { console.log(JSON.stringify(d, null, 2)); return }
+
+      const h = (d.totalReadTime || 0) / 3600
+      console.log(chalk.cyan(`📊 阅读统计 (${opts.mode}):\n`))
+      console.log(`  总时长: ${chalk.white(h.toFixed(1) + ' 小时')}`)
+      console.log(`  有效天数: ${chalk.white(String(d.readDays))}`)
+      if (d.dayAverageReadTime) {
+        console.log(`  日均: ${chalk.white(Math.round(d.dayAverageReadTime / 60) + ' 分钟')}`)
+      }
+      if (d.readStat?.length) {
+        console.log(`  ${d.readStat.map((s: any) => `${s.stat}: ${chalk.white(s.counts)}`).join(' | ')}`)
+      }
+      if (d.preferCategoryWord) console.log(`  偏好: ${chalk.white(d.preferCategoryWord)}`)
+      if (d.preferTimeWord) console.log(`  时段: ${chalk.white(d.preferTimeWord)}`)
+
+      // 偏好分类
+      if (d.preferCategory?.length) {
+        console.log(chalk.cyan('\n  偏好分类:'))
+        for (const c of d.preferCategory.slice(0, 5)) {
+          const hh = (c.readingTime / 3600).toFixed(1)
+          console.log(`    ${c.categoryTitle}: ${chalk.white(hh + 'h')} (${c.readingCount}本)`)
+        }
+      }
+
+      // Read longest
+      if (d.readLongest?.length) {
+        console.log(chalk.cyan('\n  读最久的书:'))
+        for (const item of d.readLongest.slice(0, 5)) {
+          const b = item.book || item.albumInfo || {}
+          const hh = (item.readTime / 3600).toFixed(1)
+          console.log(`    ${b.title || '(未知)'}: ${chalk.white(hh + 'h')}  ${chalk.gray(b.author || '')}`)
+        }
+      }
+    })
+
+  wereadCmd
+    .command('notes')
+    .description('笔记划线')
+    .option('--book-id <id>', '指定书籍 ID')
+    .option('-n, --limit <n>', '数量', '20')
+    .option('--json', 'JSON 输出')
+    .action(async (opts) => {
+      const weread = await getWereadService()
+      if (opts.bookId) {
+        const res = await weread.bookmarks(opts.bookId, parseInt(opts.limit))
+        if (!res.ok) { console.log(chalk.red(`✗ ${res.error}`)); process.exit(1) }
+        const d = res.data!
+        if (opts.json) { console.log(JSON.stringify(d, null, 2)); return }
+        console.log(chalk.cyan(`📝 划线笔记 (${d.updated?.length || 0} 条):\n`))
+        for (let i = 0; i < Math.min((d.updated || []).length, parseInt(opts.limit)); i++) {
+          const n = d.updated[i]
+          const icon = n.type === 1 ? '💬' : '📌'
+          console.log(`${chalk.gray(`  [${i + 1}]`)} ${icon} ${n.markText?.slice(0, 60) || ''}`)
+          if (n.content) console.log(`${chalk.cyan('      想法:')} ${n.content.slice(0, 100)}`)
+          console.log()
+        }
+      } else {
+        const res = await weread.notebooks(50)
+        if (!res.ok) { console.log(chalk.red(`✗ ${res.error}`)); process.exit(1) }
+        const d = res.data!
+        if (opts.json) { console.log(JSON.stringify(d, null, 2)); return }
+        console.log(chalk.cyan(`📝 笔记本 (${d.books?.length || 0} 本有笔记):\n`))
+        for (let i = 0; i < Math.min((d.books || []).length, 30); i++) {
+          const b: any = d.books[i]
+          const bookInfo = b.book || b
+          const num = String(i + 1).padStart(3)
+          console.log(`${num}. ${bookInfo.title || '(未知)'}  ${chalk.gray(`划线:${b.highlightCount || b.noteCount || 0} 想法:${b.reviewCount || 0} 书签:${b.bookmarkCount || 0}`)}`)
+        }
+      }
+    })
+
+  wereadCmd
+    .command('search')
+    .description('搜索书籍')
+    .argument('<keyword>', '搜索关键词')
+    .option('-n, --limit <n>', '数量', '10')
+    .option('--json', 'JSON 输出')
+    .action(async (keyword, opts) => {
+      const weread = await getWereadService()
+      const res = await weread.search(keyword, parseInt(opts.limit))
+      if (!res.ok) { console.log(chalk.red(`✗ ${res.error}`)); process.exit(1) }
+      const d = res.data!
+      if (opts.json) { console.log(JSON.stringify(d, null, 2)); return }
+      console.log(chalk.cyan(`🔍 搜索: "${keyword}" (${d.books?.length || 0} 条):\n`))
+      for (let i = 0; i < (d.books || []).length; i++) {
+        const b = d.books[i]
+        const num = String(i + 1).padStart(2)
+        const star = b.rating ? ` ⭐${b.rating}` : ''
+        console.log(`  ${num}. ${b.title}  ${chalk.gray(b.author)}${star}`)
+        if (b.intro) console.log(`     ${chalk.gray(b.intro.slice(0, 80))}`)
+      }
+    })
+
+  wereadCmd
+    .command('book')
+    .description('书籍详情')
+    .argument('<bookId>', '书籍 ID')
+    .option('--json', 'JSON 输出')
+    .action(async (bookId, opts) => {
+      const weread = await getWereadService()
+      const [infoRes, progressRes] = await Promise.all([
+        weread.bookInfo(bookId),
+        weread.getProgress(bookId),
+      ])
+      if (!infoRes.ok) { console.log(chalk.red(`✗ ${infoRes.error}`)); process.exit(1) }
+      const b = infoRes.data!
+      if (opts.json) { console.log(JSON.stringify(b, null, 2)); return }
+
+      console.log(chalk.cyan(`📖 ${b.title}`))
+      if (b.author) console.log(`  作者: ${chalk.white(b.author)}`)
+      if (b.rating) console.log(`  评分: ${chalk.white('⭐' + b.rating + ' (' + (b as any).ratingCount + '评)')}`)
+      if (b.category) console.log(`  分类: ${chalk.gray(b.category)}`)
+      if (b.wordCount) console.log(`  字数: ${chalk.gray(b.wordCount)}`)
+      if (b.publisher) console.log(`  出版: ${chalk.gray(b.publisher)}`)
+      if (b.intro) console.log(`\n  ${b.intro.slice(0, 200)}`)
+      if (progressRes.ok && progressRes.data) {
+        console.log(`\n  📍 进度: ${chalk.white(progressRes.data.chapterTitle || '未开始')}`)
+      }
+    })
+
+  wereadCmd
+    .command('review')
+    .description('书籍点评')
+    .argument('<bookId>', '书籍 ID')
+    .option('-n, --limit <n>', '数量', '10')
+    .option('--json', 'JSON 输出')
+    .action(async (bookId, opts) => {
+      const weread = await getWereadService()
+      const res = await weread.reviews(bookId, parseInt(opts.limit))
+      if (!res.ok) { console.log(chalk.red(`✗ ${res.error}`)); process.exit(1) }
+      const d = res.data!
+      if (opts.json) { console.log(JSON.stringify(d, null, 2)); return }
+      console.log(chalk.cyan(`💬 书评 (${d.reviews?.length || 0} 条):\n`))
+      for (let i = 0; i < (d.reviews || []).length; i++) {
+        const r = d.reviews[i]
+        const num = String(i + 1).padStart(2)
+        const star = r.rating ? ` ⭐${r.rating}` : ''
+        console.log(`  ${num}. ${r.user?.name || '匿名'}${star}  ${chalk.gray(`👍${r.likeCount || 0}`)}`)
+        if (r.content) console.log(`     ${r.content.slice(0, 120)}`)
+        console.log()
+      }
+    })
+
+  wereadCmd
+    .command('discover')
+    .description('推荐好书')
+    .option('--book-id <id>', '基于某本书的相似推荐')
+    .option('-n, --limit <n>', '数量', '10')
+    .option('--json', 'JSON 输出')
+    .action(async (opts) => {
+      const weread = await getWereadService()
+      const res = opts.bookId
+        ? await weread.similar(opts.bookId, parseInt(opts.limit))
+        : await weread.recommend(parseInt(opts.limit))
+      if (!res.ok) { console.log(chalk.red(`✗ ${res.error}`)); process.exit(1) }
+      const d = res.data!
+      if (opts.json) { console.log(JSON.stringify(d, null, 2)); return }
+      const label = opts.bookId ? '相似推荐' : '个性化推荐'
+      console.log(chalk.cyan(`🎯 ${label}:\n`))
+      for (let i = 0; i < (d.books || []).length; i++) {
+        const b = d.books[i]
+        const num = String(i + 1).padStart(2)
+        const star = b.rating ? ` ⭐${b.rating}` : ''
+        console.log(`  ${num}. ${b.title}  ${chalk.gray(b.author)}${star}`)
+        if (b.intro) console.log(`     ${chalk.gray(b.intro.slice(0, 80))}`)
+      }
+    })
+
+  wereadCmd
+    .command('profile')
+    .description('个人阅读概览')
+    .option('--json', 'JSON 输出')
+    .action(async (opts) => {
+      const weread = await getWereadService()
+      const res = await weread.profile()
+      if (!res.ok) { console.log(chalk.red(`✗ ${res.error}`)); process.exit(1) }
+      const p = res.data!
+      if (opts.json) { console.log(JSON.stringify(p, null, 2)); return }
+
+      const totalH = (p.totalReadTime / 3600).toFixed(1)
+      console.log(chalk.cyan('📖 个人阅读概览:\n'))
+      console.log(`  总时长:  ${chalk.white(totalH + ' 小时')}`)
+      console.log(`  阅读天数: ${chalk.white(String(p.totalReadDays) + ' 天')}`)
+      console.log(`  书架:    ${chalk.white(String(p.totalBooks) + ' 本')}`)
+      console.log(`  读完:    ${chalk.white(String(p.totalFinished) + ' 本')}`)
+    })
+
+  // 辅助函数
+  async function runPythonCmd(script: string, args: string[]) {
+    const { execFile } = await import('child_process')
+    const { promisify } = await import('util')
+    const execFileAsync = promisify(execFile)
+    try {
+      const { stdout } = await execFileAsync('python', [script, ...args], {
+        timeout: 120_000, maxBuffer: 5 * 1024 * 1024,
+        env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+      })
+      console.log(stdout)
+    } catch (e: any) {
+      console.error(chalk.red(`\n✗ 失败: ${e.message}`))
+    }
+  }
+
+  async function getWereadService() {
+    const key = process.env.WEREAD_API_KEY || ''
+    const mod = await import('../src/services/wereadService.js')
+    return new mod.WereadService(key)
+  }
+
+  // semantic-search
+  program
+    .command('search')
+    .description('语义搜索知识库（聊天记录 + 文章）')
+    .argument('<query>', '搜索关键词')
+    .option('--top-k <n>', '返回数量', '10')
+    .option('--api-key <key>', 'DeepSeek API key')
+    .action(async (query, opts) => {
+      const { execFile } = await import('child_process')
+      const { promisify } = await import('util')
+      const execFileAsync = promisify(execFile)
+      const { fileURLToPath } = await import('url')
+      const { dirname } = await import('path')
+      const __filename = fileURLToPath(import.meta.url)
+      const __dirname = dirname(__filename)
+      const pkgRoot = join(__dirname, '..')
+      const script = join(pkgRoot, 'scripts', 'semantic_search.py')
+      const args: string[] = [script, 'search', query, '--top-k', opts.topK]
+      if (opts.apiKey) args.push('--api-key', opts.apiKey)
+      try {
+        const { stdout } = await execFileAsync('python', args, {
+          timeout: 60_000, maxBuffer: 10 * 1024 * 1024,
+          env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+        })
+        console.log(stdout)
+      } catch (e: any) {
+        console.error(chalk.red(`\n✗ 搜索失败: ${e.message}`))
+        process.exit(1)
+      }
+    })
+
+  program
+    .command('search-index')
+    .description('构建语义搜索索引')
+    .option('--full', '全量重建')
+    .option('--api-key <key>', 'DeepSeek API key')
+    .action(async (opts) => {
+      const { execFile } = await import('child_process')
+      const { promisify } = await import('util')
+      const execFileAsync = promisify(execFile)
+      const { fileURLToPath } = await import('url')
+      const { dirname } = await import('path')
+      const __filename = fileURLToPath(import.meta.url)
+      const __dirname = dirname(__filename)
+      const pkgRoot = join(__dirname, '..')
+      const script = join(pkgRoot, 'scripts', 'semantic_search.py')
+      const args: string[] = [script, 'build']
+      if (opts.full) args.push('--full')
+      if (opts.apiKey) args.push('--api-key', opts.apiKey)
+      try {
+        const { stdout } = await execFileAsync('python', args, {
+          timeout: 300_000, maxBuffer: 10 * 1024 * 1024,
+          env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+        })
+        console.log(stdout)
+      } catch (e: any) {
+        console.error(chalk.red(`\n✗ 失败: ${e.message}`))
+        process.exit(1)
+      }
+    })
+
+  // chat
+  program
+    .command('chat')
+    .description('RAG 智能助手 — 基于聊天记录和公众号的对话式问答')
+    .argument('[question]', '要问的问题（不传则进入交互模式）')
+    .option('--top-k <n>', '检索数量', '10')
+    .option('--talker <name>', '限定联系人/群聊')
+    .option('--api-key <key>', 'AI API key')
+    .option('--json', 'JSON 输出')
+    .action(async (question, opts) => {
+      const { execFile, spawn } = await import('child_process')
+      const { promisify } = await import('util')
+      const execFileAsync = promisify(execFile)
+      const { fileURLToPath } = await import('url')
+      const { dirname } = await import('path')
+      const __filename = fileURLToPath(import.meta.url)
+      const __dirname = dirname(__filename)
+      const pkgRoot = join(__dirname, '..')
+      const script = join(pkgRoot, 'scripts', 'rag_chat.py')
+      const args: string[] = [script]
+      if (question) {
+        args.push(question, '--top-k', opts.topK)
+        if (opts.talker) args.push('--talker', opts.talker)
+        if (opts.apiKey) args.push('--api-key', opts.apiKey)
+        if (opts.json) args.push('--json')
+        try {
+          const { stdout } = await execFileAsync('python', args, {
+            timeout: 120_000, maxBuffer: 10 * 1024 * 1024,
+            env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+          })
+          console.log(stdout)
+        } catch (e: any) {
+          console.error(chalk.red(`\n✗ 对话失败: ${e.message}`))
+          process.exit(1)
+        }
+      } else {
+        // 交互模式：使用 spawn 保持终端交互
+        args.push('--interactive', '--top-k', opts.topK)
+        if (opts.talker) args.push('--talker', opts.talker)
+        if (opts.apiKey) args.push('--api-key', opts.apiKey)
+        const child = spawn('python', args, {
+          stdio: 'inherit',
+          env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+        })
+        await new Promise<void>((resolve) => child.on('exit', (code) => {
+          if (code !== 0) process.exit(code || 1);
+          resolve();
+        }))
+      }
+    })
+
+  // Helper: run a Python script
+  async function runPython(script: string, args: string[]): Promise<void> {
+    const { execFile } = await import('child_process')
+    const { promisify } = await import('util')
+    const execFileAsync = promisify(execFile)
+    const { fileURLToPath } = await import('url')
+    const { dirname } = await import('path')
+    const __filename = fileURLToPath(import.meta.url)
+    const __dirname = dirname(__filename)
+    const pkgRoot = join(__dirname, '..')
+    const pyArgs = [join(pkgRoot, script), ...args]
+    try {
+      const { stdout } = await execFileAsync('python', pyArgs, {
+        timeout: 120_000, maxBuffer: 5 * 1024 * 1024,
+        env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+      })
+      console.log(stdout)
+    } catch (e: any) {
+      console.error(chalk.red(`\n✗ 失败: ${e.message}`))
+      process.exit(1)
+    }
+  }
+
+  // annual-report
+  program
+    .command('annual-report')
+    .description('生成年度数字生活报告')
+    .argument('[year]', '年份（默认今年）')
+    .option('--share', '分享模式（紧凑卡片）')
+    .option('--api-key <key>', 'DeepSeek API key')
+    .option('--skip-ai', '跳过 AI 总结')
+    .action(async (year, opts) => {
+      const a = [year || String(new Date().getFullYear())]
+      if (opts.share) a.push('--share')
+      if (opts.apiKey) a.push('--api-key', opts.apiKey)
+      if (opts.skipAi) a.push('--skip-ai')
+      await runPython('scripts/annual_report.py', a)
+    })
+
+  // todos
+  const todosCmd = program
+    .command('todos')
+    .description('待办提取与任务追踪')
+
+  todosCmd
+    .command('extract')
+    .description('AI 扫描聊天记录提取待办')
+    .option('--days <n>', '扫描天数', '7')
+    .option('--api-key <key>', 'DeepSeek API key')
+    .action(async (opts) => {
+      await runPython('scripts/extract_todos.py', ['extract', '--days', opts.days, ...(opts.apiKey ? ['--api-key', opts.apiKey] : [])])
+    })
+
+  todosCmd
+    .command('list')
+    .description('列出待办')
+    .option('--status <s>', 'pending / done')
+    .option('--urgency <u>', '高 / 中 / 低')
+    .option('--json', 'JSON 输出')
+    .action(async (opts) => {
+      const a = ['list']
+      if (opts.status) a.push('--status', opts.status)
+      if (opts.urgency) a.push('--urgency', opts.urgency)
+      if (opts.json) a.push('--json')
+      await runPython('scripts/extract_todos.py', a)
+    })
+
+  todosCmd
+    .command('done')
+    .description('标记待办为已完成')
+    .argument('<id>', '待办 ID')
+    .action(async (id) => {
+      await runPython('scripts/extract_todos.py', ['done', id])
+    })
+
+  todosCmd
+    .command('undone')
+    .description('取消已完成标记')
+    .argument('<id>', '待办 ID')
+    .action(async (id) => {
+      await runPython('scripts/extract_todos.py', ['undone', id])
+    })
+
+  todosCmd
+    .command('rm')
+    .description('删除待办')
+    .argument('<id>', '待办 ID')
+    .action(async (id) => {
+      await runPython('scripts/extract_todos.py', ['rm', id])
+    })
+
+  todosCmd
+    .command('remind')
+    .description('查看待办提醒')
+    .action(async () => {
+      await runPython('scripts/extract_todos.py', ['remind'])
+    })
+
+// ==================== daily ====================
+program
+  .command('daily')
+  .description('一键生成公众号日报（抓取 + AI 摘要 + HTML 阅读器 + 行动建议）')
+  .option('-d, --date <YYYY-MM-DD>', '日期')
+  .option('--api-key <key>', 'DeepSeek API key（或设环境变量 DEEPSEEK_API_KEY）')
+  .option('--skip-classify', '跳过后处理')
+  .action(async (opts) => {
+    const { execFile, spawn } = await import('child_process')
+    const { promisify } = await import('util')
+    const execFileAsync = promisify(execFile)
+    const { fileURLToPath } = await import('url')
+    const { dirname } = await import('path')
+    const __filename = fileURLToPath(import.meta.url)
+    const __dirname = dirname(__filename)
+    const pkgRoot = join(__dirname, '..')
+    const pipeline = join(pkgRoot, 'scripts', 'pipeline.py')
+
+    const date = opts.date || new Date().toISOString().slice(0, 10)
+    const apiKey = opts.apiKey || process.env.DEEPSEEK_API_KEY || ''
+    if (!apiKey) {
+      console.log(chalk.red('\n❌ 缺少 DeepSeek API key'))
+      console.log(chalk.gray('  用法: weflow-cli daily --api-key <key>'))
+      console.log(chalk.gray('  或设环境变量: set DEEPSEEK_API_KEY=<key>\n'))
+      process.exit(1)
+    }
+
+    console.log(chalk.cyan(`\n📰 正在生成 ${date} 公众号日报...\n`))
+    const args = [pipeline, '--date', date, '--api-key', apiKey, '--interest', 'AI', '--skip-wiki']
+    if (opts.skipClassify) args.push('--skip-classify')
+
+    const child = spawn('python', args, {
+      stdio: 'inherit',
+      env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+    })
+    child.on('exit', (code) => {
+      if (code === 0) {
+        console.log(chalk.green(`\n✓ 日报已生成: output/biz-daily/${date}/`))
+        console.log(chalk.gray(`  HTML 阅读器: weflow-cli daily-server --date ${date}`))
+      } else {
+        process.exit(code || 1)
+      }
+    })
+  })
+
+// ==================== daily-server ====================
+program
+  .command('daily-server')
+  .description('启动本地日报阅读器（浏览器浏览 + 收藏 + 笔记）')
+  .option('-d, --date <YYYY-MM-DD>', '日期')
+  .option('-p, --port <n>', '端口', '8765')
+  .option('--open', '自动打开浏览器')
+  .action(async (opts) => {
+    const { spawn, exec } = await import('child_process')
+    const { fileURLToPath } = await import('url')
+    const { dirname } = await import('path')
+    const __filename = fileURLToPath(import.meta.url)
+    const __dirname = dirname(__filename)
+    const pkgRoot = join(__dirname, '..')
+    const favServer = join(pkgRoot, 'scripts', 'fav_server.py')
+
+    const date = opts.date || new Date().toISOString().slice(0, 10)
+    console.log(chalk.cyan(`⭐ 启动日报阅读器\n`))
+    console.log(chalk.gray(`  日期: ${date}`))
+    console.log(chalk.gray(`  地址: http://localhost:${opts.port}`))
+    console.log()
+
+    if (opts.open) {
+      exec(`start http://localhost:${opts.port}`)
+    }
+
+    const child = spawn('python', [favServer, '--date', date, '--port', String(opts.port)], {
+      stdio: 'inherit',
+      env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+    })
+    process.on('SIGINT', () => child.kill())
+  })
+
+// ==================== Interactive Menu (no arguments) ====================
+program
+  .command('mcp-config')
+  .description('输出 MCP Server 配置，粘贴到 .mcp.json 即可让 AI 操作本工具')
+  .option('--port <n>', 'MCP Server 端口', '0')
+  .option('-o, --output <file>', '写入文件', '')
+  .action(async (opts) => {
+    const { writeFileSync } = await import('fs')
+    const config = {
+      mcpServers: {
+        weflow: {
+          command: 'npx',
+          args: ['tsx', 'mcp-server/index.ts'],
+          cwd: '${workspaceFolder}',
+        },
+      },
+    }
+    const json = JSON.stringify(config, null, 2)
+    if (opts.output) {
+      writeFileSync(opts.output, json, 'utf-8')
+      console.log(chalk.green(`✓ 已写入 ${opts.output}`))
+      console.log(chalk.gray('AI 助手现在可以使用以下工具：'))
+    } else {
+      console.log(json)
+    }
+    console.log(chalk.cyan('\n可用的 MCP 工具：'))
+    console.log(chalk.white('  wechat.search_articles  ') + chalk.gray('搜索知识库文章'))
+    console.log(chalk.white('  wechat.get_daily         ') + chalk.gray('获取公众号日报'))
+    console.log(chalk.white('  wechat.get_review        ') + chalk.gray('获取 AI 学习日报'))
+    console.log(chalk.white('  wechat.get_stats         ') + chalk.gray('知识库统计'))
+    console.log(chalk.white('  wechat.get_concepts      ') + chalk.gray('概念图谱'))
+    console.log()
+    if (opts.output) {
+      console.log(chalk.gray(`配置已写入 ${opts.output}，重启 AI 编辑器即可生效`))
+    } else {
+      console.log(chalk.gray('复制以上 JSON 到你的 .mcp.json 文件即可'))
+    }
+  })
+
+// ==================== check ====================
+program
+  .command('check')
+  .description('检查运行环境（Python、pip 依赖、数据库配置）')
+  .action(async () => {
+    console.log(chalk.cyan('🔍 WeFlow CLI 环境检查\n'))
+
+    // 1. Node.js
+    console.log(chalk.white('Node.js:'), chalk.green(`v${process.versions.node}`))
+
+    // 2. Python
+    const { execSync } = await import('child_process')
+    let pythonOk = false
+    try {
+      const pyVer = execSync('python --version 2>&1 || python3 --version 2>&1', { encoding: 'utf-8', timeout: 5000 }).trim()
+      console.log(chalk.white('Python: '), chalk.green(pyVer))
+      pythonOk = true
+    } catch {
+      console.log(chalk.white('Python: '), chalk.red('✗ 未找到'))
+    }
+
+    // 3. Pip dependencies
+    if (pythonOk) {
+      const deps = ['sqlcipher3', 'html2text', 'zstandard', 'cryptography']
+      console.log(chalk.white('\nPython 依赖:'))
+      let allOk = true
+      for (const dep of deps) {
+        try {
+          execSync(`python -c "import ${dep}"`, { timeout: 5000 })
+          console.log(`  ${dep.padEnd(20)} ${chalk.green('✓')}`)
+        } catch {
+          console.log(`  ${dep.padEnd(20)} ${chalk.red('✗ 缺失')}`)
+          allOk = false
+        }
+      }
+      if (!allOk) {
+        console.log(chalk.yellow('\n⚠️  运行以下命令安装缺失依赖：'))
+        console.log(chalk.gray('  pip install sqlcipher3 html2text zstandard cryptography'))
+      }
+      // 可选依赖
+      const optDeps = ['scrapling']
+      console.log(chalk.white('\n可选依赖（提升抓取成功率）:'))
+      for (const dep of optDeps) {
+        try {
+          execSync(`python -c "import ${dep}"`, { timeout: 5000 })
+          console.log(`  ${dep.padEnd(20)} ${chalk.green('✓')}`)
+        } catch {
+          console.log(`  ${dep.padEnd(20)} ${chalk.gray('○ (npm install scrapling)')}`)
+        }
+      }
+    }
+
+    // 4. Config
+    console.log(chalk.white('\n配置状态:'))
+    const configured = configService.isConfigured()
+    const hasKey = !!configService.get('ntKey') || !!configService.get('decryptKey')
+    if (configured && hasKey) {
+      console.log(chalk.green('  ✓ 已初始化 — 可以运行 weflow-cli'))
+    } else {
+      console.log(chalk.yellow('  ○ 未初始化 — 运行 weflow-cli init'))
+    }
+
+    // 5. Database
+    const ntDb = configService.get('ntDbPath')
+    if (ntDb && existsSync(ntDb)) {
+      const stat = (await import('fs')).statSync(ntDb)
+      const mb = (stat.size / 1024 / 1024).toFixed(0)
+      console.log(chalk.white(`  消息数据库: ${ntDb} (${mb}MB)`))
+    }
+    const bizDb = (configService as any).get?.('bizKey')
+    if (bizDb) {
+      console.log(chalk.green('  ✓ 公众号数据库密钥已配置'))
+    }
+    console.log()
+  })
+
+// ==================== Interactive Menu (no arguments) ====================
+async function showInteractiveMenu() {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const configured = configService.isConfigured()
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const hasNtKey = !!configService.get('ntKey')
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const hasLogin = !!configService.get('wechatOcToken')
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const hasVault = !!configService.get('vaultRepo')
+
+  // 首次运行：自动引导初始化
+  if (!configured) {
+    console.log(chalk.cyan('\n👋 欢迎使用 WeFlow CLI！'))
+    console.log(chalk.gray('检测到尚未初始化，让我们开始设置...\n'))
+
+    const { startInit } = await inquirer.prompt([{
+      type: 'confirm',
+      name: 'startInit',
+      message: '是否现在开始初始化（检测微信数据目录并提取密钥）？',
+      default: true,
+    }])
+    if (startInit) {
+      const initCmd = program.commands.find(c => c.name() === 'init')
+      if (initCmd) { await (initCmd as any).action(); return }
+    }
+    console.log(chalk.gray('\n稍后可运行: weflow-cli init\n'))
+    return
+  }
+
+  // 构建菜单选项
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const choices: any[] = []
+
+  choices.push(new inquirer.Separator('  📬 聊天记录'))
+  choices.push({ name: '  查看会话列表', value: 'sessions' })
+  choices.push({ name: '  查看聊天消息', value: 'messages' })
+  choices.push({ name: '  导出聊天记录', value: 'export' })
+  choices.push({ name: '  生成聊天月报', value: 'report' })
+
+  choices.push(new inquirer.Separator('  📰 公众号日报'))
+  choices.push({ name: '  生成今日日报', value: 'daily' })
+  choices.push({ name: '  启动阅读器', value: 'daily-server' })
+
+  choices.push(new inquirer.Separator('  💬 微信消息'))
+  choices.push({
+    name: `  扫码登录${hasLogin ? chalk.green(' (已登录)') : ''}`,
+    value: 'login-wechat',
+  })
+  choices.push({
+    name: `  监听消息${!hasLogin ? chalk.gray(' (需先登录)') : ''}`,
+    value: 'listen',
+    disabled: !hasLogin ? '请先扫码登录' : undefined,
+  })
+  choices.push({
+    name: `  发送消息${!hasLogin ? chalk.gray(' (需先登录)') : ''}`,
+    value: 'send',
+    disabled: !hasLogin ? '请先扫码登录' : undefined,
+  })
+
+  choices.push(new inquirer.Separator('  📚 知识库'))
+  choices.push({ name: '  初始化 Obsidian Vault', value: 'vault-init' })
+  choices.push({ name: '  编译概念图谱', value: 'wiki-compile' })
+  choices.push({
+    name: `  同步到远端${hasVault ? '' : chalk.gray(' (未配置仓库)')}`,
+    value: 'vault-sync',
+    disabled: !hasVault ? '请先配置 vaultRepo' : undefined,
+  })
+
+  choices.push(new inquirer.Separator('  📊 统计 & 报告'))
+  choices.push({ name: '  📊 个人信息消费报告', value: 'chat-stats' })
+  choices.push({ name: '  📚 微信读书统计', value: 'weread' })
+  choices.push({ name: '  🧠 提取待办事项', value: 'extract-todos' })
+  choices.push({ name: '  📝 AI 学习日报', value: 'generate-review' })
+
+  choices.push(new inquirer.Separator('  ⚙️ 系统'))
+  choices.push({ name: '  查看配置', value: 'config-show' })
+  choices.push({ name: '  重新初始化', value: 'init' })
+
+  // 显示状态摘要
+  console.log(chalk.cyan('\n🚀 WeFlow CLI v1.5.0\n'))
+  const statusParts: string[] = []
+  statusParts.push(hasNtKey ? chalk.green('✓ 数据库') : chalk.yellow('○ 数据库'))
+  statusParts.push(hasLogin ? chalk.green('✓ 消息通道') : chalk.gray('○ 消息通道'))
+  statusParts.push(hasVault ? chalk.green('✓ Vault') : chalk.gray('○ Vault'))
+  console.log(chalk.gray(`  状态: ${statusParts.join('  ')}\n`))
+
+  const { action } = await inquirer.prompt([{
+    type: 'select' as any,
+    name: 'action',
+    message: '请选择操作',
+    choices,
+    loop: false,
+  }])
+
+  // 辅助函数：执行命令
+  const runCmd = async (name: string, opts: Record<string, any> = {}) => {
+    const cmd = program.commands.find(c => c.name() === name)
+    if (cmd) await (cmd as any).action(opts)
+  }
+  const runSubCmd = async (parent: string, child: string, opts: Record<string, any> = {}) => {
+    const cmd = program.commands.find(c => c.name() === parent) as any
+    const sub = cmd?.commands?.find((c: any) => c.name() === child)
+    if (sub) await sub.action(opts)
+  }
+  const runPython = async (scriptName: string, label: string) => {
+    const { execFile } = await import('child_process')
+    const { promisify } = await import('util')
+    const execFileAsync = promisify(execFile)
+    const { fileURLToPath } = await import('url')
+    const { dirname } = await import('path')
+    const __filename = fileURLToPath(import.meta.url)
+    const __dirname = dirname(__filename)
+    const pkgRoot = join(__dirname, '..', '..')
+    const script = join(pkgRoot, 'scripts', scriptName)
+    console.log(chalk.cyan(`正在${label}...\n`))
+    try {
+      const { stdout } = await execFileAsync('python', [script], {
+        timeout: 600_000, maxBuffer: 50 * 1024 * 1024,
+        env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+      })
+      console.log(stdout)
+    } catch (e: any) {
+      console.error(chalk.red(`${label}失败: ${e.message}`))
+    }
+  }
+
+  switch (action) {
+    case 'sessions':
+      await runCmd('sessions')
+      break
+    case 'messages': {
+      const sessions = await chatService.listSessions(undefined, 30)
+      if (sessions.length === 0) { console.log(chalk.gray('无会话')); break }
+      const { talker } = await inquirer.prompt([{
+        type: 'select' as any, name: 'talker', message: '选择会话',
+        choices: sessions.map((s, i) => ({
+          name: `${String(i + 1).padStart(3)}. ${s.displayName || s.username}  ${chalk.gray((s.summary || '').slice(0, 30))}`,
+          value: s.username,
+        })),
+        loop: false,
+      }])
+      await runCmd('messages', { talker, limit: '50', offset: '0' })
+      break
+    }
+    case 'export': {
+      const sessions = await chatService.listSessions(undefined, 30)
+      if (sessions.length === 0) { console.log(chalk.gray('无会话')); break }
+      const { talker } = await inquirer.prompt([{
+        type: 'select' as any, name: 'talker', message: '选择要导出的会话',
+        choices: sessions.map((s, i) => ({
+          name: `${String(i + 1).padStart(3)}. ${s.displayName || s.username}`,
+          value: s.username,
+        })),
+        loop: false,
+      }])
+      const { format } = await inquirer.prompt([{
+        type: 'select' as any, name: 'format', message: '选择导出格式',
+        choices: ['html', 'json', 'txt', 'excel'], loop: false,
+      }])
+      await runCmd('export', { talker, format, output: './output' })
+      break
+    }
+    case 'report':
+      await runCmd('report', {})
+      break
+    case 'daily': {
+      const apiKey = process.env.DEEPSEEK_API_KEY || ''
+      if (!apiKey) {
+        console.log(chalk.red('\n❌ 缺少 DeepSeek API key'))
+        console.log(chalk.gray('  设置环境变量: set DEEPSEEK_API_KEY=<key>'))
+        break
+      }
+      const now = new Date()
+      const yyyy = now.getFullYear()
+      const mm = String(now.getMonth() + 1).padStart(2, '0')
+      const dd = String(now.getDate()).padStart(2, '0')
+      const dateStr = `${yyyy}-${mm}-${dd}`
+      const { spawn } = await import('child_process')
+      const { fileURLToPath } = await import('url')
+      const { dirname } = await import('path')
+      const fn = fileURLToPath(import.meta.url)
+      const pkgs = join(dirname(fn), '..')
+      const pipeline = join(pkgs, 'scripts', 'pipeline.py')
+      console.log(chalk.cyan(`\n📰 正在生成 ${dateStr} 公众号日报...\n`))
+      const child = spawn('python', [pipeline, '--date', dateStr, '--api-key', apiKey, '--interest', 'AI', '--skip-wiki'], {
+        stdio: 'inherit',
+        env: { ...process.env, PYTHONIOENCODING: 'utf-8' },
+      })
+      await new Promise<void>((resolve) => child.on('exit', () => resolve()))
+      break
+    }
+    case 'daily-server': {
+      const now = new Date()
+      const yyyy = now.getFullYear()
+      const mm = String(now.getMonth() + 1).padStart(2, '0')
+      const dd = String(now.getDate()).padStart(2, '0')
+      const dateStr = `${yyyy}-${mm}-${dd}`
+      await runCmd('fav-server', { date: dateStr, port: '8765', open: true })
+      break
+    }
+    case 'login-wechat':
+      await runCmd('login-wechat', {})
+      break
+    case 'listen':
+      await runCmd('listen', {})
+      break
+    case 'send': {
+      const sessions = await chatService.listSessions(undefined, 30)
+      if (sessions.length === 0) { console.log(chalk.gray('无会话')); break }
+      const { talker } = await inquirer.prompt([{
+        type: 'select' as any, name: 'talker', message: '选择接收人',
+        choices: sessions.map((s, i) => ({
+          name: `${String(i + 1).padStart(3)}. ${s.displayName || s.username}`,
+          value: s.username,
+        })),
+        loop: false,
+      }])
+      const { message } = await inquirer.prompt([{
+        type: 'input', name: 'message', message: '输入消息内容',
+      }])
+      if (!message.trim()) { console.log(chalk.gray('已取消')); break }
+      await runCmd('send', { talker, message })
+      break
+    }
+    case 'vault-init':
+      await runSubCmd('vault', 'init', {})
+      break
+    case 'wiki-compile':
+      await runSubCmd('wiki', 'compile', {})
+      break
+    case 'vault-sync':
+      await runSubCmd('vault', 'sync', {})
+      break
+    case 'config-show':
+      await runSubCmd('config', 'show')
+      break
+    case 'chat-stats':
+      await runCmd('chat-stats', { period: 'week' })
+      break
+    case 'weread': {
+      const wCmd = program.commands.find(c => c.name() === 'weread') as any
+      const statsCmd = wCmd?.commands?.find((c: any) => c.name() === 'stats')
+      if (statsCmd) await statsCmd.action({ mode: 'monthly' })
+      break
+    }
+    case 'extract-todos': {
+      const sessions = await chatService.listSessions(undefined, 30)
+      if (sessions.length === 0) { console.log(chalk.gray('无会话')); break }
+      const { talker } = await inquirer.prompt([{
+        type: 'select' as any, name: 'talker', message: '选择联系人',
+        choices: sessions.map((s, i) => ({
+          name: `${String(i + 1).padStart(3)}. ${s.displayName || s.username}`,
+          value: s.displayName || s.username,
+        })),
+        loop: false,
+      }])
+      await runCmd('todos', { talker, days: '7' })
+      break
+    }
+    case 'generate-review':
+      await runCmd('review', {})
+      break
+    case 'init':
+      await runCmd('init')
+      break
+  }
+}
+
+// 检测是否无参数启动（显示交互式菜单）
+const cliArgs = process.argv.slice(2)
+if (cliArgs.length === 0) {
+  showInteractiveMenu().catch((e) => {
+    console.error(chalk.red(`\n错误: ${e.message}`))
+    process.exit(1)
+  })
+} else {
+  program.parse()
+}