@blod-nm/1kuan-act-01-cli 0.0.0-stage → 0.1.0

package/src/redpacket.js

@@ -0,0 +1,124 @@
+/**
+ * 字段校验(与服务端 normalizeCreateRedpacket 规则一致)
+ * + SQL 组装(调用库函数 manage_act_01_redpacket_create,$1..$11 客户端绑定)。
+ */
+
+export class ValidationError extends Error {}
+
+function positiveInteger(value, label) {
+  const n = Number(value)
+  if (!Number.isFinite(n) || n <= 0 || !Number.isInteger(n))
+    throw new ValidationError(`${label}必须是正整数`)
+  return n
+}
+
+function optionalText(value, label, maxLen) {
+  if (value === undefined || value === null || String(value).trim() === '') return undefined
+  const text = String(value).trim()
+  if (text.length > maxLen) throw new ValidationError(`${label}不能超过 ${maxLen} 个字符`)
+  return text
+}
+
+/** 完整复刻 server/utils/act-01-manage.ts 的 normalizeCreateRedpacket */
+export function normalizeCreateRedpacket(body) {
+  const mode = String(body.mode ?? '')
+  if (mode !== 'random' && mode !== 'equal')
+    throw new ValidationError('type must be random or equal')
+
+  const totalPoints = positiveInteger(body.total_points, '总金额')
+  const count = positiveInteger(body.count, '份数')
+  const perUserLimit = positiveInteger(body.per_user_limit, '每人领取次数')
+  if (perUserLimit > count) throw new ValidationError('per-user limit cannot exceed count')
+  if (mode === 'equal' && totalPoints < count)
+    throw new ValidationError('total must be at least count')
+
+  const shareTitle = optionalText(body.share_title, '分享标题', 60)
+  const shareCover = optionalText(body.share_cover, '分享封面', 500)
+  if (shareCover && !/^https?:\/\//i.test(shareCover))
+    throw new ValidationError('分享封面地址不合法(需 http(s) 开头)')
+  const note = optionalText(body.note, '备注', 20)
+  const requireGroup = body.require_group === true
+
+  if (mode === 'equal') {
+    return {
+      mode,
+      totalPoints,
+      count,
+      perUserLimit,
+      minPoints: Math.floor(totalPoints / count),
+      maxPoints: Math.ceil(totalPoints / count),
+      shareTitle,
+      shareCover,
+      note,
+      requireGroup,
+    }
+  }
+
+  const minPoints = positiveInteger(body.min_points, '单份最小金额')
+  const maxPoints = positiveInteger(body.max_points, '单份最大金额')
+  if (maxPoints < minPoints) throw new ValidationError('单份最大金额不能小于最小金额')
+  if (totalPoints < minPoints * count || totalPoints > maxPoints * count)
+    throw new ValidationError('total is outside the min..max × count range')
+  if (totalPoints % count !== 0)
+    throw new ValidationError('total must be divisible by count')
+
+  return { mode, totalPoints, count, perUserLimit, minPoints, maxPoints, shareTitle, shareCover, note, requireGroup }
+}
+
+/* ---------- $N 字面量绑定(exec-pgsql 只收整条 SQL) ---------- */
+
+function lit(value) {
+  if (value === null || value === undefined) return 'NULL'
+  if (typeof value === 'number') {
+    if (!Number.isFinite(value)) throw new ValidationError('数值不合法')
+    return String(value)
+  }
+  if (typeof value === 'boolean') return value ? 'TRUE' : 'FALSE'
+  return `'${String(value).replace(/'/g, "''")}'`
+}
+
+const CREATE_FN_SQL =
+  'SELECT public.manage_act_01_redpacket_create($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11) AS result'
+
+export function buildCreateSql(input) {
+  const positional = [
+    null, // $1 operator:服务端同样传 null
+    input.mode,
+    input.totalPoints,
+    input.count,
+    input.perUserLimit,
+    input.minPoints,
+    input.maxPoints,
+    input.shareTitle ?? null,
+    input.shareCover ?? null,
+    input.note ?? null,
+    input.requireGroup,
+  ]
+  let missing = ''
+  const sql = CREATE_FN_SQL.replace(/\$(\d+)/g, (whole, num) => {
+    const idx = Number(num) - 1
+    if (idx < 0 || idx >= positional.length) {
+      missing = missing || `$${num}`
+      return whole
+    }
+    return lit(positional[idx])
+  })
+  if (missing) throw new ValidationError(`占位符 ${missing} 没有对应的参数`)
+  return sql
+}
+
+/** 确认卡摘要(提交前逐项列出) */
+export function confirmSummary(input) {
+  const lines = [
+    `模式: ${input.mode === 'random' ? '随机' : '均分'}`,
+    `总金额: ${input.totalPoints}(整数积分)`,
+    `份数: ${input.count}`,
+    `每人限领: ${input.perUserLimit}`,
+    `单份区间: ${input.minPoints} ~ ${input.maxPoints}`,
+  ]
+  if (input.shareTitle) lines.push(`分享标题: ${input.shareTitle}`)
+  if (input.shareCover) lines.push(`分享封面: ${input.shareCover}`)
+  if (input.note) lines.push(`备注: ${input.note}`)
+  lines.push(`群专属: ${input.requireGroup ? '是' : '否'}`)
+  return lines
+}

package/src/store.js

@@ -0,0 +1,151 @@
+/**
+ * 配置层:~/.config/act-01/config.json(0600,原子写)。
+ *
+ * v1 配置只有两项(按需求收敛):
+ *   envId  环境 ID —— 网关固定国内 api.tcloudbasegateway.com
+ *   apiKey 腾讯云开发 API Key(需管理员权限;可被环境变量 ACT01_API_KEY 覆盖)
+ *
+ * 角色固定 cloudbase_postgres(写命令必需),不是配置项。
+ */
+
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs'
+import { createCipheriv, createDecipheriv, pbkdf2Sync, randomBytes, scryptSync } from 'node:crypto'
+import { homedir } from 'node:os'
+import { isAbsolute, join, resolve } from 'node:path'
+
+export function configDir() {
+  const xdg = process.env.XDG_CONFIG_HOME
+  const base = xdg && isAbsolute(xdg) ? xdg : join(homedir(), '.config')
+  return join(base, 'act-01')
+}
+
+export function configPath() {
+  return join(configDir(), 'config.json')
+}
+
+function ensureDir() {
+  if (!existsSync(configDir())) {
+    mkdirSync(configDir(), { recursive: true, mode: 0o700 })
+    chmodSync(configDir(), 0o700)
+  }
+}
+
+/** 同目录临时文件 + rename 原子写,显式 0600(不依赖 umask) */
+export function atomicWriteText(file, text) {
+  ensureDir()
+  const tmp = `${file}.tmp-${process.pid}-${Date.now()}`
+  writeFileSync(tmp, text, { mode: 0o600 })
+  chmodSync(tmp, 0o600)
+  renameSync(tmp, file)
+}
+
+export function loadConfig() {
+  const file = configPath()
+  if (!existsSync(file)) return {}
+  try {
+    return JSON.parse(readFileSync(file, 'utf8'))
+  } catch {
+    return {}
+  }
+}
+
+export function saveConfig(config) {
+  atomicWriteText(configPath(), `${JSON.stringify(config, null, 2)}\n`)
+}
+
+/** --file 类参数支持相对路径与 ~ 展开 */
+export function expandPath(p) {
+  if (p.startsWith('~/')) return join(homedir(), p.slice(2))
+  return isAbsolute(p) ? p : resolve(p)
+}
+
+/* ---------- 配置串:口令加密的一串传递格式 ----------
+   act01.v1.  <b64url(salt[16]|iv[12]|tag[16]|ct)>   scrypt 派生(CLI 原生格式)
+   act01w.v1. <b64url(salt[16]|iv[12]|ct+tag[16])>   PBKDF2-SHA256 310k(网页生成格式)
+   act01plain.<b64url(json)>                          明文便捷串
+   传输链上没有口令,加密串就是乱码。明文只在解密后的内存里。 */
+
+const CFG_PREFIX = 'act01.v1.'
+const CFG_WEB_PREFIX = 'act01w.v1.'
+const CFG_PLAIN_PREFIX = 'act01plain.'
+
+const CFG_PREFIXES = [CFG_PREFIX, CFG_WEB_PREFIX, CFG_PLAIN_PREFIX]
+
+export function encryptConfig(obj, passphrase) {
+  const salt = randomBytes(16)
+  const iv = randomBytes(12)
+  const key = scryptSync(passphrase, salt, 32)
+  const cipher = createCipheriv('aes-256-gcm', key, iv)
+  const ct = Buffer.concat([cipher.update(JSON.stringify(obj), 'utf8'), cipher.final()])
+  const tag = cipher.getAuthTag()
+  return CFG_PREFIX + Buffer.concat([salt, iv, tag, ct]).toString('base64url')
+}
+
+function scopedBody(str) {
+  const body = String(str).trim()
+  const prefix = CFG_PREFIXES.find((p) => body.startsWith(p))
+  if (!prefix) {
+    const err = new Error('无法识别的配置串前缀')
+    err.code = 'bad-format'
+    throw err
+  }
+  const data = Buffer.from(body.slice(prefix.length), 'base64url')
+  if (data.length < 44) {
+    const err = new Error('配置串过短或已损坏')
+    err.code = 'bad-format'
+    throw err
+  }
+  return { prefix, data }
+}
+
+/** act01.v1.(CLI scrypt 格式) */
+function decryptCli(data, passphrase) {
+  const salt = data.subarray(0, 16)
+  const iv = data.subarray(16, 28)
+  const tag = data.subarray(28, 44)
+  const ct = data.subarray(44)
+  const key = scryptSync(passphrase, salt, 32)
+  const decipher = createDecipheriv('aes-256-gcm', key, iv)
+  decipher.setAuthTag(tag)
+  return JSON.parse(Buffer.concat([decipher.update(ct), decipher.final()]).toString('utf8'))
+}
+
+/** act01w.v1.(网页 PBKDF2 格式,WebCrypto tag 附在密文尾) */
+function decryptWeb(data, passphrase) {
+  const salt = data.subarray(0, 16)
+  const iv = data.subarray(16, 28)
+  const rest = data.subarray(28)
+  const key = pbkdf2Sync(passphrase, salt, 310_000, 32, 'sha256')
+  const decipher = createDecipheriv('aes-256-gcm', key, iv)
+  decipher.setAuthTag(rest.subarray(rest.length - 16))
+  return JSON.parse(
+    Buffer.concat([decipher.update(rest.subarray(0, rest.length - 16)), decipher.final()]).toString('utf8'),
+  )
+}
+
+export function decryptConfig(str, passphrase) {
+  const { prefix, data } = scopedBody(str)
+  if (prefix === CFG_WEB_PREFIX) return decryptWeb(data, passphrase)
+  if (prefix === CFG_PREFIX) return decryptCli(data, passphrase)
+  const err = new Error('不是加密配置串(缺少 act01.v1. / act01w.v1. 前缀)')
+  err.code = 'bad-format'
+  throw err
+}
+
+/** 明文单串(便捷导入):act01plain.<base64url(json)> */
+export function encodePlain(obj) {
+  return CFG_PLAIN_PREFIX + Buffer.from(JSON.stringify(obj), 'utf8').toString('base64url')
+}
+
+export function decodeConfigString(str) {
+  const body = String(str).trim()
+  if (body.startsWith(CFG_PREFIX) || body.startsWith(CFG_WEB_PREFIX))
+    return { encrypted: true, config: null, decode: (pass) => decryptConfig(body, pass) }
+  if (body.startsWith(CFG_PLAIN_PREFIX)) {
+    const json = Buffer.from(body.slice(CFG_PLAIN_PREFIX.length), 'base64url').toString('utf8')
+    return { encrypted: false, config: JSON.parse(json), decode: null }
+  }
+  const err = new Error('无法识别的配置串(支持 act01.v1. / act01w.v1. 加密串 / act01plain. 明文串)')
+  err.code = 'bad-format'
+  throw err
+}

package/src/tcb.js

@@ -0,0 +1,71 @@
+/**
+ * 腾讯云开发网关传输层。
+ *
+ * 端点:POST https://{envId}.api.tcloudbasegateway.com/v1/rdb/exec-pgsql
+ * 鉴权:Authorization: Bearer <apiKey>
+ * 请求体:{ sql } —— exec-pgsql 只收一整条 SQL(无 parameters 通道),
+ *         $1..$11 由客户端绑定成带类型的字面量(文本单引号翻倍,数值/布尔直书)。
+ */
+
+import { loadConfig } from './store.js'
+
+export const GATEWAY_DOMAIN = 'api.tcloudbasegateway.com'
+
+export function resolveApikey(config, flagValue) {
+  const raw = flagValue ?? process.env.ACT01_API_KEY ?? config.apiKey
+  return raw ? String(raw).trim() : ''
+}
+
+export function gatewayBase(config) {
+  const envId = (config.envId ?? '').trim()
+  if (!envId) {
+    const err = new Error('缺少 envId:先用 act-01 config set envId <环境ID>')
+    err.exitCode = 2
+    throw err
+  }
+  return `https://${envId}.${GATEWAY_DOMAIN}`
+}
+
+/** account row query */
+export const ACCOUNT_SQL = `
+  SELECT id, data, updated_at
+  FROM public."tmp-act-01"
+  WHERE deleted_at IS NULL AND tag @> ARRAY['account','openid:activity']::text[]
+  LIMIT 1
+`
+
+export async function execPgsql(config, apikey, sql) {
+  const base = gatewayBase(config)
+  let res
+  try {
+    res = await fetch(`${base}/v1/rdb/exec-pgsql`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${apikey}`,
+      },
+      body: JSON.stringify({ sql }),
+    })
+  } catch (err) {
+    throw new Error(`网关连接失败:${err instanceof Error ? err.message : String(err)}`)
+  }
+
+  const text = await res.text()
+  let raw = null
+  try {
+    raw = text ? JSON.parse(text) : null
+  } catch {
+    raw = text
+  }
+
+  if (!res.ok) {
+    let detail = res.statusText
+    if (raw && typeof raw === 'object' && 'message' in raw) detail = String(raw.message)
+    else if (typeof raw === 'string' && raw) detail = raw.slice(0, 200)
+    return { ok: false, status: res.status, raw, message: `HTTP ${res.status}: ${detail}` }
+  }
+
+  const rows =
+    raw && typeof raw === 'object' && Array.isArray(raw.rows) ? raw.rows : undefined
+  return { ok: true, status: res.status, rows, raw }
+}