@cloudbase/manager-node 5.8.9-beta.0 → 5.9.0

package/lib/permission/index.js

@@ -8,6 +8,7 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PermissionService = void 0;
 const utils_1 = require("../utils");
+const error_1 = require("../error");
 const PERMISSION_BY_RESOURCE = {
     function: ['CUSTOM'],
     storage: ['READONLY', 'PRIVATE', 'ADMINWRITE', 'ADMINONLY', 'CUSTOM'],
@@ -27,26 +28,26 @@ class PermissionService {
         const { EnvId } = this.environment.lazyEnvironmentConfig;
         const { resourceType, resource, permission, securityRule } = options;
         if (!resourceType || !PERMISSION_BY_RESOURCE[resourceType]) {
-            throw new Error('Invalid resourceType');
+            (0, error_1.throwInvalidParam)('Invalid resourceType');
         }
         const isFunctionResourceType = resourceType === 'function';
         const hasValidResourceValue = typeof resource === 'string' && resource.trim().length > 0;
         if (!isFunctionResourceType && !hasValidResourceValue) {
-            throw new Error('Invalid resource');
+            (0, error_1.throwInvalidParam)('Invalid resource');
         }
         const allowed = PERMISSION_BY_RESOURCE[resourceType];
         if (!allowed.includes(permission)) {
-            throw new Error(`Permission ${permission} is not allowed for resourceType ${resourceType}`);
+            (0, error_1.throwInvalidParam)(`Permission ${permission} is not allowed for resourceType ${resourceType}`);
         }
         if (permission === 'CUSTOM') {
             if (typeof securityRule !== 'string' || securityRule.trim().length === 0) {
-                throw new Error('securityRule is required when permission is CUSTOM');
+                (0, error_1.throwInvalidParam)('securityRule is required when permission is CUSTOM');
             }
             // // 校验 JSON 字符串合法性
             // try {
             //     JSON.parse(securityRule)
             // } catch {
-            //     throw new Error('securityRule must be a valid JSON string')
+            //     throwInvalidParam('securityRule must be a valid JSON string')
             // }
         }
         const reqData = Object.assign({ EnvId, ResourceType: resourceType, Permission: permission }, (hasValidResourceValue || !isFunctionResourceType ? { Resource: resource } : {}));
@@ -62,18 +63,18 @@ class PermissionService {
         const { EnvId } = this.environment.lazyEnvironmentConfig;
         const { resourceType, resources } = options;
         if (!resourceType || !PERMISSION_BY_RESOURCE[resourceType]) {
-            throw new Error('Invalid resourceType');
+            (0, error_1.throwInvalidParam)('Invalid resourceType');
         }
         if (resources !== undefined) {
             if (!Array.isArray(resources)) {
-                throw new Error('Invalid resources');
+                (0, error_1.throwInvalidParam)('Invalid resources');
             }
             if (resources.length > 100) {
-                throw new Error('resources length must be <= 100');
+                (0, error_1.throwInvalidParam)('resources length must be <= 100');
             }
             const invalid = resources.find(item => typeof item !== 'string' || item.trim().length === 0);
             if (invalid !== undefined) {
-                throw new Error('resources contains invalid item');
+                (0, error_1.throwInvalidParam)('resources contains invalid item');
             }
         }
         return this.tcbService.request('DescribeResourcePermission', Object.assign({ EnvId, ResourceType: resourceType }, (resources !== undefined ? { Resources: resources } : {})));
@@ -83,52 +84,55 @@ class PermissionService {
         const { roleName, roleIdentity, description, memberUids, policies } = options;
         // RoleName 校验：非空，2-32字符，中文/字母/数字/_-:@.，必须以字母或中文开头
         if (typeof roleName !== 'string' || roleName.trim().length === 0) {
-            throw new Error('roleName is required');
+            (0, error_1.throwInvalidParam)('roleName is required');
         }
         if (roleName.length < 2 || roleName.length > 32) {
-            throw new Error('roleName length must be between 2 and 32');
+            (0, error_1.throwInvalidParam)('roleName length must be between 2 and 32');
         }
         if (!/^[\u4e00-\u9fa5a-zA-Z]/.test(roleName)) {
-            throw new Error('roleName must start with a letter or Chinese character');
+            (0, error_1.throwInvalidParam)('roleName must start with a letter or Chinese character');
         }
         if (!/^[\u4e00-\u9fa5a-zA-Z0-9\-_:@.]+$/.test(roleName)) {
-            throw new Error('roleName can only contain Chinese, letters, digits, and -_:@.');
+            (0, error_1.throwInvalidParam)('roleName can only contain Chinese, letters, digits, and -_:@.');
         }
         // RoleIdentity 校验：非空，字母/数字/_-:@.，不能与默认角色标识重复
         if (typeof roleIdentity !== 'string' || roleIdentity.trim().length === 0) {
-            throw new Error('roleIdentity is required');
+            (0, error_1.throwInvalidParam)('roleIdentity is required');
         }
         if (!/^[a-zA-Z0-9\-_:@.]+$/.test(roleIdentity)) {
-            throw new Error('roleIdentity can only contain letters, digits, and -_:@.');
+            (0, error_1.throwInvalidParam)('roleIdentity can only contain letters, digits, and -_:@.');
         }
         // Description 校验
-        if (description !== undefined && description.length > 255) {
-            throw new Error('description length must be <= 255');
+        // ⚠️ 必须先用 `typeof === 'string'` 收窄：调用方（JS / any）传 `null` 时
+        // `null !== undefined` 为 true，随后的 `description.length` 会直接 TypeError
+        // （代码评审：边界条件 —— 未处理空指针）。
+        if (typeof description === 'string' && description.length > 255) {
+            (0, error_1.throwInvalidParam)('description length must be <= 255');
         }
         // MemberUids 校验
         if (memberUids !== undefined) {
             if (!Array.isArray(memberUids)) {
-                throw new Error('memberUids must be an array');
+                (0, error_1.throwInvalidParam)('memberUids must be an array');
             }
             if (memberUids.length > 100) {
-                throw new Error('memberUids length must be <= 100');
+                (0, error_1.throwInvalidParam)('memberUids length must be <= 100');
             }
             const invalidUid = memberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
             if (invalidUid !== undefined) {
-                throw new Error('memberUids contains invalid item');
+                (0, error_1.throwInvalidParam)('memberUids contains invalid item');
             }
         }
         // Policies 校验
         if (policies !== undefined) {
             if (!Array.isArray(policies)) {
-                throw new Error('policies must be an array');
+                (0, error_1.throwInvalidParam)('policies must be an array');
             }
             if (policies.length > 50) {
-                throw new Error('policies length must be <= 50');
+                (0, error_1.throwInvalidParam)('policies length must be <= 50');
             }
             const invalidPolicy = policies.find(policy => !policy.ResourceType || !policy.Resource);
             if (invalidPolicy !== undefined) {
-                throw new Error('each policy must have ResourceType and Resource');
+                (0, error_1.throwInvalidParam)('each policy must have ResourceType and Resource');
             }
         }
         const reqData = {
@@ -152,23 +156,23 @@ class PermissionService {
         const { pageNumber, pageSize, roleId, roleIdentity, roleName, loadDetails } = options;
         // PageNumber 校验：从1开始
         if (pageNumber !== undefined && (pageNumber < 1 || !Number.isInteger(pageNumber))) {
-            throw new Error('pageNumber must be a positive integer');
+            (0, error_1.throwInvalidParam)('pageNumber must be a positive integer');
         }
         // PageSize 校验：默认10，最大100
         if (pageSize !== undefined && (pageSize < 1 || pageSize > 100 || !Number.isInteger(pageSize))) {
-            throw new Error('pageSize must be an integer between 1 and 100');
+            (0, error_1.throwInvalidParam)('pageSize must be an integer between 1 and 100');
         }
         // RoleId 校验
         if (roleId !== undefined && (typeof roleId !== 'string' || roleId.trim().length === 0)) {
-            throw new Error('Invalid roleId');
+            (0, error_1.throwInvalidParam)('Invalid roleId');
         }
         // RoleIdentity 校验
         if (roleIdentity !== undefined && (typeof roleIdentity !== 'string' || roleIdentity.trim().length === 0)) {
-            throw new Error('Invalid roleIdentity');
+            (0, error_1.throwInvalidParam)('Invalid roleIdentity');
         }
         // RoleName 校验
         if (roleName !== undefined && (typeof roleName !== 'string' || roleName.trim().length === 0)) {
-            throw new Error('Invalid roleName');
+            (0, error_1.throwInvalidParam)('Invalid roleName');
         }
         const reqData = { EnvId };
         if (pageNumber !== undefined) {
@@ -196,62 +200,65 @@ class PermissionService {
         const { roleId, roleName, description, addMemberUids, removeMemberUids, addPolicies, removePolicies } = options;
         // RoleId 校验：必填
         if (typeof roleId !== 'string' || roleId.trim().length === 0) {
-            throw new Error('roleId is required');
+            (0, error_1.throwInvalidParam)('roleId is required');
         }
         // RoleName 校验：不传或传空 => 不修改；非空时校验规则
         if (roleName !== undefined && roleName !== '') {
             if (roleName.length < 2 || roleName.length > 32) {
-                throw new Error('roleName length must be between 2 and 32');
+                (0, error_1.throwInvalidParam)('roleName length must be between 2 and 32');
             }
             if (!/^[\u4e00-\u9fa5a-zA-Z]/.test(roleName)) {
-                throw new Error('roleName must start with a letter or Chinese character');
+                (0, error_1.throwInvalidParam)('roleName must start with a letter or Chinese character');
             }
             if (!/^[\u4e00-\u9fa5a-zA-Z0-9\-_:@.]+$/.test(roleName)) {
-                throw new Error('roleName can only contain Chinese, letters, digits, and -_:@.');
+                (0, error_1.throwInvalidParam)('roleName can only contain Chinese, letters, digits, and -_:@.');
             }
         }
         // Description 校验
-        if (description !== undefined && description.length > 255) {
-            throw new Error('description length must be <= 255');
+        // ⚠️ 必须先用 `typeof === 'string'` 收窄：调用方（JS / any）传 `null` 时
+        // `null !== undefined` 为 true，随后的 `description.length` 会直接 TypeError
+        // （代码评审：边界条件 —— 未处理空指针）。
+        if (typeof description === 'string' && description.length > 255) {
+            (0, error_1.throwInvalidParam)('description length must be <= 255');
         }
         // AddMemberUids 校验
         if (addMemberUids !== undefined) {
             if (!Array.isArray(addMemberUids)) {
-                throw new Error('addMemberUids must be an array');
+                (0, error_1.throwInvalidParam)('addMemberUids must be an array');
             }
             const invalidUid = addMemberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
             if (invalidUid !== undefined) {
-                throw new Error('addMemberUids contains invalid item');
+                (0, error_1.throwInvalidParam)('addMemberUids contains invalid item');
             }
         }
         // RemoveMemberUids 校验
         if (removeMemberUids !== undefined) {
             if (!Array.isArray(removeMemberUids)) {
-                throw new Error('removeMemberUids must be an array');
+                (0, error_1.throwInvalidParam)('removeMemberUids must be an array');
             }
             const invalidUid = removeMemberUids.find(uid => typeof uid !== 'string' || uid.trim().length === 0);
             if (invalidUid !== undefined) {
-                throw new Error('removeMemberUids contains invalid item');
+                (0, error_1.throwInvalidParam)('removeMemberUids contains invalid item');
             }
         }
         // AddPolicies 校验
         if (addPolicies !== undefined) {
             if (!Array.isArray(addPolicies)) {
-                throw new Error('addPolicies must be an array');
+                (0, error_1.throwInvalidParam)('addPolicies must be an array');
             }
             const invalidPolicy = addPolicies.find(policy => !policy.ResourceType || !policy.Resource);
             if (invalidPolicy !== undefined) {
-                throw new Error('each addPolicy must have ResourceType and Resource');
+                (0, error_1.throwInvalidParam)('each addPolicy must have ResourceType and Resource');
             }
         }
         // RemovePolicies 校验
         if (removePolicies !== undefined) {
             if (!Array.isArray(removePolicies)) {
-                throw new Error('removePolicies must be an array');
+                (0, error_1.throwInvalidParam)('removePolicies must be an array');
             }
             const invalidPolicy = removePolicies.find(policy => !policy.ResourceType || !policy.Resource);
             if (invalidPolicy !== undefined) {
-                throw new Error('each removePolicy must have ResourceType and Resource');
+                (0, error_1.throwInvalidParam)('each removePolicy must have ResourceType and Resource');
             }
         }
         const reqData = { EnvId, RoleId: roleId };
@@ -281,14 +288,14 @@ class PermissionService {
         const { roleIds } = options;
         // RoleIds 校验：必填数组，最多100个
         if (!Array.isArray(roleIds) || roleIds.length === 0) {
-            throw new Error('roleIds is required and must be a non-empty array');
+            (0, error_1.throwInvalidParam)('roleIds is required and must be a non-empty array');
         }
         if (roleIds.length > 100) {
-            throw new Error('roleIds length must be <= 100');
+            (0, error_1.throwInvalidParam)('roleIds length must be <= 100');
         }
         const invalidId = roleIds.find(id => typeof id !== 'string' || id.trim().length === 0);
         if (invalidId !== undefined) {
-            throw new Error('roleIds contains invalid item');
+            (0, error_1.throwInvalidParam)('roleIds contains invalid item');
         }
         return this.tcbService.request('DeleteRoles', {
             EnvId,
@@ -303,7 +310,7 @@ class PermissionService {
     async describeResourcePolicyList(options = {}) {
         const { resourceType } = options;
         if (resourceType !== undefined && (typeof resourceType !== 'string' || resourceType.trim().length === 0)) {
-            throw new Error('Invalid resourceType');
+            (0, error_1.throwInvalidParam)('Invalid resourceType');
         }
         // PG 环境无需调用，直接返回空策略列表
         if (await this.isPostgresqlEnv()) {
@@ -336,7 +343,7 @@ class PermissionService {
     async describeEnvAuthzConfig(options) {
         const { key } = options;
         if (!key || (key !== 'authz.platform.extension.rego' && key !== 'authz.user.rego')) {
-            throw new Error('key must be "authz.platform.extension.rego" or "authz.user.rego"');
+            (0, error_1.throwInvalidParam)('key must be "authz.platform.extension.rego" or "authz.user.rego"');
         }
         const { EnvId } = this.environment.lazyEnvironmentConfig;
         return this.tcbService.request('DescribeEnvConfig', {
@@ -351,10 +358,10 @@ class PermissionService {
         const { EnvId } = this.environment.lazyEnvironmentConfig;
         const { key, value } = options;
         if (key !== 'authz.user.rego') {
-            throw new Error('key must be "authz.user.rego"');
+            (0, error_1.throwInvalidParam)('key must be "authz.user.rego"');
         }
         if (typeof value !== 'string' || value.trim().length === 0) {
-            throw new Error('value is required and must be a non-empty string');
+            (0, error_1.throwInvalidParam)('value is required and must be a non-empty string');
         }
         return this.tcbService.request('ModifyEnvConfig', {
             EnvId,

package/lib/platform/index.js

@@ -34,7 +34,7 @@ class PlatformService {
     async describePlatforms(params = {}) {
         const { Limit } = params;
         if (Limit !== undefined && (!Number.isInteger(Limit) || Limit < 10 || Limit > 100)) {
-            throw new error_1.CloudBaseError('Limit 必须是 10 至 100 的整数');
+            (0, error_1.throwInvalidParam)('Limit 必须是 10 至 100 的整数');
         }
         return this.cloudService.request('DescribePlatforms', Object.assign({}, params));
     }
@@ -109,7 +109,7 @@ class PlatformService {
         const { Status } = params;
         const validStatus = ['ENABLE', 'DISABLE'];
         if (Status !== undefined && !validStatus.includes(Status)) {
-            throw new error_1.CloudBaseError(`Invalid Status value: ${Status}. Only support 'ENABLE', 'DISABLE'`);
+            (0, error_1.throwInvalidParam)(`Invalid Status value: ${Status}. Only support 'ENABLE', 'DISABLE'`);
         }
         return this.cloudService.request('ModifyPlatformEnv', Object.assign(Object.assign({}, params), { EnvId: params.EnvId || this.envId }));
     }