@cloudglab/yapi-cli 0.0.8 → 0.0.9

package/dist/tools/yapi/register-auth.js

@@ -1,8 +1,10 @@
 import { z } from 'zod';
 import { isInteractive, resolveAuthModeSelection, resolveRequiredTextInput } from '../../core/auth-mode.js';
 import { CliConfigError, CliValidationError } from '../../core/errors.js';
-import { jsonResult, optionalTrimmedText } from '../shared.js';
-import { saveConfig, hasConfig, loadConfig, YAPI_HOME, YApiAuthService, YApiService, encryptPassword } from '../../services/yapi/index.js';
+import { confirmSchema, jsonResult, optionalTrimmedText, runWithPreview } from '../shared.js';
+import { previewOrAssertWriteAllowed } from '../../core/write-guard.js';
+import { saveConfig, hasConfig, loadConfig, YApiService, encryptPassword } from '../../services/yapi/index.js';
+import { getAuthService } from './utils.js';
 export function registerAuthCommands(registry) {
     // ==================== 配置初始化 ====================
     registry.tool('config-init', {
@@ -10,41 +12,45 @@ export function registerAuthCommands(registry) {
         username: optionalTrimmedText.describe('登录用户名，通常是邮箱前缀，会原样回写到配置文件供后续 login 默认使用。空字符串视为未提供。'),
         password: optionalTrimmedText.describe('登录密码，原样写入本地配置文件，明文存储于 ~/.yapi/config.json，仅本机可读。命令行传入时不会回显到终端，但保存后会被后续 login 默认使用，请勿在共享机器使用。'),
         authMode: z.enum(['native', 'ldap']).optional().describe('认证方式，决定后续 login 命令的密码处理逻辑：native 直传明文、ldap 会按内置规则 PBKDF2 加密后再提交。若 YApi 未启用 LDAP 插件，请保持 native。'),
+        ...confirmSchema,
     }, async (input) => {
-        if (hasConfig()) {
-            throw new CliConfigError('配置文件已存在，如需重新配置请先删除 ~/.yapi/config.json');
-        }
-        if (!isInteractive() && (!input.url || !input.username || !input.password || !input.authMode)) {
-            throw new CliValidationError('当前不是交互式终端，无法输入配置。请显式传 --url、--username、--password、--auth-mode 后重试。');
-        }
-        const url = await resolveRequiredTextInput(input.url, {
-            context: '配置初始化',
-            flag: '--url',
-            prompt: '请输入 YApi 服务器地址',
-            normalize: (value) => value.trim().replace(/\/+$/, ''),
-        });
-        const username = await resolveRequiredTextInput(input.username, {
-            context: '配置初始化',
-            flag: '--username',
-            prompt: '请输入登录用户名',
-        });
-        const password = await resolveRequiredTextInput(input.password, {
-            context: '配置初始化',
-            flag: '--password',
-            prompt: '请输入登录密码（输入可见）',
-        });
-        const authMode = await resolveAuthModeSelection(input.authMode, '配置初始化');
-        const config = {
-            url,
-            username,
-            password,
-            authMode,
-        };
-        saveConfig(config);
-        return jsonResult({
-            url: config.url,
-            username: config.username,
-            authMode: config.authMode,
+        const payload = input;
+        return runWithPreview('config-init', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            if (hasConfig()) {
+                throw new CliConfigError('配置文件已存在，如需重新配置请先删除 ~/.yapi/config.json');
+            }
+            if (!isInteractive() && (!input.url || !input.username || !input.password || !input.authMode)) {
+                throw new CliValidationError('当前不是交互式终端，无法输入配置。请显式传 --url、--username、--password、--auth-mode 后重试。');
+            }
+            const url = await resolveRequiredTextInput(input.url, {
+                context: '配置初始化',
+                flag: '--url',
+                prompt: '请输入 YApi 服务器地址',
+                normalize: (value) => value.trim().replace(/\/+$/, ''),
+            });
+            const username = await resolveRequiredTextInput(input.username, {
+                context: '配置初始化',
+                flag: '--username',
+                prompt: '请输入登录用户名',
+            });
+            const password = await resolveRequiredTextInput(input.password, {
+                context: '配置初始化',
+                flag: '--password',
+                prompt: '请输入登录密码（输入可见）',
+            });
+            const authMode = await resolveAuthModeSelection(input.authMode, '配置初始化');
+            const config = {
+                url,
+                username,
+                password,
+                authMode,
+            };
+            saveConfig(config);
+            return jsonResult({
+                url: config.url,
+                username: config.username,
+                authMode: config.authMode,
+            });
         });
     }, '初始化本地 YApi 登录配置', {
         costHint: 'low',
@@ -58,83 +64,89 @@ export function registerAuthCommands(registry) {
         password: optionalTrimmedText.describe('登录密码，必须配合 --username 或 --email 一起传入（命令行传入时不会回显）。登录成功后会回写到本地配置文件，后续未显式传参时会作为默认密码使用。'),
         uid: optionalTrimmedText.describe('用户 UID。仅在 --token 模式下生效：当 token 是 JWT 但解析不出 uid 字段时，可手动指定。LDAP 登录模式下会由服务端响应自动提取，无需传入。'),
         ldap: z.coerce.boolean().optional().default(false).describe('是否走 LDAP 登录。设为 true 时（或配置文件中 authMode 已经是 ldap），密码会先经内置 PBKDF2 加密再提交给 YApi 服务端。YApi 未启用 LDAP 插件时传 true 会登录失败。'),
+        ...confirmSchema,
     }, async (input) => {
-        const config = loadConfig();
-        if (!config) {
-            throw new CliConfigError('请先运行 `yapi config-init` 初始化配置');
-        }
-        if (input.token) {
-            const auth = new YApiAuthService(YAPI_HOME);
-            // JWT token 同时以 Authorization 和 _yapi_token/_yapi_uid cookie 形式保存
-            const uid = input.uid ?? extractJwtUid(input.token);
-            auth.loginWithJwtCookie(input.token, undefined, uid);
-            return jsonResult({
-                method: 'token',
-                username: null,
-            });
-        }
-        const username = input.username ?? input.email ?? config.username;
-        const password = input.password ?? config.password;
-        if (username && password) {
-            const auth = new YApiAuthService(YAPI_HOME);
-            const api = new YApiService(config.url, () => auth.getAuthHeaders(), () => auth.getToken() ?? '');
-            if (input.ldap || config.authMode === 'ldap') {
-                // LDAP 登录：密码 PBKDF2 加密后发送
-                const encrypted = encryptPassword(password);
-                const ldapResult = await api.loginByLdap(username, encrypted);
-                auth.loginWithJwtCookie(ldapResult.token, ldapResult.username, ldapResult.uid);
-                config.username = username;
-                config.password = password;
-                config.authMode = 'ldap';
-                saveConfig(config);
+        const payload = input;
+        return runWithPreview('login', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            const config = loadConfig();
+            if (!config) {
+                throw new CliConfigError('请先运行 `yapi config-init` 初始化配置');
+            }
+            if (input.token) {
+                const auth = getAuthService();
+                // 先校验 token 有效性（与 login-by-token 行为对齐），失败则不写入本地缓存
+                const verifyApi = new YApiService(config.url, () => ({}), () => input.token, undefined, undefined, auth);
+                await verifyApi.getLoginStatus();
+                // JWT token 同时以 Authorization 和 _yapi_token/_yapi_uid cookie 形式保存
+                const uid = input.uid ?? extractJwtUid(input.token);
+                auth.loginWithJwtCookie(input.token, undefined, uid);
                 return jsonResult({
-                    method: 'ldap',
-                    username: ldapResult.username,
+                    method: 'token',
+                    username: null,
                 });
             }
-            // 标准密码登录
-            const result = await api.loginWithPassword(username, password);
-            auth.loginWithJwtCookie(result.token, result.username, result.uid);
-            config.username = username;
-            config.password = password;
-            config.authMode = 'native';
-            saveConfig(config);
-            return jsonResult({
-                method: 'password',
-                username: result.username,
-            });
-        }
-        throw new CliValidationError('请提供 --token 或 --username/--email + --password');
+            const username = input.username ?? input.email ?? config.username;
+            const password = input.password ?? config.password;
+            if (username && password) {
+                const auth = getAuthService();
+                const api = new YApiService(config.url, () => auth.getAuthHeaders(), () => auth.getToken() ?? '', undefined, undefined, auth);
+                if (input.ldap || config.authMode === 'ldap') {
+                    // LDAP 登录：密码 PBKDF2 加密后发送
+                    const encrypted = encryptPassword(password);
+                    const ldapResult = await api.loginByLdap(username, encrypted);
+                    auth.loginWithJwtCookie(ldapResult.token, ldapResult.username, ldapResult.uid);
+                    // 登录成功后不再回写明文 password 到配置文件（仅在 config-init 时落盘）
+                    return jsonResult({
+                        method: 'ldap',
+                        username: ldapResult.username,
+                    });
+                }
+                // 标准密码登录
+                const result = await api.loginWithPassword(username, password);
+                auth.loginWithJwtCookie(result.token, result.username, result.uid);
+                // 登录成功后不再回写明文 password 到配置文件（仅在 config-init 时落盘）
+                return jsonResult({
+                    method: 'password',
+                    username: result.username,
+                });
+            }
+            throw new CliValidationError('请提供 --token 或 --username/--email + --password');
+        });
     }, '登录 YApi 并写入认证缓存', {
         costHint: 'low',
         nextBestTools: ['whoami', 'project-list', 'group-list'],
     });
     // ==================== 登出 ====================
-    registry.tool('logout', {}, async () => {
-        const auth = new YApiAuthService(YAPI_HOME);
-        let serverLogoutOk = false;
-        let serverLogoutError;
-        // 先调用服务端登出（如果已登录）
-        const config = loadConfig();
-        if (config) {
-            try {
-                const testApi = new YApiService(config.url, () => auth.getAuthHeaders(), () => auth.getToken() ?? '');
-                const result = await testApi.userLogout();
-                serverLogoutOk = result.errcode === 0;
-                if (!serverLogoutOk) {
-                    serverLogoutError = result.errmsg;
+    registry.tool('logout', {
+        ...confirmSchema,
+    }, async (input) => {
+        const payload = input;
+        return runWithPreview('logout', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            const auth = getAuthService();
+            let serverLogoutOk = false;
+            let serverLogoutError;
+            // 先调用服务端登出（如果已登录）
+            const config = loadConfig();
+            if (config) {
+                try {
+                    const testApi = new YApiService(config.url, () => auth.getAuthHeaders(), () => auth.getToken() ?? '', undefined, undefined, auth);
+                    const result = await testApi.userLogout();
+                    serverLogoutOk = result.errcode === 0;
+                    if (!serverLogoutOk) {
+                        serverLogoutError = result.errmsg;
+                    }
+                }
+                catch (err) {
+                    serverLogoutError = err instanceof Error ? err.message : String(err);
                 }
             }
-            catch (err) {
-                serverLogoutError = err instanceof Error ? err.message : String(err);
-            }
-        }
-        // 再清理本地认证缓存
-        auth.logout();
-        return jsonResult({
-            message: '已登出',
-            serverLogout: serverLogoutOk,
-            serverLogoutError,
+            // 再清理本地认证缓存
+            auth.logout();
+            return jsonResult({
+                message: '已登出',
+                serverLogout: serverLogoutOk,
+                serverLogoutError,
+            });
         });
     }, '登出 YApi（同时清理本地缓存 + 服务端会话。无参数；服务端不可用时不会中断本地清理，服务端失败原因会写入返回结果）。', {
         costHint: 'low',
@@ -142,12 +154,12 @@ export function registerAuthCommands(registry) {
     });
     // ==================== 查看当前用户 ====================
     registry.tool('whoami', {}, async () => {
-        const auth = new YApiAuthService(YAPI_HOME);
+        const auth = getAuthService();
         const config = loadConfig();
         // 优先尝试服务端验证
         if (config) {
             try {
-                const testApi = new YApiService(config.url, () => auth.getAuthHeaders(), () => auth.getToken() ?? '');
+                const testApi = new YApiService(config.url, () => auth.getAuthHeaders(), () => auth.getToken() ?? '', undefined, undefined, auth);
                 const status = await testApi.getLoginStatus();
                 return jsonResult({
                     loggedIn: true,

package/dist/tools/yapi/register-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-auth.js","sourceRoot":"","sources":["../../../src/tools/yapi/register-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAG3I,MAAM,UAAU,oBAAoB,CAAC,QAAqB;IACxD,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CACX,aAAa,EACb;QACE,GAAG,EAAE,mBAAmB,CAAC,QAAQ,CAC/B,yHAAyH,CAC1H;QACD,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CACpC,mDAAmD,CACpD;QACD,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CACpC,8FAA8F,CAC/F;QACD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACtD,gGAAgG,CACjG;KACF,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,cAAc,CACtB,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,kBAAkB,CAAC,oEAAoE,CAAC,CAAC;QACrG,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,EAAE;YACpD,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,gBAAgB;YACxB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACvD,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC9D,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE;YAC9D,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG;YACb,GAAG;YACH,QAAQ;YACR,QAAQ;YACR,QAAQ;SACT,CAAC;QAEF,UAAU,CAAC,MAAM,CAAC,CAAC;QAEnB,OAAO,UAAU,CAAC;YAChB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC,EACD,iBAAiB,EACjB;QACE,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;KACnC,CACF,CAAC;IAEF,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CACX,OAAO,EACP;QACE,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CACjC,0HAA0H,CAC3H;QACD,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CACpC,iGAAiG,CAClG;QACD,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CACjC,yEAAyE,CAC1E;QACD,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CACpC,oFAAoF,CACrF;QACD,GAAG,EAAE,mBAAmB,CAAC,QAAQ,CAC/B,uFAAuF,CACxF;QACD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CACzD,+GAA+G,CAChH;KACF,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,cAAc,CAAC,+BAA+B,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;YAC5C,kEAAkE;YAClE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACrD,OAAO,UAAU,CAAC;gBAChB,MAAM,EAAE,OAAO;gBACf,QAAQ,EAAE,IAAI;aACf,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC;QAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;QAEnD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,WAAW,CACzB,MAAM,CAAC,GAAG,EACV,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAC3B,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAC5B,CAAC;YAEF,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC7C,0BAA0B;gBAC1B,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC9D,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC/E,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC3B,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC3B,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;gBACzB,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnB,OAAO,UAAU,CAAC;oBAChB,MAAM,EAAE,MAAM;oBACd,QAAQ,EAAE,UAAU,CAAC,QAAQ;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,SAAS;YACT,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/D,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACnE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO,UAAU,CAAC;gBAChB,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,CAAC,CAAC;IAChF,CAAC,EACD,iBAAiB,EACjB;QACE,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC;KACxD,CACF,CAAC;IAEF,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CACX,QAAQ,EACR,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,iBAAqC,CAAC;QAE1C,kBAAkB;QAClB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,WAAW,CAC7B,MAAM,CAAC,GAAG,EACV,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAC3B,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAC5B,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC1C,cAAc,GAAG,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC;gBACtC,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;gBACpC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iBAAiB,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,YAAY;QACZ,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,UAAU,CAAC;YAChB,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,cAAc;YAC5B,iBAAiB;SAClB,CAAC,CAAC;IACL,CAAC,EACD,+DAA+D,EAC/D;QACE,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC,OAAO,CAAC;KACzB,CACF,CAAC;IAEF,mDAAmD;IACnD,QAAQ,CAAC,IAAI,CACX,QAAQ,EACR,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAE5B,YAAY;QACZ,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,WAAW,CAC7B,MAAM,CAAC,GAAG,EACV,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAC3B,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAC5B,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC9C,OAAO,UAAU,CAAC;oBAChB,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;oBACnE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI;oBACjC,MAAM,EAAE,MAAM,CAAC,GAAG;oBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;QAED,aAAa;QACb,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC;gBAChB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI;gBAC3B,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,QAAQ;gBACtC,UAAU,EAAE,CAAC,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,UAAU,CAAC;gBAChB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,qBAAqB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,cAAc,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;IAC7E,CAAC,EACD,6DAA6D,EAC7D;QACE,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;KAC9C,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA8B,CAAC;QAC9G,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACxE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"register-auth.js","sourceRoot":"","sources":["../../../src/tools/yapi/register-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/G,OAAO,EAAsB,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,UAAU,oBAAoB,CAAC,QAAqB;IACxD,kDAAkD;IAClD,QAAQ,CAAC,IAAI,CACX,aAAa,EACb;QACE,GAAG,EAAE,mBAAmB,CAAC,QAAQ,CAC/B,yHAAyH,CAC1H;QACD,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CACpC,mDAAmD,CACpD;QACD,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CACpC,8FAA8F,CAC/F;QACD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CACtD,gGAAgG,CACjG;QACD,GAAG,aAAa;KACjB,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,MAAM,OAAO,GAAG,KAAgC,CAAC;QACjD,OAAO,cAAc,CACnB,aAAa,EACb,OAAO,CAAC,OAA8B,EACtC,OAAO,EACP,2BAA2B,EAC3B,KAAK,IAAI,EAAE;YACT,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,MAAM,IAAI,cAAc,CACtB,wCAAwC,CACzC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9F,MAAM,IAAI,kBAAkB,CAAC,oEAAoE,CAAC,CAAC;YACrG,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,GAAG,EAAE;gBACpD,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,gBAAgB;gBACxB,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;aACvD,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC9D,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC9D,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAEzE,MAAM,MAAM,GAAG;gBACb,GAAG;gBACH,QAAQ;gBACR,QAAQ;gBACR,QAAQ;aACT,CAAC;YAEF,UAAU,CAAC,MAAM,CAAC,CAAC;YAEnB,OAAO,UAAU,CAAC;gBAChB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,EACD,iBAAiB,EACjB;QACE,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;KACnC,CACF,CAAC;IAEF,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CACX,OAAO,EACP;QACE,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CACjC,0HAA0H,CAC3H;QACD,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CACpC,iGAAiG,CAClG;QACD,KAAK,EAAE,mBAAmB,CAAC,QAAQ,CACjC,yEAAyE,CAC1E;QACD,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,CACpC,oFAAoF,CACrF;QACD,GAAG,EAAE,mBAAmB,CAAC,QAAQ,CAC/B,uFAAuF,CACxF;QACD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CACzD,+GAA+G,CAChH;QACD,GAAG,aAAa;KACjB,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,MAAM,OAAO,GAAG,KAAgC,CAAC;QACjD,OAAO,cAAc,CACnB,OAAO,EACP,OAAO,CAAC,OAA8B,EACtC,OAAO,EACP,2BAA2B,EAC3B,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,cAAc,CAAC,+BAA+B,CAAC,CAAC;YAC5D,CAAC;YAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC9B,kDAAkD;gBAClD,MAAM,SAAS,GAAG,IAAI,WAAW,CAC/B,MAAM,CAAC,GAAG,EACV,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EACV,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EACjB,SAAS,EACT,SAAS,EACT,IAAI,CACL,CAAC;gBACF,MAAM,SAAS,CAAC,cAAc,EAAE,CAAC;gBACjC,kEAAkE;gBAClE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;gBACrD,OAAO,UAAU,CAAC;oBAChB,MAAM,EAAE,OAAO;oBACf,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;YAEnD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,CACzB,MAAM,CAAC,GAAG,EACV,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAC3B,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAC3B,SAAS,EACT,SAAS,EACT,IAAI,CACL,CAAC;gBAEF,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC7C,0BAA0B;oBAC1B,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;oBAC5C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAC9D,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;oBAC/E,iDAAiD;oBACjD,OAAO,UAAU,CAAC;wBAChB,MAAM,EAAE,MAAM;wBACd,QAAQ,EAAE,UAAU,CAAC,QAAQ;qBAC9B,CAAC,CAAC;gBACL,CAAC;gBAED,SAAS;gBACT,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC/D,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnE,iDAAiD;gBACjD,OAAO,UAAU,CAAC;oBAChB,MAAM,EAAE,UAAU;oBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,CAAC,CAAC;QAChF,CAAC,CACF,CAAC;IACJ,CAAC,EACD,iBAAiB,EACjB;QACE,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,CAAC;KACxD,CACF,CAAC;IAEF,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CACX,QAAQ,EACR;QACE,GAAG,aAAa;KACjB,EACD,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,MAAM,OAAO,GAAG,KAAgC,CAAC;QACjD,OAAO,cAAc,CACnB,QAAQ,EACR,OAAO,CAAC,OAA8B,EACtC,OAAO,EACP,2BAA2B,EAC3B,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;YAC9B,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,iBAAqC,CAAC;YAE1C,kBAAkB;YAClB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,WAAW,CAC7B,MAAM,CAAC,GAAG,EACV,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAC3B,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAC3B,SAAS,EACT,SAAS,EACT,IAAI,CACL,CAAC;oBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;oBAC1C,cAAc,GAAG,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC;oBACtC,IAAI,CAAC,cAAc,EAAE,CAAC;wBACpB,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC;oBACpC,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,iBAAiB,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YAED,YAAY;YACZ,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,UAAU,CAAC;gBAChB,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,cAAc;gBAC5B,iBAAiB;aAClB,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,EACD,+DAA+D,EAC/D;QACE,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC,OAAO,CAAC;KACzB,CACF,CAAC;IAEF,mDAAmD;IACnD,QAAQ,CAAC,IAAI,CACX,QAAQ,EACR,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAE5B,YAAY;QACZ,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,WAAW,CAC7B,MAAM,CAAC,GAAG,EACV,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAC3B,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,EAC3B,SAAS,EACT,SAAS,EACT,IAAI,CACL,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC9C,OAAO,UAAU,CAAC;oBAChB,QAAQ,EAAE,IAAI;oBACd,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;oBACnE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI;oBACjC,MAAM,EAAE,MAAM,CAAC,GAAG;oBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;QAED,aAAa;QACb,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC;gBAChB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI;gBAC3B,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,QAAQ;gBACtC,UAAU,EAAE,CAAC,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,UAAU,CAAC;gBAChB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,MAAM,CAAC,GAAG;gBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,qBAAqB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,cAAc,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;IAC7E,CAAC,EACD,6DAA6D,EAC7D;QACE,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;KAC9C,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAA8B,CAAC;QAC9G,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACxE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/tools/yapi/register-group.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { CliError, CliValidationError } from '../../core/errors.js';
-import { jsonResult } from '../shared.js';
+import { confirmSchema, jsonResult, runWithPreview } from '../shared.js';
+import { previewOrAssertWriteAllowed } from '../../core/write-guard.js';
 import { createYApiServices } from './utils.js';
 export function registerGroupCommands(registry) {
     registry.tool('group-list', {}, async () => {
@@ -18,7 +19,7 @@ export function registerGroupCommands(registry) {
         nextBestTools: ['group-get', 'project-list'],
     });
     registry.tool('group-get', {
-        id: z.coerce.number().describe('分组 ID，必填。YApi 服务端分配的内部数字 ID，可通过 group-list 获取。'),
+        id: z.number().int().positive().describe('分组 ID，必填。YApi 服务端分配的内部数字 ID，可通过 group-list 获取。'),
     }, async (input) => {
         const { api } = createYApiServices();
         const result = await api.getGroup(input.id);
@@ -35,23 +36,27 @@ export function registerGroupCommands(registry) {
     });
     // ==================== 创建分组 ====================
     registry.tool('group-create', {
-        name: z.string().describe('分组名称，必填，前后会做 trim，空字符串会被 CLI 拒绝。建议用团队/业务域命名，便于在 group-list 中区分。'),
+        name: z.string().trim().min(1).describe('分组名称，必填，前后会做 trim，空字符串会被 CLI 拒绝。建议用团队/业务域命名，便于在 group-list 中区分。'),
         desc: z.string().optional().describe('分组描述，可选。纯文本，YApi 后端不做格式校验，仅作为展示文案。建议不超过 100 字。'),
+        ...confirmSchema,
     }, async (input) => {
-        if (!input.name.trim()) {
-            throw new CliValidationError('分组名称不能为空');
-        }
-        const { api } = createYApiServices();
-        const result = await api.groupAdd({
-            group_name: input.name.trim(),
-            desc: input.desc,
-        });
-        if (result.errcode !== 0) {
-            throw new CliError(result.errmsg ?? '创建分组失败', 14, 'API_ERROR');
-        }
-        return jsonResult({
-            groupId: result.data._id,
-            message: `分组「${input.name}」创建成功`,
+        const payload = input;
+        return runWithPreview('group-create', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            if (!input.name.trim()) {
+                throw new CliValidationError('分组名称不能为空');
+            }
+            const { api } = createYApiServices();
+            const result = await api.groupAdd({
+                group_name: input.name.trim(),
+                group_desc: input.desc,
+            });
+            if (result.errcode !== 0) {
+                throw new CliError(result.errmsg ?? '创建分组失败', 14, 'API_ERROR');
+            }
+            return jsonResult({
+                groupId: result.data._id,
+                message: `分组「${input.name}」创建成功`,
+            });
         });
     }, '创建新分组', {
         costHint: 'medium',
@@ -59,25 +64,29 @@ export function registerGroupCommands(registry) {
     });
     // ==================== 更新分组 ====================
     registry.tool('group-update', {
-        groupId: z.coerce.number().describe('目标分组 ID，必填。若不存在会被服务端拒绝，命令会整体报错且不修改任何字段。'),
+        groupId: z.number().int().positive().describe('目标分组 ID，必填。若不存在会被服务端拒绝，命令会整体报错且不修改任何字段。'),
         name: z.string().optional().describe('新名称，可选。name 和 desc 至少需要传一个，否则 CLI 会拒绝请求（防止空请求）。'),
         desc: z.string().optional().describe('新描述，可选。传空字符串不会清空原 desc，因为空字符串会被 Zod 当作 undefined 处理。'),
+        ...confirmSchema,
     }, async (input) => {
-        if (input.name === undefined && input.desc === undefined) {
-            throw new CliValidationError('至少需要提供 name 或 desc 中的一个');
-        }
-        const { api } = createYApiServices();
-        const result = await api.groupUp({
-            group_id: input.groupId,
-            group_name: input.name,
-            desc: input.desc,
-        });
-        if (result.errcode !== 0) {
-            throw new CliError(result.errmsg ?? '更新分组失败', 14, 'API_ERROR');
-        }
-        return jsonResult({
-            groupId: input.groupId,
-            message: `分组 ${input.groupId} 已更新`,
+        const payload = input;
+        return runWithPreview('group-update', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            if (input.name === undefined && input.desc === undefined) {
+                throw new CliValidationError('至少需要提供 name 或 desc 中的一个');
+            }
+            const { api } = createYApiServices();
+            const result = await api.groupUp({
+                id: input.groupId,
+                group_name: input.name,
+                group_desc: input.desc,
+            });
+            if (result.errcode !== 0) {
+                throw new CliError(result.errmsg ?? '更新分组失败', 14, 'API_ERROR');
+            }
+            return jsonResult({
+                groupId: input.groupId,
+                message: `分组 ${input.groupId} 已更新`,
+            });
         });
     }, '更新分组信息', {
         costHint: 'medium',
@@ -85,16 +94,20 @@ export function registerGroupCommands(registry) {
     });
     // ==================== 删除分组 ====================
     registry.tool('group-delete', {
-        groupId: z.coerce.number().describe('目标分组 ID，必填。删除前请先确认其下项目与接口已迁移或备份；具体是否允许删除、是否级联处理取决于服务端版本与权限配置。'),
+        groupId: z.number().int().positive().describe('目标分组 ID，必填。删除前请先确认其下项目与接口已迁移或备份；具体是否允许删除、是否级联处理取决于服务端版本与权限配置。'),
+        ...confirmSchema,
     }, async (input) => {
-        const { api } = createYApiServices();
-        const result = await api.groupDel(input.groupId);
-        if (result.errcode !== 0) {
-            throw new CliError(result.errmsg ?? '删除分组失败', 14, 'API_ERROR');
-        }
-        return jsonResult({
-            groupId: input.groupId,
-            message: `分组 ${input.groupId} 已删除`,
+        const payload = input;
+        return runWithPreview('group-delete', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            const { api } = createYApiServices();
+            const result = await api.groupDel(input.groupId);
+            if (result.errcode !== 0) {
+                throw new CliError(result.errmsg ?? '删除分组失败', 14, 'API_ERROR');
+            }
+            return jsonResult({
+                groupId: input.groupId,
+                message: `分组 ${input.groupId} 已删除`,
+            });
         });
     }, '删除分组', {
         costHint: 'medium',
@@ -102,23 +115,27 @@ export function registerGroupCommands(registry) {
     });
     // ==================== 添加分组成员 ====================
     registry.tool('group-member-add', {
-        groupId: z.coerce.number().describe('目标分组 ID，必填。需要分组所有者或管理员权限，否则服务端会拒绝。'),
-        uid: z.coerce.number().describe('要加入的用户 UID，YApi 内部数字 ID。可通过 user-list 或 user-search 获取。'),
+        groupId: z.number().int().positive().describe('目标分组 ID，必填。需要分组所有者或管理员权限，否则服务端会拒绝。'),
+        uid: z.number().int().positive().describe('要加入的用户 UID，YApi 内部数字 ID。可通过 user-list 或 user-search 获取。'),
         role: z.string().optional().describe('成员角色，可选。常用值 owner / dev / master / reporter / guest。具体取值由服务端插件决定，传未知值通常会被服务端忽略或拒绝。'),
+        ...confirmSchema,
     }, async (input) => {
-        const { api } = createYApiServices();
-        const result = await api.groupAddMember({
-            id: input.groupId,
-            uid: input.uid,
-            role: input.role,
-        });
-        if (result.errcode !== 0) {
-            throw new CliError(result.errmsg ?? '添加分组成员失败', 14, 'API_ERROR');
-        }
-        return jsonResult({
-            groupId: input.groupId,
-            uid: input.uid,
-            message: `用户 ${input.uid} 已加入分组 ${input.groupId}`,
+        const payload = input;
+        return runWithPreview('group-member-add', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            const { api } = createYApiServices();
+            const result = await api.groupAddMember({
+                id: input.groupId,
+                member_uids: [input.uid],
+                role: input.role,
+            });
+            if (result.errcode !== 0) {
+                throw new CliError(result.errmsg ?? '添加分组成员失败', 14, 'API_ERROR');
+            }
+            return jsonResult({
+                groupId: input.groupId,
+                uid: input.uid,
+                message: `用户 ${input.uid} 已加入分组 ${input.groupId}`,
+            });
         });
     }, '添加分组成员', {
         costHint: 'medium',
@@ -126,27 +143,31 @@ export function registerGroupCommands(registry) {
     });
     // ==================== 修改成员角色 ====================
     registry.tool('group-member-role', {
-        groupId: z.coerce.number().describe('目标分组 ID，必填。需要分组所有者权限，否则服务端会拒绝。'),
-        memberUid: z.coerce.number().describe('要修改角色的成员 UID，YApi 内部数字 ID。'),
-        role: z.string().describe('新角色，必填。常用值 owner / dev / master / reporter / guest，传值会做 trim。空字符串会被 CLI 直接拒绝。具体合法值由服务端插件决定。'),
+        groupId: z.number().int().positive().describe('目标分组 ID，必填。需要分组所有者权限，否则服务端会拒绝。'),
+        memberUid: z.number().int().positive().describe('要修改角色的成员 UID，YApi 内部数字 ID。'),
+        role: z.string().trim().min(1).describe('新角色，必填。常用值 owner / dev / master / reporter / guest，传值会做 trim。空字符串会被 CLI 直接拒绝。具体合法值由服务端插件决定。'),
+        ...confirmSchema,
     }, async (input) => {
-        if (!input.role.trim()) {
-            throw new CliValidationError('角色不能为空');
-        }
-        const { api } = createYApiServices();
-        const result = await api.groupChangeMemberRole({
-            group_id: input.groupId,
-            member_uid: input.memberUid,
-            role: input.role.trim(),
-        });
-        if (result.errcode !== 0) {
-            throw new CliError(result.errmsg ?? '修改成员角色失败', 14, 'API_ERROR');
-        }
-        return jsonResult({
-            groupId: input.groupId,
-            memberUid: input.memberUid,
-            role: input.role,
-            message: `成员 ${input.memberUid} 角色已更新为 ${input.role}`,
+        const payload = input;
+        return runWithPreview('group-member-role', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            if (!input.role.trim()) {
+                throw new CliValidationError('角色不能为空');
+            }
+            const { api } = createYApiServices();
+            const result = await api.groupChangeMemberRole({
+                id: input.groupId,
+                member_uid: input.memberUid,
+                role: input.role.trim(),
+            });
+            if (result.errcode !== 0) {
+                throw new CliError(result.errmsg ?? '修改成员角色失败', 14, 'API_ERROR');
+            }
+            return jsonResult({
+                groupId: input.groupId,
+                memberUid: input.memberUid,
+                role: input.role,
+                message: `成员 ${input.memberUid} 角色已更新为 ${input.role}`,
+            });
         });
     }, '修改分组成员角色', {
         costHint: 'medium',
@@ -154,25 +175,29 @@ export function registerGroupCommands(registry) {
     });
     // ==================== 移除分组成员 ====================
     registry.tool('group-member-remove', {
-        groupId: z.coerce.number().describe('目标分组 ID，必填。'),
-        memberUid: z.coerce.number().describe('要移除的成员 UID，YApi 内部数字 ID。注意移除不会删除用户本身，只是解除与分组的关联。'),
+        groupId: z.number().int().positive().describe('目标分组 ID，必填。'),
+        memberUid: z.number().int().positive().describe('要移除的成员 UID，YApi 内部数字 ID。注意移除不会删除用户本身，只是解除与分组的关联。'),
+        ...confirmSchema,
     }, async (input) => {
-        const { api } = createYApiServices();
-        const result = await api.groupDelMember({
-            group_id: input.groupId,
-            member_uid: input.memberUid,
-        });
-        if (result.errcode !== 0) {
-            throw new CliError(result.errmsg ?? '移除分组成员失败', 14, 'API_ERROR');
-        }
-        return jsonResult({
-            groupId: input.groupId,
-            memberUid: input.memberUid,
-            message: `成员 ${input.memberUid} 已从分组 ${input.groupId} 中移除`,
+        const payload = input;
+        return runWithPreview('group-member-remove', payload.confirm, payload, previewOrAssertWriteAllowed, async () => {
+            const { api } = createYApiServices();
+            const result = await api.groupDelMember({
+                id: input.groupId,
+                member_uid: input.memberUid,
+            });
+            if (result.errcode !== 0) {
+                throw new CliError(result.errmsg ?? '移除分组成员失败', 14, 'API_ERROR');
+            }
+            return jsonResult({
+                groupId: input.groupId,
+                memberUid: input.memberUid,
+                message: `成员 ${input.memberUid} 已从分组 ${input.groupId} 中移除`,
+            });
         });
     }, '移除分组成员', {
         costHint: 'medium',
-        nextBestTools: ['group-get', 'group-member-add'],
+        nextBestTools: ['group-member-add'],
     });
     // ==================== 我的分组 ====================
     registry.tool('group-mine', {}, async () => {
@@ -191,7 +216,7 @@ export function registerGroupCommands(registry) {
     });
     // ==================== 分组成员列表 ====================
     registry.tool('group-member-list', {
-        groupId: z.coerce.number().describe('目标分组 ID，必填。返回该分组下所有成员的用户名、角色、邮箱等基础信息。'),
+        groupId: z.number().int().positive().describe('目标分组 ID，必填。返回该分组下所有成员的用户名、角色、邮箱等基础信息。'),
     }, async (input) => {
         const { api } = createYApiServices();
         const result = await api.listGroupMembers(input.groupId);