@clowder-ai/enterprise-workflow 0.0.0-stage → 0.1.0-alpha.4

package/README.en.md

@@ -0,0 +1,38 @@
+# Enterprise Workflow
+
+[Chinese](README.md) · English
+
+`@clowder-ai/enterprise-workflow` exposes governed WeCom and Lark actions as two
+Host-managed direct tools. It does not open an HTTP callback endpoint and it never
+receives or stores a callback token. The Host authenticates the calling cat and
+rechecks the live plugin instance before `plugin_call` reaches the package action.
+
+## Operator setup
+
+Install and authenticate `wecom-cli` and/or `lark-cli` on the Host machine, then set:
+
+- `wecomCliPath`: executable name or absolute path for `wecom-cli`.
+- `larkCliPath`: executable name or absolute path for `lark-cli`.
+
+The paths are ordinary configuration, not secrets. Vendor credentials remain owned
+by each local CLI.
+
+## Agent journey
+
+1. Confirm `official.enterprise-workflow` is installed, configured, enabled, and running.
+2. Call `plugin_list_tools` for that plugin.
+3. Select exactly `wecom-actions/wecom_action` or `lark-actions/lark_action` and construct
+   arguments from the returned schema.
+4. Call `plugin_call`; the returned value is the resource handle for the selected action.
+
+The packaged `skills/enterprise-workflow/SKILL.md` contains branch examples. Do not invoke
+the CLI directly: doing so bypasses Host invocation identity, liveness, grants, and audit.
+
+## Package ownership and recovery
+
+The package owns provider argument adaptation, CLI process execution, output parsing, and
+resource handles. The Host owns installation, configuration, grants, invocation identity,
+audit, enable/disable, and uninstall. Disable or uninstall stops new tool calls; created
+vendor resources remain in the vendor tenant and are returned as explicit handles.
+
+The Host owns installation, grants, credentials and lifecycle; saving configuration preserves enable intent. The language link opens a separate document and does not imply automatic language selection.

package/README.md

@@ -1,3 +1,20 @@
-# Temporary Holding Version
+# 企业工作流
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+简体中文 · [English](README.en.md)
+
+通过两个受宿主管理的工具调用企业微信和飞书工作流，执行供应商 CLI 支持的操作并返回明确的资源标识。
+
+## 开始使用
+
+1. 在运行 Clowder AI 的机器上安装并登录 `wecom-cli` 或 `lark-cli`。
+2. 在插件设置填写需要使用的 `wecomCliPath`、`larkCliPath`。可以使用可执行文件名或绝对路径；这些路径不是密钥，平台凭据仍由各 CLI 管理。
+3. 启用插件，让猫通过 `plugin_list_tools` 查看本插件的实际参数说明。
+4. 按说明调用 `wecom-actions/wecom_action` 或 `lark-actions/lark_action`，经 `plugin_call` 执行。
+
+随包的企业工作流 skill 提供分支示例。直接绕过工具运行 CLI 不会经过宿主的调用身份、授权和审计。
+
+## 数据与停用
+
+插件不开放 HTTP 回调，也不接收或保存回调令牌。宿主认证调用者并检查当前实例；插件负责参数转换、子进程和结果解析。停用或卸载阻止新调用；已创建的平台资源仍保留在企业租户，使用返回的资源标识管理。
+
+宿主管理安装、授权、凭据和启停；配置保存不自动改变启用意图。英文文档是独立文件，互链不代表页面已支持自动语言切换。

package/assets/icon.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-label="Enterprise workflow">
+  <rect width="64" height="64" rx="14" fill="#3157d5"/>
+  <path d="M18 18h28v10H18zm0 18h18v10H18z" fill="#fff"/>
+  <path d="m40 36 8 5-8 5z" fill="#7ee2c2"/>
+</svg>

package/dist/LarkActionService.d.ts

@@ -0,0 +1,117 @@
+/**
+ * F162 Phase B: Lark/Feishu Action Service.
+ *
+ * Typed methods for enterprise operations via lark-cli (larksuite/cli, Go binary).
+ * This is the governance boundary (ADR-029): audit log, error normalization.
+ * All cat-facing Lark enterprise actions go through here — never raw CLI calls.
+ *
+ * Feishu capabilities covered (Phase B):
+ *   - docs    (Markdown-backed Lark Docs)
+ *   - base    (Bitable, multi-dimensional tables) + fields/records scaffolding
+ *   - task    (task v2)
+ *   - calendar (event v4; lark-cli v1.x does not expose VC/meeting URLs)
+ *   - slides  (presentation; Feishu-exclusive vs WeCom)
+ *
+ * ADR-029 Core Principle: ActionService is required for all external tool actions.
+ */
+import { type LarkCliExecutor } from './LarkCliExecutor.js';
+import type { EnterpriseLogger } from './logger.js';
+import type { LarkBaseHandle, LarkCalendarEventHandle, LarkDocHandle, LarkGoldenChainResult, LarkSlideHandle, LarkTaskHandle } from './lark-types.js';
+export interface CreateDocOpts {
+    /** Document title */
+    title: string;
+    /** Markdown content (Lark-flavored). Pass plain markdown; lark-cli handles conversion. */
+    markdown?: string;
+    /** Optional parent folder token */
+    folderToken?: string;
+}
+export interface CreateBaseOpts {
+    /** Base (Bitable) app name */
+    name: string;
+    /** Optional parent folder token */
+    folderToken?: string;
+    /** e.g. "Asia/Shanghai" */
+    timeZone?: string;
+}
+export interface CreateTaskOpts {
+    /** Task title */
+    summary: string;
+    description?: string;
+    /** Assignee open_id (single assignee for Phase B; use assignMany for multi) */
+    assigneeOpenId?: string;
+    /** Due date: ISO 8601, YYYY-MM-DD, +2d relative, or ms timestamp */
+    due?: string;
+    /** Client token for idempotency */
+    idempotencyKey?: string;
+}
+export interface CreateCalendarEventOpts {
+    /** Event title */
+    summary: string;
+    description?: string;
+    /** ISO 8601 start time */
+    start: string;
+    /** ISO 8601 end time */
+    end: string;
+    /** Attendee IDs (ou_xxx user, oc_xxx chat, omm_xxx room), comma-joined input allowed */
+    attendeeOpenIds?: string[];
+    /** Calendar ID (default: primary) */
+    calendarId?: string;
+    /** RFC5545 recurrence rule */
+    rrule?: string;
+}
+export interface CreateSlidesOpts {
+    title: string;
+    folderToken?: string;
+}
+export interface GoldenChainOpts {
+    docTitle: string;
+    docMarkdown: string;
+    baseName: string;
+    tasks: Array<{
+        summary: string;
+        assigneeOpenId: string;
+        due?: string;
+        description?: string;
+    }>;
+    calendarSummary: string;
+    calendarStart: string;
+    calendarEnd: string;
+    calendarAttendeeOpenIds: string[];
+    /** If true, also create a Slides deck and include in summary */
+    includeSlides?: boolean;
+}
+export declare class LarkActionService {
+    private readonly executor;
+    private readonly log;
+    constructor(executor: LarkCliExecutor, log: EnterpriseLogger);
+    isAvailable(): Promise<boolean>;
+    createDoc(opts: CreateDocOpts): Promise<LarkDocHandle>;
+    createBase(opts: CreateBaseOpts): Promise<LarkBaseHandle>;
+    createTask(opts: CreateTaskOpts): Promise<LarkTaskHandle>;
+    createCalendarEvent(opts: CreateCalendarEventOpts): Promise<LarkCalendarEventHandle>;
+    createSlides(opts: CreateSlidesOpts): Promise<LarkSlideHandle>;
+    /**
+     * Best-effort user lookup by name/query. Degrades to empty array ONLY when the failure
+     * is a scope/permission error (not every tenant grants contact:contact.search). Other
+     * failures (protocol error, CLI unavailable, vendor outage, unexpected API codes) bubble
+     * up to the caller so real problems aren't masked as "no matches".
+     */
+    searchUsers(query: string): Promise<Array<{
+        openId: string;
+        name: string;
+    }>>;
+    /**
+     * Golden Chain: One sentence → Doc + Base + Tasks + Calendar Event (+ optional Slides).
+     * Feishu showcase, parity with WeCom F162 Phase A goldenChain but adapted to Lark primitives:
+     *   - Doc (Markdown) replaces WeCom Doc
+     *   - Base (Bitable) replaces WeCom smart table
+     *   - Task v2 replaces WeCom Todo
+     *   - Calendar Event (with VC link) replaces WeCom Meeting
+     *   - Slides is Feishu-exclusive bonus
+     */
+    goldenChain(opts: GoldenChainOpts): Promise<LarkGoldenChainResult & {
+        slides?: LarkSlideHandle;
+    }>;
+    private audit;
+}
+//# sourceMappingURL=LarkActionService.d.ts.map

package/dist/LarkActionService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LarkActionService.d.ts","sourceRoot":"","sources":["../src/LarkActionService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAEV,cAAc,EAEd,uBAAuB,EAEvB,aAAa,EAEb,qBAAqB,EACrB,eAAe,EAGf,cAAc,EACf,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,aAAa;IAC5B,qBAAqB;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,iBAAiB;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,kBAAkB;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,qCAAqC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,gEAAgE;IAChE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;gBAE3B,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB;IAKtD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAetD,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAezD,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAoBzD,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAuBpF,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAcpE;;;;;OAKG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAclF;;;;;;;;OAQG;IACG,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,GAAG;QAAE,MAAM,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;IA+CvG,OAAO,CAAC,KAAK;CAGd"}

package/dist/LarkActionService.js

@@ -0,0 +1,189 @@
+/**
+ * F162 Phase B: Lark/Feishu Action Service.
+ *
+ * Typed methods for enterprise operations via lark-cli (larksuite/cli, Go binary).
+ * This is the governance boundary (ADR-029): audit log, error normalization.
+ * All cat-facing Lark enterprise actions go through here — never raw CLI calls.
+ *
+ * Feishu capabilities covered (Phase B):
+ *   - docs    (Markdown-backed Lark Docs)
+ *   - base    (Bitable, multi-dimensional tables) + fields/records scaffolding
+ *   - task    (task v2)
+ *   - calendar (event v4; lark-cli v1.x does not expose VC/meeting URLs)
+ *   - slides  (presentation; Feishu-exclusive vs WeCom)
+ *
+ * ADR-029 Core Principle: ActionService is required for all external tool actions.
+ */
+import { LarkApiError } from './LarkCliExecutor.js';
+export class LarkActionService {
+    executor;
+    log;
+    constructor(executor, log) {
+        this.executor = executor;
+        this.log = log;
+    }
+    async isAvailable() {
+        return this.executor.isAvailable();
+    }
+    async createDoc(opts) {
+        this.audit('createDoc', { title: opts.title, hasMarkdown: Boolean(opts.markdown) });
+        const res = await this.executor.exec('docs', '+create', {
+            title: opts.title,
+            ...(opts.markdown ? { markdown: opts.markdown } : {}),
+            ...(opts.folderToken ? { 'folder-token': opts.folderToken } : {}),
+        });
+        const data = res.data;
+        if (!data?.doc_id) {
+            throw new Error(`Lark docs +create returned no doc_id: ${JSON.stringify(res)}`);
+        }
+        const url = data.doc_url ?? `https://feishu.cn/docx/${data.doc_id}`;
+        return { documentId: data.doc_id, url, title: opts.title };
+    }
+    async createBase(opts) {
+        this.audit('createBase', { name: opts.name });
+        const res = await this.executor.exec('base', '+base-create', {
+            name: opts.name,
+            ...(opts.folderToken ? { 'folder-token': opts.folderToken } : {}),
+            ...(opts.timeZone ? { 'time-zone': opts.timeZone } : {}),
+        });
+        const base = res.data?.base;
+        if (!base?.base_token) {
+            throw new Error(`Lark base +base-create returned no base_token: ${JSON.stringify(res)}`);
+        }
+        const url = base.url ?? `https://feishu.cn/base/${base.base_token}`;
+        return { appToken: base.base_token, url, name: base.name ?? opts.name };
+    }
+    async createTask(opts) {
+        this.audit('createTask', { summary: opts.summary });
+        const res = await this.executor.exec('task', '+create', {
+            summary: opts.summary,
+            ...(opts.description ? { description: opts.description } : {}),
+            ...(opts.assigneeOpenId ? { assignee: opts.assigneeOpenId } : {}),
+            ...(opts.due ? { due: opts.due } : {}),
+            ...(opts.idempotencyKey ? { 'idempotency-key': opts.idempotencyKey } : {}),
+        });
+        const data = res.data;
+        if (!data?.guid) {
+            throw new Error(`Lark task +create returned no guid: ${JSON.stringify(res)}`);
+        }
+        return {
+            guid: data.guid,
+            summary: opts.summary,
+            ...(data.url ? { url: data.url } : {}),
+        };
+    }
+    async createCalendarEvent(opts) {
+        this.audit('createCalendarEvent', { summary: opts.summary });
+        const attendeeIds = opts.attendeeOpenIds?.length ? opts.attendeeOpenIds.join(',') : undefined;
+        const res = await this.executor.exec('calendar', '+create', {
+            summary: opts.summary,
+            start: opts.start,
+            end: opts.end,
+            ...(opts.description ? { description: opts.description } : {}),
+            ...(attendeeIds ? { 'attendee-ids': attendeeIds } : {}),
+            ...(opts.calendarId ? { 'calendar-id': opts.calendarId } : {}),
+            ...(opts.rrule ? { rrule: opts.rrule } : {}),
+        });
+        const data = res.data;
+        if (!data?.event_id) {
+            throw new Error(`Lark calendar +create returned no event_id: ${JSON.stringify(res)}`);
+        }
+        return {
+            eventId: data.event_id,
+            calendarId: opts.calendarId ?? 'primary',
+            summary: data.summary ?? opts.summary,
+        };
+    }
+    async createSlides(opts) {
+        this.audit('createSlides', { title: opts.title });
+        const res = await this.executor.exec('slides', '+create', {
+            title: opts.title,
+            ...(opts.folderToken ? { 'folder-token': opts.folderToken } : {}),
+        });
+        const data = res.data;
+        if (!data?.xml_presentation_id) {
+            throw new Error(`Lark slides +create returned no xml_presentation_id: ${JSON.stringify(res)}`);
+        }
+        const url = data.url ?? `https://feishu.cn/slides/${data.xml_presentation_id}`;
+        return { presentationId: data.xml_presentation_id, url, title: data.title ?? opts.title };
+    }
+    /**
+     * Best-effort user lookup by name/query. Degrades to empty array ONLY when the failure
+     * is a scope/permission error (not every tenant grants contact:contact.search). Other
+     * failures (protocol error, CLI unavailable, vendor outage, unexpected API codes) bubble
+     * up to the caller so real problems aren't masked as "no matches".
+     */
+    async searchUsers(query) {
+        this.audit('searchUsers', { query });
+        try {
+            const res = await this.executor.exec('contact', '+search-user', { query });
+            return (res.data?.users ?? []).map((u) => ({ openId: u.open_id, name: u.name }));
+        }
+        catch (err) {
+            if (err instanceof LarkApiError && isScopeOrPermissionError(err)) {
+                this.log.warn({ err, query }, '[LarkAction] searchUsers degraded — contact scope not granted');
+                return [];
+            }
+            throw err;
+        }
+    }
+    /**
+     * Golden Chain: One sentence → Doc + Base + Tasks + Calendar Event (+ optional Slides).
+     * Feishu showcase, parity with WeCom F162 Phase A goldenChain but adapted to Lark primitives:
+     *   - Doc (Markdown) replaces WeCom Doc
+     *   - Base (Bitable) replaces WeCom smart table
+     *   - Task v2 replaces WeCom Todo
+     *   - Calendar Event (with VC link) replaces WeCom Meeting
+     *   - Slides is Feishu-exclusive bonus
+     */
+    async goldenChain(opts) {
+        this.audit('goldenChain', { docTitle: opts.docTitle, taskCount: opts.tasks.length });
+        const doc = await this.createDoc({ title: opts.docTitle, markdown: opts.docMarkdown });
+        const base = await this.createBase({ name: opts.baseName });
+        const tasks = [];
+        for (const t of opts.tasks) {
+            tasks.push(await this.createTask({
+                summary: t.summary,
+                assigneeOpenId: t.assigneeOpenId,
+                ...(t.due ? { due: t.due } : {}),
+                ...(t.description ? { description: t.description } : {}),
+            }));
+        }
+        const calendarEvent = await this.createCalendarEvent({
+            summary: opts.calendarSummary,
+            start: opts.calendarStart,
+            end: opts.calendarEnd,
+            attendeeOpenIds: opts.calendarAttendeeOpenIds,
+        });
+        let slides;
+        if (opts.includeSlides) {
+            try {
+                slides = await this.createSlides({ title: `${opts.docTitle} — Slides` });
+            }
+            catch (err) {
+                this.log.warn({ err }, '[LarkAction] Slides creation failed — continuing without');
+            }
+        }
+        const lines = [
+            `📄 文档: ${doc.title} — ${doc.url}`,
+            `📊 多维表: ${base.name} — ${base.url}`,
+            `✅ 任务: ${tasks.length} 条已分发`,
+            `🗓 日程: ${calendarEvent.summary}`,
+        ];
+        if (slides)
+            lines.push(`🎞 幻灯片: ${slides.title} — ${slides.url}`);
+        const summary = lines.join('\n');
+        return { doc, base, tasks, calendarEvent, summary, ...(slides ? { slides } : {}) };
+    }
+    audit(method, params) {
+        this.log.info({ service: 'LarkAction', method, params }, '[LarkAction] audit');
+    }
+}
+function isScopeOrPermissionError(err) {
+    const type = err.type.toLowerCase();
+    if (type.includes('permission') || type.includes('scope') || type.includes('forbidden'))
+        return true;
+    // Common Lark permission/scope codes (99991664 scope_denied, 99991668 forbidden, 1254xxx contact-scope)
+    return err.code === 99991664 || err.code === 99991668 || (err.code >= 1254000 && err.code <= 1254999);
+}
+//# sourceMappingURL=LarkActionService.js.map

package/dist/LarkActionService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LarkActionService.js","sourceRoot":"","sources":["../src/LarkActionService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAwB,MAAM,sBAAsB,CAAC;AAsF1E,MAAM,OAAO,iBAAiB;IACX,QAAQ,CAAkB;IAC1B,GAAG,CAAmB;IAEvC,YAAY,QAAyB,EAAE,GAAqB;QAC1D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAmB;QACjC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAyB,MAAM,EAAE,SAAS,EAAE;YAC9E,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC;QACpE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAoB;QACnC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAyB,MAAM,EAAE,cAAc,EAAE;YACnF,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;QAC5B,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,0BAA0B,IAAI,CAAC,UAAU,EAAE,CAAC;QACpE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAoB;QACnC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAyB,MAAM,EAAE,SAAS,EAAE;YAC9E,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3E,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,IAA6B;QACrD,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAA6B,UAAU,EAAE,SAAS,EAAE;YACtF,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;YACxC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;SACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAsB;QACvC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAA2B,QAAQ,EAAE,SAAS,EAAE;YAClF,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,4BAA4B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC/E,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IAC5F,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAA4B,SAAS,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACtG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,YAAY,IAAI,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,+DAA+D,CAAC,CAAC;gBAC/F,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW,CAAC,IAAqB;QACrC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAErF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAEvF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE5D,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CACR,MAAM,IAAI,CAAC,UAAU,CAAC;gBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;YACnD,OAAO,EAAE,IAAI,CAAC,eAAe;YAC7B,KAAK,EAAE,IAAI,CAAC,aAAa;YACzB,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,eAAe,EAAE,IAAI,CAAC,uBAAuB;SAC9C,CAAC,CAAC;QAEH,IAAI,MAAmC,CAAC;QACxC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,WAAW,EAAE,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,0DAA0D,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,UAAU,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,GAAG,EAAE;YAClC,WAAW,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,EAAE;YACpC,SAAS,KAAK,CAAC,MAAM,OAAO;YAC5B,UAAU,aAAa,CAAC,OAAO,EAAE;SAClC,CAAC;QACF,IAAI,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IAEO,KAAK,CAAC,MAAc,EAAE,MAAe;QAC3C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACjF,CAAC;CACF;AAED,SAAS,wBAAwB,CAAC,GAAiB;IACjD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,wGAAwG;IACxG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;AACxG,CAAC"}

package/dist/LarkCliExecutor.d.ts

@@ -0,0 +1,83 @@
+/**
+ * F162 Phase B: Lark/Feishu CLI Executor.
+ *
+ * Thin wrapper around `lark-cli` (Go binary distributed via @larksuite/cli npm).
+ * Unlike wecom-cli (single-JSON-blob args), lark-cli uses cobra-style flags:
+ *   lark-cli <domain> <+command> [--flag value ...]
+ *
+ * Responses come back as raw JSON with the shape:
+ *   success: { ok: true,  identity, data: {...} }
+ *   failure: { ok: false, identity, error: { type, code, message, hint } }
+ *
+ * The CLI exits 0 in both cases — success is determined by the `ok` field.
+ *
+ * ADR-029 Decision 1: CliExecutor is the execution backend for LarkActionService.
+ */
+import type { LarkBaseResponse, LarkCliErrorDetail } from './lark-types.js';
+import type { EnterpriseLogger } from './logger.js';
+interface ExecFileResult {
+    readonly stdout: string;
+    readonly stderr: string;
+}
+type ExecFileRunner = (executable: string, args: readonly string[], options: Readonly<Record<string, unknown>>) => Promise<ExecFileResult>;
+/** Flag value type: strings, numbers, booleans accepted */
+export type LarkFlagValue = string | number | boolean;
+/** Thrown when lark-cli returns ok: false */
+export declare class LarkApiError extends Error {
+    readonly domain: string;
+    readonly command: string;
+    readonly code: number;
+    readonly type: string;
+    readonly hint?: string;
+    constructor(error: LarkCliErrorDetail, domain: string, command: string);
+}
+/** Thrown when lark-cli itself fails (not installed, timeout, crash, auth missing) */
+export declare class LarkCliUnavailableError extends Error {
+    readonly reason?: unknown;
+    constructor(message: string, reason?: unknown);
+}
+/**
+ * Thrown when lark-cli responds but the stdout does not conform to the expected
+ * `{ok, identity, data|error}` envelope (non-JSON, truncated, protocol drift).
+ *
+ * Distinct from `LarkCliUnavailableError`: the CLI was reachable and returned output,
+ * but the output cannot be interpreted. Surfacing this as a protocol error (→ 500)
+ * prevents misdiagnosis as "CLI not installed" (→ 503) and preserves the raw payload
+ * for debugging vendor shape changes.
+ */
+export declare class LarkCliProtocolError extends Error {
+    readonly reason?: unknown;
+    readonly rawOutput?: string;
+    constructor(message: string, reason?: unknown, rawOutput?: string);
+}
+export declare class LarkCliExecutor {
+    private available;
+    private readonly log;
+    private readonly executable;
+    private readonly timeoutMs;
+    private readonly run;
+    constructor(log: EnterpriseLogger, executable: string, timeoutMs?: number, run?: ExecFileRunner);
+    /** Check if lark-cli is available. Result is cached after first check. */
+    isAvailable(): Promise<boolean>;
+    /**
+     * Execute a lark-cli command and parse JSON response.
+     *
+     * @param domain    - Top-level command (docs, task, calendar, base, im, ...)
+     * @param command   - Subcommand (often prefixed with +, e.g. +create)
+     * @param flags     - Flag map; values are stringified. `--flag value` for each entry.
+     * @returns Parsed response with ok: true guaranteed
+     * @throws LarkApiError if ok: false
+     * @throws LarkCliUnavailableError if CLI is missing or crashes
+     */
+    exec<T extends LarkBaseResponse>(domain: string, command: string, flags?: Record<string, LarkFlagValue | undefined>): Promise<T>;
+    /**
+     * Parse lark-cli stdout. Accepts the `{ok, identity, data|error}` envelope.
+     * Some commands may emit pure data (no envelope); treat absence of `ok` as
+     * success and synthesize the envelope.
+     */
+    private parseOutput;
+    /** Reset cached availability (for testing) */
+    _resetCache(): void;
+}
+export {};
+//# sourceMappingURL=LarkCliExecutor.d.ts.map

package/dist/LarkCliExecutor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LarkCliExecutor.d.ts","sourceRoot":"","sources":["../src/LarkCliExecutor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,UAAU,cAAc;IAAG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC7E,KAAK,cAAc,GAAG,CACpB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KACvC,OAAO,CAAC,cAAc,CAAC,CAAC;AAM7B,2DAA2D;AAC3D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEtD,6CAA6C;AAC7C,qBAAa,YAAa,SAAQ,KAAK;aAOnB,MAAM,EAAE,MAAM;aACd,OAAO,EAAE,MAAM;IAPjC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;gBAG5B,KAAK,EAAE,kBAAkB,EACT,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM;CAQlC;AAED,sFAAsF;AACtF,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,SAAgB,MAAM,CAAC,EAAE,OAAO,CAAC;gBAErB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO;CAK9C;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,SAAgB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;gBAEvB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM;CAMlE;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,SAAS,CAAwB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAmB;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiB;gBAGnC,GAAG,EAAE,gBAAgB,EACrB,UAAU,EAAE,MAAM,EAClB,SAAS,SAAqB,EAC9B,GAAG,GAAE,cAA8B;IAQrC,0EAA0E;IACpE,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAarC;;;;;;;;;OASG;IACG,IAAI,CAAC,CAAC,SAAS,gBAAgB,EACnC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAM,GACpD,OAAO,CAAC,CAAC,CAAC;IA2Db;;;;OAIG;IACH,OAAO,CAAC,WAAW;IAanB,8CAA8C;IAC9C,WAAW,IAAI,IAAI;CAGpB"}

package/dist/LarkCliExecutor.js

@@ -0,0 +1,180 @@
+/**
+ * F162 Phase B: Lark/Feishu CLI Executor.
+ *
+ * Thin wrapper around `lark-cli` (Go binary distributed via @larksuite/cli npm).
+ * Unlike wecom-cli (single-JSON-blob args), lark-cli uses cobra-style flags:
+ *   lark-cli <domain> <+command> [--flag value ...]
+ *
+ * Responses come back as raw JSON with the shape:
+ *   success: { ok: true,  identity, data: {...} }
+ *   failure: { ok: false, identity, error: { type, code, message, hint } }
+ *
+ * The CLI exits 0 in both cases — success is determined by the `ok` field.
+ *
+ * ADR-029 Decision 1: CliExecutor is the execution backend for LarkActionService.
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+const execFileAsync = promisify(execFile);
+/** Default timeout for lark-cli commands (30 seconds) */
+const DEFAULT_TIMEOUT_MS = 30_000;
+/** Thrown when lark-cli returns ok: false */
+export class LarkApiError extends Error {
+    domain;
+    command;
+    code;
+    type;
+    hint;
+    constructor(error, domain, command) {
+        super(`Lark API error [${error.code} ${error.type}]: ${error.message} (${domain} ${command})`);
+        this.domain = domain;
+        this.command = command;
+        this.name = 'LarkApiError';
+        this.code = error.code;
+        this.type = error.type;
+        this.hint = error.hint;
+    }
+}
+/** Thrown when lark-cli itself fails (not installed, timeout, crash, auth missing) */
+export class LarkCliUnavailableError extends Error {
+    reason;
+    constructor(message, reason) {
+        super(message);
+        this.name = 'LarkCliUnavailableError';
+        this.reason = reason;
+    }
+}
+/**
+ * Thrown when lark-cli responds but the stdout does not conform to the expected
+ * `{ok, identity, data|error}` envelope (non-JSON, truncated, protocol drift).
+ *
+ * Distinct from `LarkCliUnavailableError`: the CLI was reachable and returned output,
+ * but the output cannot be interpreted. Surfacing this as a protocol error (→ 500)
+ * prevents misdiagnosis as "CLI not installed" (→ 503) and preserves the raw payload
+ * for debugging vendor shape changes.
+ */
+export class LarkCliProtocolError extends Error {
+    reason;
+    rawOutput;
+    constructor(message, reason, rawOutput) {
+        super(message);
+        this.name = 'LarkCliProtocolError';
+        this.reason = reason;
+        this.rawOutput = rawOutput;
+    }
+}
+export class LarkCliExecutor {
+    available = null;
+    log;
+    executable;
+    timeoutMs;
+    run;
+    constructor(log, executable, timeoutMs = DEFAULT_TIMEOUT_MS, run = execFileAsync) {
+        this.log = log;
+        this.executable = executable;
+        this.timeoutMs = timeoutMs;
+        this.run = run;
+    }
+    /** Check if lark-cli is available. Result is cached after first check. */
+    async isAvailable() {
+        if (this.available !== null)
+            return this.available;
+        try {
+            const { stdout } = await this.run(this.executable, ['--version'], { timeout: 5_000 });
+            this.log.info({ version: stdout.trim() }, '[LarkCli] lark-cli detected');
+            this.available = true;
+        }
+        catch {
+            this.log.warn('[LarkCli] lark-cli not found — enterprise actions will be unavailable');
+            this.available = false;
+        }
+        return this.available;
+    }
+    /**
+     * Execute a lark-cli command and parse JSON response.
+     *
+     * @param domain    - Top-level command (docs, task, calendar, base, im, ...)
+     * @param command   - Subcommand (often prefixed with +, e.g. +create)
+     * @param flags     - Flag map; values are stringified. `--flag value` for each entry.
+     * @returns Parsed response with ok: true guaranteed
+     * @throws LarkApiError if ok: false
+     * @throws LarkCliUnavailableError if CLI is missing or crashes
+     */
+    async exec(domain, command, flags = {}) {
+        const available = await this.isAvailable();
+        if (!available) {
+            throw new LarkCliUnavailableError('lark-cli is not installed or not configured');
+        }
+        const args = [domain, command];
+        for (const [key, value] of Object.entries(flags)) {
+            if (value === undefined || value === null)
+                continue;
+            if (typeof value === 'boolean') {
+                if (value)
+                    args.push(`--${key}`);
+                continue;
+            }
+            args.push(`--${key}`, String(value));
+        }
+        this.log.info({ domain, command, flags: Object.keys(flags) }, '[LarkCli] exec');
+        try {
+            const { stdout, stderr } = await this.run(this.executable, args, {
+                timeout: this.timeoutMs,
+                maxBuffer: 10 * 1024 * 1024,
+            });
+            if (stderr.trim()) {
+                this.log.debug({ domain, command, stderr: stderr.trim() }, '[LarkCli] stderr');
+            }
+            const parsed = this.parseOutput(stdout.trim());
+            if (parsed.ok === false) {
+                const errorDetail = parsed.error ?? {
+                    type: 'unknown',
+                    code: -1,
+                    message: 'lark-cli reported ok:false without error detail',
+                };
+                throw new LarkApiError(errorDetail, domain, command);
+            }
+            this.log.info({ domain, command }, '[LarkCli] success');
+            return parsed;
+        }
+        catch (err) {
+            if (err instanceof LarkApiError)
+                throw err;
+            if (err instanceof LarkCliProtocolError)
+                throw err;
+            const error = err;
+            if (error.killed) {
+                throw new LarkCliUnavailableError(`lark-cli timed out after ${this.timeoutMs}ms`, err);
+            }
+            if (error.code === 'ENOENT') {
+                this.available = false;
+                throw new LarkCliUnavailableError('lark-cli binary not found', err);
+            }
+            const detail = error.stderr ? `: ${error.stderr.trim().slice(0, 500)}` : '';
+            throw new LarkCliUnavailableError(`lark-cli execution failed: ${error.message}${detail}`, err);
+        }
+    }
+    /**
+     * Parse lark-cli stdout. Accepts the `{ok, identity, data|error}` envelope.
+     * Some commands may emit pure data (no envelope); treat absence of `ok` as
+     * success and synthesize the envelope.
+     */
+    parseOutput(raw) {
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch (err) {
+            throw new LarkCliProtocolError(`lark-cli returned non-JSON stdout (${raw.length} chars)`, err, raw.slice(0, 500));
+        }
+        if (typeof parsed.ok !== 'boolean') {
+            return { ok: true, data: parsed };
+        }
+        return parsed;
+    }
+    /** Reset cached availability (for testing) */
+    _resetCache() {
+        this.available = null;
+    }
+}
+//# sourceMappingURL=LarkCliExecutor.js.map