@dreamor/atlas-cli 0.7.0

package/dist/adapters/atlas/util/paths.js

@@ -0,0 +1,40 @@
+/**
+ * 路径工具：集中管理所有文件路径，统一遵从 ATLAS_HOME 环境变量。
+ *
+ * 避免各文件重复拼 ~/.atlas，避免未来改目录结构时遗漏调用点。
+ */
+import { homedir } from 'os';
+import { join, resolve } from 'path';
+/** ~/.atlas 或 $ATLAS_HOME（经 path.resolve 防止相对路径误导） */
+export function getAtlasHome() {
+    const raw = process.env.ATLAS_HOME || join(homedir(), '.atlas');
+    return resolve(raw);
+}
+/** ~/.atlas/cookies.json */
+export function getCookieFile() {
+    return join(getAtlasHome(), 'cookies.json');
+}
+/** ~/.atlas/link.json */
+export function getLinkFile() {
+    return join(getAtlasHome(), 'link.json');
+}
+/** ~/.atlas/daemon.token */
+export function getDaemonTokenFile() {
+    return join(getAtlasHome(), 'daemon.token');
+}
+/** ~/.atlas/bin */
+export function getBinDir() {
+    return join(getAtlasHome(), 'bin');
+}
+/** ~/.atlas/bin/atlas.cjs */
+export function getTargetBinary() {
+    return join(getBinDir(), 'atlas.cjs');
+}
+/** ~/.atlas/cache/<key>.json */
+export function getCacheFile(key) {
+    return join(getAtlasHome(), 'cache', `${key}.json`);
+}
+/** ~/.atlas/cache */
+export function getCacheDir() {
+    return join(getAtlasHome(), 'cache');
+}

package/dist/adapters/atlas/util/secure-fs.js

@@ -0,0 +1,41 @@
+/**
+ * 安全文件系统工具。
+ *
+ * 统一按最小权限原则读写敏感文件：
+ * - 目录：0700（drwx------）
+ * - 文件：0600（-rw-------）
+ *
+ * 覆盖已有文件时额外 chmod 兜底。
+ */
+import { mkdir, writeFile, chmod } from 'fs/promises';
+import { resolve } from 'path';
+import { ConfigError } from './errors.js';
+/** 安全的目录创建：0700 */
+export async function secureMkdir(dir, opts) {
+    await mkdir(dir, { recursive: opts?.recursive ?? true, mode: 0o700 });
+}
+/** 安全的文件写入：0600，覆盖已有 ✓ */
+export async function secureWriteFile(file, data) {
+    await writeFile(file, data, { mode: 0o600 });
+    await chmod(file, 0o600);
+}
+/**
+ * 校验导出路径，防止 --out 任意写（H2 修复）。
+ *
+ * 策略：
+ * - 相对路径：解析为 `{cwd}/{path}`，允许
+ * - 绝对路径：必须在 `cwd` 目录树内
+ *
+ * @param cwdOverride 仅在测试中用于 mock 工作目录
+ * 返回解析后的绝对路径（可安全传入 writeFile）。
+ * 校验不通过时抛 ConfigError。
+ */
+export function resolveSecureExportPath(out, cwdOverride) {
+    const currentDir = cwdOverride ?? process.cwd();
+    const resolved = resolve(currentDir, out);
+    if (!resolved.startsWith(currentDir)) {
+        throw new ConfigError(`--out 路径 "${resolved}" 不在当前工作目录 "${currentDir}" 内，已拒绝。` +
+            `请将导出文件放在当前目录或子目录中。`);
+    }
+    return resolved;
+}

package/dist/adapters/atlas/util/time.js

@@ -0,0 +1,17 @@
+/**
+ * 时间工具：处理 CST（UTC+8）时区相关的转换。
+ *
+ * API 返回的时间戳是中国标准时间（UTC+8）的午夜，
+ * 必须加 8h 偏移后取 UTC 年月，否则在非 UTC+8 的机器上月份偏 1。
+ */
+/** API 时间戳 → YYYY-MM 月份键，CST 时区安全 */
+export function monthTsToKey(ts) {
+    const d = new Date(ts + 8 * 3600 * 1000);
+    return `${d.getUTCFullYear()}-${String(d.getUTCMonth() + 1).padStart(2, '0')}`;
+}
+/** 当前月的 YYYY-MM 键 */
+export function currentMonthKey() {
+    const d = new Date();
+    // 使用本地时间，不偏移；当前月即本地年月
+    return `${d.getFullYear()}-${String(d.getMonth() + 1).padStart(2, '0')}`;
+}

package/dist/adapters/atlas/util/version.js

@@ -0,0 +1 @@
+export const ATLAS_VERSION = '0.7.0';

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@dreamor/atlas-cli",
+  "version": "0.7.0",
+  "description": "Atlas CLI - 斑马云图人力基线管理工具",
+  "type": "module",
+  "directories": {
+    "bin": "bin"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "files": [
+    "bin/atlas.js",
+    "dist/adapters/**/*.js",
+    "!dist/adapters/atlas/tests/**",
+    "!dist/adapters/**/tests/**",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dreamor/atlas-cli.git"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json && rm -rf dist/adapters/atlas/bin && mkdir -p bin && echo '#!/usr/bin/env node\\nimport { buildProgram } from \"../dist/adapters/atlas/cli.js\";\\nconst program = buildProgram();\\nprogram.parse(process.argv);\\n' > bin/atlas.js && chmod +x bin/atlas.js",
+    "lint": "tsc --noEmit --pretty false",
+    "lint:watch": "tsc --noEmit --pretty false --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "verify": "node ./dist/adapters/atlas/cli.js --help",
+    "auth:login": "node --import tsx ./adapters/atlas/cli.ts auth login"
+  },
+  "dependencies": {
+    "commander": "^14.0.3",
+    "papaparse": "^5.5.3",
+    "undici": "^7.0.0",
+    "zod": "^3.23.8"
+  },
+  "optionalDependencies": {
+    "keytar": "^7.9.0",
+    "playwright": "^1.49.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "@types/papaparse": "^5.5.2",
+    "esbuild": "^0.28.1",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0"
+  }
+}