@dreamor/atlas-cli 0.7.23 → 0.7.24

package/dist/adapters/atlas/commands/suggest.js

@@ -1,83 +0,0 @@
-import { isJsonMode, jsonOk, log } from '../util/output.js';
-const RULES = [
-    // ── 鉴权类 ─────────────────────────────
-    { pattern: /登录|login|sso|auth/i, command: 'atlas auth login', description: 'SSO 登录（需终端交互）', weight: 10, requiresAuth: false, exitCodes: [0, 1, 64] },
-    { pattern: /状态|status|会话/i, command: 'atlas auth status', description: '查看会话状态', weight: 10, requiresAuth: false, exitCodes: [0] },
-    // ── 项目类 ─────────────────────────────
-    { pattern: /项目.*列表|列出.*项目|projects/i, command: 'atlas projects', description: '列出所有项目', weight: 10, requiresAuth: true, exitCodes: [0, 2] },
-    { pattern: /绑定|link|关联/i, command: 'atlas link <project>', description: '绑定项目（可省后续 --project-id）', weight: 10, requiresAuth: true, exitCodes: [0, 4, 5] },
-    { pattern: /解绑|unlink/i, command: 'atlas unlink', description: '解绑项目', weight: 10, requiresAuth: true, exitCodes: [0] },
-    { pattern: /搜索|找|find|查询项目/i, command: 'atlas find project <query>', description: '搜索项目（也支持 department/manpower-type/role/area）', weight: 10, requiresAuth: true, exitCodes: [0, 2] },
-    { pattern: /部门|department/i, command: 'atlas find department <query>', description: '搜索部门', weight: 7, requiresAuth: true, exitCodes: [0, 2] },
-    { pattern: /字典|类型|mp.type|line.plan/i, command: 'atlas find manpower-type <query>', description: '搜索 MP 类型字典值', weight: 7, requiresAuth: true, exitCodes: [0, 2] },
-    // ── 基线人力 ────────────────────────────
-    { pattern: /基线|计划|baseline|人月.*计划/i, command: 'atlas baseline month --month YYYY-MM', description: '查看指定月份基线人力', weight: 5, requiresAuth: true, exitCodes: [0, 2, 3, 4, 5] },
-    { pattern: /基线.*汇总|baseline.*summar/i, command: 'atlas baseline summary [--by month|department|role]', description: '按月/部门/角色汇总基线人力', weight: 5, requiresAuth: true, exitCodes: [0, 2, 3] },
-    { pattern: /基线.*导出|baseline.*export/i, command: 'atlas baseline export --from YYYY-MM --to YYYY-MM [--format csv|json] [--out <path>]', description: '导出基线条目', weight: 5, requiresAuth: true, exitCodes: [0, 2, 3, 65] },
-    // ── 实际工时 ────────────────────────────
-    { pattern: /实际|actual|工时|人月.*实际/i, command: 'atlas actual month --month YYYY-MM', description: '查看指定月份实际工时（人月）', weight: 5, requiresAuth: true, exitCodes: [0, 2, 3, 4, 5] },
-    { pattern: /实际.*汇总|actual.*summar/i, command: 'atlas actual summary [--by month|department|role]', description: '汇总实际工时', weight: 5, requiresAuth: true, exitCodes: [0, 2, 3] },
-    { pattern: /实际.*导出|actual.*export/i, command: 'atlas actual export --from YYYY-MM --to YYYY-MM [--format csv|json] [--out <path>]', description: '导出实际工时', weight: 5, requiresAuth: true, exitCodes: [0, 2, 3, 65] },
-    { pattern: /实际.*人员|人员.*明细|staff|成员.*工时/i, command: 'atlas actual show <staffId> --month YYYY-MM', description: '查看单人员工实际工时明细', weight: 5, requiresAuth: true, exitCodes: [0, 2, 3] },
-    // ── 对比 ───────────────────────────────
-    { pattern: /对比|比较|compare|差异|偏差/i, command: 'atlas compare --from YYYY-MM --to YYYY-MM', description: '基线 vs 实际对比（diff = 实际 - 基线，人月）', weight: 10, requiresAuth: true, exitCodes: [0, 2, 3, 4, 5] },
-    // ── 批量执行 ────────────────────────────
-    { pattern: /批量|batch|exec|编排/i, command: 'atlas exec --plan-file <path>', description: '按 plan-file 顺序执行多条 atlas 命令', weight: 7, requiresAuth: false, exitCodes: [0, 1] },
-    // ── 自省 / 帮助 ─────────────────────────
-    { pattern: /命令.*列表|命令树|帮助|自省|schema/i, command: 'atlas schema commands [--describe]', description: '列出所有命令 + 输出 schema（agent 自省入口）', weight: 8, requiresAuth: false, exitCodes: [0] },
-    { pattern: /升级|更新|update/i, command: 'atlas update', description: '升级到最新版本', weight: 10, requiresAuth: false, exitCodes: [0] },
-    { pattern: /守护|daemon/i, command: 'atlas daemon', description: '启动本地守护进程（保持浏览器会话）', weight: 5, requiresAuth: false, exitCodes: [0] },
-    // ── 模糊匹配：问"某项目" ────────────
-    { pattern: /项目\S+|(\S+项目)/i, command: 'atlas find project <query>', description: '搜索项目（含模糊匹配参数）', weight: 3, requiresAuth: true, exitCodes: [0, 2] },
-    // ── 月份推算 ────────────────────────────
-    { pattern: /上个月|本月|上月|这个月|当月|当前月/i, command: 'atlas baseline month --month $(date +%Y-%m)', description: '查看当前/上个月基线（月份参数可推算）', weight: 3, requiresAuth: true, exitCodes: [0, 2, 3] },
-    { pattern: /上季度|上个季度|本季度/i, command: 'atlas compare --from $(date -d "$(date +%Y-%m-01) -3 months" +%Y-%m) --to $(date +%Y-%m)', description: '按季度范围对比（月份参数自动推算）', weight: 3, requiresAuth: true, exitCodes: [0, 2, 3] },
-];
-export function suggestCmd(query, opts) {
-    const suggestions = [];
-    for (const rule of RULES) {
-        if (rule.pattern.test(query)) {
-            suggestions.push({
-                command: rule.command,
-                description: rule.description,
-                score: rule.weight,
-                requiresAuth: rule.requiresAuth,
-                exitCodes: rule.exitCodes,
-            });
-        }
-    }
-    // 模糊分提升：查询词在命令中出现越多加分
-    const queryLower = query.toLowerCase();
-    for (const s of suggestions) {
-        const cmdLower = s.command.toLowerCase();
-        let score = 0;
-        for (const word of queryLower.split(/\s+/)) {
-            if (word.length >= 2 && cmdLower.includes(word))
-                score += 0.5;
-            // 月份/具体数值命中额外加分
-            if (/^\d{4}[-\/]\d{2}$/.test(word))
-                score += 1;
-            if (/^\d+$/.test(word) && word.length >= 2 && cmdLower.includes(word))
-                score += 1;
-        }
-        s.score += score;
-    }
-    suggestions.sort((a, b) => b.score - a.score);
-    if (opts.json || isJsonMode()) {
-        jsonOk({ query, suggestions: suggestions.slice(0, 5) });
-        return;
-    }
-    if (suggestions.length === 0) {
-        log(`未找到匹配的 atlas 命令: "${query}"`);
-        log('提示: 试试 atlas --help 查看所有命令');
-        return;
-    }
-    log(`自然语言查询: "${query}"`);
-    log('建议命令:');
-    for (const s of suggestions.slice(0, 5)) {
-        const authMark = s.requiresAuth ? '🔑' : '  ';
-        log(`  ${authMark} ${s.command}  — ${s.description}`);
-    }
-    log('');
-    log('标记 🔑=需要登录，无标记=无需鉴权');
-}

package/dist/adapters/atlas/commands/update.js

@@ -1,104 +0,0 @@
-import { fileURLToPath } from 'url';
-import { isJsonMode, jsonOk, log } from '../util/output.js';
-import { AtlasError } from '../util/errors.js';
-import { ATLAS_VERSION } from '../util/version.js';
-/**
- * 检测当前是否通过 npm 全局包安装运行。
- * 判断依据：import.meta.url 解析后的真实路径是否在 node_modules/@dreamor/atlas-cli 下。
- * - 命中 → 提示用户用 `npm update -g @dreamor/atlas-cli` 升级
- * - 未命中 → 独立二进制/Bun/开发模式，提示去 GitHub Releases 升级
- */
-function detectInstallMode() {
-    try {
-        const url = new URL(import.meta.url);
-        const path = fileURLToPath(url);
-        return /node_modules[\\/]@dreamor[\\/]atlas-cli/.test(path) ? 'npm' : 'other';
-    }
-    catch {
-        return 'other';
-    }
-}
-export function detectPlatform() {
-    const osMap = {
-        darwin: 'darwin',
-        linux: 'linux',
-        win32: 'windows',
-    };
-    const archMap = {
-        arm64: 'arm64',
-        x64: 'x64',
-    };
-    const os = osMap[process.platform];
-    const arch = archMap[process.arch];
-    if (!os || !arch)
-        return null;
-    return { os, arch };
-}
-export function stripV(v) {
-    return v.replace(/^v/, '');
-}
-export function compareVersions(a, b) {
-    // 预处理：去除 prerelease 后缀（如 -rc.1、-beta），纯 semver 比较
-    const clean = (v) => v.replace(/-.*$/, '');
-    const pa = clean(a).split('.').map(Number);
-    const pb = clean(b).split('.').map(Number);
-    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
-        const na = pa[i] ?? 0;
-        const nb = pb[i] ?? 0;
-        if (na > nb)
-            return 1;
-        if (na < nb)
-            return -1;
-    }
-    // 语义相同：a 有 prerelease 后缀（如 0.6.1-rc.1）→ a < b（跳过升级）
-    if (a !== clean(a) && b === clean(b))
-        return -1;
-    if (a === clean(a) && b !== clean(b))
-        return 1;
-    return 0;
-}
-export async function updateCmd(opts) {
-    if (process.env.ATLAS_DISABLE_UPDATE === '1') {
-        log('更新已被 ATLAS_DISABLE_UPDATE 禁用');
-        if (opts.json || isJsonMode()) {
-            jsonOk({ disabled: true });
-        }
-        return;
-    }
-    // npm 分发后，自更新交给 npm/yarn/pnpm 管理；CLI 不再下载二进制。
-    // 说明：原 GitHub Release 下载 + SHA256 校验 + 原子写入逻辑由 npm registry 取代，
-    // 维持这个命令只是为了给已有用户一个清晰引导，而不是让他们卡在过期入口。
-    const installMode = detectInstallMode();
-    const npmCmd = 'npm update -g @dreamor/atlas-cli';
-    if (installMode === 'npm') {
-        log(`当前版本 ${ATLAS_VERSION}`);
-        log('通过 npm 安装的 atlas 由 npm registry 管理升级，请运行:');
-        log(`  ${npmCmd}`);
-        if (opts.json || isJsonMode()) {
-            jsonOk({
-                mode: 'npm',
-                current: ATLAS_VERSION,
-                updateCommand: npmCmd,
-            });
-        }
-        return;
-    }
-    // 非 npm 安装（独立二进制/Bun/源码开发模式）
-    log(`当前版本 ${ATLAS_VERSION}`);
-    log('当前以非 npm 方式运行，自更新已禁用。');
-    log('推荐迁移到 npm 安装：');
-    log('  npm i -g @dreamor/atlas-cli');
-    log('随后通过 `npm update -g @dreamor/atlas-cli` 升级。');
-    if (opts.json || isJsonMode()) {
-        jsonOk({
-            mode: 'other',
-            current: ATLAS_VERSION,
-            migrationCommand: 'npm i -g @dreamor/atlas-cli',
-            updateCommand: npmCmd,
-        });
-    }
-}
-// 保留 throw 以便旧调用点不会报错（改造后独立函数已无调用者）
-export function _unreachableCheck() {
-    throw new AtlasError('update.ts 内部: 不应到达', 'UPDATE_ERROR');
-}

package/dist/adapters/atlas/daemon/index.js

@@ -1,145 +0,0 @@
-import { createServer as httpCreateServer } from 'http';
-import { createServer as httpsCreateServer } from 'https';
-import { randomBytes, timingSafeEqual } from 'crypto';
-import { readFileSync } from 'fs';
-import { dirname } from 'path';
-import { log } from '../util/output.js';
-import { getDaemonTokenFile } from '../util/paths.js';
-import { secureMkdir, secureWriteFile } from '../util/secure-fs.js';
-import { AtlasError } from '../util/errors.js';
-import { parseCidrList, isIpAllowed, isLoopback, } from '../util/cidr.js';
-/** 生成 32 字节 hex token */
-function generateToken() {
-    return randomBytes(32).toString('hex');
-}
-/** 校验 Authorization: Bearer <token>（timingSafeEqual 防时序侧信道） */
-function isAuthorized(req, token) {
-    const auth = req.headers.authorization ?? '';
-    const expected = `Bearer ${token}`;
-    const a = Buffer.from(auth);
-    const b = Buffer.from(expected);
-    // timingSafeEqual 要求两 Buffer 等长；不等长时先比后再返回 false 防止时序泄漏
-    if (a.length !== b.length) {
-        timingSafeEqual(Buffer.alloc(1), Buffer.alloc(1));
-        return false;
-    }
-    return timingSafeEqual(a, b);
-}
-/**
- * 构造 daemon request handler。抽出为纯函数便于测试：
- * 测试可直接用返回的 handler 起临时 http/https server。
- *
- * 路由：
- * - GET /api/health → 公开，{ok, pid}
- * - GET /api/cookies → 需 Bearer + IP 白名单，{ok, cookies}
- * - 其他 → 404
- */
-export function createDaemonHandler(deps) {
-    return (req, res) => {
-        const sendJson = (status, body) => {
-            res.writeHead(status, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify(body));
-        };
-        const url = req.url ?? '/';
-        const isHealth = url === '/api/health' || url === '/';
-        // health 端点不鉴权、不限 IP（用于探测）
-        if (isHealth) {
-            sendJson(200, { ok: true, pid: process.pid });
-            return;
-        }
-        // IP 白名单（非 health 端点都校验）
-        if (!isIpAllowed(req.socket.remoteAddress, deps.allowList)) {
-            sendJson(403, { ok: false, error: 'forbidden: ip not allowed' });
-            return;
-        }
-        // Bearer 鉴权
-        if (!isAuthorized(req, deps.token)) {
-            sendJson(401, { ok: false, error: 'unauthorized' });
-            return;
-        }
-        if (url === '/api/cookies') {
-            void deps
-                .readCookies()
-                .then((cookies) => sendJson(200, { ok: true, cookies: cookies ?? [] }))
-                .catch(() => sendJson(500, { ok: false, error: 'read cookies failed' }));
-            return;
-        }
-        sendJson(404, { ok: false, error: 'not found' });
-    };
-}
-/** 默认端口号 */
-const DEFAULT_PORT = 8765;
-export async function daemonCmd(opts) {
-    const envPort = Number(process.env.ATLAS_DAEMON_PORT);
-    const optsPort = opts.port !== undefined ? Number(opts.port) : NaN;
-    const port = Number.isFinite(optsPort) && optsPort > 0
-        ? optsPort
-        : Number.isFinite(envPort) && envPort > 0
-            ? envPort
-            : DEFAULT_PORT;
-    const host = opts.host ?? '127.0.0.1';
-    const hostLoopback = isLoopback(host);
-    const hasTls = Boolean(opts.tlsCert) && Boolean(opts.tlsKey);
-    // 护栏 1：TLS cert/key 必须同时指定
-    if ((opts.tlsCert && !opts.tlsKey) || (opts.tlsKey && !opts.tlsCert)) {
-        throw new AtlasError('--tls-cert 与 --tls-key 必须同时指定', 'CONFIG_ERROR');
-    }
-    // 护栏 2：非 loopback 监听必须有 IP 白名单或显式 --insecure
-    if (!hostLoopback && !opts.insecure && (!opts.allowIp || opts.allowIp.length === 0)) {
-        throw new AtlasError('非 loopback 监听必须指定 --allow-ip 或显式 --insecure（明文传输 token 仅建议本机开发）', 'CONFIG_ERROR');
-    }
-    // 护栏 3：非 loopback + 无 TLS + 明文 → stderr 大红警告
-    if (!hostLoopback && !hasTls && opts.insecure) {
-        log('⚠⚠⚠ 明文监听非 loopback 接口，Bearer token 将以明文传输，仅建议本机开发使用 ⚠⚠⚠');
-    }
-    // 解析 IP 白名单（非法 CIDR 在此抛 ConfigError，启动期失败而非运行期）
-    const allowList = parseCidrList(opts.allowIp);
-    // 生成一次性 token，写入 ~/.atlas/daemon.token（0600）
-    const token = generateToken();
-    const tokenFile = getDaemonTokenFile();
-    await secureMkdir(dirname(tokenFile), { recursive: true });
-    await secureWriteFile(tokenFile, token);
-    log(`Daemon token 已写入 ${tokenFile}`);
-    // 动态 import readCookies 避免与 session 模块的循环依赖
-    const handlerDeps = {
-        token,
-        allowList,
-        readCookies: async () => {
-            const { readCookies } = await import('../auth/session.js');
-            return readCookies();
-        },
-    };
-    const handler = createDaemonHandler(handlerDeps);
-    // 创建 server（http 或 https）
-    let server;
-    if (hasTls) {
-        let cert;
-        let key;
-        try {
-            cert = readFileSync(opts.tlsCert);
-            key = readFileSync(opts.tlsKey);
-        }
-        catch (e) {
-            throw new AtlasError(`TLS 证书读取失败：${e.message}`, 'CONFIG_ERROR');
-        }
-        server = httpsCreateServer({ cert, key }, handler);
-    }
-    else {
-        server = httpCreateServer(handler);
-    }
-    await new Promise((resolve, reject) => {
-        server.on('error', (e) => {
-            if (e.code === 'EADDRINUSE') {
-                reject(new AtlasError(`端口 ${port} 已被占用`, 'CONFIG_ERROR'));
-            }
-            else {
-                reject(e);
-            }
-        });
-        server.listen(port, host, resolve);
-    });
-    const scheme = hasTls ? 'https' : 'http';
-    log(`守护进程已启动，监听 ${scheme}://${host}:${port}${!hostLoopback && !hasTls && opts.insecure ? '（明文）' : ''}`);
-    // Keep running
-    await new Promise(() => { });
-}

package/dist/adapters/atlas/dict/index.js

@@ -1,41 +0,0 @@
-import { readFile } from 'fs/promises';
-import { existsSync } from 'fs';
-import { getCacheDir, getCacheFile } from '../util/paths.js';
-import { secureMkdir, secureWriteFile } from '../util/secure-fs.js';
-const CACHE_TTL = 24 * 60 * 60 * 1000; // 24h
-// Key 只允许字母数字和下划线，防止路径穿越（D6）
-const CACHE_KEY_RE = /^[a-z0-9_-]+$/i;
-export async function getCached(key) {
-    if (!CACHE_KEY_RE.test(key))
-        throw new Error(`非法 cache key: "${key}"`);
-    const filePath = getCacheFile(key);
-    if (!existsSync(filePath))
-        return null;
-    try {
-        const raw = await readFile(filePath, 'utf-8');
-        const entry = JSON.parse(raw);
-        if (Date.now() - entry.fetchedAt > CACHE_TTL)
-            return null;
-        return entry.data;
-    }
-    catch {
-        return null;
-    }
-}
-export async function setCache(key, data) {
-    if (!CACHE_KEY_RE.test(key))
-        throw new Error(`非法 cache key: "${key}"`);
-    const filePath = getCacheFile(key);
-    const cacheDir = getCacheDir();
-    await secureMkdir(cacheDir, { recursive: true });
-    const entry = { data, fetchedAt: Date.now() };
-    await secureWriteFile(filePath, JSON.stringify(entry));
-}
-export async function clearCache() {
-    const { rm } = await import('fs/promises');
-    const cacheDir = getCacheDir();
-    try {
-        await rm(cacheDir, { recursive: true, force: true });
-    }
-    catch { }
-}

package/dist/adapters/atlas/http/client.js

@@ -1,200 +0,0 @@
-/**
- * 斑马云图 HTTP 客户端。
- *
- * 变更记录（安全审计）：
- * - A4：path 校验 → 必须以 / 开头，origin 锁定，防 SSRF
- * - B2：识别 429 状态码，抛 RATE_LIMITED AtlasError
- * - B5：token/user/staffId 空串时不设请求头
- * - D3：可传 ZodSchema 对 data 做运行时校验
- * - D10：已知业务错误码 → 特定异常
- */
-import { request } from 'undici';
-import { BanmaApiError, SessionExpiredError, AtlasError } from '../util/errors.js';
-import { readCookies, readBanmaIdentity } from '../auth/session.js';
-/** D10：已知业务错误码 → 异常映射（工厂函数避免单例 stack trace 失准） */
-const KNOWN_BUSINESS_ERRORS = {
-    'TOKEN_INVALID': () => new SessionExpiredError('会话 token 已失效，请先执行：atlas auth refresh；失败再执行：atlas auth login'),
-    'TOKEN_EXPIRED': () => new SessionExpiredError('会话 token 已过期，请先执行：atlas auth refresh；失败再执行：atlas auth login'),
-    'SESSION_EXPIRED': () => new SessionExpiredError('会话已过期，请先执行：atlas auth refresh；失败再执行：atlas auth login'),
-    // 斑马 API 会用 errCode=501 + errorMsg="当前token已失效" 表达 token 过期；
-    // 这是文档中反复踩过的坑，务必显式映射。
-    '501': () => new SessionExpiredError('会话 token 已失效，请先执行：atlas auth refresh；失败再执行：atlas auth login'),
-};
-/**
- * 关键词兜底：识别 errorMsg 是否描述 token 失效/过期。
- * 用途：防止后续 API 又换一个 errCode 编号（例如 502/503）继续绕过我们的显式映射。
- * 规则：errorMsg 同时包含 "token"（大小写不敏感）且包含 "失效" 或 "过期" 之一。
- */
-function looksLikeTokenExpired(errorMsg) {
-    if (!errorMsg)
-        return false;
-    const lower = errorMsg.toLowerCase();
-    const hasToken = lower.includes('token');
-    const hasExpiry = errorMsg.includes('失效') || errorMsg.includes('过期');
-    return hasToken && hasExpiry;
-}
-const BANMA_BASE = 'https://banma-yuntu.alibaba-inc.com';
-/**
- * Banma API HTTP 客户端
- *
- * 真实 API 格式: { status, code, errCode, errorMsg, detail, success, data }
- * - success=true 或 status=1 表示成功
- * - data 可能为数组或对象
- * - 200 不一定成功；需检查 success 字段
- */
-export class HttpClient {
-    baseUrl;
-    baseOrigin;
-    timeout;
-    constructor(opts = {}) {
-        this.baseUrl = (opts.baseUrl ?? BANMA_BASE).replace(/\/+$/, '');
-        this.baseOrigin = new URL(this.baseUrl).origin;
-        this.timeout = opts.timeout ?? 30000;
-    }
-    async buildHeaders() {
-        const cookies = await readCookies();
-        const headers = {
-            'Accept': 'application/json, text/plain, */*',
-            'Content-Type': 'application/json',
-            'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) atlas-cli',
-            'Referer': 'https://banma-yuntu.alibaba-inc.com/',
-            'Origin': 'https://banma-yuntu.alibaba-inc.com',
-        };
-        if (cookies && cookies.length > 0) {
-            headers['Cookie'] = cookies.map((c) => `${c.name}=${c.value}`).join('; ');
-        }
-        // 斑马的项目权限类 API 强制校验 x-banma-* 头，缺失则判定无身份返回空数据。
-        // token/user/staffId 仅在有有效值时设置（B5）；company-id 始终发送（空串亦可）。
-        const identity = await readBanmaIdentity();
-        if (identity) {
-            if (identity.token) {
-                headers['token'] = identity.token;
-                headers['x-banma-token'] = identity.token;
-            }
-            if (identity.user)
-                headers['x-banma-user'] = identity.user;
-            if (identity.staffId)
-                headers['x-banma-staff-id'] = identity.staffId;
-            headers['x-banma-company-id'] = '';
-        }
-        return headers;
-    }
-    /**
-     * GET 请求。
-     *
-     * query 参数以键值对形式传入，自动拼接到 URL 查询字符串。
-     * 可传可选 schema（ZodSchema），在 API 返回后对 json.data 做运行时校验。
-     */
-    async get(path, query, schema) {
-        // A4: 校验 path 必须以 / 开头，防止 http://evil.example/x 绕过 baseUrl
-        if (!path.startsWith('/'))
-            throw new AtlasError('path must be relative (start with /)', 'CONFIG_ERROR');
-        const url = new URL(path, this.baseUrl + '/');
-        if (query) {
-            Object.entries(query).forEach(([k, v]) => url.searchParams.set(k, v));
-        }
-        if (url.origin !== this.baseOrigin)
-            throw new AtlasError('origin mismatch — possible SSRF', 'CONFIG_ERROR');
-        const headers = await this.buildHeaders();
-        const response = await request(url.toString(), {
-            method: 'GET',
-            headers,
-            headersTimeout: this.timeout,
-            bodyTimeout: this.timeout,
-        });
-        return this.parseResponse(response, schema);
-    }
-    /**
-     * POST 请求。
-     *
-     * 可传可选 schema（ZodSchema），在 API 返回后对 json.data 做运行时校验（D3）。
-     */
-    async post(path, body, schema) {
-        // A4: 校验 path 必须以 / 开头，防止 http://evil.example/x 绕过 baseUrl
-        if (!path.startsWith('/'))
-            throw new AtlasError('path must be relative (start with /)', 'CONFIG_ERROR');
-        const url = new URL(path, this.baseUrl + '/');
-        if (url.origin !== this.baseOrigin)
-            throw new AtlasError('origin mismatch — possible SSRF', 'CONFIG_ERROR');
-        const headers = await this.buildHeaders();
-        const response = await request(url.toString(), {
-            method: 'POST',
-            headers,
-            body: body ? JSON.stringify(body) : undefined,
-            headersTimeout: this.timeout,
-            bodyTimeout: this.timeout,
-        });
-        return this.parseResponse(response, schema);
-    }
-    async multipartUpload(path, fields, file) {
-        // A4: 校验 path
-        if (!path.startsWith('/'))
-            throw new AtlasError('path must be relative (start with /)', 'CONFIG_ERROR');
-        const url = new URL(path, this.baseUrl + '/');
-        if (url.origin !== this.baseOrigin)
-            throw new AtlasError('origin mismatch — possible SSRF', 'CONFIG_ERROR');
-        const headers = await this.buildHeaders();
-        const boundary = `----FormBoundary${Math.random().toString(36).slice(2)}`;
-        const CRLF = '\r\n';
-        const parts = [];
-        for (const f of fields) {
-            parts.push(Buffer.from(`--${boundary}${CRLF}Content-Disposition: form-data; name="${f.name}"${CRLF}${CRLF}${f.value}${CRLF}`));
-        }
-        parts.push(Buffer.from(`--${boundary}${CRLF}Content-Disposition: form-data; name="${file.name}"; filename="${file.filename}"${CRLF}Content-Type: application/octet-stream${CRLF}${CRLF}`));
-        parts.push(file.buffer);
-        parts.push(Buffer.from(`${CRLF}--${boundary}--${CRLF}`));
-        const response = await request(url.toString(), {
-            method: 'POST',
-            headers: { ...headers, 'Content-Type': `multipart/form-data; boundary=${boundary}` },
-            body: Buffer.concat(parts),
-            headersTimeout: this.timeout * 2,
-            bodyTimeout: this.timeout * 2,
-        });
-        return this.parseResponse(response);
-    }
-    async parseResponse(response, schema) {
-        const status = response.statusCode;
-        const text = await response.body.text();
-        if (status === 401 || status === 403) {
-            throw new SessionExpiredError();
-        }
-        // 302 一般是重定向到登录页（session 失效 / 未授权）
-        if (status === 302) {
-            throw new SessionExpiredError('会话已失效或未授权，请重新登录');
-        }
-        // B2: 识别 429 限流
-        if (status === 429) {
-            throw new AtlasError('请求过于频繁（429 限流），请稍后重试', 'RATE_LIMITED');
-        }
-        let json;
-        try {
-            json = JSON.parse(text);
-        }
-        catch {
-            throw new BanmaApiError('PARSE_ERROR', `Failed to parse: ${text.slice(0, 200)}`);
-        }
-        // D10: 识别业务错误码 → 映射到特定异常
-        if (json.errCode && json.errCode !== 'SUCCESS') {
-            const knownError = KNOWN_BUSINESS_ERRORS[json.errCode];
-            if (knownError)
-                throw knownError();
-            // 兜底：显式映射漏掉时，用 errorMsg 关键词识别 token 失效
-            if (looksLikeTokenExpired(json.errorMsg)) {
-                throw new SessionExpiredError('会话 token 已失效，请先执行：atlas auth refresh；失败再执行：atlas auth login');
-            }
-        }
-        // Banma API 的 success/status 字段不可靠（空结果也返回 success: false）
-        // 只要 HTTP 2xx 就返回 data，由调用方处理 null
-        if (status >= 200 && status < 300) {
-            if (schema)
-                return schema.parse(json.data);
-            return json.data;
-        }
-        const errCode = json.errCode ?? String(json.code) ?? `HTTP_${status}`;
-        const errMsg = json.errorMsg ?? json.detail ?? `HTTP ${status}`;
-        throw new BanmaApiError(errCode, errMsg, json.detail ?? undefined);
-    }
-}
-export function createClient() {
-    return new HttpClient();
-}

package/dist/adapters/atlas/http/index.js

@@ -1 +0,0 @@
-export { HttpClient } from './client.js';

package/dist/adapters/atlas/schema/actual.js

@@ -1,16 +0,0 @@
-import { z } from 'zod';
-// 实际工时-按团队汇总（API: POST /yuntu-service/manpower/weekly/summaryByTeam.json）
-export const ActualSummaryByTeamSchema = z.object({
-    staffId: z.string(),
-    staffName: z.string(),
-    department: z.string().optional(),
-    departmentName: z.string().optional(),
-    role: z.string().optional(),
-    manpower: z.number(),
-    status: z.enum(['pending', 'approved']).optional(),
-    leadName: z.string().optional(),
-});
-export const ActualSummaryByTeamDataSchema = z.object({
-    summaryByTeam: z.array(ActualSummaryByTeamSchema),
-    mp: z.number().optional(),
-});

package/dist/adapters/atlas/schema/baseline.js

@@ -1,34 +0,0 @@
-import { z } from 'zod';
-// 基线月明细条目（API: POST /yuntu-service/line/plan/month/select.json）
-export const LinePlanMonthDetailSchema = z.object({
-    projectId: z.string(),
-    projectName: z.string(),
-    departmentId: z.string().optional(),
-    departmentName: z.string().optional(),
-    role: z.string().optional(),
-    manpower: z.number(),
-    month: z.string(),
-    areaCode: z.string().optional(),
-    mpType: z.string().optional(),
-    leadId: z.string().optional(),
-    leadName: z.string().optional(),
-});
-// 实际 API 返回的 data 结构
-export const BaselineMonthDataSchema = z.object({
-    linePlanMonthDetailList: z.array(LinePlanMonthDetailSchema),
-    mp: z.number().optional(),
-});
-// 基线条目列表（API: POST /yuntu-service/line/plan/select.json）
-export const LinePlanSelectDataSchema = z.object({
-    linePlanList: z.array(z.object({
-        id: z.string().optional(),
-        projectId: z.string(),
-        projectName: z.string(),
-        departmentName: z.string().optional(),
-        role: z.string().optional(),
-        manpower: z.number(),
-        month: z.string(),
-        areaCode: z.string().optional(),
-        mpType: z.string().optional(),
-    })),
-});

package/dist/adapters/atlas/schema/department.js

@@ -1,11 +0,0 @@
-import { z } from 'zod';
-// 部门树节点（API: POST /yuntu-service/department/tree/select.json）
-export const DepartmentNodeSchema = z.object({
-    id: z.string(),
-    name: z.string(),
-    parentId: z.string().optional(),
-    children: z.lazy(() => z.array(DepartmentNodeSchema)).optional(),
-});
-export const DepartmentTreeDataSchema = z.object({
-    departmentTree: z.array(DepartmentNodeSchema).optional(),
-});

package/dist/adapters/atlas/schema/index.js

@@ -1,4 +0,0 @@
-export * from './baseline.js';
-export * from './actual.js';
-export * from './project.js';
-export * from './department.js';

package/dist/adapters/atlas/schema/project.js

@@ -1,13 +0,0 @@
-import { z } from 'zod';
-// 项目列表（API: POST /yuntu-service/project/selectHasPermisValidProject.json）
-export const ProjectSchema = z.object({
-    id: z.string(),
-    name: z.string(),
-    code: z.string().optional(),
-    status: z.string().optional(),
-    manager: z.string().optional(),
-    mpType: z.string().optional(),
-});
-export const ProjectListDataSchema = z.object({
-    projectList: z.array(ProjectSchema).optional(),
-});