@milian/linker-cli 0.0.0-stage → 0.17.3

package/src/commands/auth.js

@@ -0,0 +1,242 @@
+'use strict';
+
+const http = require('node:http');
+const { exec } = require('node:child_process');
+const { login, applyPrefix } = require('../api');
+const {
+  saveCredentials,
+  saveConfig,
+  normalizeBaseUrl,
+  isBaseUrlFromEnv
+} = require('../config');
+const { renderLoginPage, renderDonePage } = require('../login-page');
+
+const MAX_BODY_BYTES = 1024 * 1024;
+
+function readBody(req) {
+  return new Promise((resolve, reject) => {
+    let size = 0;
+    const chunks = [];
+    req.on('data', (chunk) => {
+      size += chunk.length;
+      if (size > MAX_BODY_BYTES) {
+        reject(new Error('请求体过大'));
+        req.destroy();
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+    req.on('error', reject);
+  });
+}
+
+/**
+ * 尝试用系统默认浏览器打开登录页。
+ * disabled 为真时完全不尝试（--no-browser）：适合由宿主拉起浏览器的场景。
+ * 打不开时必须明确告知用户手动访问，否则用户只会看到一行 URL 不知所措。
+ */
+function tryOpenBrowser(url, disabled) {
+  if (disabled) return;
+  const platform = process.platform;
+  const cmd =
+    platform === 'darwin' ? `open "${url}"` : platform === 'win32' ? `start "" "${url}"` : `xdg-open "${url}"`;
+  exec(cmd, (err) => {
+    if (err) {
+      process.stderr.write(`无法自动打开浏览器，请手动访问：${url}\n`);
+    }
+  });
+}
+
+/**
+ * 起本地登录页，等待用户提交账密，调用原系统登录接口并落盘授权信息。
+ * 关键点：CLI 会打印 http://127.0.0.1:<port>/ 供 WorkBuddy 提取并拉起浏览器，
+ * 因此 cli.json 必须配置 "authWaitForExit": true，否则本进程会被提前 kill。
+ */
+async function authLogin(cfg, options) {
+  const noBrowser = Boolean(options && options.noBrowser);
+  const loginSuffix = applyPrefix(cfg, cfg.loginPath);
+  // 环境变量优先级高于配置文件：被 LINKER_BASE_URL 锁定时，登录页不允许改地址，
+  // 否则用户改了也只在本次生效、下次运行又回到环境变量的值，属于静默不一致
+  const envLocked = isBaseUrlFromEnv(cfg);
+  const lockedReason = envLocked
+    ? `当前地址由环境变量 LINKER_BASE_URL 指定：${cfg.baseUrl}`
+    : '';
+
+  return new Promise((resolve, reject) => {
+    let settled = false;
+    let server = null;
+
+    const finish = (err, cred) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      if (server) {
+        // server.close() 只是「停止接受新连接」，已有连接会继续占用 event loop。
+        // 浏览器页面没被关掉时 keep-alive 连接会一直挂着，进程就退不出去 —— 必须主动断开。
+        try {
+          server.close();
+        } catch {
+          /* ignore */
+        }
+        if (typeof server.closeIdleConnections === 'function') {
+          try {
+            server.closeIdleConnections();
+          } catch {
+            /* ignore */
+          }
+        }
+        if (typeof server.closeAllConnections === 'function') {
+          try {
+            server.closeAllConnections();
+          } catch {
+            /* ignore */
+          }
+        }
+      }
+      if (err) reject(err);
+      else resolve(cred);
+    };
+
+    const timer = setTimeout(
+      () => finish(new Error(`登录等待超时（${Math.round(cfg.authTimeoutMs / 1000)} 秒）`)),
+      cfg.authTimeoutMs
+    );
+
+    server = http.createServer(async (req, res) => {
+      const url = new URL(req.url, 'http://127.0.0.1');
+
+      if (req.method === 'GET' && (url.pathname === '/' || url.pathname === '/login')) {
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8', 'Cache-Control': 'no-store' });
+        res.end(
+          renderLoginPage({
+            baseUrl: cfg.baseUrl,
+            loginSuffix,
+            editable: !envLocked,
+            lockedReason
+          })
+        );
+        return;
+      }
+
+      if (req.method === 'POST' && url.pathname === '/login') {
+        let payload;
+        try {
+          const raw = await readBody(req);
+          payload = JSON.parse(raw || '{}');
+        } catch (err) {
+          res.writeHead(400, { 'Content-Type': 'application/json; charset=utf-8' });
+          res.end(JSON.stringify({ ok: false, message: '请求格式错误：' + err.message }));
+          return;
+        }
+
+        const username = String(payload.username || '').trim();
+        const password = String(payload.password || '');
+
+        if (!username || !password) {
+          res.writeHead(400, { 'Content-Type': 'application/json; charset=utf-8' });
+          res.end(JSON.stringify({ ok: false, message: '用户名和密码不能为空' }));
+          return;
+        }
+
+        // 平台地址：没有默认值，必须由用户在登录页填写。规范化后用于本次登录，成功后写回配置。
+        let loginBase = String(cfg.baseUrl || '').replace(/\/+$/, '');
+        if (!envLocked) {
+          const norm = normalizeBaseUrl(payload.baseUrl || cfg.baseUrl);
+          if (!norm.ok) {
+            const detail = {
+              empty: '请填写平台地址（形如 http://主机:端口）',
+              protocol: '只支持 http:// 或 https:// 开头的地址',
+              invalid: '平台地址格式不对（形如 http://主机:端口）'
+            }[norm.reason] || '平台地址不合法';
+            res.writeHead(400, { 'Content-Type': 'application/json; charset=utf-8' });
+            res.end(JSON.stringify({ ok: false, message: detail }));
+            return;
+          }
+          loginBase = norm.value;
+        }
+
+        try {
+          const cred = await login(cfg, username, password, loginBase);
+          saveCredentials(cred);
+
+          // 地址变了就写回配置，否则下一条业务命令仍会用旧地址（凭证却是新地址的，直接 401）
+          if (!envLocked && loginBase !== String(cfg.baseUrl || '').replace(/\/+$/, '')) {
+            saveConfig({ baseUrl: loginBase });
+          }
+
+          res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
+          res.end(JSON.stringify({ ok: true, nickName: cred.nickName, baseUrl: cred.baseUrl }));
+
+          // 给浏览器一点时间渲染成功页，再退出进程让 WorkBuddy 感知完成
+          setTimeout(() => finish(null, cred), 600);
+        } catch (err) {
+          res.writeHead(400, { 'Content-Type': 'application/json; charset=utf-8' });
+          res.end(JSON.stringify({ ok: false, message: err.message }));
+        }
+        return;
+      }
+
+      if (req.method === 'GET' && url.pathname === '/done') {
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(renderDonePage(''));
+        return;
+      }
+
+      res.writeHead(404, { 'Content-Type': 'text/plain; charset=utf-8' });
+      res.end('Not Found');
+    });
+
+    server.on('error', (err) => finish(err));
+
+    server.listen(0, '127.0.0.1', () => {
+      const { port } = server.address();
+      const loginUrl = `http://127.0.0.1:${port}/`;
+
+      // 输出格式必须严格：单独一行，前后有空白分隔，不能加引号或尖括号
+      process.stdout.write('\n登录地址：\n');
+      process.stdout.write(loginUrl + '\n');
+
+      // 走 stderr，避免干扰宿主对登录 URL 的提取
+      process.stderr.write(
+        `平台地址：${cfg.baseUrl || '（未配置）'}` +
+          (envLocked ? '（由环境变量锁定）' : cfg.baseUrl ? '（可在登录页修改）' : '（请在登录页填写）') +
+          '\n'
+      );
+
+      // 终端里直接运行时自行打开浏览器；被 WorkBuddy 调度时（无 TTY）交给宿主打开。
+      // 但非 TTY 也可能是「自己重定向到文件」，那种情况没人会打开，必须提示手动访问。
+      if (noBrowser) {
+        process.stderr.write(`已禁用自动打开浏览器，请手动访问：${loginUrl}\n`);
+      } else if (process.stdout.isTTY) {
+        tryOpenBrowser(loginUrl, false);
+      } else {
+        process.stderr.write(`非交互环境未自动打开浏览器，如未弹窗请手动访问：${loginUrl}\n`);
+      }
+    });
+  });
+}
+
+/**
+ * 纯终端交互登录，仅用于本地调试。WorkBuddy 环境下不会走这条路径（无 TTY）。
+ */
+async function authLoginInteractive(cfg) {
+  const readline = require('node:readline');
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+
+  const ask = (q) => new Promise((res) => rl.question(q, res));
+
+  try {
+    const username = (await ask('用户名: ')).trim();
+    const password = await ask('密码: ');
+    if (!username || !password) throw new Error('用户名和密码不能为空');
+
+    const cred = await login(cfg, username, password);
+    saveCredentials(cred);
+    return cred;
+  } finally {
+    rl.close();
+  }
+}
+
+module.exports = { authLogin, authLoginInteractive };

package/src/commands/groups.js

@@ -0,0 +1,109 @@
+'use strict';
+
+const { loadCredentials } = require('../config');
+const { authedRequest } = require('../api');
+
+const MAX_PAGE_SIZE = 10000;
+
+/** 取全部分组（pageSize 固定 10000，实际不会超过） */
+async function fetchGroups(cfg, cred) {
+  const res = await authedRequest(
+    cfg,
+    cred,
+    'GET',
+    `/sys/api/v1/apigroups?pageNum=1&pageSize=${MAX_PAGE_SIZE}`
+  );
+  const json = res.json;
+  if (!json || json.code !== 200) {
+    throw new Error(`查询分组失败：code=${json && json.code} msg=${(json && json.msg) || '未知错误'}`);
+  }
+  const data = json.data || {};
+  const records = Array.isArray(data.records) ? data.records : [];
+  return { total: typeof data.total === 'number' ? data.total : records.length, records };
+}
+
+function dispWidth(s) {
+  let w = 0;
+  for (const ch of String(s == null ? '' : s)) {
+    w += /[\u1100-\u115F\u2E80-\uA4CF\uAC00-\uD7A3\uF900-\uFAFF\uFE30-\uFE4F\uFF00-\uFF60\uFFE0-\uFFE6]/.test(ch)
+      ? 2
+      : 1;
+  }
+  return w;
+}
+
+function pad(s, n) {
+  const str = String(s == null ? '' : s);
+  const w = dispWidth(str);
+  return w >= n ? str : str + ' '.repeat(n - w);
+}
+
+/**
+ * 查询 API 分组列表（groupPrefix 即创建连接器时用的"分组 code"）
+ * GET /index/sys/api/v1/apigroups?pageNum=1&pageSize=10000
+ */
+async function commandGroups(cfg, argv) {
+  const args = argv.slice();
+  let keyword = '';
+  let asJson = false;
+
+  for (let i = 0; i < args.length; i += 1) {
+    const a = args[i];
+    if (a === '--name' || a === '-n') {
+      keyword = args[i + 1] || '';
+      i += 1;
+    } else if (a === '--json') {
+      asJson = true;
+    } else if (!a.startsWith('-')) {
+      keyword = a;
+    }
+  }
+
+  const cred = loadCredentials();
+  if (!cred || !cred.tokenValue) {
+    throw new Error('未登录或授权已失效，请先执行 auth login');
+  }
+
+  const { total, records } = await fetchGroups(cfg, cred);
+
+  const kw = keyword.trim().toLowerCase();
+  const matched = kw
+    ? records.filter(
+        (r) =>
+          String(r.groupPrefix || '').toLowerCase().includes(kw) ||
+          String(r.groupName || '').toLowerCase().includes(kw)
+      )
+    : records;
+
+  if (asJson) {
+    process.stdout.write(JSON.stringify({ total, matched: matched.length, records: matched }, null, 2) + '\n');
+    process.exitCode = 0;
+    return;
+  }
+
+  process.stdout.write(`全部 ${total} 个分组，匹配 ${matched.length} 个${keyword ? `（关键词 "${keyword}"）` : ''}\n\n`);
+  if (!matched.length) {
+    process.stdout.write('（无匹配结果）\n');
+    process.exitCode = 0;
+    return;
+  }
+
+  const header = ['#', 'groupPrefix', 'groupName', 'groupId', 'enabled'];
+  const rows = matched.map((r, i) => [
+    String(i + 1),
+    String(r.groupPrefix || ''),
+    String(r.groupName || ''),
+    String(r.groupId || ''),
+    String(r.enabled)
+  ]);
+  const widths = header.map((h, ci) => Math.max(dispWidth(h), ...rows.map((row) => dispWidth(row[ci]))));
+
+  process.stdout.write(header.map((h, i) => pad(h, widths[i])).join('  ') + '\n');
+  process.stdout.write(widths.map((w) => '-'.repeat(w)).join('  ') + '\n');
+  for (const row of rows) {
+    process.stdout.write(row.map((c, i) => pad(c, widths[i])).join('  ') + '\n');
+  }
+  process.exitCode = 0;
+}
+
+module.exports = { commandGroups, fetchGroups, MAX_PAGE_SIZE };