@numa-tech/numa 1.14.31 → 1.14.33

package/dist/wecom/commands.js

@@ -0,0 +1,153 @@
+import { open } from "node:fs/promises";
+import process from "node:process";
+import { loadAppConfig } from "../app-config.js";
+import { loadConfig } from "../config.js";
+import { WecomClient } from "./client.js";
+import { WecomError } from "./errors.js";
+import { RequestIdSchema, SendMessageSchema } from "./schemas.js";
+export async function readMessageContent(file, inline, stdin) {
+    if ((file == null) === (inline == null))
+        throw new WecomError("Choose exactly one of --text-file <path|-> or --text <content>.", "WECOM_INPUT_INVALID");
+    if (inline != null)
+        return inline;
+    try {
+        const chunks = [];
+        let bytes = 0;
+        async function collect(source) {
+            for await (const chunk of source) {
+                const buffer = Buffer.from(chunk);
+                bytes += buffer.length;
+                if (bytes > 2048)
+                    throw new WecomError("Message exceeds 2048 UTF-8 bytes.", "WECOM_INPUT_INVALID");
+                chunks.push(buffer);
+            }
+            return new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks));
+        }
+        if (file === "-")
+            return await collect(stdin);
+        const handle = await open(file, "r");
+        try {
+            const stat = await handle.stat();
+            if (!stat.isFile() || stat.size > 2048)
+                throw new WecomError("Message file must be a regular UTF-8 file of at most 2048 bytes.", "WECOM_INPUT_INVALID");
+            return await collect(handle.createReadStream({ autoClose: false }));
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error instanceof WecomError)
+            throw error;
+        throw new WecomError("Could not read message input as UTF-8. Check the input path and permissions.", "WECOM_INPUT_INVALID");
+    }
+}
+function snake(value) {
+    if (Array.isArray(value))
+        return value.map(snake);
+    if (value && typeof value === "object")
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [key.replace(/([a-z0-9])([A-Z])/gu, "$1_$2").toLowerCase(), snake(item)]));
+    return value;
+}
+async function output(command, value, text) {
+    const app = await loadAppConfig();
+    process.stdout.write(command.optsWithGlobals().json || app.output === "json"
+        ? `${JSON.stringify(snake(value), null, 2)}\n` : `${text}\n`);
+}
+function sendExitCode(status) {
+    if (status === "ACCEPTED")
+        return 0;
+    if (status === "PARTIAL")
+        return 7;
+    if (status === "UNKNOWN" || status === "SENDING")
+        return 6;
+    return 1;
+}
+function statusLine(message) {
+    const description = message.status === "ACCEPTED" ? " (accepted by WeCom API; delivery/read is not confirmed)"
+        : ["UNKNOWN", "SENDING"].includes(message.status) ? " (do not resend; query status with the same request ID)" : "";
+    return `${message.id}\t${message.requestId}\t${message.status}${description}`;
+}
+export function registerWecomCommands(program, dependencies = {}) {
+    const client = () => dependencies.clientFactory?.() ?? new WecomClient(loadConfig());
+    const wecom = program.command("wecom").description("通过 DevOps 平台向企业微信成员发送消息（密钥仅保存在服务端）");
+    wecom.command("capabilities").description("查看通道配置状态、消息类型和配额")
+        .action(async (_options, command) => {
+        const result = await client().capabilities();
+        await output(command, result, `Enabled: ${result.enabled}; configured: ${result.configured}; types: ${result.messageTypes.join(", ")}; recipients: ${result.maxRecipients}; text/markdown bytes: ${result.maxTextBytes}/${result.maxMarkdownBytes}`);
+    });
+    wecom.command("recipients").description("按姓名或 userid 查询候选成员；查看结果后明确选择 userid")
+        .requiredOption("--query <text>", "至少 2 个字符")
+        .option("--limit <number>", "最多返回 1-50 个成员", "20")
+        .action(async (options, command) => {
+        const result = await client().recipients(options.query, Number(options.limit));
+        await output(command, result, (result.items.map(item => `${item.userId}\t${item.name}\t${item.departmentIds.join(",")}`).join("\n") || "No matching recipients.") + (result.hasMore ? "\nMore matches exist; narrow your query before choosing a userid." : ""));
+    });
+    wecom.command("send").description("发送 text/markdown；先核对 userid 和正文；结果未知时仅查询状态")
+        .option("--to <userids...>", "已确认的企微 userid（空格分隔）；不支持姓名或 @all")
+        .option("--platform-user <subjects...>", "已映射的 Keycloak 用户 subject；与 --to 互斥")
+        .requiredOption("--request-id <id>", "稳定幂等键，8-128 位字母/数字/._:-；同一请求保持不变")
+        .option("--type <type>", "text 或 markdown", "text")
+        .option("--text-file <path|->", "从 UTF-8 文件或 - 标准输入读取正文（推荐）")
+        .option("--text <content>", "直接正文；可能留在 shell 历史中")
+        .option("--safe", "保密消息，仅 text 支持")
+        .option("--yes", "已确认收件人和正文，立即发送")
+        .action(async (options, command) => {
+        if (!options.yes)
+            throw new WecomError("Sending requires --yes after reviewing the recipients and content.", "WECOM_CONFIRMATION_REQUIRED");
+        if (!RequestIdSchema.safeParse(options.requestId).success)
+            throw new WecomError("Invalid request ID; use 8-128 ASCII letters, digits or ._:-.", "WECOM_INPUT_INVALID");
+        const content = await readMessageContent(options.textFile, options.text, dependencies.stdin ?? process.stdin);
+        const parsed = SendMessageSchema.safeParse({ ...(options.to ? { recipientUserIds: options.to } : {}), ...(options.platformUser ? { platformUserIds: options.platformUser } : {}), messageType: options.type, content, safe: Boolean(options.safe) });
+        if (!parsed.success)
+            throw new WecomError("Invalid message. Use explicit unique userids, text/markdown, at most 2048 UTF-8 bytes; --safe supports text only.", "WECOM_INPUT_INVALID");
+        process.stderr.write(`WeCom request ID: ${options.requestId}\n`);
+        const result = await client().send(parsed.data, options.requestId);
+        await output(command, result, statusLine(result));
+        process.exitCode = sendExitCode(result.status);
+    }).addHelpText("after", "\nExamples:\n  numa wecom recipients --query 张三 --json\n  numa wecom send --to zhangsan --request-id release-20260905-01 --text-file ./message.txt --yes --json\n  numa wecom send --to zhangsan --request-id release-20260905-02 --type markdown --text-file - --yes\n");
+    const mappings = wecom.command("mappings").description("管理 Keycloak 与企微成员映射（服务端要求 ops-admin）");
+    mappings.command("list").description("查询映射、冲突候选和人工解绑记录")
+        .option("--query <text>", "按平台用户名、subject 或企微 userid 筛选")
+        .option("--limit <number>", "返回上限", "100")
+        .action(async (options, command) => {
+        const result = await client().mappings(options.query, Number(options.limit));
+        await output(command, result, result.items.map(item => `${item.subject}\t${item.username ?? "-"}\t${item.wecomUserId ?? "-"}\t${item.status}\t${item.source}`).join("\n") + (result.hasMore ? "\nMore mappings exist; narrow your query." : "") || "No mappings found.");
+    });
+    mappings.command("sync").description("默认预览按唯一邮箱批量匹配；冲突需人工处理，不覆盖人工映射")
+        .option("--apply", "重新计算并应用可唯一匹配的映射")
+        .option("--yes", "确认应用映射变更")
+        .action(async (options, command) => {
+        if (options.apply && !options.yes)
+            throw new WecomError("Applying mappings requires --yes after reviewing the sync preview.", "WECOM_CONFIRMATION_REQUIRED");
+        const result = await client().syncMappings(!options.apply);
+        await output(command, result, `${result.dryRun ? "Preview" : "Applied"}: ${result.mappedCount} mapped; ${result.reviewCount} need review.\n` + result.items.map(item => `${item.subject}\t${item.wecomUserId ?? "-"}\t${item.status}\t${item.candidateUserIds.join(",")}`).join("\n"));
+    });
+    mappings.command("bind <subject>").description("手动绑定一个明确的 Keycloak subject 与企微 userid")
+        .requiredOption("--wecom-user <userid>", "已确认的企微 userid")
+        .option("--yes", "确认人工绑定")
+        .action(async (subject, options, command) => {
+        if (!options.yes)
+            throw new WecomError("Manual binding requires --yes after reviewing both identities.", "WECOM_CONFIRMATION_REQUIRED");
+        const result = await client().bindMapping(subject, options.wecomUser);
+        await output(command, result, `${result.subject}\t${result.wecomUserId ?? "-"}\t${result.status}\t${result.source}`);
+    });
+    mappings.command("unbind <subject>").description("人工解绑并保留禁止邮箱自动重建的记录")
+        .option("--yes", "确认人工解绑")
+        .action(async (subject, options, command) => {
+        if (!options.yes)
+            throw new WecomError("Manual unbinding requires --yes after reviewing the mapping.", "WECOM_CONFIRMATION_REQUIRED");
+        const result = await client().unbindMapping(subject);
+        await output(command, result, `${result.subject}\t${result.status}\t${result.source}`);
+    });
+    wecom.command("status [message-id]").description("只读查询发送账本；ACCEPTED 仅表示企微 API 接收")
+        .option("--request-id <id>", "使用原始幂等键恢复 POST 响应丢失的请求")
+        .action(async (id, options, command) => {
+        if (Boolean(id) === Boolean(options.requestId))
+            throw new WecomError("Choose a message ID or --request-id, exactly one.", "WECOM_INPUT_INVALID");
+        const api = client();
+        const result = options.requestId ? await api.statusByRequest(options.requestId) : await api.status(id);
+        await output(command, result, statusLine(result));
+    });
+}
+//# sourceMappingURL=commands.js.map

package/dist/wecom/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/wecom/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAgB,MAAM,cAAc,CAAC;AAMhF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAwB,EAAE,MAA0B,EAAE,KAAyC;IACtI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iEAAiE,EAAE,qBAAqB,CAAC,CAAC;IACxJ,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,UAAU,OAAO,CAAC,MAA0C;YAC/D,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;gBACvB,IAAI,KAAK,GAAG,IAAI;oBAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,EAAE,qBAAqB,CAAC,CAAC;gBACnG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAK,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,UAAU,CAAC,kEAAkE,EAAE,qBAAqB,CAAC,CAAC;YACxJ,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU;YAAE,MAAM,KAAK,CAAC;QAC7C,MAAM,IAAI,UAAU,CAAC,8EAA8E,EAAE,qBAAqB,CAAC,CAAC;IAC9H,CAAC;AACH,CAAC;AACD,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxL,OAAO,KAAK,CAAC;AACf,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,OAAgB,EAAE,KAAc,EAAE,IAAY;IAClE,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAsB,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;QAC9F,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AAClE,CAAC;AACD,SAAS,YAAY,CAAC,MAAyB;IAC7C,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,UAAU,CAAC,OAAgB;IAClC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,0DAA0D;QAC5G,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,EAAE,CAAC;IACrH,OAAO,GAAG,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;AAChF,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,YAAY,GAA6B,EAAE;IACjG,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,IAAI,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,oCAAoC,CAAC,CAAC;IACzF,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC;SAC1D,MAAM,CAAC,KAAK,EAAE,QAAiB,EAAE,OAAgB,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,MAAM,CAAC,OAAO,iBAAiB,MAAM,CAAC,UAAU,YAAY,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,aAAa,0BAA0B,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvP,CAAC,CAAC,CAAC;IACL,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC;SAC3E,cAAc,CAAC,gBAAgB,EAAE,UAAU,CAAC;SAC5C,MAAM,CAAC,kBAAkB,EAAE,eAAe,EAAE,IAAI,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,OAAyC,EAAE,OAAgB,EAAE,EAAE;QAC5E,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/E,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnQ,CAAC,CAAC,CAAC;IACL,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,4CAA4C,CAAC;SAC5E,MAAM,CAAC,mBAAmB,EAAE,iCAAiC,CAAC;SAC9D,MAAM,CAAC,+BAA+B,EAAE,oCAAoC,CAAC;SAC7E,cAAc,CAAC,mBAAmB,EAAE,kCAAkC,CAAC;SACvE,MAAM,CAAC,eAAe,EAAE,iBAAiB,EAAE,MAAM,CAAC;SAClD,MAAM,CAAC,sBAAsB,EAAE,4BAA4B,CAAC;SAC5D,MAAM,CAAC,kBAAkB,EAAE,qBAAqB,CAAC;SACjD,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;SAClC,MAAM,CAAC,OAAO,EAAE,gBAAgB,CAAC;SACjC,MAAM,CAAC,KAAK,EAAE,OAAqJ,EAAE,OAAgB,EAAE,EAAE;QACxL,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,oEAAoE,EAAE,6BAA6B,CAAC,CAAC;QAC5I,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,8DAA8D,EAAE,qBAAqB,CAAC,CAAC;QACvK,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrP,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,mHAAmH,EAAE,qBAAqB,CAAC,CAAC;QACtL,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,yQAAyQ,CAAC,CAAC;IACrS,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,sCAAsC,CAAC,CAAC;IAC/F,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC;SACrD,MAAM,CAAC,gBAAgB,EAAE,8BAA8B,CAAC;SACxD,MAAM,CAAC,kBAAkB,EAAE,MAAM,EAAE,KAAK,CAAC;SACzC,MAAM,CAAC,KAAK,EAAE,OAA0C,EAAE,OAAgB,EAAE,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,WAAW,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,oBAAoB,CAAC,CAAC;IAC3Q,CAAC,CAAC,CAAC;IACL,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC;SAClE,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;SACpC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC;SAC3B,MAAM,CAAC,KAAK,EAAE,OAA2C,EAAE,OAAgB,EAAE,EAAE;QAC9E,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,oEAAoE,EAAE,6BAA6B,CAAC,CAAC;QAC7J,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,WAAW,YAAY,MAAM,CAAC,WAAW,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,WAAW,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzR,CAAC,CAAC,CAAC;IACL,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,uCAAuC,CAAC;SACpF,cAAc,CAAC,uBAAuB,EAAE,eAAe,CAAC;SACxD,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;SACzB,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,OAA6C,EAAE,OAAgB,EAAE,EAAE;QACjG,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,gEAAgE,EAAE,6BAA6B,CAAC,CAAC;QACxI,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,KAAK,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IACL,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC;SACnE,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;SACzB,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,OAA0B,EAAE,OAAgB,EAAE,EAAE;QAC9E,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,8DAA8D,EAAE,6BAA6B,CAAC,CAAC;QACtI,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IACL,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,WAAW,CAAC,gCAAgC,CAAC;SAC/E,MAAM,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;SACrD,MAAM,CAAC,KAAK,EAAE,EAAsB,EAAE,OAA+B,EAAE,OAAgB,EAAE,EAAE;QAC1F,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,mDAAmD,EAAE,qBAAqB,CAAC,CAAC;QACjJ,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,EAAG,CAAC,CAAC;QACxG,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/wecom/errors.d.ts

@@ -0,0 +1,7 @@
+export declare class WecomError extends Error {
+    readonly code: string;
+    readonly status?: number | undefined;
+    readonly requestId?: string | undefined;
+    constructor(message: string, code: string, status?: number | undefined, requestId?: string | undefined);
+}
+export declare function wecomExitCode(error: WecomError): number;

package/dist/wecom/errors.js

@@ -0,0 +1,27 @@
+// Keep provider error bodies and message contents out of CLI/MCP diagnostics.
+export class WecomError extends Error {
+    code;
+    status;
+    requestId;
+    constructor(message, code, status, requestId) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.requestId = requestId;
+        this.name = "WecomError";
+    }
+}
+export function wecomExitCode(error) {
+    if (error.status === 401)
+        return 3;
+    if (error.status === 403)
+        return 4;
+    if (error.status === 409)
+        return 5;
+    if ((error.status ?? 0) >= 500 || /UNKNOWN|NETWORK|INVALID_RESPONSE/u.test(error.code))
+        return 6;
+    if (/INPUT|CONFIRMATION/u.test(error.code))
+        return 2;
+    return 1;
+}
+//# sourceMappingURL=errors.js.map

package/dist/wecom/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/wecom/errors.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,OAAO,UAAW,SAAQ,KAAK;IACU,IAAI;IAA0B,MAAM;IAA2B,SAAS;IAArH,YAAY,OAAe,EAAkB,IAAY,EAAkB,MAAe,EAAkB,SAAkB;QAC5H,KAAK,CAAC,OAAO,CAAC,CAAC;oBAD4B,IAAI;sBAA0B,MAAM;yBAA2B,SAAS;QAEnH,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AACD,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,GAAG,IAAI,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACjG,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/wecom/schemas.d.ts

@@ -0,0 +1,109 @@
+import { z } from "zod";
+export declare const RequestIdSchema: z.ZodString;
+export declare const UserIdSchema: z.ZodString;
+export declare const PlatformUserIdSchema: z.ZodString;
+export declare const MessageTypeSchema: z.ZodEnum<{
+    markdown: "markdown";
+    text: "text";
+}>;
+export declare const RecipientQuerySchema: z.ZodString;
+export declare const SendMessageSchema: z.ZodObject<{
+    recipientUserIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    platformUserIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    messageType: z.ZodEnum<{
+        markdown: "markdown";
+        text: "text";
+    }>;
+    content: z.ZodString;
+    safe: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const CapabilitiesSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    configured: z.ZodBoolean;
+    messageTypes: z.ZodArray<z.ZodEnum<{
+        markdown: "markdown";
+        text: "text";
+    }>>;
+    maxRecipients: z.ZodNumber;
+    maxTextBytes: z.ZodNumber;
+    maxMarkdownBytes: z.ZodNumber;
+}, z.core.$strip>;
+export declare const RecipientsSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        userId: z.ZodString;
+        name: z.ZodString;
+        departmentIds: z.ZodArray<z.ZodNumber>;
+    }, z.core.$strip>>;
+    hasMore: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const MessageSchema: z.ZodObject<{
+    id: z.ZodPipe<z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>, z.ZodTransform<string, string | number>>;
+    requestId: z.ZodString;
+    status: z.ZodEnum<{
+        ACCEPTED: "ACCEPTED";
+        FAILED: "FAILED";
+        PARTIAL: "PARTIAL";
+        SENDING: "SENDING";
+        UNKNOWN: "UNKNOWN";
+    }>;
+    recipientUserIds: z.ZodArray<z.ZodString>;
+    messageType: z.ZodEnum<{
+        markdown: "markdown";
+        text: "text";
+    }>;
+    safe: z.ZodBoolean;
+    providerMessageId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    invalidUserIds: z.ZodArray<z.ZodString>;
+    errorCode: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strip>;
+export type SendMessageInput = z.input<typeof SendMessageSchema>;
+export type Message = z.infer<typeof MessageSchema>;
+export declare const MappingSchema: z.ZodObject<{
+    subject: z.ZodString;
+    username: z.ZodNullable<z.ZodString>;
+    status: z.ZodString;
+    source: z.ZodEnum<{
+        AUTO_EMAIL: "AUTO_EMAIL";
+        MANUAL: "MANUAL";
+    }>;
+    wecomUserId: z.ZodNullable<z.ZodString>;
+    candidateUserIds: z.ZodArray<z.ZodString>;
+    maskedEmail: z.ZodNullable<z.ZodString>;
+    updatedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export declare const MappingListSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        subject: z.ZodString;
+        username: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        source: z.ZodEnum<{
+            AUTO_EMAIL: "AUTO_EMAIL";
+            MANUAL: "MANUAL";
+        }>;
+        wecomUserId: z.ZodNullable<z.ZodString>;
+        candidateUserIds: z.ZodArray<z.ZodString>;
+        maskedEmail: z.ZodNullable<z.ZodString>;
+        updatedAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    hasMore: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const MappingSyncSchema: z.ZodObject<{
+    dryRun: z.ZodBoolean;
+    items: z.ZodArray<z.ZodObject<{
+        subject: z.ZodString;
+        username: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        source: z.ZodEnum<{
+            AUTO_EMAIL: "AUTO_EMAIL";
+            MANUAL: "MANUAL";
+        }>;
+        wecomUserId: z.ZodNullable<z.ZodString>;
+        candidateUserIds: z.ZodArray<z.ZodString>;
+        maskedEmail: z.ZodNullable<z.ZodString>;
+        updatedAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    mappedCount: z.ZodNumber;
+    reviewCount: z.ZodNumber;
+}, z.core.$strip>;

package/dist/wecom/schemas.js

@@ -0,0 +1,49 @@
+import { z } from "zod";
+export const RequestIdSchema = z.string().regex(/^[A-Za-z0-9._:-]{8,128}$/u);
+export const UserIdSchema = z.string().trim().min(1).max(64).regex(/^[A-Za-z0-9][A-Za-z0-9_@.-]*$/u).refine(value => value.toLowerCase() !== "@all", "Broadcast is not supported");
+// Keycloak subjects are opaque, including federated IDs and Unicode; never normalize them.
+export const PlatformUserIdSchema = z.string().min(1).max(256)
+    .refine(value => value.trim().length > 0 && value === value.trim() && !/[\u0000-\u001f\u007f-\u009f]/u.test(value), "Subject must be nonblank, unpadded and contain no control characters");
+export const MessageTypeSchema = z.enum(["text", "markdown"]);
+export const RecipientQuerySchema = z.string().trim().min(2).max(100);
+export const SendMessageSchema = z.object({
+    recipientUserIds: z.array(UserIdSchema).min(1).max(100).refine(ids => new Set(ids).size === ids.length, "Duplicate recipients are not allowed").optional(),
+    platformUserIds: z.array(PlatformUserIdSchema).min(1).max(100).refine(ids => new Set(ids).size === ids.length, "Duplicate recipients are not allowed").optional(),
+    messageType: MessageTypeSchema,
+    content: z.string().min(1).refine(value => value.trim().length > 0, "Content must not be blank"),
+    safe: z.boolean().default(false)
+}).strict().superRefine((value, ctx) => {
+    if (Boolean(value.recipientUserIds?.length) === Boolean(value.platformUserIds?.length)) {
+        ctx.addIssue({ code: "custom", path: ["recipientUserIds"], message: "Choose exactly one recipient identifier type" });
+    }
+    if (value.messageType === "markdown" && value.safe) {
+        ctx.addIssue({ code: "custom", path: ["safe"], message: "Safe mode is only supported for text" });
+    }
+    const maximum = 2048;
+    if (Buffer.byteLength(value.content, "utf8") > maximum) {
+        ctx.addIssue({ code: "custom", path: ["content"], message: `Content exceeds ${maximum} UTF-8 bytes` });
+    }
+});
+export const CapabilitiesSchema = z.object({
+    enabled: z.boolean(), configured: z.boolean(), messageTypes: z.array(MessageTypeSchema),
+    maxRecipients: z.number().int().positive(), maxTextBytes: z.number().int().positive(), maxMarkdownBytes: z.number().int().positive()
+});
+export const RecipientsSchema = z.object({
+    items: z.array(z.object({ userId: UserIdSchema, name: z.string(), departmentIds: z.array(z.number().int()) })),
+    hasMore: z.boolean()
+});
+export const MessageSchema = z.object({
+    id: z.union([z.string().min(1), z.number().int().positive()]).transform(String),
+    requestId: RequestIdSchema,
+    status: z.enum(["SENDING", "ACCEPTED", "PARTIAL", "FAILED", "UNKNOWN"]),
+    recipientUserIds: z.array(UserIdSchema), messageType: MessageTypeSchema, safe: z.boolean(),
+    providerMessageId: z.string().nullable().optional(), invalidUserIds: z.array(z.string()),
+    errorCode: z.string().nullable().optional(), createdAt: z.string(), updatedAt: z.string()
+});
+export const MappingSchema = z.object({
+    subject: PlatformUserIdSchema, username: z.string().nullable(), status: z.string().min(1), source: z.enum(["AUTO_EMAIL", "MANUAL"]),
+    wecomUserId: UserIdSchema.nullable(), candidateUserIds: z.array(UserIdSchema), maskedEmail: z.string().nullable(), updatedAt: z.string().nullable()
+});
+export const MappingListSchema = z.object({ items: z.array(MappingSchema), hasMore: z.boolean() });
+export const MappingSyncSchema = z.object({ dryRun: z.boolean(), items: z.array(MappingSchema), mappedCount: z.number().int().nonnegative(), reviewCount: z.number().int().nonnegative() });
+//# sourceMappingURL=schemas.js.map

package/dist/wecom/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/wecom/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,4BAA4B,CAAC,CAAC;AACnL,2FAA2F;AAC3F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KAC3D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,sEAAsE,CAAC,CAAC;AAC9L,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,sCAAsC,CAAC,CAAC,QAAQ,EAAE;IAC1J,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,sCAAsC,CAAC,CAAC,QAAQ,EAAE;IACjK,WAAW,EAAE,iBAAiB;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,2BAA2B,CAAC;IAChG,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IACrC,IAAI,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACnD,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC;IACrB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,mBAAmB,OAAO,cAAc,EAAE,CAAC,CAAC;IACzG,CAAC;AACH,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACvF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACrI,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9G,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;IAC/E,SAAS,EAAE,eAAe;IAC1B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACvE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1F,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACxF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1F,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACnI,WAAW,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpJ,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACnG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC"}

package/dist/wecom/tools.d.ts

@@ -0,0 +1,6 @@
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { WecomClient } from "./client.js";
+export interface WecomToolDependencies {
+    clientFactory?: () => WecomClient;
+}
+export declare function registerWecomTools(server: McpServer, dependencies?: WecomToolDependencies): void;

package/dist/wecom/tools.js

@@ -0,0 +1,65 @@
+import { z } from "zod";
+import { loadConfig } from "../config.js";
+import { WecomClient } from "./client.js";
+import { WecomError } from "./errors.js";
+import { RecipientQuerySchema, RequestIdSchema, MessageTypeSchema, UserIdSchema, PlatformUserIdSchema } from "./schemas.js";
+export function registerWecomTools(server, dependencies = {}) {
+    const client = () => dependencies.clientFactory?.() ?? new WecomClient(loadConfig());
+    async function result(operation, isSend = false) {
+        try {
+            const data = await operation();
+            return { ...(isSend ? { isError: data.status !== "ACCEPTED" } : {}), content: [{ type: "text", text: JSON.stringify(data) }], structuredContent: data };
+        }
+        catch (error) {
+            const safe = error instanceof WecomError ? { code: error.code, message: error.message, requestId: error.requestId }
+                : { code: "WECOM_REQUEST_FAILED", message: "WeCom request failed. Check Numa authentication and platform configuration." };
+            return { isError: true, content: [{ type: "text", text: JSON.stringify(safe) }], structuredContent: { ok: false, ...safe } };
+        }
+    }
+    const readAnnotations = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true };
+    server.registerTool("numa_wecom_capabilities", {
+        description: "Read the DevOps platform WeCom channel availability and limits; never returns provider credentials.",
+        inputSchema: {}, annotations: readAnnotations
+    }, async () => result(() => client().capabilities()));
+    server.registerTool("numa_wecom_recipients", {
+        description: "Search corporate members by name or userid. Return candidates for explicit recipient selection; never choose among ambiguous names automatically.",
+        inputSchema: { query: RecipientQuerySchema, limit: z.number().int().min(1).max(50).default(20) }, annotations: readAnnotations
+    }, async ({ query, limit }) => result(() => client().recipients(query, limit)));
+    server.registerTool("numa_wecom_send", {
+        description: "SIDE EFFECT: immediately sends a message to enterprise WeCom members through DevOps. Use only after the user authorizes the exact recipients and content. Use exactly one of previously resolved explicit recipient_user_ids or mapped Keycloak subjects in platform_user_ids. Keep request_id stable for the same request. On UNKNOWN, network failure, or SENDING, call numa_wecom_status with request_id; never generate a new key to retry. ACCEPTED means API acceptance, not delivery/read confirmation.",
+        inputSchema: { recipient_user_ids: z.array(UserIdSchema).min(1).max(100).optional(), platform_user_ids: z.array(PlatformUserIdSchema).min(1).max(100).optional(), message_type: MessageTypeSchema.default("text"), content: z.string().min(1).max(2048), safe: z.boolean().default(false), request_id: RequestIdSchema, confirmed: z.literal(true).describe("Caller confirms user authorized these recipients and this exact content") },
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true }
+    }, async ({ recipient_user_ids, platform_user_ids, message_type, content, safe, request_id }) => result(() => client().send({ ...(recipient_user_ids ? { recipientUserIds: recipient_user_ids } : {}), ...(platform_user_ids ? { platformUserIds: platform_user_ids } : {}), messageType: message_type, content, safe }, request_id), true));
+    server.registerTool("numa_wecom_mappings_list", {
+        description: "Ops-admin: read Keycloak-to-WeCom mappings, conflicts and manual unbinding records. Email addresses are masked by the platform.",
+        inputSchema: { query: z.string().max(256).optional(), limit: z.number().int().min(1).max(1000).default(100) }, annotations: readAnnotations
+    }, async ({ query, limit }) => result(() => client().mappings(query, limit)));
+    server.registerTool("numa_wecom_mappings_sync", {
+        description: "Ops-admin: preview matching users by unique normalized email by default. apply=true writes mappings and requires confirmed=true after review. Apply recomputes both directories, so the preview can change. Never overwrites manual mappings or guesses conflicts.",
+        inputSchema: { apply: z.boolean().default(false), confirmed: z.boolean().default(false) },
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true }
+    }, async ({ apply, confirmed }) => result(async () => {
+        if (apply && !confirmed)
+            throw new WecomError("Applying mapping sync requires confirmed=true after reviewing the preview.", "WECOM_CONFIRMATION_REQUIRED");
+        return client().syncMappings(!apply);
+    }));
+    server.registerTool("numa_wecom_mappings_bind", {
+        description: "Ops-admin: manually bind a reviewed Keycloak subject to an explicit WeCom userid. Changes future message routing. Requires user authorization for this mapping.",
+        inputSchema: { subject: PlatformUserIdSchema, wecom_user_id: UserIdSchema, confirmed: z.literal(true) },
+        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true }
+    }, async ({ subject, wecom_user_id }) => result(() => client().bindMapping(subject, wecom_user_id)));
+    server.registerTool("numa_wecom_mappings_unbind", {
+        description: "Ops-admin: remove a reviewed mapping and retain a MANUAL UNMAPPED record that prevents email sync from automatically recreating it. Requires user authorization.",
+        inputSchema: { subject: PlatformUserIdSchema, confirmed: z.literal(true) },
+        annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true }
+    }, async ({ subject }) => result(() => client().unbindMapping(subject)));
+    server.registerTool("numa_wecom_status", {
+        description: "Read the message ledger using exactly one of message_id or request_id. Use request_id to recover a lost send response. UNKNOWN/SENDING do not authorize resend.",
+        inputSchema: { message_id: z.string().min(1).optional(), request_id: RequestIdSchema.optional() }, annotations: readAnnotations
+    }, async ({ message_id, request_id }) => result(async () => {
+        if (Boolean(message_id) === Boolean(request_id))
+            throw new WecomError("Supply exactly one of message_id or request_id.", "WECOM_INPUT_INVALID");
+        return request_id ? client().statusByRequest(request_id) : client().status(message_id);
+    }));
+}
+//# sourceMappingURL=tools.js.map

package/dist/wecom/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/wecom/tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAG5H,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,YAAY,GAA0B,EAAE;IAC5F,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,EAAE,IAAI,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IACrF,KAAK,UAAU,MAAM,CAAC,SAAiC,EAAE,MAAM,GAAG,KAAK;QACrE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC;YAC/B,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAG,IAA4B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAA+B,EAAE,CAAC;QACvN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;gBACjH,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,6EAA6E,EAAE,CAAC;YAC7H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QACxI,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAClH,MAAM,CAAC,YAAY,CAAC,yBAAyB,EAAE;QAC7C,WAAW,EAAE,qGAAqG;QAClH,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,eAAe;KAC9C,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,CAAC,YAAY,CAAC,uBAAuB,EAAE;QAC3C,WAAW,EAAE,mJAAmJ;QAChK,WAAW,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,eAAe;KAC/H,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,YAAY,CAAC,iBAAiB,EAAE;QACrC,WAAW,EAAE,gfAAgf;QAC7f,WAAW,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,yEAAyE,CAAC,EAAE;QACxa,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;KACxG,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7U,MAAM,CAAC,YAAY,CAAC,0BAA0B,EAAE;QAC9C,WAAW,EAAE,iIAAiI;QAC9I,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,EAAE,eAAe;KAC5I,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,CAAC,YAAY,CAAC,0BAA0B,EAAE;QAC9C,WAAW,EAAE,oQAAoQ;QACjR,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACzF,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;KACxG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QACnD,IAAI,KAAK,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,4EAA4E,EAAE,6BAA6B,CAAC,CAAC;QAC3J,OAAO,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,CAAC,YAAY,CAAC,0BAA0B,EAAE;QAC9C,WAAW,EAAE,iKAAiK;QAC9K,WAAW,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACvG,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;KACxG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IACrG,MAAM,CAAC,YAAY,CAAC,4BAA4B,EAAE;QAChD,WAAW,EAAE,kKAAkK;QAC/K,WAAW,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC1E,WAAW,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;KACvG,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,CAAC,YAAY,CAAC,mBAAmB,EAAE;QACvC,WAAW,EAAE,iKAAiK;QAC9K,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,eAAe;KAChI,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;QACzD,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iDAAiD,EAAE,qBAAqB,CAAC,CAAC;QAChJ,OAAO,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,UAAW,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC,CAAC;AACN,CAAC"}

package/docs/wecom-messaging.md

@@ -0,0 +1,81 @@
+# Enterprise WeCom messaging through Numa
+
+Numa calls DevOps platform APIs using its existing Keycloak identity. The WeCom corporate secret, token cache and directory access stay on the server. Do not copy the old `wecom-send-message` skill's credentials into Numa config, environment variables, command arguments or MCP input.
+
+## Identity and availability
+
+For PRD, confirm the intended environment and inspect the safe configuration/authentication commands before calling protected APIs:
+
+```sh
+numa config --show --json
+numa auth status --json
+numa wecom capabilities --json
+```
+
+PRD uses issuer `https://kc.mcisaas.com/auth/realms/numa-realm`, CLI client `mcp-client`, application role client `mci-devops-platform`, and API base `https://apps-gw-prd.mcisaas.com/mci-devops-platform`. The browser's `web-client` session is separate from Numa's login. Gateway and backend enforce canonical application Client Roles; the CLI catalog does not make the authorization decision.
+
+## Map enterprise users by email
+
+Administrators with `mci-devops-platform-ops-admin` can preview matching Keycloak users and visible WeCom members by unique normalized email. Conflicts and missing email need review; automatic sync preserves manual mappings and manual unbinding records.
+
+```sh
+numa wecom mappings sync --json
+numa wecom mappings sync --apply --yes --json
+numa wecom mappings list --query zhangsan --json
+numa wecom mappings bind <keycloak-subject> --wecom-user zhangsan --yes --json
+numa wecom mappings unbind <keycloak-subject> --yes --json
+```
+
+`sync` defaults to `dryRun:true`. Apply rereads both directories and recomputes the mapping, so changes made after preview can affect its result. Review `status`, `candidate_user_ids` and masked email in the preview. Unbind retains a `MANUAL/UNMAPPED` record to prevent the next automatic sync from recreating the association. Manual binding validates the platform subject and explicit WeCom userid on the server. Resolve and review both identities before changing a mapping.
+
+## Choose recipients and send
+
+Search by name or userid (2–100 characters). Review candidates and choose exact userids; matching a name does not authorize sending to all matches. The recipient search returns at most 50 items; `has_more:true` means the query should be narrowed.
+
+```sh
+numa wecom recipients --query 张三 --json
+numa wecom send --to zhangsan --request-id release-20260905-01 --text-file ./message.txt --yes --json
+numa wecom send --platform-user <keycloak-subject> --request-id release-20260905-02 --type markdown --text-file ./message.md --yes --json
+```
+
+Use either `--to <userids...>` or `--platform-user <subjects...>`, never both. Platform user IDs are Keycloak subjects whose mappings must be active and whose Keycloak accounts must be enabled; the backend resolves them to actual WeCom userids. `@all`, duplicate recipients and department/tag broadcasts are not supported. The platform limit is 100 recipients; text and markdown each permit at most 2048 UTF-8 bytes. `--safe` is available for text only.
+
+`--text-file -` reads UTF-8 content from standard input. Files and standard input avoid placing message content in shell history. `--text` is supported for short non-sensitive content but can be recorded in history. Neither CLI results nor error messages echo the message content.
+
+`--yes` confirms the reviewed recipients and content and immediately sends. The request ID is mandatory, consists of 8–128 ASCII letters, digits or `._:-`, and is sent as `Idempotency-Key`. Numa prints it to stderr before sending; JSON stdout remains machine-readable. Use a stable ID for one logical request, and keep both recipients and content unchanged when recovering it.
+
+```sh
+numa wecom status --request-id release-20260905-01 --json
+numa wecom status <message-id> --json
+```
+
+Send writes the complete result before exiting: `ACCEPTED` exits 0, `PARTIAL` exits 7, `FAILED` exits 1, and `UNKNOWN`/`SENDING` exit 6. A successful status lookup exits 0 regardless of the recorded send status. MCP send returns `isError:true` for every non-`ACCEPTED` result while retaining the full structured record.
+
+`ACCEPTED` means acceptance by the WeCom API, not delivery or reading. `PARTIAL` includes invalid recipient userids; inspect them without resending to accepted recipients. `FAILED` means the request failed. `SENDING`, `UNKNOWN`, HTTP 5xx or a lost/malformed send response require read-only status investigation. Do not generate a fresh request ID or blindly repeat the send. A status 404 after a lost response does not prove no message was sent. Numa performs no network/5xx send retry; a definitive 401 may refresh authentication and repeat with the same key and body.
+
+## API and MCP contract
+
+Message routes are under `/api/v1/notifications/wecom`: `GET /capabilities`, `GET /recipients?query=&limit=`, `POST /messages`, `GET /messages/{id}`, and `GET /messages/by-request/{requestId}`. A send body contains either `recipientUserIds` or `platformUserIds`, plus `messageType`, `content` and `safe`; the stable key is only in `Idempotency-Key`.
+
+Numa bounds response reads while streaming: message APIs allow up to 1 MiB, and mapping APIs up to 32 MiB to accommodate full-directory sync results (up to 9,999 users). An interrupted, malformed or oversized apply response is reported as an unknown operation outcome; inspect mappings before retrying. Keycloak subjects are opaque identifiers up to 256 characters, including federated/Unicode IDs; whitespace padding and control characters are rejected without normalizing the identity.
+
+Mapping routes are under `/api/v1/admin/notifications/wecom/mappings`: `GET /?query=&limit=`, `POST /sync` with `{dryRun:true|false}`, `PUT /{subject}` with `{wecomUserId}`, and `DELETE /{subject}` returning a tombstone mapping. Responses include metadata and masked email, never secrets or message content.
+
+`numa serve` exposes these tools directly:
+
+| Tool | Purpose |
+| --- | --- |
+| `numa_wecom_capabilities` | Read channel state and limits |
+| `numa_wecom_recipients` | Search and explicitly select recipients |
+| `numa_wecom_send` | Send to `recipient_user_ids` or `platform_user_ids`; requires stable `request_id` and `confirmed:true` |
+| `numa_wecom_status` | Read by exactly one `message_id` or `request_id` |
+| `numa_wecom_mappings_list` | Read mappings and review conflicts |
+| `numa_wecom_mappings_sync` | Preview by default; `apply:true` requires `confirmed:true` |
+| `numa_wecom_mappings_bind` | Manual mapping; requires `confirmed:true` |
+| `numa_wecom_mappings_unbind` | Manual unbinding tombstone; requires `confirmed:true` |
+
+AI clients must obtain the user's authorization for the exact recipients and content before invoking the send tool. A lookup request alone never authorizes a send. Tool metadata marks send and mapping mutations as external side effects. The client must preserve `request_id` and use the status tool after uncertain outcomes. CLI JSON uses snake_case keys; MCP structured responses follow the API's camelCase DTOs.
+
+## Verification
+
+`npm run check` includes WeCom client, Commander registration, bounded UTF-8 input, mapping preview/confirmation, idempotency/unknown-result behavior and actual MCP `tools/list` + `tools/call` tests. These use stubbed platform responses and in-memory MCP transport; they send no real enterprise messages. A separate operator-authorized live smoke test is needed after server configuration and deployment.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@numa-tech/numa",
-  "version": "1.14.31",
+  "version": "1.14.33",
   "description": "Cross-platform CLI for the Numa internal developer platform with Keycloak authentication and MCP support.",
   "author": "numa-tech",
   "keywords": [
@@ -21,6 +21,7 @@
   "files": [
     "dist",
     "README.md",
+    "docs/wecom-messaging.md",
     "examples",
     "skills",
     "THIRD_PARTY_NOTICES.md"
@@ -32,7 +33,7 @@
     "typecheck": "turbo run typecheck root:typecheck",
     "root:typecheck": "tsc --noEmit",
     "test": "turbo run test root:test",
-    "root:test": "node --import tsx --test src/branding.test.ts src/app-config.test.ts src/platform-profile.test.ts src/identity.test.ts src/backend.test.ts src/oauth.test.ts src/web-console.test.ts src/cli-options.test.ts src/mail/client.test.ts src/ai-registry/client.test.ts src/ai-registry/workspace.test.ts src/ai-registry/namespace.test.ts src/ai-registry/sync.test.ts src/ai-registry/bridge.test.ts src/ai-registry/skill-installer.test.ts src/ai-registry/mcp-installer.test.ts src/media/client.test.ts src/media/commands.test.ts src/media/transfers.test.ts src/pipeline/client.test.ts src/pipeline/commands.test.ts src/gitops/client.test.ts src/gitops/commands.test.ts src/repositories/client.test.ts src/repositories/commands.test.ts src/publications/scanner.test.ts src/publications/client.test.ts src/publications/commands.test.ts src/jenkins-jobs/client.test.ts src/jenkins-jobs/commands.test.ts src/clusters/client.test.ts src/clusters/commands.test.ts src/clusters/kubeconfig-discovery.test.ts src/teams/client.test.ts src/teams/commands.test.ts src/authorization/client.test.ts src/authorization/commands.test.ts src/authorization/access-request-client.test.ts src/authorization/access-request-commands.test.ts src/application-candidates/client.test.ts src/application-candidates/commands.test.ts src/application-onboarding/client.test.ts src/application-onboarding/commands.test.ts src/application-onboarding/tui.test.ts src/chatgpt-desktop.test.ts src/codex-integration.test.ts scripts/release-all.test.mjs",
+    "root:test": "node --import tsx --test src/branding.test.ts src/app-config.test.ts src/platform-profile.test.ts src/identity.test.ts src/backend.test.ts src/oauth.test.ts src/web-console.test.ts src/cli-options.test.ts src/mail/client.test.ts src/wecom/client.test.ts src/wecom/commands.test.ts src/wecom/tools.test.ts src/ai-registry/client.test.ts src/ai-registry/workspace.test.ts src/ai-registry/namespace.test.ts src/ai-registry/sync.test.ts src/ai-registry/bridge.test.ts src/ai-registry/skill-installer.test.ts src/ai-registry/mcp-installer.test.ts src/media/client.test.ts src/media/commands.test.ts src/media/transfers.test.ts src/oss/client.test.ts src/oss/transfers.test.ts src/pipeline/client.test.ts src/pipeline/commands.test.ts src/gitops/client.test.ts src/gitops/commands.test.ts src/repositories/client.test.ts src/repositories/commands.test.ts src/publications/scanner.test.ts src/publications/client.test.ts src/publications/commands.test.ts src/jenkins-jobs/client.test.ts src/jenkins-jobs/commands.test.ts src/clusters/client.test.ts src/clusters/commands.test.ts src/clusters/kubeconfig-discovery.test.ts src/teams/client.test.ts src/teams/commands.test.ts src/authorization/client.test.ts src/authorization/commands.test.ts src/authorization/access-request-client.test.ts src/authorization/access-request-commands.test.ts src/application-candidates/client.test.ts src/application-candidates/commands.test.ts src/application-onboarding/client.test.ts src/application-onboarding/commands.test.ts src/application-onboarding/tui.test.ts src/chatgpt-desktop.test.ts src/codex-integration.test.ts scripts/release-all.test.mjs",
     "pack:check": "turbo run pack:check root:pack:check",
     "root:pack:check": "node scripts/check-root-package.mjs",
     "boundaries": "node scripts/check-workspace-boundaries.mjs",
@@ -55,8 +56,9 @@
   "dependencies": {
     "@clack/prompts": "^1.7.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@numa-tech/cli-auth": "1.14.31",
-    "@tokensrc/codex": "1.14.31",
+    "@numa-tech/cli-auth": "1.14.33",
+    "@tokensrc/codex": "1.14.33",
+    "ali-oss": "^6.23.0",
     "commander": "^14.0.3",
     "ink": "^6.8.0",
     "open": "^10.2.0",
@@ -65,6 +67,7 @@
     "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@types/ali-oss": "^6.23.3",
     "@types/node": "^25.0.0",
     "@types/react": "^19.2.18",
     "@types/yauzl": "^3.4.0",

package/skills/numa-cli/SKILL.md

@@ -29,6 +29,7 @@ Never read or print token caches, inject a raw Bearer token, request Jenkins/Nac
 - When the user explicitly requires a local image build and direct Flux release because the governed pipeline is unavailable, use the dedicated `$numa-local-flux-deploy` Skill instead of this Skill's pipeline path. Do not infer that fallback merely from a pipeline error.
 - For other application publishing, production deployment, Jenkins Pipeline build/status/log/stop/retry, idempotency, rollout order, or release recovery, read [pipeline-release.md](references/pipeline-release.md) completely before acting.
 - For `numa registry`, Nacos Skills/MCP, namespace routing, Registry approval, or enterprise Router work, use the dedicated `$numa-ai-registry` Skill when it is available. Otherwise inspect `numa registry capabilities --json` and command help before every write.
+- For `numa oss`, OSS Grant/STS, bucket or prefix object access, and machine-client OSS workflows, use the dedicated `$numa-oss-access` Skill when it is available. Do not extract raw STS credentials for `ossutil` or an ad-hoc SDK script.
 - For application onboarding and SCM, inspect `numa app --help`, `numa app scm --help`, and the corresponding entries in `numa commands --json`; preserve server-owned session state and optimistic-lock revisions.
 - For Codex, media, configuration, identity, or admin modules, use the command catalog plus exact subcommand help. Do not invent missing behavior. Add a focused reference module to this Skill when that workflow becomes repetitive or safety-critical.