@onebullex-group/cli 1.1.2

package/dist/core/config.d.ts

@@ -0,0 +1,44 @@
+import { ConfigFile, Profile, ResolvedConfig } from './types.js';
+
+/** 默认配置文件路径：~/.onebullex/config.json */
+declare const DEFAULT_CONFIG_PATH: string;
+/**
+ * 读取并解析配置文件。
+ * @throws 若文件不存在、JSON 无效或 version !== 1 则抛出 Error
+ */
+declare function readConfigFile(path: string): ConfigFile;
+/**
+ * 原子写入配置文件：先写临时文件再 rename，父目录权限 0o700，文件权限 0o600。
+ */
+declare function writeConfigFile(path: string, cfg: ConfigFile): void;
+/**
+ * 检查配置文件权限（仅非 win32）。
+ * 若文件 mode 不是 0o600，则发出警告并尝试修复。
+ */
+declare function checkConfigPermissions(path: string, warn: (m: string) => void): void;
+/** resolveConfig 的输入接口 */
+interface ResolveInput {
+    configPath: string;
+    flags: {
+        profile?: string;
+        'api-key'?: string;
+        secret?: string;
+        'base-url'?: string;
+        debug?: boolean;
+        timeout?: number;
+    };
+    env: Record<string, string | undefined>;
+}
+/**
+ * 解析最终运行时配置，优先级：CLI flags > env vars > config file > error。
+ * @throws 若无法解析 baseUrl 则抛出包含 "config init" 的 Error
+ */
+declare function resolveConfig(input: ResolveInput): ResolvedConfig;
+/**
+ * 对 Profile 中的敏感字段进行脱敏：
+ * - api-key：调用 redactSecret
+ * - secret：替换为 '****'
+ */
+declare function redactProfile(p: Profile): Profile;
+
+export { DEFAULT_CONFIG_PATH, type ResolveInput, checkConfigPermissions, readConfigFile, redactProfile, resolveConfig, writeConfigFile };

package/dist/core/config.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import {
+  DEFAULT_CONFIG_PATH,
+  checkConfigPermissions,
+  readConfigFile,
+  redactProfile,
+  resolveConfig,
+  writeConfigFile
+} from "../chunk-AKGCHJPQ.js";
+import "../chunk-OOLZIYXS.js";
+import "../chunk-ZYO5P4DH.js";
+export {
+  DEFAULT_CONFIG_PATH,
+  checkConfigPermissions,
+  readConfigFile,
+  redactProfile,
+  resolveConfig,
+  writeConfigFile
+};

package/dist/core/errors.d.ts

@@ -0,0 +1,23 @@
+declare const EXIT: {
+    readonly OK: 0;
+    readonly GENERIC: 1;
+    readonly API_ERROR: 2;
+    readonly NETWORK: 3;
+    readonly DRY_RUN: 4;
+};
+declare class OneBullExError extends Error {
+    readonly returnCode: string | number;
+    readonly httpStatus?: number | undefined;
+    readonly endpoint?: string | undefined;
+    readonly requestId?: string | undefined;
+    constructor(message: string, returnCode: string | number, httpStatus?: number | undefined, endpoint?: string | undefined, requestId?: string | undefined);
+}
+declare class DryRunInterception extends Error {
+    readonly preview: unknown;
+    constructor(preview: unknown);
+}
+declare class ConfigError extends Error {
+    constructor(message: string);
+}
+
+export { ConfigError, DryRunInterception, EXIT, OneBullExError };

package/dist/core/errors.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import {
+  ConfigError,
+  DryRunInterception,
+  EXIT,
+  OneBullExError
+} from "../chunk-JRUFIHU7.js";
+export {
+  ConfigError,
+  DryRunInterception,
+  EXIT,
+  OneBullExError
+};

package/dist/core/http-client.d.ts

@@ -0,0 +1,29 @@
+import { ResolvedConfig } from './types.js';
+
+type Query = Record<string, string | number | boolean>;
+/** fetch 函数签名，与全局 fetch 兼容，便于测试注入 */
+type FetchFn = (url: string, init?: RequestInit) => Promise<Response>;
+/**
+ * 从 body 中提取顶层 string/number/boolean 字段用于签名。
+ *
+ * - null/undefined 跳过
+ * - 嵌套 object/array 抛错（防止 JS Object.toString() 产生 "[object Object]"
+ *   与 Java 行为不一致导致签名漂移）
+ */
+declare function flattenForSign(body: Record<string, unknown> | undefined): Query;
+declare class HttpClient {
+    private readonly cfg;
+    private readonly fetch;
+    constructor(cfg: ResolvedConfig, fetchFn?: FetchFn);
+    getPublic<T>(path: string, query?: Query): Promise<T>;
+    getPrivate<T>(path: string, query?: Query): Promise<T>;
+    postPrivate<T>(path: string, body?: Record<string, unknown>): Promise<T>;
+    /**
+     * GET 请求重试包装：网络错误最多重试 2 次（共 3 次尝试），延迟 300ms / 900ms。
+     * OneBullExError（业务错误）不重试。
+     */
+    private withRetry;
+    private send;
+}
+
+export { type FetchFn, HttpClient, type Query, flattenForSign };

package/dist/core/http-client.js

@@ -0,0 +1,13 @@
+#!/usr/bin/env node
+import {
+  HttpClient,
+  flattenForSign
+} from "../chunk-CVOY2SOS.js";
+import "../chunk-JRUFIHU7.js";
+import "../chunk-OOLZIYXS.js";
+import "../chunk-ZYO5P4DH.js";
+import "../chunk-LVNSFQXS.js";
+export {
+  HttpClient,
+  flattenForSign
+};

package/dist/core/redact.d.ts

@@ -0,0 +1,15 @@
+/**
+ * 对单个字符串值进行脱敏处理。
+ * - 长度 < 8：返回 '****'
+ * - 长度 >= 8：返回前 2 位 + '****' + 后 4 位
+ */
+declare function redactSecret(value: string): string;
+/**
+ * 递归遍历对象，对 SENSITIVE_KEYS 中的字段进行脱敏：
+ * - key 为 'secret'：值替换为 '****'
+ * - 其他敏感 key：对字符串值调用 redactSecret
+ * - 非敏感 key：递归处理子对象
+ */
+declare function redactObject<T>(obj: T): T;
+
+export { redactObject, redactSecret };

package/dist/core/redact.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import {
+  redactObject,
+  redactSecret
+} from "../chunk-OOLZIYXS.js";
+import "../chunk-ZYO5P4DH.js";
+export {
+  redactObject,
+  redactSecret
+};

package/dist/core/signature.d.ts

@@ -0,0 +1,39 @@
+/**
+ * 签名参数接口，对齐 SignatureUtilsV2.java
+ */
+interface SignParams {
+    /** 业务参数（不含 nonce/timestamp，sign() 内部合并） */
+    params: Record<string, string | number | boolean>;
+    /** UUID v4 去横线，32 位十六进制小写 */
+    nonce: string;
+    /** 秒级时间戳（10 位） */
+    timestamp: number;
+    /** HMAC-SHA256 密钥 */
+    secret: string;
+}
+/**
+ * 将参数按 key 字母序排序后拼接成 `key=value&key=value` 格式。
+ * 不做 URL 编码，与 Java SignatureUtilsV2.buildSortedQueryString 行为一致。
+ *
+ * @param params 参数对象（key 为字符串，value 为 string | number | boolean）
+ * @returns 排序后的查询字符串，空参数返回 ""
+ */
+declare function buildSortedQueryString(params: Record<string, string | number | boolean>): string;
+/**
+ * 生成 HMAC-SHA256 签名。
+ *
+ * 流程：
+ * 1. 合并业务 params + { nonce, timestamp }
+ * 2. 按 key 字母序排序拼接成查询字符串
+ * 3. HMAC-SHA256(secret, queryString, UTF-8) → 十六进制小写
+ *
+ * 对齐 Java SignatureUtilsV2.generateHmacSha256Signature。
+ */
+declare function sign(p: SignParams): string;
+/**
+ * 生成随机 nonce：UUID v4 去横线，32 位十六进制小写。
+ * 对齐 Java SignatureUtilsV2.generateNonce()。
+ */
+declare function generateNonce(): string;
+
+export { type SignParams, buildSortedQueryString, generateNonce, sign };

package/dist/core/signature.js

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import {
+  buildSortedQueryString,
+  generateNonce,
+  sign
+} from "../chunk-LVNSFQXS.js";
+export {
+  buildSortedQueryString,
+  generateNonce,
+  sign
+};

package/dist/core/types.d.ts

@@ -0,0 +1,46 @@
+/**
+ * CLI 全局类型定义
+ */
+/** 配置文件中单个 profile 的结构 */
+interface Profile {
+    'base-url': string;
+    'api-key'?: string;
+    secret?: string;
+    identify?: string | null;
+    env?: 'test' | 'prod';
+}
+/** ~/.onebullex/config.json 的顶层结构 */
+interface ConfigFile {
+    version: 1;
+    'default-profile': string;
+    profiles: Record<string, Profile>;
+}
+/** 运行时解析后的配置（已合并 CLI flags、env vars、profile） */
+interface ResolvedConfig {
+    baseUrl: string;
+    apiKey?: string;
+    secret?: string;
+    identify?: string | null;
+    profileName: string;
+    env?: 'test' | 'prod';
+    debug: boolean;
+    timeoutMs: number;
+}
+/** 命令注册表条目 */
+interface CommandRegEntry {
+    command: string;
+    method: 'GET' | 'POST';
+    path: string;
+    isWrite: boolean;
+    needsAuth: boolean;
+    implFile: string;
+}
+/** 输出格式 */
+type OutputFormat = 'table' | 'json';
+/**
+ * 需要脱敏的敏感字段 key 集合。
+ * 包含 HTTP header 名称和配置字段名称的常见变体。
+ */
+declare const SENSITIVE_KEYS: ReadonlySet<string>;
+
+export { type CommandRegEntry, type ConfigFile, type OutputFormat, type Profile, type ResolvedConfig, SENSITIVE_KEYS };

package/dist/core/types.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import {
+  SENSITIVE_KEYS
+} from "../chunk-ZYO5P4DH.js";
+export {
+  SENSITIVE_KEYS
+};

package/dist/index.d.ts

@@ -0,0 +1,45 @@
+import { Command } from 'commander';
+import { OutputFormat, ResolvedConfig } from './core/types.js';
+import { FetchFn, HttpClient } from './core/http-client.js';
+
+interface CliContext {
+    stdout: (s: string) => void;
+    stderr: (s: string) => void;
+    env: Record<string, string | undefined>;
+    cwd: string;
+    isTTY: boolean;
+    outputFormat?: OutputFormat;
+    confirm?: boolean;
+    /** Returns the active config file path, honoring ONEBULLEX_CONFIG_PATH env override. */
+    getConfigPath: () => string;
+    /** The CLI flags parsed from the root program (filled in preAction). */
+    flags: {
+        profile?: string;
+        output?: OutputFormat;
+        debug?: boolean;
+        timeout?: number;
+        confirm?: boolean;
+        baseUrl?: string;
+        reveal?: boolean;
+    };
+    resolveConfig: (opts: {
+        requireAuth: boolean;
+    }) => ResolvedConfig;
+    /** Construct an HttpClient using the resolved config + injected fetch (for testing). */
+    http: (opts: {
+        requireAuth: boolean;
+    }) => HttpClient;
+}
+interface BuildOpts {
+    stdout?: (s: string) => void;
+    stderr?: (s: string) => void;
+    env?: Record<string, string | undefined>;
+    cwd?: string;
+    isTTY?: boolean;
+    /** Override fetch (used by integration tests to stub HTTP). */
+    fetch?: FetchFn;
+}
+declare function buildProgram(opts?: BuildOpts): Command;
+declare function main(argv: string[]): Promise<number>;
+
+export { type BuildOpts, type CliContext, OutputFormat, ResolvedConfig, buildProgram, main };