@qingflow-tech/qingflow-app-user-mcp 1.0.1 → 1.0.3

package/src/qingflow_mcp/cli/formatters.py

@@ -38,8 +38,19 @@ def _format_whoami(result: dict[str, Any]) -> str:
         f"User: {result.get('nick_name') or '-'} ({result.get('email') or '-'})",
         f"UID: {result.get('uid')}",
         f"Workspace: {result.get('selected_ws_name') or '-'} ({result.get('selected_ws_id') or '-'})",
-        f"QF Version: {result.get('qf_version') or '-'}",
+        f"Workspace QF Version: {result.get('qf_version') or '-'}",
     ]
+    cli_auth = result.get("cli_auth") if isinstance(result.get("cli_auth"), dict) else {}
+    if cli_auth:
+        lines.append(f"Login Flow: {cli_auth.get('flow') or '-'}")
+        if cli_auth.get("verification_uri"):
+            lines.append(f"Verification URL: {cli_auth.get('verification_uri')}")
+        if cli_auth.get("user_code"):
+            lines.append(f"User Code: {cli_auth.get('user_code')}")
+    request_route = result.get("request_route") if isinstance(result.get("request_route"), dict) else {}
+    route_qf_version = request_route.get("qf_version")
+    if route_qf_version and route_qf_version != result.get("qf_version"):
+        lines.append(f"Request Route QF Version: {route_qf_version}")
     lines.append(f"Permission Level: {result.get('permission_level') or '-'}")
     departments = result.get("departments") if isinstance(result.get("departments"), list) else []
     roles = result.get("roles") if isinstance(result.get("roles"), list) else []
@@ -82,6 +93,19 @@ def _format_workspace_list(result: dict[str, Any]) -> str:
     return _render_titled_table("Workspaces", ["ws_id", "name", "remark"], rows)
 
 
+def _format_workspace_get(result: dict[str, Any]) -> str:
+    workspace = result.get("workspace") if isinstance(result.get("workspace"), dict) else {}
+    lines = [
+        f"Workspace: {workspace.get('workspaceName') or workspace.get('wsName') or '-'} ({workspace.get('wsId') or result.get('ws_id') or '-'})",
+        f"QF Version: {result.get('qf_version') or workspace.get('systemVersion') or '-'}",
+        f"Identity: {workspace.get('identity') or '-'}",
+        f"Auth: {workspace.get('auth') if workspace.get('auth') is not None else '-'}",
+        f"State: {workspace.get('state') if workspace.get('state') is not None else '-'}",
+    ]
+    _append_warnings(lines, result.get("warnings"))
+    return "\n".join(lines) + "\n"
+
+
 def _format_app_items(result: dict[str, Any]) -> str:
     items = result.get("items")
     if not isinstance(items, list):
@@ -118,6 +142,7 @@ def _format_app_get(result: dict[str, Any]) -> str:
     if editability:
         lines.append(
             "Editability: "
+            f"app_base={editability.get('can_edit_app_base')} / "
             f"form={editability.get('can_edit_form')} / "
             f"flow={editability.get('can_edit_flow')} / "
             f"views={editability.get('can_edit_views')} / "
@@ -148,20 +173,24 @@ def _format_record_list(result: dict[str, Any]) -> str:
 def _format_task_list(result: dict[str, Any]) -> str:
     data = result.get("data") if isinstance(result.get("data"), dict) else {}
     items = data.get("items") if isinstance(data.get("items"), list) else []
-    rows = []
+    lines = ["Tasks"]
     for item in items:
         if not isinstance(item, dict):
             continue
-        rows.append(
-            [
-                str(item.get("app_key") or ""),
-                str(item.get("record_id") or ""),
-                str(item.get("workflow_node_id") or ""),
-                str(item.get("title") or item.get("task_name") or ""),
-            ]
-        )
-    output = _render_titled_table("Tasks", ["app_key", "record_id", "node_id", "title"], rows)
-    lines = output.rstrip("\n").split("\n")
+        header_parts = [
+            str(item.get("task_id") or "-"),
+            str(item.get("app_name") or item.get("app_key") or "-"),
+            str(item.get("workflow_node_name") or "-"),
+        ]
+        apply_time = item.get("apply_time")
+        if apply_time not in (None, ""):
+            header_parts.append(str(apply_time))
+        lines.append("- " + " / ".join(header_parts))
+        summary_fields = item.get("summary_fields") if isinstance(item.get("summary_fields"), list) else []
+        for summary in summary_fields:
+            if not isinstance(summary, dict):
+                continue
+            lines.append(f"  {summary.get('title') or '-'}: {summary.get('answer') or '-'}")
     _append_warnings(lines, result.get("warnings"))
     return "\n".join(lines) + "\n"
 
@@ -169,34 +198,119 @@ def _format_task_list(result: dict[str, Any]) -> str:
 def _format_task_get(result: dict[str, Any]) -> str:
     data = result.get("data") if isinstance(result.get("data"), dict) else {}
     task = data.get("task") if isinstance(data.get("task"), dict) else {}
-    record = data.get("record") if isinstance(data.get("record"), dict) else {}
-    capabilities = data.get("capabilities") if isinstance(data.get("capabilities"), dict) else {}
-    update_schema = data.get("update_schema") if isinstance(data.get("update_schema"), dict) else {}
-    writable_fields = update_schema.get("writable_fields") if isinstance(update_schema.get("writable_fields"), list) else []
-    lines = [
-        f"Task: {task.get('app_key') or '-'} / {task.get('record_id') or '-'} / {task.get('workflow_node_id') or '-'}",
-        f"Node: {task.get('workflow_node_name') or '-'}",
-        f"Apply Status: {record.get('apply_status')}",
-        f"Available Actions: {', '.join(str(item) for item in (capabilities.get('available_actions') or [])) or '-'}",
-        f"Editable Fields: {len(writable_fields)}",
-    ]
-    if writable_fields:
-        for item in writable_fields[:10]:
+    record_summary = data.get("record_summary") if isinstance(data.get("record_summary"), dict) else {}
+    editable_fields = data.get("editable_fields") if isinstance(data.get("editable_fields"), list) else []
+    available_actions = data.get("available_actions") if isinstance(data.get("available_actions"), list) else []
+    extras = data.get("extras") if isinstance(data.get("extras"), dict) else {}
+    initiator = task.get("initiator") if isinstance(task.get("initiator"), dict) else {}
+    initiator_label = initiator.get("displayName") or initiator.get("email") or "-"
+    lines = []
+    if task.get("task_id") not in (None, ""):
+        lines.append(f"Task ID: {task.get('task_id')}")
+    lines.extend(
+        [
+            f"Locator: {task.get('app_key') or '-'} / {task.get('record_id') or '-'} / {task.get('workflow_node_id') or '-'}",
+            f"Node: {task.get('workflow_node_name') or '-'}",
+            f"App: {task.get('app_name') or '-'}",
+            f"Initiator: {initiator_label}",
+            f"Apply Status: {record_summary.get('apply_status')}",
+            f"Available Actions: {', '.join(str(item) for item in available_actions) or '-'}",
+            f"Editable Fields: {len(editable_fields)}",
+        ]
+    )
+    core_fields = record_summary.get("core_fields") if isinstance(record_summary.get("core_fields"), dict) else {}
+    if core_fields:
+        lines.append("Core Fields:")
+        for key, value in list(core_fields.items())[:12]:
+            lines.append(f"- {key}: {value}")
+    if editable_fields:
+        lines.append("Editable Fields:")
+        for item in editable_fields[:10]:
             if isinstance(item, dict):
                 lines.append(f"- {item.get('title') or '-'} ({item.get('kind') or 'field'})")
-    blockers = update_schema.get("blockers") if isinstance(update_schema.get("blockers"), list) else []
-    if blockers:
-        lines.append("Update Schema Blockers:")
-        for item in blockers:
-            lines.append(f"- {item}")
-    schema_warnings = update_schema.get("warnings") if isinstance(update_schema.get("warnings"), list) else []
-    if schema_warnings:
-        lines.append("Update Schema Warnings:")
-        for item in schema_warnings:
+    associated_reports = extras.get("associated_reports") if isinstance(extras.get("associated_reports"), dict) else {}
+    rollback_candidates = extras.get("rollback_candidates") if isinstance(extras.get("rollback_candidates"), dict) else {}
+    transfer_candidates = extras.get("transfer_candidates") if isinstance(extras.get("transfer_candidates"), dict) else {}
+    lines.append(
+        "Extras: "
+        f"reports={associated_reports.get('count', 0)}, "
+        f"rollback={rollback_candidates.get('count', 0)}, "
+        f"transfer={transfer_candidates.get('count', 0)}"
+    )
+    transfer_items = transfer_candidates.get("items") if isinstance(transfer_candidates.get("items"), list) else []
+    if transfer_items:
+        lines.append("Transfer Candidates:")
+        for item in transfer_items:
             if isinstance(item, dict):
-                lines.append(f"- {item.get('code') or 'WARNING'}: {item.get('message') or ''}".rstrip())
-            else:
-                lines.append(f"- {item}")
+                display = item.get("name") or item.get("uid") or item
+                suffix = f" <{item.get('email')}>" if item.get("email") else ""
+                lines.append(f"- {display}{suffix} (uid={item.get('uid') or '-'})")
+    _append_warnings(lines, result.get("warnings"))
+    return "\n".join(lines) + "\n"
+
+
+def _format_task_action(result: dict[str, Any]) -> str:
+    data = result.get("data") if isinstance(result.get("data"), dict) else {}
+    action = str(data.get("action") or "").strip().lower()
+    status = str(result.get("status") or "").strip().lower()
+
+    if status == "failed" or result.get("ok") is False:
+        lines = [_task_action_failure_label(action)]
+        reason = _task_action_failure_reason(result)
+        if reason:
+            lines.append(f"原因：{reason}")
+        debug_lines = _task_action_debug_lines(result)
+        if debug_lines:
+            lines.append("调试信息：")
+            lines.extend(f"- {line}" for line in debug_lines)
+        return "\n".join(lines) + "\n"
+
+    if status == "partial_success":
+        lines = [_task_action_success_label(action)]
+        lines.append(f"说明：{_task_action_partial_success_message(result)}")
+        return "\n".join(lines) + "\n"
+
+    return _task_action_success_label(action) + "\n"
+
+
+def _format_task_associated_report_detail(result: dict[str, Any]) -> str:
+    data = result.get("data") if isinstance(result.get("data"), dict) else {}
+    selection = data.get("selection") if isinstance(data.get("selection"), dict) else {}
+    result_type = str(data.get("result_type") or "-")
+    context = data.get("context") if isinstance(data.get("context"), dict) else {}
+    lines = []
+    if selection.get("task_id") not in (None, ""):
+        lines.append(f"Task ID: {selection.get('task_id')}")
+    lines.extend(
+        [
+            f"Report: {selection.get('chart_name') or '-'} ({selection.get('report_id') or '-'})",
+            f"Type: {result_type}",
+        ]
+    )
+    if result_type == "view_list":
+        result_payload = data.get("result") if isinstance(data.get("result"), dict) else {}
+        items = result_payload.get("items") if isinstance(result_payload.get("items"), list) else []
+        lines.append(f"Returned Records: {len(items)}")
+        for item in items[:10]:
+            if isinstance(item, dict):
+                lines.append(json.dumps(item, ensure_ascii=False))
+        if len(items) > 10:
+            lines.append(f"... {len(items) - 10} more")
+    elif result_type == "chart_data":
+        result_payload = data.get("result") if isinstance(data.get("result"), dict) else {}
+        summary = result_payload.get("summary") if isinstance(result_payload.get("summary"), dict) else {}
+        rows = result_payload.get("rows") if isinstance(result_payload.get("rows"), list) else []
+        if summary:
+            lines.append(f"Summary: {json.dumps(summary, ensure_ascii=False)}")
+        lines.append(f"Rows: {len(rows)}")
+        for row in rows[:10]:
+            if isinstance(row, dict):
+                lines.append(json.dumps(row, ensure_ascii=False))
+        if len(rows) > 10:
+            lines.append(f"... {len(rows) - 10} more")
+    resolved_filters = context.get("resolved_filters") if isinstance(context.get("resolved_filters"), list) else []
+    if resolved_filters:
+        lines.append(f"Resolved Filters: {len(resolved_filters)}")
     _append_warnings(lines, result.get("warnings"))
     return "\n".join(lines) + "\n"
 
@@ -206,17 +320,22 @@ def _format_import_verify(result: dict[str, Any]) -> str:
         f"App Key: {result.get('app_key') or '-'}",
         f"File: {result.get('file_name') or result.get('file_path') or '-'}",
         f"Can Import: {result.get('can_import')}",
-        f"Apply Rows: {result.get('apply_rows')}",
         f"Verification ID: {result.get('verification_id') or '-'}",
     ]
-    issues = result.get("issues") if isinstance(result.get("issues"), list) else []
-    if issues:
-        lines.append("Issues:")
-        for issue in issues:
-            if isinstance(issue, dict):
-                lines.append(f"- {issue.get('code') or 'ISSUE'}: {issue.get('message') or issue}")
-            else:
-                lines.append(f"- {issue}")
+    issue_summary = result.get("issue_summary") if isinstance(result.get("issue_summary"), dict) else {}
+    if issue_summary:
+        lines.append(
+            "Issues: "
+            f"total={issue_summary.get('total', 0)}, "
+            f"errors={issue_summary.get('errors', 0)}, "
+            f"warnings={issue_summary.get('warnings', 0)}"
+        )
+        sample = issue_summary.get("sample") if isinstance(issue_summary.get("sample"), list) else []
+        if sample:
+            lines.append("Issue Samples:")
+            for item in sample:
+                if isinstance(item, dict):
+                    lines.append(f"- {item.get('code') or 'ISSUE'}: {item.get('message') or ''}".rstrip())
     _append_warnings(lines, result.get("warnings"))
     _append_verification(lines, result.get("verification"))
     return "\n".join(lines) + "\n"
@@ -227,8 +346,10 @@ def _format_import_status(result: dict[str, Any]) -> str:
         f"Status: {result.get('status') or '-'}",
         f"Import ID: {result.get('import_id') or '-'}",
         f"Process ID: {result.get('process_id_str') or '-'}",
-        f"Success Rows: {result.get('success_rows') or 0}",
-        f"Failed Rows: {result.get('failed_rows') or 0}",
+        f"Total Rows: {result.get('total') or 0}",
+        f"Finished Rows: {result.get('finished') or 0}",
+        f"Succeeded Rows: {result.get('succeeded') or 0}",
+        f"Failed Rows: {result.get('failed') or 0}",
         f"Progress: {result.get('progress') or '-'}",
     ]
     _append_warnings(lines, result.get("warnings"))
@@ -319,15 +440,133 @@ def _first_present(payload: dict[str, Any], *keys: str) -> Any:
     return None
 
 
+def _task_action_success_label(action: str) -> str:
+    return {
+        "approve": "已通过",
+        "reject": "已驳回",
+        "rollback": "已退回",
+        "transfer": "已转交",
+        "save_only": "已保存",
+        "urge": "已催办",
+    }.get(action, "已执行")
+
+
+def _task_action_failure_label(action: str) -> str:
+    return {
+        "approve": "审批失败",
+        "reject": "驳回失败",
+        "rollback": "退回失败",
+        "transfer": "转交失败",
+        "save_only": "保存失败",
+        "urge": "催办失败",
+    }.get(action, "执行失败")
+
+
+def _task_action_partial_success_message(result: dict[str, Any]) -> str:
+    error_code = str(result.get("error_code") or "").strip().upper()
+    if error_code == "WORKFLOW_CONTINUATION_UNVERIFIED":
+        return "动作已提交，但暂未完成后续流程验证。可使用 --json 查看详细信息。"
+    if error_code == "TASK_ALREADY_PROCESSED":
+        return "当前待办已不可操作，系统判断流程可能已被其他人处理。可使用 --json 查看详细信息。"
+    warnings = result.get("warnings")
+    if isinstance(warnings, list):
+        for warning in warnings:
+            if not isinstance(warning, dict):
+                continue
+            code = str(warning.get("code") or "").strip().upper()
+            if code == "TASK_ALREADY_PROCESSED_UNCONFIRMED_ACTOR":
+                return "当前待办已不可操作，系统判断流程可能已被其他人处理。可使用 --json 查看详细信息。"
+            if code == "WORKFLOW_CONTINUATION_UNVERIFIED":
+                return "动作已提交，但暂未完成后续流程验证。可使用 --json 查看详细信息。"
+    return "动作已提交，但结果验证不完整。可使用 --json 查看详细信息。"
+
+
+def _task_action_failure_reason(result: dict[str, Any]) -> str | None:
+    error_code = str(result.get("error_code") or "").strip().upper()
+    mapped_error = {
+        "TASK_CONTEXT_VISIBILITY_UNVERIFIED": "当前待办已不可操作，且系统未能确认是否已被处理。",
+        "TASK_SAVE_ONLY_VERIFICATION_FAILED": "保存请求已发送，但未能确认字段是否全部保存成功。",
+        "WORKFLOW_CONTINUATION_UNVERIFIED": "动作已提交，但暂未验证到流程继续推进。",
+        "TASK_ALREADY_PROCESSED": "当前待办已不可操作，系统判断流程可能已被其他人处理。",
+    }.get(error_code)
+    if mapped_error:
+        return mapped_error
+
+    warnings = result.get("warnings")
+    if isinstance(warnings, list):
+        for warning in warnings:
+            if isinstance(warning, dict) and warning.get("message"):
+                return str(warning.get("message"))
+
+    data = result.get("data") if isinstance(result.get("data"), dict) else {}
+    transport_error = data.get("transport_error") if isinstance(data.get("transport_error"), dict) else {}
+    backend_code = transport_error.get("backend_code")
+    http_status = transport_error.get("http_status")
+    if backend_code not in (None, ""):
+        return f"后端返回错误码 {backend_code}。"
+    if http_status not in (None, ""):
+        return f"请求返回 HTTP {http_status}。"
+
+    verification = result.get("verification") if isinstance(result.get("verification"), dict) else {}
+    record_state_error = verification.get("record_state_error") if isinstance(verification.get("record_state_error"), dict) else {}
+    backend_code = record_state_error.get("backend_code")
+    http_status = record_state_error.get("http_status")
+    if backend_code not in (None, ""):
+        return f"后端返回错误码 {backend_code}。"
+    if http_status not in (None, ""):
+        return f"请求返回 HTTP {http_status}。"
+    if error_code:
+        return f"错误码：{error_code}"
+    return None
+
+
+def _task_action_debug_lines(result: dict[str, Any]) -> list[str]:
+    lines: list[str] = []
+    error_code = result.get("error_code")
+    if error_code not in (None, ""):
+        lines.append(f"error_code: {error_code}")
+
+    data = result.get("data") if isinstance(result.get("data"), dict) else {}
+    transport_error = data.get("transport_error") if isinstance(data.get("transport_error"), dict) else {}
+    for key in ("backend_code", "http_status", "category"):
+        value = transport_error.get(key)
+        if value not in (None, ""):
+            lines.append(f"{key}: {value}")
+
+    verification = result.get("verification") if isinstance(result.get("verification"), dict) else {}
+    for key in (
+        "runtime_continuation_verified",
+        "task_context_visibility_verified",
+        "fields_saved_verified",
+        "task_still_actionable",
+        "workflow_not_advanced",
+        "record_state_readable",
+    ):
+        if key in verification and verification.get(key) is not None:
+            lines.append(f"{key}: {verification.get(key)}")
+
+    record_state_error = verification.get("record_state_error") if isinstance(verification.get("record_state_error"), dict) else {}
+    for key in ("backend_code", "http_status", "category"):
+        value = record_state_error.get(key)
+        if value not in (None, ""):
+            entry = f"record_state_{key}: {value}"
+            if entry not in lines:
+                lines.append(entry)
+    return lines
+
+
 _FORMATTERS = {
     "auth_whoami": _format_whoami,
     "workspace_list": _format_workspace_list,
+    "workspace_get": _format_workspace_get,
     "app_list": _format_app_items,
     "app_search": _format_app_items,
     "app_get": _format_app_get,
     "record_list": _format_record_list,
     "task_list": _format_task_list,
     "task_get": _format_task_get,
+    "task_action_execute": _format_task_action,
+    "task_associated_report_detail_get": _format_task_associated_report_detail,
     "import_verify": _format_import_verify,
     "import_status": _format_import_status,
     "builder_summary": _format_builder_summary,

package/src/qingflow_mcp/cli/main.py

@@ -152,6 +152,7 @@ def _emit_cli_effective_context_notice(args: argparse.Namespace, context: CliCon
     spec = cli_public_tool_spec_from_namespace(args)
     if spec is None or not spec.cli_show_effective_context:
         return
+    hide_context_line = bool(getattr(args, "hide_effective_context_line", False))
     sessions = getattr(context, "sessions", None)
     if sessions is None or not hasattr(sessions, "get_profile"):
         return
@@ -168,9 +169,13 @@ def _emit_cli_effective_context_notice(args: argparse.Namespace, context: CliCon
         workspace_label = f"{workspace_name} ({workspace_id})"
     else:
         workspace_label = str(workspace_id)
-    lines = [f"Context: profile={profile_name} workspace={workspace_label}"]
+    lines: list[str] = []
+    if not hide_context_line:
+        lines.append(f"Context: profile={profile_name} workspace={workspace_label}")
     if spec.cli_context_write and profile_name == "default":
         lines.append("Warning: using default profile for a workspace-sensitive write command")
+    if not lines:
+        return
     stream.write("\n".join(lines) + "\n")
 
 

package/src/qingflow_mcp/cli/qingflow_login.py

@@ -0,0 +1,116 @@
+from __future__ import annotations
+
+import base64
+from dataclasses import dataclass
+from typing import Any
+
+from Crypto.Cipher import PKCS1_v1_5
+from Crypto.PublicKey import RSA
+
+from ..backend_client import BackendClient
+from ..config import get_default_base_url, get_timeout_seconds, normalize_base_url
+from ..errors import QingflowApiError
+
+
+@dataclass(slots=True)
+class QingflowNativeLoginResult:
+    token: str
+    user_info: dict[str, Any]
+    login_token: str | None = None
+    flow: str = "qingflow_password"
+
+
+class QingflowNativeLoginHelper:
+    def __init__(self, *, backend: BackendClient | None = None) -> None:
+        self._owns_backend = backend is None
+        self._backend = backend or BackendClient(timeout=get_timeout_seconds())
+
+    def close(self) -> None:
+        if self._owns_backend:
+            self._backend.close()
+
+    def login_with_password(
+        self,
+        *,
+        base_url: str | None,
+        email: str,
+        password: str,
+    ) -> QingflowNativeLoginResult:
+        normalized_base_url = normalize_base_url(base_url) or get_default_base_url()
+        normalized_email = str(email or "").strip()
+        normalized_password = str(password or "")
+        if not normalized_base_url:
+            raise QingflowApiError.config_error("base_url is required or configure default_base_url")
+        if not normalized_email:
+            raise QingflowApiError.config_error("email is required for Qingflow account login")
+        if not normalized_password:
+            raise QingflowApiError.config_error("password is required for Qingflow account login")
+
+        pubkey_payload = self._backend.public_request("GET", normalized_base_url, "/user/pubkey", qf_version=None)
+        pubkey = self._extract_pubkey(pubkey_payload)
+        encrypted_password = _encrypt_password(normalized_password, pubkey)
+        login_payload = self._backend.public_request(
+            "POST",
+            normalized_base_url,
+            "/user/login",
+            json_body={"email": normalized_email, "password": encrypted_password},
+            qf_version=None,
+        )
+        if not isinstance(login_payload, dict):
+            raise QingflowApiError(category="auth", message="Qingflow login did not return a valid response")
+
+        token = str(login_payload.get("token") or "").strip()
+        login_token = str(login_payload.get("loginToken") or "").strip() or None
+        if not token:
+            if login_token:
+                raise QingflowApiError(
+                    category="auth",
+                    message=(
+                        "Qingflow account login requires additional security verification. "
+                        "CLI password login currently does not complete the loginToken verification step."
+                    ),
+                    details={"login_token_present": True},
+                )
+            raise QingflowApiError(
+                category="auth",
+                message="Qingflow login succeeded but did not return a token",
+            )
+
+        user_info = login_payload.get("userInfo")
+        if not isinstance(user_info, dict):
+            user_info = {}
+        return QingflowNativeLoginResult(
+            token=token,
+            login_token=login_token,
+            user_info=user_info,
+        )
+
+    def _extract_pubkey(self, payload: Any) -> str:
+        if not isinstance(payload, dict):
+            raise QingflowApiError(category="auth", message="Qingflow pubkey response is invalid")
+        pubkey = str(payload.get("pubkey") or "").strip()
+        if not pubkey:
+            raise QingflowApiError(category="auth", message="Qingflow pubkey response did not include pubkey")
+        return pubkey
+
+
+def login_with_qingflow_password(
+    *,
+    base_url: str | None,
+    email: str,
+    password: str,
+) -> QingflowNativeLoginResult:
+    helper = QingflowNativeLoginHelper()
+    try:
+        return helper.login_with_password(base_url=base_url, email=email, password=password)
+    finally:
+        helper.close()
+
+
+def _encrypt_password(password: str, pubkey: str) -> str:
+    public_key = RSA.import_key(
+        "-----BEGIN PUBLIC KEY-----\n" + pubkey.strip() + "\n-----END PUBLIC KEY-----\n"
+    )
+    cipher = PKCS1_v1_5.new(public_key)
+    encrypted = cipher.encrypt(password.encode("utf-8"))
+    return base64.b64encode(encrypted).decode("ascii")

package/src/qingflow_mcp/config.py

@@ -22,6 +22,7 @@ DEFAULT_REPOSITORY_AUTHOR_NAME = "qingflow-mcp"
 DEFAULT_REPOSITORY_AUTHOR_EMAIL = "qingflow-mcp@local.invalid"
 DEFAULT_REPOSITORY_INTERNAL_SHARE_TOKEN_KEY = "tokenKey"
 DEFAULT_CREDIT_USAGE_RECORD_PATH = "/user/credit/usage"
+DEFAULT_MCPORTER_CONFIG_PATH = "~/.openclaw/workspace/config/mcporter.json"
 
 
 def get_mcp_home() -> Path:
@@ -33,6 +34,13 @@ def get_profiles_path() -> Path:
     return get_mcp_home() / "profiles.json"
 
 
+def get_mcporter_config_path() -> Path:
+    custom_path = os.getenv("QINGFLOW_MCP_MCPORTER_CONFIG_PATH") or os.getenv(
+        "QINGFLOW_MCP_AUTH_CONFIG_PATH"
+    )
+    return Path(custom_path).expanduser() if custom_path else Path(DEFAULT_MCPORTER_CONFIG_PATH)
+
+
 def get_repository_metadata_dir() -> Path:
     return get_mcp_home() / "repository-metadata"
 

package/src/qingflow_mcp/errors.py

@@ -43,14 +43,14 @@ class QingflowApiError(Exception):
     def auth_required(cls, profile: str) -> "QingflowApiError":
         return cls(
             category="auth",
-            message=f"Profile '{profile}' is not logged in. Run auth_use_credential first.",
+            message=f"Profile '{profile}' is not logged in. Run auth login or auth_use_credential first.",
         )
 
     @classmethod
     def workspace_not_selected(cls, profile: str) -> "QingflowApiError":
         return cls(
             category="workspace",
-            message=f"WORKSPACE_NOT_SELECTED: profile '{profile}' has no workspace from auth context. Re-run auth_use_credential.",
+            message=f"WORKSPACE_NOT_SELECTED: profile '{profile}' has no workspace from auth context. Re-run auth login or auth_use_credential.",
         )
 
     @classmethod

package/src/qingflow_mcp/id_utils.py

@@ -0,0 +1,49 @@
+from __future__ import annotations
+
+from typing import Any
+
+from .errors import QingflowApiError
+
+
+JS_MAX_SAFE_INTEGER = 9_007_199_254_740_991
+
+
+def stringify_backend_id(value: Any) -> str | None:
+    """Return an exact public id string for backend-originated identifiers."""
+    if value in (None, ""):
+        return None
+    if isinstance(value, bool):
+        return None
+    text = str(value).strip()
+    return text or None
+
+
+def normalize_positive_id_text(value: Any, *, field_name: str) -> str:
+    """Normalize a user-supplied id while rejecting JS-unsafe numeric input."""
+    if value in (None, "") or isinstance(value, bool):
+        raise QingflowApiError.config_error(f"{field_name} must be positive")
+    if isinstance(value, int):
+        if value <= 0:
+            raise QingflowApiError.config_error(f"{field_name} must be positive")
+        if value > JS_MAX_SAFE_INTEGER:
+            raise QingflowApiError.config_error(
+                f"{field_name} exceeds JavaScript's safe integer range; pass it as a string to avoid precision loss"
+            )
+        return str(value)
+    if isinstance(value, str):
+        text = value.strip()
+        if not text.isdecimal() or int(text) <= 0:
+            raise QingflowApiError.config_error(f"{field_name} must be a positive integer string")
+        return text
+    raise QingflowApiError.config_error(f"{field_name} must be a positive integer string")
+
+
+def normalize_positive_id_int(value: Any, *, field_name: str) -> int:
+    """Normalize an id to Python int after the public boundary preserves it as text."""
+    return int(normalize_positive_id_text(value, field_name=field_name))
+
+
+def ids_equal(left: Any, right: Any) -> bool:
+    left_text = stringify_backend_id(left)
+    right_text = stringify_backend_id(right)
+    return left_text is not None and right_text is not None and left_text == right_text