@share-crm/sharedev-cli 0.0.4-rc.50 → 0.0.4-rc.50-test.1

package/dist/sharedev.js

@@ -8572,6 +8572,8 @@ const index_ts_1 = __webpack_require__(22841);
 const context_ts_1 = __webpack_require__(29531);
 const logger_ts_1 = __webpack_require__(87562);
 const request_ts_1 = __webpack_require__(83733);
+const request_channel_ts_1 = __webpack_require__(43355);
+const sharecrm_session_ts_1 = __webpack_require__(47166);
 const pkgMeta_ts_1 = __webpack_require__(48559);
 const normalize_ts_1 = __importDefault(__webpack_require__(80399));
 const debug_ts_1 = __webpack_require__(90667);
@@ -8697,6 +8699,8 @@ async function bootstrap() {
     }
     const runtimeContext = await (0, context_ts_1.createCliRuntimeContext)(bootstrapOptions);
     request_ts_1.requestService.configure(runtimeContext.settings);
+    (0, request_channel_ts_1.configureRequestChannel)(runtimeContext.settings);
+    (0, sharecrm_session_ts_1.configureSharecrmSession)(runtimeContext.settings);
     // npm 与 spec 版本检查并发执行（均带 1.5s 超时，错误吞掉，不影响命令执行）
     await Promise.all([
         checkForNpmUpdate(pkgMeta.name, version),
@@ -9889,6 +9893,48 @@ function registerApprovalNamespace(program, runtimeContext) {
 }
 
 
+/***/ },
+
+/***/ 85971
+(__unused_webpack_module, exports, __webpack_require__) {
+
+var __webpack_unused_export__;
+
+__webpack_unused_export__ = ({ value: true });
+exports.registerAuthCommand = registerAuthCommand;
+const command_ts_1 = __webpack_require__(51481);
+const index_ts_1 = __webpack_require__(98695);
+/**
+ * auth 命令依赖工作区存在（登录环境从 settings.json 的 domain 反向推导）：
+ * 未 init 的目录下执行会在 bootstrap 阶段被引导先运行 `sharedev init`。
+ */
+function registerAuthCommand(program, runtimeContext) {
+    const auth = program.command('auth').description('Manage sharecrm login state for sharedev CLI');
+    auth
+        .command('login')
+        .description('Login via sharecrm device flow (environment inherited from workspace domain)')
+        .addHelpText('after', `
+Examples:
+  $ sharedev auth login
+`)
+        .action((0, command_ts_1.createCommandAction)('auth', 'login', runtimeContext, async ({ context }) => {
+        await (0, index_ts_1.authLoginCommand)(context.settings.domain);
+    }));
+    auth
+        .command('status')
+        .description('Show current login state (sharecrm login and certificate config)')
+        .action((0, command_ts_1.createCommandAction)('auth', 'status', runtimeContext, async ({ context }) => {
+        await (0, index_ts_1.authStatusCommand)(context.settings);
+    }));
+    auth
+        .command('logout')
+        .description('Clear workspace login state (does not logout sharecrm itself)')
+        .action((0, command_ts_1.createCommandAction)('auth', 'logout', runtimeContext, async () => {
+        await (0, index_ts_1.authLogoutCommand)();
+    }));
+}
+
+
 /***/ },
 
 /***/ 5264
@@ -12303,9 +12349,11 @@ const er_ts_1 = __webpack_require__(40402);
 const semantic_ts_1 = __webpack_require__(35185);
 const access_ts_1 = __webpack_require__(9759);
 const app_dev_ts_1 = __webpack_require__(82916);
+const auth_ts_1 = __webpack_require__(85971);
 function registerNamespaces(program, context) {
     (0, init_ts_1.registerInitCommand)(program, context);
     (0, config_ts_1.registerConfigCommand)(program, context);
+    (0, auth_ts_1.registerAuthCommand)(program, context);
     (0, apl_ts_1.registerAplNamespace)(program, context);
     (0, completion_ts_1.registerCompletionCommand)(program, context);
     (0, docs_ts_1.registerDocsNamespace)(program, context);
@@ -14792,9 +14840,11 @@ exports.getProjectPath = getProjectPath;
 exports.findSettings = findSettings;
 exports.validateSettings = validateSettings;
 exports.loadSettings = loadSettings;
+exports.loadRelaxedSettings = loadRelaxedSettings;
 const node_path_1 = __importDefault(__webpack_require__(76760));
 const file_ts_1 = __webpack_require__(57452);
 const path_ts_1 = __webpack_require__(89213);
+const logger_ts_1 = __webpack_require__(87562);
 const SHAREDEV_RELATIVE_PATH = node_path_1.default.join('.sharedev');
 const SETTINGS_NAME = 'settings.json';
 function isValidUrl(value) {
@@ -14883,6 +14933,37 @@ async function loadSettings(startDir) {
     validateSettings(settings);
     return settings;
 }
+/**
+ * 宽松读取 settings（不做 certificate/domain 校验），供「无 certificate + sharecrm 登录态」
+ * 的运行模式兜底使用：settings.json 缺失时返回空字段形态，存在时尽量保留 domain 等信息
+ * （环境一致性校验仍依赖 domain）。
+ */
+async function loadRelaxedSettings(startDir, fallbackDir) {
+    const settingsPath = await findSettings(startDir);
+    let rawSettings = {};
+    if (settingsPath) {
+        try {
+            rawSettings = await (0, file_ts_1.readJsonFile)(settingsPath);
+        }
+        catch (error) {
+            // 文件不存在（.sharedev 目录在但 settings.json 没有）是正常的登录态模式场景，静默跳过；
+            // 文件存在但解析失败则必须警告——静默会丢失 domain 等工作区环境信息
+            if (error.code !== 'ENOENT') {
+                logger_ts_1.loggerService.warn(`Failed to parse ${settingsPath} (${error instanceof Error ? error.message : String(error)}). ` +
+                    'Running with sharecrm login state only; fix the settings file to restore environment checks.');
+            }
+        }
+    }
+    return {
+        certificate: typeof rawSettings.certificate === 'string' ? rawSettings.certificate : '',
+        domain: typeof rawSettings.domain === 'string' ? rawSettings.domain : '',
+        developerName: typeof rawSettings.developerName === 'string' ? rawSettings.developerName : '',
+        developerMobile: typeof rawSettings.developerMobile === 'string' ? rawSettings.developerMobile : '',
+        specVersion: typeof rawSettings.specVersion === 'string' ? rawSettings.specVersion : '',
+        settingsPath: settingsPath ?? '',
+        settingsDir: settingsPath ? node_path_1.default.dirname(settingsPath) : fallbackDir
+    };
+}
 
 
 /***/ },
@@ -14896,11 +14977,28 @@ __webpack_unused_export__ = ({ value: true });
 exports.createCliRuntimeContext = createCliRuntimeContext;
 const config_ts_1 = __webpack_require__(43120);
 const logger_ts_1 = __webpack_require__(87562);
+const sharecrm_session_ts_1 = __webpack_require__(47166);
 const path_ts_1 = __webpack_require__(89213);
 async function createCliRuntimeContext(_options) {
     const cwd = process.cwd();
     const searchDir = await (0, config_ts_1.resolveSettingsSearchDir)(undefined, cwd);
-    const settings = await (0, config_ts_1.loadSettings)(searchDir);
+    let settings;
+    try {
+        settings = await (0, config_ts_1.loadSettings)(searchDir);
+    }
+    catch (error) {
+        // settings 缺失/不完整时，工作区内存在登录凭证（.sharedev/session.json）则降级为
+        // 「登录态模式」继续运行（certificate 可为空，业务请求走 open API 通道）。
+        // 此时 configureSharecrmSession 尚未注入，直接按 .sharedev 目录读取凭证文件。
+        const sharedevDir = await (0, config_ts_1.findSharedevPath)(searchDir);
+        const session = sharedevDir ? (0, sharecrm_session_ts_1.readSharedevAuthSession)(sharedevDir) : null;
+        if (!session?.accessToken) {
+            const message = error instanceof Error ? error.message : String(error);
+            throw new Error(`${message}\nRun \`sharedev init\` to initialize a workspace first, then \`sharedev auth login\`.`);
+        }
+        settings = await (0, config_ts_1.loadRelaxedSettings)(searchDir, cwd);
+        logger_ts_1.loggerService.info('No valid certificate configured; running with sharecrm login state.');
+    }
     logger_ts_1.loggerService.debug(`settingsPath = ${settings.settingsPath}`);
     logger_ts_1.loggerService.debug(`domain = ${settings.domain}`);
     logger_ts_1.loggerService.debug(`certificate = ${(0, path_ts_1.maskCertificate)(settings.certificate)}`);
@@ -15751,6 +15849,126 @@ const fetchLatestNpmVersion = (packageName, timeoutMs = 1500) => new Promise((re
 exports.fetchLatestNpmVersion = fetchLatestNpmVersion;
 
 
+/***/ },
+
+/***/ 59848
+(__unused_webpack_module, exports, __webpack_require__) {
+
+
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.OpenApiCommandError = void 0;
+exports.executeOpenApiCommand = executeOpenApiCommand;
+const node_crypto_1 = __webpack_require__(77598);
+const logger_ts_1 = __webpack_require__(87562);
+const sharecrm_session_ts_1 = __webpack_require__(47166);
+const normalize_ts_1 = __importDefault(__webpack_require__(80399));
+const pkgMeta_ts_1 = __webpack_require__(48559);
+const isDebugEnabled_ts_1 = __webpack_require__(27570);
+/**
+ * 操作中心 Open API 网关客户端。
+ *
+ * 与 FHH 网关（request.ts，certificate 鉴权）平行：本通道走
+ * `POST {apiUrl}/api/v1/commands/execute`，鉴权为 sharecrm 登录的
+ * `Authorization: Bearer <FSDTK token>`。两网关票据不通用，命令注册以
+ * docs/action-centre-integration.md 的实测记录为准（注意 code-dev function 新命名）。
+ */
+class OpenApiCommandError extends Error {
+    constructor(message, resultCode, detail, traceId) {
+        super(message);
+        this.name = 'OpenApiCommandError';
+        this.resultCode = resultCode;
+        this.detail = detail;
+        this.traceId = traceId;
+    }
+}
+exports.OpenApiCommandError = OpenApiCommandError;
+function toExecuteUrl(apiUrl) {
+    if (!apiUrl) {
+        throw new Error('Login session is missing apiUrl. Run `sharedev auth login` again.');
+    }
+    return `${apiUrl.replace(/\/+$/, '')}/api/v1/commands/execute`;
+}
+async function buildCommandHeaders(session) {
+    const locale = normalize_ts_1.default.normalizeAcceptLanguage(process.env.LC_ALL || process.env.LC_MESSAGES || process.env.LANG);
+    const { version } = await (0, pkgMeta_ts_1.readCliPackageMeta)();
+    return {
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${session.accessToken}`,
+        'X-CLI-Id': 'sharedev-cli',
+        'X-CLI-Version': version || '0.0.0',
+        'X-Caller-Type': 'cli',
+        'X-Request-Id': (0, node_crypto_1.randomUUID)(),
+        'Accept-Language': locale ?? 'en-US',
+        'X-FS-Locale': locale ?? 'en-US'
+    };
+}
+async function executeOnce(session, commandKey, args, flags) {
+    const response = await fetch(toExecuteUrl(session.apiUrl), {
+        method: 'POST',
+        headers: await buildCommandHeaders(session),
+        body: JSON.stringify({
+            commandKey,
+            arguments: args ?? {},
+            ...(flags?.length ? { flags } : {})
+        })
+    });
+    let payload;
+    try {
+        payload = (await response.json());
+    }
+    catch {
+        throw new OpenApiCommandError(`Open API command failed: HTTP ${response.status} ${response.statusText}`, `HTTP_${response.status}`);
+    }
+    if ((0, isDebugEnabled_ts_1.isRuntimeDebugEnabled)()) {
+        const dataPreview = typeof payload.data === 'string'
+            ? payload.data.slice(0, 200)
+            : JSON.stringify(payload.data ?? null)?.slice(0, 200);
+        logger_ts_1.loggerService.debug(`Open API response: ${commandKey} -> ${payload.resultCode ?? 'UNKNOWN'} ${dataPreview ?? ''}`);
+    }
+    if (payload.traceId) {
+        logger_ts_1.loggerService.addTraceId(payload.traceId);
+    }
+    if (payload.resultCode === 'SUCCESS') {
+        if (payload.helpInfoReturned === true) {
+            const usage = payload.data && typeof payload.data === 'object'
+                ? payload.data.usage
+                : undefined;
+            throw new OpenApiCommandError(`Open API command "${commandKey}" was not executed: missing required arguments.${usage ? `\nUsage: ${usage}` : ''}`, 'HELP_INFO_RETURNED');
+        }
+        // 外层信封中 traceId 已在上方消费、helpInfoReturned 已转错误，
+        // 对调用方有价值的只剩 content——统一在此剥出，调用方直接拿业务数据
+        const envelope = payload.data;
+        return (typeof envelope === 'object' && envelope !== null ? envelope.content : undefined);
+    }
+    const detail = typeof payload.data === 'string' ? payload.data : JSON.stringify(payload.data ?? '');
+    throw new OpenApiCommandError(`Open API command "${commandKey}" failed: ${payload.resultCode ?? 'UNKNOWN'}${detail ? ` ${detail}` : ''}`, payload.resultCode ?? 'UNKNOWN', detail || undefined, payload.traceId);
+}
+/**
+ * 执行操作中心 Open API 命令，返回解包后的 content（外层信封已统一处理）。
+ *
+ * 未登录抛错引导 `sharedev auth login`；token 过期自动刷新；
+ * 服务端返回 AUTH_FAIL 时刷新一次后重试（服务端会话失效场景）。
+ * flags 用于透传确认标记等命令行语义（如 NEED_CONFIRM 的 --yes）。
+ */
+async function executeOpenApiCommand(commandKey, args = {}, options) {
+    const session = await (0, sharecrm_session_ts_1.ensureValidSharedevAuthSession)();
+    try {
+        return await executeOnce(session, commandKey, args, options?.flags);
+    }
+    catch (error) {
+        if (error instanceof OpenApiCommandError && error.resultCode === 'AUTH_FAIL') {
+            const refreshed = await (0, sharecrm_session_ts_1.refreshSharecrmSession)(session);
+            (0, sharecrm_session_ts_1.saveSharedevAuthSession)(refreshed);
+            return await executeOnce(refreshed, commandKey, args, options?.flags);
+        }
+        throw error;
+    }
+}
+
+
 /***/ },
 
 /***/ 2067
@@ -16033,6 +16251,47 @@ class PassthroughCommandBuilder {
 __webpack_unused_export__ = PassthroughCommandBuilder;
 
 
+/***/ },
+
+/***/ 43355
+(__unused_webpack_module, exports, __webpack_require__) {
+
+var __webpack_unused_export__;
+
+__webpack_unused_export__ = ({ value: true });
+exports.configureRequestChannel = configureRequestChannel;
+exports.resolveRequestChannel = resolveRequestChannel;
+exports.hasCertificateCredential = hasCertificateCredential;
+const logger_ts_1 = __webpack_require__(87562);
+const sharecrm_session_ts_1 = __webpack_require__(47166);
+let currentSettings;
+/** bootstrap 时注入运行时 settings（与 requestService.configure 同位置调用一次） */
+function configureRequestChannel(settings) {
+    currentSettings = settings;
+}
+/** 解析当前应使用的请求通道；双登录态并存时登录态优先 */
+function resolveRequestChannel() {
+    const session = (0, sharecrm_session_ts_1.readSharedevAuthSession)();
+    if (session?.accessToken) {
+        logger_ts_1.loggerService.debug('Request channel: openapi (sharecrm login).');
+        return 'openapi';
+    }
+    if (currentSettings?.certificate?.trim()) {
+        logger_ts_1.loggerService.debug('Request channel: fhh (certificate).');
+        return 'fhh';
+    }
+    throw new Error('No credentials available. Run `sharedev auth login`, or configure certificate/domain in .sharedev/settings.json.');
+}
+/**
+ * 是否存在可用的 certificate 凭证（与 resolveRequestChannel 的判定一致）。
+ * 供个别命令在 openapi 能力未就绪期间做局部降级：登录态优先的原则管「能力对等时的选择」，
+ * 能力缺失时（如 PWC download-file 未就绪）允许回退 certificate，避免功能回退。
+ */
+function hasCertificateCredential() {
+    return Boolean(currentSettings?.certificate?.trim());
+}
+
+
 /***/ },
 
 /***/ 23634
@@ -16464,11 +16723,46 @@ __webpack_unused_export__ = ({ value: true });
 exports.y = void 0;
 exports.executeShareCliCommand = executeShareCliCommand;
 const request_ts_1 = __webpack_require__(83733);
+const request_channel_ts_1 = __webpack_require__(43355);
+const openapi_request_ts_1 = __webpack_require__(59848);
 const trace_ts_1 = __webpack_require__(36097);
 /** 操作中心 shareCli/execute 的业务方标识 */
 exports.y = 'sharedev-cli';
+/**
+ * open API 侧 code-dev 命名空间迁移：apl → function（子命令同名，2026-10-21 实测）。
+ * list 例外：open API 未注册 code-dev function list，等价能力为 object-dev function query。
+ */
+function toOpenApiCommandPath(commandPath) {
+    if (commandPath.length >= 3 && commandPath[0] === 'code-dev' && commandPath[1] === 'apl') {
+        if (commandPath[2] === 'list') {
+            throw new Error('Command "code-dev apl list" is not registered on the Open API gateway; the equivalent is "object-dev function query".');
+        }
+        return ['code-dev', 'function', ...commandPath.slice(2)];
+    }
+    return commandPath;
+}
+/**
+ * 执行操作中心命令（透传族统一入口）。
+ *
+ * 双通道（二期）：sharecrm 登录态 → open API `commands/execute`（commandKey = commandPath 空格连接，
+ * code-dev apl * 自动映射为迁移后的 function 命名空间）；
+ * certificate → FHH `shareCli/execute`（现状不动）。响应统一适配为 ShareCliExecuteResponse
+ * 形态（{success, code, message, data}），上层 PassthroughCommandManager 无感。
+ */
 async function executeShareCliCommand(commandPath, data, others) {
     (0, trace_ts_1.traceExecute)(commandPath.join(' '));
+    const channel = (0, request_channel_ts_1.resolveRequestChannel)();
+    if (channel === 'openapi') {
+        // open API 侧确认协议：flags 形式（sharecrm 同款）；agentChannels 为 FHH 侧统计标记，暂无对应物
+        const flags = others?.yes === true ? ['--yes'] : undefined;
+        const commandKey = toOpenApiCommandPath(commandPath).join(' ');
+        const content = await (0, openapi_request_ts_1.executeOpenApiCommand)(commandKey, data ?? {}, flags ? { flags } : undefined);
+        return {
+            success: true,
+            code: 'OK',
+            data: content
+        };
+    }
     const payload = {
         commandPath,
         // 所有 sharedev 发起的操作中心请求统一携带 agentChannels，服务端按 Agent 渠道路由/统计
@@ -16829,6 +17123,231 @@ class RequestService {
 exports.requestService = new RequestService();
 
 
+/***/ },
+
+/***/ 47166
+(__unused_webpack_module, exports, __webpack_require__) {
+
+
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.DOMAIN_HOST_TO_LOGIN_ENV = void 0;
+exports.configureSharecrmSession = configureSharecrmSession;
+exports.getRuntimeRequire = getRuntimeRequire;
+exports.readSharecrmSession = readSharecrmSession;
+exports.saveSharedevAuthSession = saveSharedevAuthSession;
+exports.readSharedevAuthSession = readSharedevAuthSession;
+exports.clearSharedevAuthSession = clearSharedevAuthSession;
+exports.isSessionExpired = isSessionExpired;
+exports.refreshSharecrmSession = refreshSharecrmSession;
+exports.ensureValidSharedevAuthSession = ensureValidSharedevAuthSession;
+exports.readSharecrmConfig = readSharecrmConfig;
+const node_module_1 = __webpack_require__(98995);
+const node_fs_1 = __importDefault(__webpack_require__(73024));
+const node_os_1 = __importDefault(__webpack_require__(48161));
+const node_path_1 = __importDefault(__webpack_require__(76760));
+/**
+ * 工作区企业 domain → 登录环境（open API 网关）映射（环境域知识的唯一登记处）。
+ * 登录环境继承 init 配置的工作区环境（无交互选择）。
+ * 新增环境（香港/国际等）在此登记即可。
+ */
+exports.DOMAIN_HOST_TO_LOGIN_ENV = {
+    'www.fxiaoke.com': { authBaseUrl: 'https://open.fxiaoke.com/', apiBaseUrl: 'https://open.fxiaoke.com/cli/' },
+    'crm.ceshi112.com': { authBaseUrl: 'https://open.ceshi112.com/', apiBaseUrl: 'https://open.ceshi112.com/cli/' }
+};
+const SESSION_FILE_NAME = 'session.json';
+const GITIGNORE_ENTRY = '.sharedev/session.json';
+/** 由 bootstrap 注入的工作区 .sharedev 目录；skipSettings 分支（--help 等）不会注入 */
+let currentSharedevDir;
+/** bootstrap 时注入工作区 settings（与 requestService.configure 同位置调用一次） */
+function configureSharecrmSession(settings) {
+    currentSharedevDir = settings.settingsDir;
+}
+function resolveSessionFile(sharedevDir) {
+    const dir = sharedevDir ?? currentSharedevDir;
+    return dir ? node_path_1.default.join(dir, SESSION_FILE_NAME) : undefined;
+}
+/** 登录态写入 .sharedev/session.json 时确保工作区 .gitignore 覆盖该敏感文件（失败不阻断登录） */
+function ensureGitignoreEntry() {
+    if (!currentSharedevDir) {
+        return;
+    }
+    const workspaceRoot = node_path_1.default.dirname(currentSharedevDir);
+    const gitignorePath = node_path_1.default.join(workspaceRoot, '.gitignore');
+    try {
+        let content = '';
+        try {
+            content = node_fs_1.default.readFileSync(gitignorePath, 'utf8');
+        }
+        catch {
+            // .gitignore 不存在，直接创建
+        }
+        const covered = content.split('\n').some((line) => line.trim() === GITIGNORE_ENTRY);
+        if (!covered) {
+            const prefix = content && !content.endsWith('\n') ? '\n' : '';
+            node_fs_1.default.appendFileSync(gitignorePath, `${prefix}${GITIGNORE_ENTRY}\n`);
+        }
+    }
+    catch {
+        // .gitignore 追加失败不阻断登录流程
+    }
+}
+// createRequire(import.meta.url) 会被 webpack 静态求值为构建机的绝对源码路径，发布后失效；
+// 与 pwc beefly 加载一致：以运行时入口（bin/cli.mjs / dist/sharedev.js，即 process.argv[1]）
+// 做解析基准，从 CLI 自身安装位置向上命中包内 node_modules 的 @share-crm/sharecrm-cli。
+// npm link 场景下 argv[1] 是全局 bin 的 symlink，Node 解析不穿透 symlink，字面路径向上
+// 找不到 node_modules，必须先 realpath 回真实安装位置再解析。
+function getRuntimeRequire() {
+    const entry = process.argv[1] ?? process.cwd();
+    try {
+        return (0, node_module_1.createRequire)(node_fs_1.default.realpathSync(entry));
+    }
+    catch {
+        return (0, node_module_1.createRequire)(entry);
+    }
+}
+function loadAuthSessionStoreModule() {
+    const require = getRuntimeRequire();
+    return require('@share-crm/sharecrm-cli/dist/core/state/authSessionStore.js');
+}
+/** 读取 sharecrm 当前登录会话（login 中转用）；未登录返回 null；依赖缺失/结构变化抛出可读错误 */
+async function readSharecrmSession() {
+    let module;
+    try {
+        module = loadAuthSessionStoreModule();
+    }
+    catch {
+        throw new Error('Failed to load @share-crm/sharecrm-cli. Reinstall sharedev dependencies and try again.');
+    }
+    if (!module || typeof module.AuthSessionStore !== 'function') {
+        throw new Error('Incompatible @share-crm/sharecrm-cli detected (AuthSessionStore missing). Upgrade sharedev or @share-crm/sharecrm-cli.');
+    }
+    try {
+        return await new module.AuthSessionStore().load();
+    }
+    catch (error) {
+        // AuthSessionStore.load() 在未登录时返回 null 而不抛错；
+        // 走到这里意味着本地会话存储读取失败（钥匙串被拒 / 文件损坏等），
+        // 不是未登录——原样抛出，避免误导用户重新 login。
+        throw new Error(`Failed to read sharecrm session store: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+function saveSharedevAuthSession(session) {
+    const sessionFile = resolveSessionFile();
+    if (!sessionFile) {
+        throw new Error('Workspace context is not configured. Run this command inside a sharedev workspace.');
+    }
+    ensureGitignoreEntry();
+    node_fs_1.default.writeFileSync(sessionFile, JSON.stringify(session, null, 2), { mode: 0o600 });
+}
+function readSharedevAuthSession(sharedevDir) {
+    const sessionFile = resolveSessionFile(sharedevDir);
+    if (!sessionFile) {
+        return null;
+    }
+    try {
+        const session = JSON.parse(node_fs_1.default.readFileSync(sessionFile, 'utf8'));
+        return session && typeof session.accessToken === 'string' && session.accessToken ? session : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** 只清当前工作区的登录凭证，不影响 sharecrm 自己的登录态 */
+function clearSharedevAuthSession() {
+    const sessionFile = resolveSessionFile();
+    if (!sessionFile) {
+        return;
+    }
+    try {
+        node_fs_1.default.rmSync(sessionFile, { force: true });
+    }
+    catch {
+        // ignore
+    }
+}
+function isSessionExpired(session) {
+    return !session.tokenExpireAt || session.tokenExpireAt <= Date.now();
+}
+/** authBaseUrl 由登录下发的 apiUrl 推导（https://open.fxiaoke.com/cli/ -> https://open.fxiaoke.com/）；缺失即凭证异常 */
+function deriveAuthBaseUrl(apiUrl) {
+    if (!apiUrl) {
+        throw new Error('Login session is missing apiUrl. Run `sharedev auth login` again.');
+    }
+    try {
+        return `${new URL(apiUrl).origin}/`;
+    }
+    catch {
+        throw new Error(`Invalid apiUrl in login session: ${apiUrl}. Run \`sharedev auth login\` again.`);
+    }
+}
+/**
+ * 用 refreshToken 刷新 accessToken（与 sharecrm 的 /oauth2.0/token 契约一致）。
+ * 成功返回新会话（不落盘，由调用方决定是否保存），失败抛出带重登指引的错误。
+ */
+async function refreshSharecrmSession(session) {
+    const response = await fetch(new URL('oauth2.0/token', deriveAuthBaseUrl(session.apiUrl)), {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            appId: session.appId,
+            grantType: 'refresh_token',
+            refreshToken: session.refreshToken
+        })
+    });
+    let payload;
+    try {
+        payload = (await response.json());
+    }
+    catch {
+        throw new Error(`sharecrm token refresh failed (HTTP ${response.status}). Run \`sharedev auth login\` again.`);
+    }
+    if (payload.errorCode !== 0 || !payload.accessToken) {
+        throw new Error(`sharecrm token refresh failed: ${payload.errorMessage ?? `errorCode ${payload.errorCode}`}. Run \`sharedev auth login\` again.`);
+    }
+    // OAuth 刷新响应允许不回发新 refreshToken（沿用旧值，sharecrm 同款行为）；
+    // expiresIn 是计算过期时间的必要输入，缺失即报错
+    if (typeof payload.expiresIn !== 'number' || !Number.isFinite(payload.expiresIn) || payload.expiresIn <= 0) {
+        throw new Error('sharecrm token refresh response is missing expiresIn. Run `sharedev auth login` again.');
+    }
+    return {
+        ...session,
+        accessToken: payload.accessToken,
+        refreshToken: payload.refreshToken ?? session.refreshToken,
+        tokenExpireAt: Date.now() + payload.expiresIn * 1000
+    };
+}
+/** 读取工作区登录凭证并保证可用：过期时自动刷新并回写工作区文件 */
+async function ensureValidSharedevAuthSession() {
+    const session = readSharedevAuthSession();
+    if (!session) {
+        throw new Error('Not logged in. Run `sharedev auth login` first.');
+    }
+    if (!isSessionExpired(session)) {
+        return session;
+    }
+    const refreshed = await refreshSharecrmSession(session);
+    saveSharedevAuthSession(refreshed);
+    return refreshed;
+}
+/**
+ * 读取 sharecrm 全局 config（login 前的环境冲突检测用：config 优先级高于环境变量注入，
+ * 用户在 sharecrm 侧固定过环境时，sharedev 的环境注入会被压制）。
+ */
+function readSharecrmConfig() {
+    const configPath = node_path_1.default.join(node_os_1.default.homedir(), '.sharecrm-cli', 'config.json');
+    try {
+        const config = JSON.parse(node_fs_1.default.readFileSync(configPath, 'utf8'));
+        return config && typeof config === 'object' ? config : {};
+    }
+    catch {
+        return {};
+    }
+}
+
+
 /***/ },
 
 /***/ 36097
@@ -18937,7 +19456,47 @@ exports.createAplTemplate = createAplTemplate;
 exports.createFuncSource = createFuncSource;
 const node_crypto_1 = __webpack_require__(77598);
 const request_ts_1 = __webpack_require__(83733);
+const openapi_request_ts_1 = __webpack_require__(59848);
+const request_channel_ts_1 = __webpack_require__(43355);
+/**
+ * open API 通道的函数列表查询（sharecrm 登录态时替代 FHH biz/query）。
+ * 参数形态 2026-10-21 实测：分页为字符串，name_space 为数组，binding 过滤与 FHH 同名。
+ */
+async function getFuncListViaOpenApi(options) {
+    const args = { pageNumber: '1', pageSize: '3000' };
+    const bind = options.bind?.trim();
+    if (bind) {
+        args.binding_object_api_name = bind;
+    }
+    const space = options.space?.trim();
+    if (space) {
+        args.name_space = [space];
+    }
+    const content = await (0, openapi_request_ts_1.executeOpenApiCommand)('object-dev function query', args);
+    return content?.result?.function ?? [];
+}
+/**
+ * open API 通道的单函数详情（sharecrm 登录态时替代 FHH biz/find / batchQuery）。
+ * 响应含完整函数体（body 源码），字段与 IFuncData 同构（2026-10-21 实测）。
+ */
+async function findFuncByApiNameViaOpenApi(apiName, bindingObjectApiName) {
+    const content = await (0, openapi_request_ts_1.executeOpenApiCommand)('code-dev function get-by-apiname-and-binding-object-apiname', {
+        api_name: apiName,
+        ...(bindingObjectApiName ? { binding_object_api_name: bindingObjectApiName } : {})
+    });
+    if (content?.errCode && content.errCode !== 0) {
+        throw new Error(content.errMessage || `APL function lookup failed (errCode ${content.errCode}): ${apiName}`);
+    }
+    const func = content?.result?.function;
+    if (!func) {
+        throw new Error(`APL function not found: ${apiName}`);
+    }
+    return func;
+}
 async function getFuncList(options = {}) {
+    if ((0, request_channel_ts_1.resolveRequestChannel)() === 'openapi') {
+        return getFuncListViaOpenApi(options);
+    }
     const bindingObjectApiName = options.bind?.trim();
     const nameSpace = options.space?.trim();
     const data = {
@@ -18966,6 +19525,9 @@ async function findFuncByApiNames(apiNames) {
     return response.function;
 }
 async function findFuncByApiName(apiName, bindingObjectApiName = '') {
+    if ((0, request_channel_ts_1.resolveRequestChannel)() === 'openapi') {
+        return findFuncByApiNameViaOpenApi(apiName, bindingObjectApiName);
+    }
     if (bindingObjectApiName) {
         const response = await request_ts_1.requestService.FHH({
             url: '/EM1HFUNC/biz/find',
@@ -21252,13 +21814,39 @@ var __webpack_unused_export__;
 __webpack_unused_export__ = ({ value: true });
 exports.aplListNewService = aplListNewService;
 const request_execute_command_paths_ts_1 = __webpack_require__(23634);
+const openapi_request_ts_1 = __webpack_require__(59848);
+const request_channel_ts_1 = __webpack_require__(43355);
+const logger_ts_1 = __webpack_require__(87562);
 const types_ts_1 = __webpack_require__(42801);
 const request_ts_1 = __webpack_require__(25285);
+/**
+ * open API 通道的 list-new 查询：open API 未注册 code-dev function list，
+ * 等价能力为 object-dev function query（过滤参数同名，2026-10-21 实测）；
+ * 响应包成 AplResponse 兼容信封，下游解析逻辑零改动。
+ *
+ * ⚠️ body / selectFieldName 为 FHH 老链路参数，object-dev function query 不支持
+ * （2026-10-21 实测：传入后被服务端静默忽略、过滤不生效），显式剔除并提示用户。
+ */
+const requestAplListViaOpenApi = async (filters) => {
+    const { body, selectFieldName, ...supported } = filters;
+    if (body !== undefined || selectFieldName !== undefined) {
+        logger_ts_1.loggerService.warn('Filters "body" and "selectFieldName" are not supported on the sharecrm login channel and were ignored.');
+    }
+    const content = await (0, openapi_request_ts_1.executeOpenApiCommand)('object-dev function query', supported);
+    return {
+        success: true,
+        code: 'OK',
+        data: { result: { function: content?.result?.function ?? [] } },
+    };
+};
 /**
  * 操作中心接口包装调用：apl list（分页查询函数列表）
  * pageNumber/pageSize 为必填（服务端要求字符串形态），其余为可选过滤条件
  */
 const requestAplListExecute = async (filters) => {
+    if ((0, request_channel_ts_1.resolveRequestChannel)() === 'openapi') {
+        return requestAplListViaOpenApi(filters);
+    }
     const data = {
         pageNumber: filters.pageNumber,
         pageSize: filters.pageSize
@@ -25317,6 +25905,150 @@ async function executeApprovalRuntimeShareCli(commandPath, data, others) {
 }
 
 
+/***/ },
+
+/***/ 52402
+(__unused_webpack_module, exports, __webpack_require__) {
+
+
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.authLoginCommand = authLoginCommand;
+exports.authStatusCommand = authStatusCommand;
+exports.authLogoutCommand = authLogoutCommand;
+const node_child_process_1 = __webpack_require__(31421);
+const node_path_1 = __importDefault(__webpack_require__(76760));
+const logger_ts_1 = __webpack_require__(87562);
+const openapi_request_ts_1 = __webpack_require__(59848);
+const sharecrm_session_ts_1 = __webpack_require__(47166);
+/** 解析依赖包 @share-crm/sharecrm-cli 的 bin 入口（不走 PATH / 全局安装） */
+function resolveSharecrmBinEntry() {
+    const require = (0, sharecrm_session_ts_1.getRuntimeRequire)();
+    const packageJsonPath = require.resolve('@share-crm/sharecrm-cli/package.json');
+    return node_path_1.default.join(node_path_1.default.dirname(packageJsonPath), 'dist', 'index.js');
+}
+/** 从工作区 domain 推导登录环境；未知 domain 报错并列出受支持的环境 */
+function deriveLoginEnvFromDomain(domain) {
+    let host;
+    try {
+        host = new URL(domain).hostname;
+    }
+    catch {
+        throw new Error(`Invalid workspace domain: ${domain}. Fix it in .sharedev/settings.json or run \`sharedev init\`.`);
+    }
+    const loginEnv = sharecrm_session_ts_1.DOMAIN_HOST_TO_LOGIN_ENV[host];
+    if (!loginEnv) {
+        const supported = Object.keys(sharecrm_session_ts_1.DOMAIN_HOST_TO_LOGIN_ENV).join(', ');
+        throw new Error(`Workspace domain "${host}" has no known login environment mapping (supported: ${supported}). ` +
+            'Ask the sharedev maintainers to add it, or switch the workspace domain.');
+    }
+    return loginEnv;
+}
+async function authLoginCommand(domain) {
+    const loginEnv = deriveLoginEnvFromDomain(domain);
+    // sharecrm 全局 config 优先级高于环境变量注入，固定过环境时会压制工作区推导——提前拦截
+    const sharecrmConfig = (0, sharecrm_session_ts_1.readSharecrmConfig)();
+    const pinned = sharecrmConfig.authBaseUrl?.trim();
+    if (pinned && pinned.replace(/\/+$/, '') !== loginEnv.authBaseUrl.replace(/\/+$/, '')) {
+        throw new Error(`sharecrm global config pins login environment to ${pinned}, conflicting with workspace (${loginEnv.authBaseUrl}). ` +
+            'Remove authBaseUrl from ~/.sharecrm-cli/config.json or fix the workspace domain.');
+    }
+    let entry;
+    try {
+        entry = resolveSharecrmBinEntry();
+    }
+    catch {
+        throw new Error('Failed to locate @share-crm/sharecrm-cli. Reinstall sharedev dependencies and try again.');
+    }
+    logger_ts_1.loggerService.info(`Login environment (from workspace domain): ${loginEnv.authBaseUrl}`);
+    logger_ts_1.loggerService.info('Starting sharecrm device-flow login. Complete the authorization in your browser.');
+    // 环境通过环境变量注入子进程（优先级低于 sharecrm config，上面已检测冲突），不写 sharecrm 全局配置
+    const exitCode = await new Promise((resolve, reject) => {
+        const child = (0, node_child_process_1.spawn)(process.execPath, [entry, 'auth', 'share-dev-login'], {
+            stdio: 'inherit',
+            env: {
+                ...process.env,
+                FS_CLI_AUTH_BASE_URL: loginEnv.authBaseUrl,
+                FS_CLI_API_BASE_URL: loginEnv.apiBaseUrl
+            }
+        });
+        child.on('error', reject);
+        child.on('exit', (code) => resolve(code));
+    });
+    if (exitCode !== 0) {
+        throw new Error(`sharecrm auth share-dev-login exited with code ${exitCode ?? 'unknown'}.`);
+    }
+    const session = await (0, sharecrm_session_ts_1.readSharecrmSession)();
+    if (!session?.accessToken) {
+        throw new Error('sharecrm login finished but no session was stored. Run `sharedev auth login` again.');
+    }
+    // 中转完成：凭证固化到工作区（.sharedev/session.json，凭证跟工作区走）
+    (0, sharecrm_session_ts_1.saveSharedevAuthSession)(session);
+    logger_ts_1.loggerService.success(`Logged in as ${session.userName || `user ${session.userId}`} (appId ${session.appId}).`);
+    // 端到端验证 Open API 通道（只读查询；失败仅 warn，部分环境命令集较旧属已知限制）
+    try {
+        const result = await (0, openapi_request_ts_1.executeOpenApiCommand)('object-dev function query', {
+            pageNumber: '1',
+            pageSize: '1'
+        });
+        const total = result?.result?.totalNumber;
+        logger_ts_1.loggerService.success(`Open API channel verified${typeof total === 'number' ? `: ${total} functions visible` : ''}.`);
+    }
+    catch (error) {
+        logger_ts_1.loggerService.warn(`Open API channel verification failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+function formatExpireTime(session) {
+    if (!session.tokenExpireAt) {
+        return 'unknown';
+    }
+    return new Date(session.tokenExpireAt).toLocaleString();
+}
+async function authStatusCommand(settings) {
+    const session = (0, sharecrm_session_ts_1.readSharedevAuthSession)();
+    logger_ts_1.loggerService.info(`Workspace environment: ${settings.domain}`);
+    if (!session) {
+        logger_ts_1.loggerService.info('sharecrm login: not logged in. Run `sharedev auth login`.');
+    }
+    else {
+        const expired = (0, sharecrm_session_ts_1.isSessionExpired)(session);
+        logger_ts_1.loggerService.info([
+            `sharecrm login: ${session.userName || `user ${session.userId}`} (appId ${session.appId})`,
+            `  apiUrl: ${session.apiUrl ?? 'https://open.fxiaoke.com/cli/'}`,
+            `  token : ${expired ? 'expired, will auto-refresh on next command' : `valid until ${formatExpireTime(session)}`}`
+        ].join('\n'));
+    }
+    // certificate 方式状态（老登录方式，配置在 .sharedev/settings.json；来自 bootstrap 加载的 settings）
+    if (settings.certificate?.trim()) {
+        logger_ts_1.loggerService.info(`certificate login: configured (${settings.settingsPath})`);
+    }
+    else {
+        logger_ts_1.loggerService.info('certificate login: not configured');
+    }
+}
+async function authLogoutCommand() {
+    (0, sharecrm_session_ts_1.clearSharedevAuthSession)();
+    logger_ts_1.loggerService.success('Workspace login state cleared (sharecrm own session is untouched).');
+}
+
+
+/***/ },
+
+/***/ 98695
+(__unused_webpack_module, exports, __webpack_require__) {
+
+var __webpack_unused_export__;
+
+__webpack_unused_export__ = ({ value: true });
+exports.authLogoutCommand = exports.authStatusCommand = exports.authLoginCommand = void 0;
+var auth_command_ts_1 = __webpack_require__(52402);
+Object.defineProperty(exports, "authLoginCommand", ({ enumerable: true, get: function () { return auth_command_ts_1.authLoginCommand; } }));
+Object.defineProperty(exports, "authStatusCommand", ({ enumerable: true, get: function () { return auth_command_ts_1.authStatusCommand; } }));
+Object.defineProperty(exports, "authLogoutCommand", ({ enumerable: true, get: function () { return auth_command_ts_1.authLogoutCommand; } }));
+
+
 /***/ },
 
 /***/ 73302
@@ -33414,13 +34146,11 @@ exports.objectDevImportSettingPushCommand = objectDevImportSettingPushCommand;
 var __webpack_unused_export__;
 
 __webpack_unused_export__ = ({ value: true });
-exports.objectDevObjectMappingPullCommand = exports.objectDevButtonPushCommand = exports.objectDevButtonUpdateCommand = exports.objectDevButtonCreateCommand = exports.objectDevButtonPullCommand = exports.objectDevButtonListCommand = exports.objectDevValidateRuleUpdateCommand = exports.objectDevValidateRulePushCommand = exports.objectDevValidateRulePullCommand = exports.objectDevValidateRuleListCommand = exports.objectDevValidateRuleCreateCommand = exports.objectDevLayoutRuleUpdateCommand = exports.objectDevLayoutRulePushCommand = exports.objectDevLayoutRulePullCommand = exports.objectDevLayoutRuleListCommand = exports.objectDevLayoutRuleCreateCommand = exports.objectDevLayoutUpdateCommand = exports.objectDevLayoutPushCommand = exports.objectDevLayoutPullCommand = exports.objectDevLayoutListCommand = exports.objectDevLayoutEnableEditCommand = exports.objectDevLayoutEditStatusCommand = exports.objectDevLayoutCreateCommand = exports.objectDevFieldPushCommand = exports.objectDevFieldUpdateCommand = exports.objectDevFieldCreateCommand = exports.objectDevFieldListCommand = exports.objectDevObjectPushCommand = exports.objectDevObjectUpdateCommand = exports.objectDevObjectCreateCommand = exports.objectDevSceneUpdateCommand = exports.objectDevScenePushCommand = exports.objectDevScenePullCommand = exports.objectDevSceneListCommand = exports.objectDevSceneCreateCommand = exports.objectDevMultiCurrencyPushCommand = exports.objectDevMultiCurrencyPullCommand = exports.objectDevGlobalVariablePushCommand = exports.objectDevGlobalVariablePullCommand = exports.objectDevOptionSetUpdateCommand = exports.objectDevOptionSetPushCommand = exports.objectDevOptionSetPullCommand = exports.objectDevOptionSetListCommand = exports.objectDevOptionSetDeleteCommand = exports.objectDevOptionSetCreateCommand = exports.objectDevObjectRelatedPullCommand = __webpack_unused_export__ = __webpack_unused_export__ = exports.objectDevObjectPullCommand = exports.objectDevObjectListCommand = void 0;
-exports.objectDevPrintTemplateDeleteCommand = exports.objectDevPrintTemplatePushCommand = exports.objectDevPrintTemplateUpdateCommand = exports.objectDevPrintTemplateCreateCommand = exports.objectDevPrintTemplatePullCommand = __webpack_unused_export__ = exports.objectDevEmailTemplateDeleteCommand = exports.objectDevEmailTemplatePushCommand = exports.objectDevEmailTemplateUpdateCommand = exports.objectDevEmailTemplateCreateCommand = exports.objectDevEmailTemplatePullCommand = exports.objectDevEmailTemplateListCommand = exports.objectDevObjectPluginPushCommand = exports.objectDevObjectPluginUpdateCommand = exports.objectDevObjectPluginCreateCommand = exports.objectDevObjectPluginPullCommand = exports.objectDevTagPushCommand = exports.objectDevTagUpdateCommand = exports.objectDevTagCreateCommand = exports.objectDevTagPullCommand = exports.objectDevImportSettingPushCommand = exports.objectDevImportSettingUpdateCommand = exports.objectDevImportSettingPullCommand = exports.objectDevObjectExtensionPushCommand = exports.objectDevObjectExtensionUpdateCommand = exports.objectDevObjectExtensionCreateCommand = exports.objectDevObjectExtensionPullCommand = exports.objectDevArchiveRulePushCommand = exports.objectDevArchiveRuleUpdateCommand = exports.objectDevArchiveRuleCreateCommand = exports.objectDevArchiveRulePullCommand = exports.objectDevConvertRulePushCommand = exports.objectDevConvertRuleUpdateCommand = exports.objectDevConvertRuleCreateCommand = exports.objectDevConvertRulePullCommand = exports.objectDevConvertRuleListCommand = exports.objectDevObjectMappingPushCommand = exports.objectDevObjectMappingUpdateCommand = exports.objectDevObjectMappingCreateCommand = void 0;
+exports.objectDevObjectMappingUpdateCommand = exports.objectDevObjectMappingCreateCommand = exports.objectDevObjectMappingPullCommand = exports.objectDevButtonPushCommand = exports.objectDevButtonUpdateCommand = exports.objectDevButtonCreateCommand = exports.objectDevButtonPullCommand = exports.objectDevButtonListCommand = exports.objectDevValidateRuleUpdateCommand = exports.objectDevValidateRulePushCommand = exports.objectDevValidateRulePullCommand = exports.objectDevValidateRuleListCommand = exports.objectDevValidateRuleCreateCommand = exports.objectDevLayoutRuleUpdateCommand = exports.objectDevLayoutRulePushCommand = exports.objectDevLayoutRulePullCommand = exports.objectDevLayoutRuleListCommand = exports.objectDevLayoutRuleCreateCommand = exports.objectDevLayoutUpdateCommand = exports.objectDevLayoutPushCommand = exports.objectDevLayoutPullCommand = exports.objectDevLayoutListCommand = exports.objectDevLayoutEnableEditCommand = exports.objectDevLayoutEditStatusCommand = exports.objectDevLayoutCreateCommand = exports.objectDevFieldPushCommand = exports.objectDevFieldUpdateCommand = exports.objectDevFieldCreateCommand = exports.objectDevFieldListCommand = exports.objectDevObjectPushCommand = exports.objectDevObjectUpdateCommand = exports.objectDevObjectCreateCommand = exports.objectDevSceneUpdateCommand = exports.objectDevScenePushCommand = exports.objectDevScenePullCommand = exports.objectDevSceneListCommand = exports.objectDevSceneCreateCommand = exports.objectDevMultiCurrencyPushCommand = exports.objectDevMultiCurrencyPullCommand = exports.objectDevGlobalVariablePushCommand = exports.objectDevGlobalVariablePullCommand = exports.objectDevOptionSetUpdateCommand = exports.objectDevOptionSetPushCommand = exports.objectDevOptionSetPullCommand = exports.objectDevOptionSetListCommand = exports.objectDevOptionSetDeleteCommand = exports.objectDevOptionSetCreateCommand = exports.objectDevObjectRelatedPullCommand = exports.objectDevObjectPullCommand = exports.objectDevObjectListCommand = void 0;
+exports.objectDevPrintTemplateDeleteCommand = exports.objectDevPrintTemplatePushCommand = exports.objectDevPrintTemplateUpdateCommand = exports.objectDevPrintTemplateCreateCommand = exports.objectDevPrintTemplatePullCommand = __webpack_unused_export__ = exports.objectDevEmailTemplateDeleteCommand = exports.objectDevEmailTemplatePushCommand = exports.objectDevEmailTemplateUpdateCommand = exports.objectDevEmailTemplateCreateCommand = exports.objectDevEmailTemplatePullCommand = exports.objectDevEmailTemplateListCommand = exports.objectDevObjectPluginPushCommand = exports.objectDevObjectPluginUpdateCommand = exports.objectDevObjectPluginCreateCommand = exports.objectDevObjectPluginPullCommand = exports.objectDevTagPushCommand = exports.objectDevTagUpdateCommand = exports.objectDevTagCreateCommand = exports.objectDevTagPullCommand = exports.objectDevImportSettingPushCommand = exports.objectDevImportSettingUpdateCommand = exports.objectDevImportSettingPullCommand = exports.objectDevObjectExtensionPushCommand = exports.objectDevObjectExtensionUpdateCommand = exports.objectDevObjectExtensionCreateCommand = exports.objectDevObjectExtensionPullCommand = exports.objectDevArchiveRulePushCommand = exports.objectDevArchiveRuleUpdateCommand = exports.objectDevArchiveRuleCreateCommand = exports.objectDevArchiveRulePullCommand = exports.objectDevConvertRulePushCommand = exports.objectDevConvertRuleUpdateCommand = exports.objectDevConvertRuleCreateCommand = exports.objectDevConvertRulePullCommand = exports.objectDevConvertRuleListCommand = exports.objectDevObjectMappingPushCommand = void 0;
 var object_ts_1 = __webpack_require__(13087);
 Object.defineProperty(exports, "objectDevObjectListCommand", ({ enumerable: true, get: function () { return object_ts_1.objectDevObjectListCommand; } }));
 Object.defineProperty(exports, "objectDevObjectPullCommand", ({ enumerable: true, get: function () { return object_ts_1.objectDevObjectPullCommand; } }));
-__webpack_unused_export__ = ({ enumerable: true, get: function () { return object_ts_1.ObjectDevObjectListOptions; } });
-__webpack_unused_export__ = ({ enumerable: true, get: function () { return object_ts_1.ObjectDevObjectPullOptions; } });
 var object_related_ts_1 = __webpack_require__(90165);
 Object.defineProperty(exports, "objectDevObjectRelatedPullCommand", ({ enumerable: true, get: function () { return object_related_ts_1.objectDevObjectRelatedPullCommand; } }));
 var option_set_ts_1 = __webpack_require__(98892);
@@ -40972,9 +41702,9 @@ async function objectPullService(shouldQueryAll, queryType = null, apiName, skip
             logger_ts_1.loggerService.info(`Skipped public object count: ${skippedPublicApiNames.length}`);
         }
     }
-    // 20个分批拉取
+    // 50个分批拉取
     const apiNamesListGroups = apiNamesList.reduce((acc, item, index) => {
-        const groupIndex = Math.floor(index / 20);
+        const groupIndex = Math.floor(index / 50);
         if (!acc[groupIndex]) {
             acc[groupIndex] = [];
         }
@@ -45208,12 +45938,12 @@ exports.pwcInfoCommand = pwcInfoCommand;
 exports.pwcDevCommand = pwcDevCommand;
 exports.pwcPlaceholderCommand = pwcPlaceholderCommand;
 const node_path_1 = __importDefault(__webpack_require__(76760));
-const node_module_1 = __webpack_require__(98995);
 const prompts_1 = __webpack_require__(53503);
 const file_ts_1 = __webpack_require__(57452);
 const zip_ts_1 = __webpack_require__(89139);
 const logger_ts_1 = __webpack_require__(87562);
 const request_ts_1 = __webpack_require__(83733);
+const sharecrm_session_ts_1 = __webpack_require__(47166);
 const pwc_service_ts_1 = __webpack_require__(63358);
 const pwc_types_ts_1 = __webpack_require__(55844);
 const pwc_mateXml_ts_1 = __webpack_require__(53683);
@@ -45650,11 +46380,10 @@ async function pwcDevCommand(filePath, context, options = {}) {
     logger_ts_1.loggerService.info(shouldQueryAll
         ? `Starting Beefly dev server for ${outputNames.length} entr${outputNames.length === 1 ? 'y' : 'ies'}`
         : `Starting Beefly dev server with ${normalizedFilePath}`);
-    // createRequire(import.meta.url) 会被 webpack 静态求值为构建机的绝对源码路径，发布后失效；
-    // 改用运行时入口路径（bin/cli.mjs / dist/sharedev.js，即 process.argv[1]）做解析基准，
-    // 从 CLI 自身安装位置向上命中包内 node_modules 的 @share-crm/beefly。
-    const require = (0, node_module_1.createRequire)(process.argv[1] ?? process.cwd());
-    const beefly = require('@share-crm/beefly');
+    // 运行时入口路径（bin/cli.mjs / dist/sharedev.js，即 process.argv[1]）做解析基准，
+    // 从 CLI 自身安装位置向上命中包内 node_modules 的 @share-crm/beefly；
+    // npm link 下 argv[1] 是全局 bin symlink，getRuntimeRequire 会先 realpath 穿透再解析。
+    const beefly = (0, sharecrm_session_ts_1.getRuntimeRequire)()('@share-crm/beefly');
     // 复用 Beefly 官方 API 启动 webpack dev server，入口名称决定预览产物名称。
     const server = await beefly.cli.dev({
         port: options.port,
@@ -46567,6 +47296,7 @@ function validatePwcMateXmlContent(input) {
 var __webpack_unused_export__;
 
 __webpack_unused_export__ = ({ value: true });
+exports.assertPwcFileUploadChannel = assertPwcFileUploadChannel;
 exports.fetchCode = fetchCode;
 exports.fetchCodeByType = fetchCodeByType;
 exports.updateCodeSource = updateCodeSource;
@@ -46580,7 +47310,41 @@ exports.createPluginSource = createPluginSource;
 exports.enablePwcResource = enablePwcResource;
 exports.getUrlByApiName = getUrlByApiName;
 const request_ts_1 = __webpack_require__(83733);
+const request_channel_ts_1 = __webpack_require__(43355);
+const logger_ts_1 = __webpack_require__(87562);
+/**
+ * PWC 命令的通道保护：openapi 能力未就绪期间——
+ * 有 certificate 则 warn 后降级走 FHH（避免登录态+certificate 并存的功能回退）；
+ * 无 certificate 抛错引导配置。待服务端 download-file 修复后移除。
+ */
+function assertPwcChannelOrFallback() {
+    if ((0, request_channel_ts_1.resolveRequestChannel)() !== 'openapi') {
+        return;
+    }
+    if ((0, request_channel_ts_1.hasCertificateCredential)()) {
+        logger_ts_1.loggerService.warn('PWC commands run via certificate channel (sharecrm login channel not ready for PWC file download).');
+        return;
+    }
+    throw new Error('PWC commands are not yet available on the sharecrm login channel ' +
+        '(Open API download-file returns empty content and has no URL query, 2026-10-21 measured). ' +
+        'Use certificate mode (.sharedev/settings.json) for PWC commands.');
+}
+/**
+ * PWC 文件上传环节的通道断言：*-new 链路主体走 openapi（code-dev 命令），
+ * 但源码包上传（uploadFileList）仍依赖 FHH——纯登录态时给出明确引导而非服务端原始报错。
+ */
+function assertPwcFileUploadChannel() {
+    if ((0, request_channel_ts_1.resolveRequestChannel)() !== 'openapi') {
+        return;
+    }
+    if ((0, request_channel_ts_1.hasCertificateCredential)()) {
+        return;
+    }
+    throw new Error('PWC file upload requires the certificate channel (not yet available on the sharecrm login channel). ' +
+        'Use certificate mode (.sharedev/settings.json) for PWC push/deploy/create.');
+}
 async function fetchCode(type, apiName) {
+    assertPwcChannelOrFallback();
     const response = await request_ts_1.requestService.FHH({
         url: '/EM2HCompBuild/VscodeExtension/downloadCode',
         data: {
@@ -46591,6 +47355,7 @@ async function fetchCode(type, apiName) {
     return response.components ?? [];
 }
 async function fetchCodeByType(type) {
+    assertPwcChannelOrFallback();
     const response = await request_ts_1.requestService.FHH({
         url: '/EM2HCompBuild/VscodeExtension/downloadCode',
         data: {
@@ -46644,12 +47409,14 @@ async function updatePluginSource(apiName, params) {
     });
 }
 async function updateCodeSource(type, apiName, params) {
+    assertPwcChannelOrFallback();
     if (type === 'plugin') {
         return updatePluginSource(apiName, params);
     }
     return updateComponentSource(apiName, params);
 }
 async function buildCode(type, apiName, client = 'web') {
+    assertPwcChannelOrFallback();
     if (type === 'component') {
         return request_ts_1.requestService.FHH({
             url: '/EM9HCompBuild/Component/AsynBuildComponent',
@@ -46662,6 +47429,7 @@ async function buildCode(type, apiName, client = 'web') {
     });
 }
 async function getBuildResult(buildId, type) {
+    assertPwcChannelOrFallback();
     return request_ts_1.requestService.FHH({
         url: `/EM1HCompBuild/${type}/getBuildResult`,
         data: { buildId }
@@ -46700,6 +47468,7 @@ async function hydratePwcComponent(component) {
     };
 }
 async function getPwcConfig() {
+    assertPwcChannelOrFallback();
     const response = await request_ts_1.requestService.FHH({
         url: '/EM1HCompBuild/Component/getConfig',
         data: {}
@@ -46707,6 +47476,7 @@ async function getPwcConfig() {
     return response.config ?? {};
 }
 async function getObjectApiNames() {
+    assertPwcChannelOrFallback();
     const response = await request_ts_1.requestService.FHH({
         url: '/EM1HNCRM/API/v1/object/describe/service/findDescribeManageList',
         data: {
@@ -46723,12 +47493,14 @@ async function getObjectApiNames() {
         .filter((item) => Boolean(item)))).sort((a, b) => a.localeCompare(b));
 }
 async function createComponentSource(data) {
+    assertPwcChannelOrFallback();
     await request_ts_1.requestService.FHH({
         url: '/EM1HCompBuild/Component/createComponent',
         data
     });
 }
 async function createPluginSource(data) {
+    assertPwcChannelOrFallback();
     await request_ts_1.requestService.FHH({
         url: '/EM1HCompBuild/Plugin/createPlugin',
         data
@@ -46739,6 +47511,7 @@ async function createPluginSource(data) {
  * create 成功后必须立即调用，失败时由请求层抛错并中止后续本地回拉流程。
  */
 async function enablePwcResource(type, apiName) {
+    assertPwcChannelOrFallback();
     const resourceType = type === 'plugin' ? 'Plugin' : 'Component';
     const action = type === 'plugin' ? 'enablePlugin' : 'enableComponent';
     await request_ts_1.requestService.FHH({
@@ -46747,6 +47520,7 @@ async function enablePwcResource(type, apiName) {
     });
 }
 async function getUrlByApiName(apiName, type) {
+    assertPwcChannelOrFallback();
     if (type === 'plugin') {
         const response = await request_ts_1.requestService.FHH({
             url: '/EM1HCompBuild/Plugin/queryPluginInfo',
@@ -47334,6 +48108,7 @@ async function pwcCreateNewService(input, context) {
     let remoteFiles = [];
     if (useAppletZip) {
         logger_ts_1.loggerService.updateLoading('Uploading initialization template archive');
+        (0, pwc_service_ts_1.assertPwcFileUploadChannel)();
         const zipBuffer = await (0, zip_ts_1.createZipBufferFromTextFiles)(input.templateFiles);
         const [remoteZip] = await request_ts_1.requestService.uploadFileList([
             {
@@ -47349,6 +48124,7 @@ async function pwcCreateNewService(input, context) {
     }
     else {
         logger_ts_1.loggerService.updateLoading('Uploading initialization template files');
+        (0, pwc_service_ts_1.assertPwcFileUploadChannel)();
         const uploaded = await request_ts_1.requestService.uploadFileList(input.templateFiles.map((file) => ({
             fileName: file.fileName,
             base64String: Buffer.from(file.content, 'utf8').toString('base64')
@@ -47882,6 +48658,7 @@ const request_ts_1 = __webpack_require__(83733);
 const request_ts_2 = __webpack_require__(35604);
 const types_ts_1 = __webpack_require__(6500);
 const pwc_mateXml_ts_1 = __webpack_require__(53683);
+const pwc_service_ts_1 = __webpack_require__(63358);
 const pwc_workspace_ts_1 = __webpack_require__(64635);
 const pwc_types_ts_1 = __webpack_require__(55844);
 /**
@@ -47937,6 +48714,7 @@ async function pwcPushNewService(apiName, type, context) {
         const { readFile } = await Promise.resolve(/* import() */).then(() => (__webpack_require__(59031)));
         const zipBuffer = await readFile(appletZipPath);
         logger_ts_1.loggerService.updateLoading(`Uploading ${apiName}.zip`);
+        (0, pwc_service_ts_1.assertPwcFileUploadChannel)();
         const [remoteZip] = await request_ts_1.requestService.uploadFileList([
             {
                 fileName: `${apiName}.zip`,
@@ -47955,6 +48733,7 @@ async function pwcPushNewService(apiName, type, context) {
         bundle = await (0, pwc_workspace_ts_1.readLocalPwcUploadBundle)(context, type, apiName, (0, pwc_mateXml_ts_1.buildPwcTypeConstraints)(config));
         // 上传源码 / 静态资源 / fileTree
         logger_ts_1.loggerService.updateLoading(`Uploading ${bundle.uploadFiles.length} files`);
+        (0, pwc_service_ts_1.assertPwcFileUploadChannel)();
         const uploaded = await request_ts_1.requestService.uploadFileList(bundle.uploadFiles.map((item) => ({
             fileName: item.fileName,
             base64String: item.base64String
@@ -50300,7 +51079,8 @@ function readRuntimeDebugFlag() {
 }
 function isRuntimeDebugEnabled() {
     const runtimeEnabled = readRuntimeDebugFlag();
-    return  false || runtimeEnabled || false;
+    // typeof 保护：webpack DefinePlugin 常量在直跑（bun/tsx/node strip）路径下不存在
+    return ( false) || runtimeEnabled || false;
 }
 
 
@@ -50501,8 +51281,8 @@ async function readCliPackageMeta() {
             ? "@share-crm/sharedev-cli".trim()
             : '@share-crm/sharedev-cli';
         const debugEnabled =  true && Boolean(false);
-        const rawVersion = ( true && "0.0.4-rc.50".trim())
-            ? "0.0.4-rc.50".trim()
+        const rawVersion = ( true && "0.0.4-rc.50-test.1".trim())
+            ? "0.0.4-rc.50-test.1".trim()
             : '0.0.0';
         const version = rawVersion + (debugEnabled ? '-debug' : '');
         return { name, version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@share-crm/sharedev-cli",
-  "version": "0.0.4-rc.50",
+  "version": "0.0.4-rc.50-test.1",
   "private": false,
   "description": "sharedev command line tool",
   "type": "module",
@@ -32,6 +32,7 @@
   "dependencies": {
     "@clack/prompts": "^1.1.0",
     "@mariozechner/pi-coding-agent": "^0.62.0",
+    "@share-crm/sharecrm-cli": "^1.1.17",
     "adm-zip": "^0.6.1",
     "axios": "~1.13.0",
     "chalk": "^5.6.2",