@whyshu/argent 0.1.27 → 0.2.1

package/src/skuflow-runner.mjs

@@ -0,0 +1,57 @@
+/**
+ * SkuFlow FULL runner 的纯辅助：任务→orchestrator record、产物 PDF 分类。
+ * 与 office-runtime 解耦，便于回归（不启 dsh / 不跑浏览器）。
+ */
+import { readdirSync, statSync } from 'node:fs'
+import { join } from 'node:path'
+
+export function buildSkuFlowRecord(task = {}) {
+  return {
+    record_id: `skuflow:${String(task.skuFlowId || '')}`,
+    store_name: String(task.store || ''),
+    sku: String(task.sku || ''),
+    qty: String(task.quantity ?? ''),
+    box: String(task.boxCount ?? ''),
+  }
+}
+
+/** 从下载目录找本次 FULL 产生的产品标/箱唛 PDF（mtime >= startedAt-60s，最新优先）。 */
+export function findSkuFlowArtifacts({
+  dir, startedAt = Date.now(), shipmentNo = '',
+  readdir = readdirSync, stat = statSync,
+} = {}) {
+  const files = readdir(dir)
+    .filter((n) => /\.pdf$/i.test(n))
+    .map((n) => ({ name: n, path: join(dir, n), mtime: stat(join(dir, n)).mtimeMs }))
+    .filter((f) => f.mtime >= startedAt - 60_000)
+    .sort((a, b) => b.mtime - a.mtime)
+  const product = files.find((f) => /产品标|Etiquetas-de-producto|producto/i.test(f.name))
+  const carton = files.find((f) => f !== product && (
+    /Envio-|Etiquetas-de-volumenes|箱唛|bultos/i.test(f.name) ||
+    (shipmentNo && f.name.includes(String(shipmentNo)))
+  ))
+  return { product, carton, files }
+}
+
+/**
+ * 多目录兜底（2026-11-03）：
+ * 紫鸟的下载目录有两种历史形态 —— `<ziniaobrowserdatas>/ziniao browser/<店铺名>/`
+ * 与直接落在 `<ziniao browser>/`（编排器默认 ZINIAO_DL 就是后者）。
+ * 之前只查带店铺名的子目录，导致「PDF 明明已生成却报未找到」。
+ * 依次尝试，拿到 product+carton 即返回；都拿不到时返回最后一个能读到的结果（便于报错诊断）。
+ */
+export function findSkuFlowArtifactsIn({
+  dirs = [], startedAt = Date.now(), shipmentNo = '',
+  readdir = readdirSync, stat = statSync,
+} = {}) {
+  let last = { product: null, carton: null, files: [] }
+  for (const dir of dirs) {
+    if (!dir) continue
+    try {
+      const found = findSkuFlowArtifacts({ dir, startedAt, shipmentNo, readdir, stat })
+      last = found
+      if (found.product && found.carton) return found
+    } catch { /* 目录不存在/不可读：试下一个 */ }
+  }
+  return last
+}

package/src/timer-status.mjs

@@ -0,0 +1,160 @@
+/**
+ * 日报定时器状态（桌宠侧，2026-10-30）。
+ *
+ * 背景：日报从「launchd 唤醒 LLM 会话」改成「launchd 直跑确定性脚本」后，
+ * 台账/会话里**再也看不到**它 —— 这正是 2026-10-30 事故的静默面：
+ * 定时器每 5 分钟都在跑、每轮都失败，launchctl 只看得到"最后 exit 0"的那一轮，
+ * 客户侧没有任何提示。引擎侧现在每轮落 `<数据根>/daily-report-timer-status.json`，
+ * 本模块把它 + LaunchAgent 的在册/加载状态合成一条**桌宠可显示**的判据。
+ *
+ * 纪律：
+ *   · 判据是**纯函数**（`analyzeTimer()`），文件/launchctl 只是取数（`collectTimer()`）；
+ *   · 只读，不写任何文件、不 bootstrap/bootout；
+ *   · 不返回 token/消息正文；状态文件缺失 ⇒ 如实说"没安装"，⛔ 不假装正常。
+ */
+import { execFile } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+
+export const TIMER_LABEL = 'com.whyshu.daily-report-timer'
+export const STATUS_FILE = 'daily-report-timer-status.json'
+/** 定时器每小时跑一次 ⇒ 超过这个窗口没运行就是"停摆"（2 轮）。 */
+export const STALE_MS = 2 * 60 * 60 * 1000
+/** 桌宠每 5s 拉一次健康；launchctl 探测按这个 TTL 缓存（别每 5s spawn 一次）。 */
+const LAUNCHCTL_TTL = 60_000
+const cache = { at: 0, value: null }
+
+export const plistPath = () => join(homedir(), 'Library', 'LaunchAgents', `${TIMER_LABEL}.plist`)
+export const statusPath = (dataDir) => join(dataDir, STATUS_FILE)
+
+function readJson(file) {
+  try {
+    const v = JSON.parse(readFileSync(file, 'utf8'))
+    return v && typeof v === 'object' ? v : null
+  } catch {
+    return null
+  }
+}
+
+const fmtTime = (iso) => {
+  const t = Date.parse(iso)
+  if (!Number.isFinite(t)) return '—'
+  return new Date(t).toLocaleString('zh-CN', {
+    month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', hour12: false,
+  })
+}
+/** "今天 14:05 / 明天 11:05 / 10-31 11:05" —— 比"周五 15:06"更像人话。 */
+const fmtDue = (iso, now = Date.now()) => {
+  const t = Date.parse(iso)
+  if (!Number.isFinite(t)) return '—'
+  const d = new Date(t)
+  const today = new Date(now)
+  const tomorrow = new Date(now)
+  tomorrow.setDate(tomorrow.getDate() + 1)
+  const sameDay = (a, b) => a.getFullYear() === b.getFullYear() && a.getMonth() === b.getMonth() && a.getDate() === b.getDate()
+  const day = sameDay(d, today) ? '今天' : sameDay(d, tomorrow) ? '明天'
+    : d.toLocaleDateString('zh-CN', { month: '2-digit', day: '2-digit' })
+  const hm = d.toLocaleTimeString('zh-CN', { hour: '2-digit', minute: '2-digit', hour12: false })
+  return `${day} ${hm}`
+}
+
+/**
+ * 纯判据：状态文件 + LaunchAgent 事实 → 一条 health check + 给 UI 的结构化载荷。
+ * @param {{status?:object|null, installed?:boolean, loaded?:boolean, now?:number}} input
+ */
+export function analyzeTimer({ status = null, installed = false, loaded = false, enabled = null, now = Date.now() } = {}) {
+  const base = {
+    label: TIMER_LABEL,
+    installed: Boolean(installed),
+    loaded: Boolean(loaded),
+    nextDueAt: status?.nextDueAt || '',
+    lastRunAt: status?.lastRunAt || '',
+    lastPushAt: status?.lastPushAt || '',
+    lastExit: status?.lastExit ?? null,
+    lastError: status?.lastError || '',
+    missedTotal: Number(status?.missedTotal || 0),
+    pending: Array.isArray(status?.pending) ? status.pending : [],
+    stores: status?.stores && typeof status.stores === 'object' ? status.stores : {},
+  }
+  const check = (level, detail) => ({
+    id: 'daily-report',
+    label: '日报定时器',
+    level,
+    detail,
+    timer: { ...base, level, detail },
+  })
+
+  // 2026-11-02：本机**明确不需要日报**（config.json 的 dailyReport.enabled=false）⇒ 一律"不适用"。
+  // 放在最前面：卸载后**状态文件会残留**，否则会一直报"状态文件在、但 LaunchAgent 不在册"。
+  // ⛔ 未声明（null）保持原语义，别把客户机的"忘装"静音。
+  if (enabled === false) return check('ok', '本机未启用日报（dailyReport.enabled=false，不适用）')
+  if (!installed && !status) {
+    if (enabled === true) return check('error', '已声明启用日报，但定时器未安装 ⇒ 不会推送（修：bash scripts/daily-report-timers.sh install）')
+    return check('warn', '未安装（客户机应有日报：bash scripts/daily-report-timers.sh install）')
+  }
+  if (!installed) {
+    return check('warn', `状态文件在、但 LaunchAgent 不在册（${TIMER_LABEL}）⇒ 不会再自动跑`)
+  }
+  if (!loaded) {
+    return check('error', `LaunchAgent 未加载（${TIMER_LABEL}）⇒ 定时器不会触发`)
+  }
+  if (!status || !status.lastRunAt) {
+    return check('warn', '已安装，但还没有运行记录（等下一轮，或看 daily-report-timer.err.log）')
+  }
+  const runAge = now - Date.parse(status.lastRunAt)
+  const nextLine = status.nextDueAt ? `下次 ${fmtDue(status.nextDueAt, now)}` : '下次时间未知'
+  const pushLine = status.lastPushAt ? `上次推送 ${fmtTime(status.lastPushAt)}` : '还没有成功推送记录'
+  if (status.lastExit) {
+    return check('error', `上次运行失败（exit ${status.lastExit}）：${String(status.lastError || '无错误尾巴').slice(0, 160)}`)
+  }
+  if (Number.isFinite(runAge) && runAge > STALE_MS) {
+    return check('error', `超过 2h 没运行（上次 ${fmtTime(status.lastRunAt)}）⇒ 定时器疑似停摆；${nextLine}`)
+  }
+  if (base.missedTotal > 0) {
+    const names = base.pending.slice(0, 3).map((p) => {
+      const days = Array.isArray(p.missed) ? p.missed : []
+      return `${p.store}${days.length ? `（${days[days.length - 1]}）` : ''}`
+    }).join('；')
+    return check('warn', `有 ${base.missedTotal} 天未推送：${names}${base.pending.length > 3 ? ' 等' : ''}；${nextLine}`)
+  }
+  return check('ok', `${nextLine} · ${pushLine} · 上次运行 ${fmtTime(status.lastRunAt)}`)
+}
+
+/** 取 LaunchAgent 是否在册/已加载（只读；`launchctl print` 非零 ⇒ 未加载）。 */
+async function probeLaunchAgent({ exec = execFile, uid = typeof process.getuid === 'function' ? process.getuid() : 501, label = TIMER_LABEL } = {}) {
+  const installed = existsSync(plistPath())
+  if (!installed) return { installed, loaded: false }
+  const loaded = await new Promise((resolve) => {
+    try {
+      exec('launchctl', ['print', `gui/${uid}/${label}`], { timeout: 1500 }, (err, stdout, stderr) => {
+        resolve(!err && !/could not find service/i.test(String(stderr || stdout || '')))
+      })
+    } catch {
+      resolve(false)
+    }
+  })
+  return { installed, loaded }
+}
+
+/**
+ * 本机是否声明启用日报：`<数据根>/config.json` → `dailyReport.enabled`。
+ * 三态：true（应启用）/ false（本机不需要）/ null（未声明 ⇒ 保持旧语义）。
+ */
+export function dailyReportEnabled(dataDir) {
+  const cfg = dataDir ? readJson(join(dataDir, 'config.json')) : null
+  const v = cfg && cfg.dailyReport && cfg.dailyReport.enabled
+  return typeof v === 'boolean' ? v : null
+}
+
+/** 取一次（带 TTL 缓存）；`refresh=true` 强制重探。 */
+export async function collectTimer({ dataDir, refresh = false, now = Date.now() } = {}) {
+  let la = cache.value
+  if (refresh || !la || now - cache.at > LAUNCHCTL_TTL) {
+    la = await probeLaunchAgent()
+    cache.value = la
+    cache.at = now
+  }
+  const status = dataDir ? readJson(statusPath(dataDir)) : null
+  return analyzeTimer({ status, installed: la.installed, loaded: la.loaded, enabled: dailyReportEnabled(dataDir), now })
+}

package/src/whyshu-auth.mjs

@@ -0,0 +1,277 @@
+/**
+ * 问述账号一键登录（RFC 8628 设备码）—— desktop host 侧。
+ *
+ * 复用 whyshu-svr 已注册的 client_id=argent_cli：
+ *   POST https://whyshu.com/api/oauth/device   → user_code / verification_uri / interval
+ *   用户浏览器打开 https://whyshu.com/oauth?user_code=… 授权
+ *   POST https://whyshu.com/api/oauth/token    → pending / access_token（当前 30 天 JWT）
+ *   GET  https://whyshu.com/api/oauth/userinfo → 昵称/手机号/plan
+ *
+ * 只把 token 写进 dsh credentials（WHYSHU_API_KEY）：⛔ 不返回给 client、⛔ 不打印、⛔ 不写仓库。
+ */
+import { execFile } from 'node:child_process'
+import { promisify } from 'node:util'
+
+const OAUTH_BASE = 'https://whyshu.com'
+const CLIENT_ID = 'argent_cli'   // whyshu-svr 已注册；换成 argent_desktop 需服务端加 Client 行
+const REF = 'WHYSHU_API_KEY'
+// 2026-11-06（P3b）：refresh_token 槽位；access 30 天到期前自动续期，避免「每 30 天重新登录」
+const REFRESH_REF = 'WHYSHU_REFRESH_TOKEN'
+const CACHE_MS = 20_000
+const execFileAsync = promisify(execFile)
+
+let cache = { at: 0, status: null }
+
+const json = (res, code, body) => {
+  res.writeHead(code, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' })
+  res.end(JSON.stringify(body))
+}
+
+const readBody = async (req) => {
+  const chunks = []
+  for await (const c of req) chunks.push(c)
+  return Buffer.concat(chunks).toString('utf8')
+}
+
+async function oauth(path, init = {}, token = null) {
+  const headers = { 'Content-Type': 'application/json', ...(init.headers || {}) }
+  if (token) headers.Authorization = `Bearer ${token}`
+  const res = await fetch(`${OAUTH_BASE}${path}`, { ...init, headers, signal: AbortSignal.timeout(8000) })
+  const body = await res.json().catch(() => null)
+  return { status: res.status, ok: res.ok, body }
+}
+
+/** 仅用于展示剩余天数；不验签（验签在服务端）。 */
+export function decodeJwtExp(token) {
+  try {
+    const part = String(token).split('.')[1]
+    if (!part) return null
+    const payload = JSON.parse(Buffer.from(part.replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString('utf8'))
+    return Number.isFinite(payload.exp) ? payload.exp * 1000 : null
+  } catch {
+    return null
+  }
+}
+
+function credentialService(ctx) {
+  const svc = typeof ctx?.get === 'function' ? ctx.get('credentials') : null
+  return svc && typeof svc.resolve === 'function' ? svc : null
+}
+
+async function readCredential(ctx, ref) {
+  const svc = credentialService(ctx)
+  if (svc) {
+    try {
+      const hit = await svc.resolve(ref)
+      if (hit?.value) return hit.value
+    } catch { /* 落到 env */ }
+  }
+  return process.env[ref] || null
+}
+
+const readToken = (ctx) => readCredential(ctx, REF)
+const readRefreshToken = (ctx) => readCredential(ctx, REFRESH_REF)
+
+async function setCredential(ctx, ref, value) {
+  const svc = credentialService(ctx)
+  if (!svc || typeof svc.set !== 'function') throw new Error(`dsh credentials 服务不可用，无法保存 ${ref}`)
+  await svc.set(ref, value)
+}
+
+async function writeToken(ctx, token) {
+  await setCredential(ctx, REF, token)
+  cache = { at: 0, status: null }
+}
+
+async function writeRefreshToken(ctx, token) {
+  if (!token) return
+  try { await setCredential(ctx, REFRESH_REF, token) } catch { /* refresh 没存上不阻断登录 */ }
+}
+
+async function clearToken(ctx) {
+  const svc = credentialService(ctx)
+  if (svc && typeof svc.unset === 'function') {
+    await svc.unset(REF).catch(() => {})
+    await svc.unset(REFRESH_REF).catch(() => {})
+  }
+  cache = { at: 0, status: null }
+}
+
+/**
+ * 用 refresh_token 续期（服务端轮换）：成功则写回新的 access + refresh；失败返回 {ok:false}。
+ * 由 401/过期自动触发，也可手动调用。
+ */
+export async function refreshWhyshuToken(ctx) {
+  const refresh = await readRefreshToken(ctx).catch(() => null)
+  if (!refresh) return { ok: false, reason: 'no-refresh-token' }
+  try {
+    const r = await oauth('/api/oauth/token', {
+      method: 'POST',
+      body: JSON.stringify({ grant_type: 'refresh_token', refresh_token: refresh, client_id: CLIENT_ID }),
+    })
+    const b = r.body || {}
+    if (!r.ok || !b.access_token) {
+      const { logClientError } = await import('./error-log.mjs')
+      logClientError({ scope: 'whyshu-auth', code: b.error || `http-${r.status}`, message: b.error_description || 'refresh 失败' })
+      return { ok: false, reason: b.error || `http-${r.status}` }
+    }
+    await writeToken(ctx, b.access_token)
+    await writeRefreshToken(ctx, b.refresh_token)
+    return { ok: true, expiresAt: decodeJwtExp(b.access_token) }
+  } catch (e) {
+    const { logClientError } = await import('./error-log.mjs')
+    logClientError({ scope: 'whyshu-auth', code: e?.code || 'refresh_error', message: e?.message || String(e) })
+    return { ok: false, reason: String(e?.message || e) }
+  }
+}
+
+const iso = (ms) => (Number.isFinite(ms) ? new Date(ms).toISOString() : null)
+const daysLeft = (ms) => (Number.isFinite(ms) ? Math.max(0, Math.ceil((ms - Date.now()) / 86_400_000)) : null)
+
+/**
+ * 当前问述账号状态（带 20s 缓存；refresh=true 强制重拉）。
+ * @returns {Promise<{loggedIn:boolean,expired?:boolean,nickname?:string,phone?:string,plan?:string,expiresAt?:string|null,daysLeft?:number|null,error?:string}>}
+ */
+export async function getWhyshuStatus(ctx, { refresh = false } = {}) {
+  const now = Date.now()
+  if (!refresh && cache.status && now - cache.at < CACHE_MS) return cache.status
+  const token = await readToken(ctx)
+  if (!token) {
+    cache = { at: now, status: { loggedIn: false, reason: 'not-logged-in' } }
+    return cache.status
+  }
+  let tokenValue = token
+  let exp = decodeJwtExp(tokenValue)
+  // 2026-11-06：access 过期 ⇒ 先用 refresh_token 续期（服务端轮换），成功则继续用新 token
+  if (exp !== null && exp <= now) {
+    const refreshed = await refreshWhyshuToken(ctx).catch(() => null)
+    if (refreshed && refreshed.ok) {
+      tokenValue = await readToken(ctx)
+      exp = decodeJwtExp(tokenValue)
+    }
+  }
+  if (exp !== null && exp <= now) {
+    cache = { at: now, status: { loggedIn: false, expired: true, expiresAt: iso(exp), daysLeft: 0 } }
+    return cache.status
+  }
+  try {
+    let info = await oauth('/api/oauth/userinfo', {}, tokenValue)
+    if (info.status === 401) {
+      const refreshed = await refreshWhyshuToken(ctx).catch(() => null)
+      if (refreshed && refreshed.ok) {
+        tokenValue = await readToken(ctx)
+        exp = decodeJwtExp(tokenValue)
+        info = await oauth('/api/oauth/userinfo', {}, tokenValue)
+      }
+    }
+    if (!info.ok || !info.body?.id) {
+      cache = { at: now, status: { loggedIn: false, invalid: true, expiresAt: iso(exp), status: info.status } }
+      return cache.status
+    }
+    cache = {
+      at: now,
+      status: {
+        loggedIn: true,
+        nickname: info.body.nickname || '',
+        phone: info.body.phone || '',
+        plan: info.body.plan || 'free',
+        expiresAt: iso(exp),
+        daysLeft: daysLeft(exp),
+      },
+    }
+    return cache.status
+  } catch (e) {
+    return { loggedIn: false, error: String(e?.message || e).slice(0, 200), expiresAt: iso(exp) }
+  }
+}
+
+function openerForPlatform() {
+  if (process.platform === 'darwin') return { cmd: 'open', args: (u) => [u] }
+  if (process.platform === 'win32') return { cmd: 'cmd', args: (u) => ['/c', 'start', '', u] }
+  return { cmd: 'xdg-open', args: (u) => [u] }
+}
+
+/**
+ * 注册 /api/argent/auth/*（宿主全局认证兜底；不返回 token）。
+ */
+export function registerWhyshuAuth(ctx) {
+  ctx.effect(() => ctx.webServer.register({
+    kind: 'prefix',
+    path: '/api/argent/auth',
+    handler: async (req, res) => {
+      const url = new URL(req.url || '/', 'http://localhost')
+      const method = (req.method || 'GET').toUpperCase()
+      try {
+        if (url.pathname === '/api/argent/auth/device') {
+          if (method !== 'POST') return json(res, 405, { ok: false, error: 'method-not-allowed' })
+          const r = await oauth('/api/oauth/device', {
+            method: 'POST',
+            body: JSON.stringify({ client_id: CLIENT_ID }),
+          })
+          const b = r.body || {}
+          if (!r.ok || !b.device_code) return json(res, 200, { ok: false, error: b.error || `device 端点失败（${r.status}）` })
+          return json(res, 200, {
+            ok: true,
+            device_code: b.device_code,
+            user_code: b.user_code,
+            verification_uri: b.verification_uri,
+            verification_uri_complete: b.verification_uri_complete,
+            interval: b.interval || 5,
+            expires_in: b.expires_in || 600,
+          })
+        }
+
+        if (url.pathname === '/api/argent/auth/poll') {
+          if (method !== 'POST') return json(res, 405, { ok: false, error: 'method-not-allowed' })
+          const body = JSON.parse((await readBody(req)) || '{}')
+          const deviceCode = String(body.device_code || '').trim()
+          if (!deviceCode) return json(res, 200, { status: 'error', error: '缺少 device_code' })
+          const r = await oauth('/api/oauth/token', {
+            method: 'POST',
+            body: JSON.stringify({
+              device_code: deviceCode,
+              grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+            }),
+          })
+          const b = r.body || {}
+          if (b.error === 'authorization_pending') return json(res, 200, { status: 'pending' })
+          if (b.error === 'access_denied' || !b.access_token) {
+            return json(res, 200, { status: 'denied', error: b.error_description || b.error || '授权失败或已过期' })
+          }
+          await writeToken(ctx, b.access_token)
+          await writeRefreshToken(ctx, b.refresh_token)
+          const status = await getWhyshuStatus(ctx, { refresh: true })
+          return json(res, 200, { status: 'approved', account: status })
+        }
+
+        if (url.pathname === '/api/argent/auth/status') {
+          const status = await getWhyshuStatus(ctx, { refresh: url.searchParams.get('refresh') === '1' })
+          return json(res, 200, status)
+        }
+
+        if (url.pathname === '/api/argent/auth/logout') {
+          if (method !== 'POST') return json(res, 405, { ok: false, error: 'method-not-allowed' })
+          await clearToken(ctx)
+          return json(res, 200, { ok: true })
+        }
+
+        if (url.pathname === '/api/argent/auth/open') {
+          if (method !== 'POST') return json(res, 405, { ok: false, error: 'method-not-allowed' })
+          const body = JSON.parse((await readBody(req)) || '{}')
+          let target
+          try { target = new URL(String(body.url || '')) } catch { return json(res, 400, { ok: false, error: 'bad-url' }) }
+          if (target.protocol !== 'https:' || target.hostname !== 'whyshu.com' || !target.pathname.startsWith('/oauth')) {
+            return json(res, 400, { ok: false, error: 'url-not-allowed' })
+          }
+          const opener = openerForPlatform()
+          await execFileAsync(opener.cmd, opener.args(target.href), { timeout: 5000 })
+          return json(res, 200, { ok: true })
+        }
+
+        return json(res, 404, { ok: false, error: 'not-found' })
+      } catch (e) {
+        return json(res, 500, { ok: false, error: String(e?.message || e).slice(0, 240) })
+      }
+    },
+  }), 'argent: whyshu auth endpoints')
+}