@xbongbong/xbbcli 2.0.0

package/token-generate.js

@@ -0,0 +1,109 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { cli, Strategy } from './xbb-registry.js';
+
+const CONFIG_FILE = path.join(os.homedir(), '.xbbcli', 'config.env');
+const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/user/generateToken';
+const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
+const MISSING_TOKEN_MESSAGE = '缺少 token；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>';
+
+function readConfig() {
+  try {
+    return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+  } catch {
+    return {};
+  }
+}
+
+function resolveBaseUrl(corpid) {
+  if (corpid.startsWith('ding') || corpid.includes('$$ding')) {
+    return 'https://proapi.xbongbong.com';
+  }
+  return 'https://appapi.xbongbong.com';
+}
+
+function getRuntimeConfig(kwargs) {
+  const suppliedCorpid = String(kwargs.corpid ?? '').trim();
+  const suppliedToken = String(kwargs.token ?? '').trim();
+  if (suppliedCorpid && suppliedToken) {
+    return {
+      corpid: suppliedCorpid,
+      token: suppliedToken,
+      baseUrl: resolveBaseUrl(suppliedCorpid),
+      userId: '',
+    };
+  }
+
+  const config = readConfig();
+  return {
+    corpid: String(config.corpid || '').trim(),
+    token: String(config.token || '').trim(),
+    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
+    userId: String(config.userId || '').trim(),
+  };
+}
+
+function buildApiUrl(baseUrl, apiUrl) {
+  const apiPath = new URL(apiUrl).pathname;
+  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
+}
+
+function makeErrorRow(code, msg, baseUrl = '', corpid = '') {
+  return [{ corpid, token: '', checkUserId: '', resetToken: '', baseUrl, code, msg }];
+}
+
+cli({
+  site: 'xbb',
+  name: 'token-generate',
+  description: '生成/获取个人token接口',
+  strategy: Strategy.PUBLIC,
+  access: 'write',
+  browser: false,
+  domain: 'proapi.xbongbong.com',
+  args: [
+    { name: 'corpid', type: 'str', default: '', help: '企业 ID；需与 --token 同时提供，提供后不读取本地配置' },
+    { name: 'token', type: 'str', default: '', help: 'API token；需与 --corpid 同时提供，提供后不读取本地配置' },
+    { name: 'checkUserId', type: 'str', default: '', help: '生成/获取个人token对应的人员id（必填）' },
+    { name: 'resetToken', type: 'str', default: '0', help: '是否重置token：0不刷新（默认），1刷新token' },
+    { name: 'debug', type: 'bool', default: false, help: '输出请求体和返回体调试信息' },
+    { name: 'raw', type: 'bool', default: false, help: '输出接口返回的原文' },
+  ],
+  columns: ['corpid', 'token', 'checkUserId', 'resetToken', 'baseUrl', 'code', 'msg'],
+  func: async function (kwargs) {
+    const debug = Boolean(kwargs.debug);
+    const { corpid, token, baseUrl, userId } = getRuntimeConfig(kwargs);
+    const checkUserId = (kwargs.checkUserId ? String(kwargs.checkUserId) : userId).trim();
+    const resetTokenValue = String(kwargs.resetToken ?? '').trim();
+    const resetToken = resetTokenValue !== '' ? Number(resetTokenValue) : 0;
+    if (resetToken !== 0 && resetToken !== 1) {
+      return makeErrorRow('INVALID_RESETTOKEN', '--resetToken 仅支持 0（获取）或 1（重置）', baseUrl, corpid);
+    }
+    const payload = { corpid, resetToken, checkUserId };
+    const requestBody = JSON.stringify(payload);
+    if (!payload.corpid) return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>', baseUrl, payload.corpid);
+    if (!payload.checkUserId) return makeErrorRow('NO_CHECKUSERID', '缺少 --checkUserId；未填则使用配置中的userId', baseUrl, payload.corpid);
+    if (!token) return makeErrorRow('NO_TOKEN', MISSING_TOKEN_MESSAGE, baseUrl, payload.corpid);
+    const sign = crypto.createHash('sha256').update(requestBody + token).digest('hex');
+    const headers = Object.assign({ 'Content-Type': 'application/json;charset=UTF-8', sign }, userId ? { userId } : {});
+    if (debug) {
+      process.stderr.write(`[debug] URL: ${buildApiUrl(baseUrl, API_URL)}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${requestBody}\n`);
+    }
+    try {
+      const resp = await fetch(buildApiUrl(baseUrl, API_URL), { method: 'POST', headers, body: requestBody });
+      if (!resp.ok) return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`, baseUrl, payload.corpid);
+      const data = await resp.json();
+      const responseBody = JSON.stringify(data);
+      if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
+      if (kwargs.raw) return [{ raw: responseBody }];
+      if (data.code !== 1) return makeErrorRow(data.code ?? '', data.msg ?? '未知错误', baseUrl, payload.corpid);
+      const result = data.result;
+      const tokenValue = typeof result === 'string' ? result : (result && typeof result === 'object' ? (result.personalToken ?? result.token ?? JSON.stringify(result)) : '');
+      return [{ corpid: payload.corpid, token: tokenValue || '', checkUserId: payload.checkUserId, resetToken: String(resetToken), baseUrl: debug ? baseUrl : '', code: data.code ?? '', msg: data.msg || '' }];
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      return makeErrorRow('REQUEST_FAILED', message || '请求失败', baseUrl, payload.corpid);
+    }
+  },
+});

package/token-set.js

@@ -0,0 +1,222 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { cli, Strategy, getRegistry } from './xbb-registry.js';
+
+const CONFIG_DIR = path.join(os.homedir(), '.xbbcli');
+const CONFIG_FILE = path.join(CONFIG_DIR, 'config.env');
+const FORMLIST_FILE_SUFFIX = '.formlist.json';
+
+function resolveBaseUrl(corpid) {
+  if (corpid.startsWith('ding') || corpid.includes('$$ding')) {
+    return 'https://proapi.xbongbong.com';
+  }
+  return 'https://appapi.xbongbong.com';
+}
+
+function normalizeArg(value) {
+  return String(value || '').trim();
+}
+
+function getFormlistFile(corpid) {
+  return path.join(CONFIG_DIR, `${corpid}${FORMLIST_FILE_SUFFIX}`);
+}
+
+async function runCommandJson(name, kwargs) {
+  const command = getRegistry().get(`xbb/${name}`);
+  if (!command) throw new Error(`找不到命令：${name}`);
+  const rows = await command.func(kwargs);
+  if (!Array.isArray(rows)) throw new Error(`${name} 返回结果不是数组`);
+  return rows;
+}
+
+async function getFormlistRows(corpid, saasMark) {
+  const rows = await runCommandJson('form-list', { saasMark: String(saasMark) });
+
+  if (!Array.isArray(rows)) {
+    throw new Error(`form-list 返回结果不是数组：saasMark=${saasMark}`);
+  }
+
+  const errorRow = rows.find((item) => item && item.code);
+  if (errorRow) {
+    throw new Error(`form-list 获取失败（saasMark=${saasMark}）：${errorRow.code} ${errorRow.msg || ''}`.trim());
+  }
+
+  return rows;
+}
+
+async function getPersonalToken(corpid, token, userId) {
+  const rows = await runCommandJson('token-generate', {
+    checkUserId: userId,
+    resetToken: '1',
+    token,
+    corpid,
+  });
+
+  if (!Array.isArray(rows)) {
+    throw new Error('token-generate 返回结果不是数组');
+  }
+
+  const errorRow = rows.find((item) => item && String(item.code ?? '') !== '' && Number(item.code) !== 1);
+  if (errorRow) {
+    throw new Error(`token-generate 获取个人 token 失败：${errorRow.code} ${errorRow.msg || ''}`.trim());
+  }
+
+  const personalToken = String(rows[0]?.token || '').trim();
+  if (!personalToken.startsWith('user_')) {
+    throw new Error('token-generate 未返回有效的个人 token');
+  }
+
+  return personalToken;
+}
+
+async function writeFormlistFile(corpid) {
+  const customForms = await getFormlistRows(corpid, 2);
+  const systemForms = await getFormlistRows(corpid, 1);
+  const formlistFile = getFormlistFile(corpid);
+  const mergedRows = [...customForms, ...systemForms];
+
+  fs.writeFileSync(formlistFile, JSON.stringify(mergedRows, null, 2) + '\n', 'utf8');
+  return formlistFile;
+}
+
+function normalizeBusinessType(value) {
+  return String(value).trim().replace(/[)）\]】,，;；:：。!?！？]+$/g, '');
+}
+
+function getCommandBusinessType(command) {
+  if (command.businessType !== undefined && command.businessType !== null) {
+    return normalizeBusinessType(command.businessType);
+  }
+  const description = String(command.description || '');
+  const match = description.match(/businessType\s*:\s*(\d+)/i);
+  return match ? normalizeBusinessType(match[1]) : '';
+}
+
+function escapeCell(value) {
+  return String(value ?? '').replace(/\|/g, '\\|').replace(/\r?\n/g, ' ');
+}
+
+function optionDescription(option) {
+  return `--${option.name}: ${option.help || ''}`;
+}
+
+function writeCommandMap(corpid) {
+  const formFile = getFormlistFile(corpid);
+  if (!fs.existsSync(formFile)) {
+    throw new Error(`Form cache not found: ${formFile}`);
+  }
+  const raw = fs.readFileSync(formFile, 'utf8').replace(/^\uFEFF/, '');
+  const data = JSON.parse(raw);
+  const forms = Array.isArray(data) ? data : data.data || [];
+
+  const commands = [...getRegistry().values()]
+    .filter((command) => command.site === 'xbb')
+    .map((command) => ({
+      ...command,
+      command_options: command.args || [],
+    }));
+
+  const lines = [
+    '# XBB 命令映射',
+    '',
+    `来源：xbb --help；表单缓存：${path.basename(formFile)}`,
+    '',
+    '| 命令 | 命令名称 | formId | businessType | 字段说明 |',
+    '| --- | --- | --- | --- | --- |',
+  ];
+
+  for (const command of commands) {
+    const commandBusinessType = getCommandBusinessType(command);
+    const matchedForms = forms.filter((form) => String(form.businessType ?? '').trim() === commandBusinessType);
+    const formIds = [...new Set(matchedForms.map((form) => form.formId).filter(Boolean))];
+    const businessTypes = [...new Set(matchedForms.map((form) => form.businessType).filter(Boolean))];
+    const options = (command.command_options || []).map(optionDescription).join('<br>');
+    lines.push(
+      `| ${escapeCell(command.name)} | ${escapeCell(command.description)} | ${escapeCell(formIds.join(', '))} | ${escapeCell(businessTypes.join(', ') || commandBusinessType)} | ${escapeCell(options)} |`,
+    );
+  }
+
+  const commandMapFile = path.join(CONFIG_DIR, 'command-map.md');
+  fs.mkdirSync(CONFIG_DIR, { recursive: true });
+  fs.writeFileSync(commandMapFile, `${lines.join('\n')}\n`, 'utf8');
+  return commandMapFile;
+}
+
+function createResult(status, message, corpid, baseurl, userId, formlistFile = '', commandMapFile = '') {
+  return [{
+    status,
+    message,
+    configFile: CONFIG_FILE,
+    corpid,
+    baseurl,
+    userId,
+    formlistFile,
+    commandMapFile,
+  }];
+}
+
+async function setToken(kwargs) {
+  const corpid = normalizeArg(kwargs.corpid);
+  const token = normalizeArg(kwargs.token);
+  const userId = normalizeArg(kwargs.userId);
+
+  if (!corpid) {
+    return createResult('error', '缺少 --corpid', '', '', '');
+  }
+
+  if (!token) {
+    return createResult('error', '缺少 --token', corpid, '', '');
+  }
+
+  if (!userId) {
+    return createResult('error', '缺少 --userId', corpid, '', '');
+  }
+
+  let personalToken = token;
+  if (!token.startsWith('user_')) {
+    try {
+      personalToken = await getPersonalToken(corpid, token, userId);
+    } catch (error) {
+      return createResult('error', `生成个人 token 失败：${error.message}`, corpid, '', userId);
+    }
+  }
+
+  const baseurl = resolveBaseUrl(corpid);
+  const config = { corpid, token: personalToken, baseurl, userId };
+
+  fs.mkdirSync(CONFIG_DIR, { recursive: true });
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2) + '\n', 'utf8');
+
+  try {
+    const formlistFile = await writeFormlistFile(corpid);
+    const commandMapFile = writeCommandMap(corpid);
+    return createResult('ok', '已保存 corpid、token、baseurl、userId，并同步表单模板缓存与命令映射文件', corpid, baseurl, userId, formlistFile, commandMapFile);
+  } catch (error) {
+    return createResult(
+      'partial',
+      `已保存 corpid、token、baseurl、userId，但同步缓存失败：${error.message}`,
+      corpid,
+      baseurl,
+      userId,
+      getFormlistFile(corpid),
+      '',
+    );
+  }
+}
+
+cli({
+  site: 'xbb',
+  name: 'token-set',
+  description: '保存 xbb API token,corpid,formId清单 到本地配置文件，其他命令需要意图识别或找formId时，优先查命令映射文件(command-map.md)',
+  strategy: Strategy.PUBLIC,
+  access: 'write',
+  browser: false,
+  args: [
+    { name: 'corpid', type: 'str', help: '公司id（必填）' },
+    { name: 'token', type: 'str', help: '要保存的 API token' },
+    { name: 'userId', type: 'str', help: '操作人id（必填）' },
+  ],
+  columns: ['status', 'message', 'configFile', 'corpid', 'baseurl', 'userId', 'formlistFile', 'commandMapFile'],
+  func: setToken,
+});

package/user-add.js

@@ -0,0 +1,103 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { cli, Strategy } from './xbb-registry.js';
+
+const CONFIG_FILE = path.join(os.homedir(), '.xbbcli', 'config.env');
+const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/user/add';
+const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
+const MISSING_TOKEN_MESSAGE = '缺少 token；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>';
+
+function readConfig() {
+  try {
+    return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+  } catch {
+    return {};
+  }
+}
+
+function getRuntimeConfig() {
+  const config = readConfig();
+  return {
+    corpid: String(config.corpid || '').trim(),
+    token: String(config.token || '').trim(),
+    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
+    userId: String(config.userId || '').trim(),
+  };
+}
+
+function buildApiUrl(baseUrl, apiUrl) {
+  const apiPath = new URL(apiUrl).pathname;
+  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
+}
+
+function parseJsonArray(raw) {
+  if (Array.isArray(raw)) return raw;
+  const text = String(raw || '').trim();
+  if (!text) return null;
+  try {
+    const parsed = JSON.parse(text);
+    return Array.isArray(parsed) ? parsed : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function makeErrorRow(code, msg) {
+  return [{ code, msg }];
+}
+
+cli({
+  site: 'xbb',
+  name: 'user-add',
+  description: '新建用户接口（businessType: -1）',
+  strategy: Strategy.PUBLIC,
+  access: 'write',
+  browser: false,
+  domain: 'proapi.xbongbong.com',
+  args: [
+    { name: 'name', type: 'str', help: '用户名称（必填）' },
+    { name: 'mobile', type: 'str', help: '手机号（必填）' },
+    { name: 'roleIds', type: 'str', help: '角色id列表，JSON数组字符串（必填）' },
+    { name: 'userDepInfoList', type: 'str', help: '部门信息列表，JSON数组字符串（必填）' },
+    { name: 'avatar', type: 'str', default: '', help: '头像（可选）' },
+    { name: 'position', type: 'str', default: '', help: '职位（可选）' },
+    { name: 'email', type: 'str', default: '', help: '邮箱（可选）' },
+    { name: 'userId', type: 'str', default: '', help: '操作人id（可选）' },
+    { name: 'debug', type: 'bool', default: false, help: '输出请求体和返回体调试信息' },
+  ],
+  columns: ['code', 'msg'],
+  func: async function (kwargs) {
+    const debug = Boolean(kwargs.debug);
+    const { corpid, token, baseUrl, userId } = getRuntimeConfig();
+    const roleIds = parseJsonArray(kwargs.roleIds);
+    const userDepInfoList = parseJsonArray(kwargs.userDepInfoList);
+    const payload = { name: String(kwargs.name || ''), mobile: String(kwargs.mobile || ''), corpid };
+    if (Array.isArray(roleIds)) payload.roleIds = roleIds;
+    if (Array.isArray(userDepInfoList)) payload.userDepInfoList = userDepInfoList;
+    if (String(kwargs.avatar || '').trim()) payload.avatar = String(kwargs.avatar);
+    if (String(kwargs.position || '').trim()) payload.position = String(kwargs.position);
+    if (String(kwargs.email || '').trim()) payload.email = String(kwargs.email);
+    if (kwargs.userId) payload.userId = String(kwargs.userId);
+    const requestBody = JSON.stringify(payload);
+    if (!payload.name) return makeErrorRow('NO_NAME', '缺少 --name');
+    if (!payload.mobile) return makeErrorRow('NO_MOBILE', '缺少 --mobile');
+    if (!payload.corpid) return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>');
+    if (!Array.isArray(roleIds) || !roleIds.length) return makeErrorRow(roleIds === undefined ? 'INVALID_ROLEIDS' : 'NO_ROLEIDS', roleIds === undefined ? '--roleIds 必须是 JSON 数组字符串' : '缺少 --roleIds');
+    if (!Array.isArray(userDepInfoList) || !userDepInfoList.length) return makeErrorRow(userDepInfoList === undefined ? 'INVALID_USERDEPINFOLIST' : 'NO_USERDEPINFOLIST', userDepInfoList === undefined ? '--userDepInfoList 必须是 JSON 数组字符串' : '缺少 --userDepInfoList');
+    if (!token) return makeErrorRow('NO_TOKEN', MISSING_TOKEN_MESSAGE);
+    const sign = crypto.createHash('sha256').update(requestBody + token).digest('hex');
+    const headers = Object.assign({ 'Content-Type': 'application/json;charset=UTF-8', sign }, userId ? { userId } : {});
+    if (debug) {
+      process.stderr.write(`[debug] URL: ${buildApiUrl(baseUrl, API_URL)}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${requestBody}\n`);
+    }
+    const resp = await fetch(buildApiUrl(baseUrl, API_URL), { method: 'POST', headers, body: requestBody });
+    if (!resp.ok) return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`);
+    const data = await resp.json();
+    const responseBody = JSON.stringify(data);
+    if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
+    if (data.code !== 1) return makeErrorRow(data.code ?? '', data.msg ?? '未知错误');
+    return [{ code: data.code ?? '', msg: data.msg || '' }];
+  },
+});

package/user-del.js

@@ -0,0 +1,90 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { cli, Strategy } from './xbb-registry.js';
+
+const CONFIG_FILE = path.join(os.homedir(), '.xbbcli', 'config.env');
+const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/user/del';
+const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
+const MISSING_TOKEN_MESSAGE = '缺少 token；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>';
+
+function readConfig() {
+  try {
+    return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+  } catch {
+    return {};
+  }
+}
+
+function getRuntimeConfig() {
+  const config = readConfig();
+  return {
+    corpid: String(config.corpid || '').trim(),
+    token: String(config.token || '').trim(),
+    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
+    userId: String(config.userId || '').trim(),
+  };
+}
+
+function buildApiUrl(baseUrl, apiUrl) {
+  const apiPath = new URL(apiUrl).pathname;
+  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
+}
+
+function parseJsonArray(raw) {
+  if (Array.isArray(raw)) return raw;
+  const text = String(raw || '').trim();
+  if (!text) return null;
+  try {
+    const parsed = JSON.parse(text);
+    return Array.isArray(parsed) ? parsed : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function makeErrorRow(code, msg) {
+  return [{ code, msg }];
+}
+
+cli({
+  site: 'xbb',
+  name: 'user-del',
+  description: '删除用户接口（businessType: -1）',
+  strategy: Strategy.PUBLIC,
+  access: 'write',
+  browser: false,
+  domain: 'proapi.xbongbong.com',
+  args: [
+    { name: 'userIds', type: 'str', help: '用户id列表，JSON数组字符串（必填）' },
+    { name: 'userId', type: 'str', default: '', help: '操作人id（可选）' },
+    { name: 'debug', type: 'bool', default: false, help: '输出请求体和返回体调试信息' },
+  ],
+  columns: ['code', 'msg'],
+  func: async function (kwargs) {
+    const debug = Boolean(kwargs.debug);
+    const { corpid, token, baseUrl, userId } = getRuntimeConfig();
+    const userIds = parseJsonArray(kwargs.userIds);
+    const payload = { corpid };
+    if (Array.isArray(userIds)) payload.userIds = userIds;
+    if (kwargs.userId) payload.userId = String(kwargs.userId);
+    const requestBody = JSON.stringify(payload);
+    if (!payload.corpid) return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>');
+    if (!Array.isArray(userIds) || !userIds.length) return makeErrorRow(userIds === undefined ? 'INVALID_USERIDS' : 'NO_USERIDS', userIds === undefined ? '--userIds 必须是 JSON 数组字符串' : '缺少 --userIds');
+    if (!token) return makeErrorRow('NO_TOKEN', MISSING_TOKEN_MESSAGE);
+    const sign = crypto.createHash('sha256').update(requestBody + token).digest('hex');
+    const headers = Object.assign({ 'Content-Type': 'application/json;charset=UTF-8', sign }, userId ? { userId } : {});
+    const apiUrl = buildApiUrl(baseUrl, API_URL);
+    if (debug) {
+      process.stderr.write(`[debug] URL: ${apiUrl}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${requestBody}\n`);
+    }
+    const resp = await fetch(apiUrl, { method: 'POST', headers, body: requestBody });
+    if (!resp.ok) return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`);
+    const data = await resp.json();
+    const responseBody = JSON.stringify(data);
+    if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
+    if (data.code !== 1) return makeErrorRow(data.code ?? '', data.msg ?? '未知错误');
+    return [{ code: data.code ?? '', msg: data.msg || '' }];
+  },
+});

package/user-edit.js

@@ -0,0 +1,102 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { cli, Strategy } from './xbb-registry.js';
+
+const CONFIG_FILE = path.join(os.homedir(), '.xbbcli', 'config.env');
+const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/user/edit';
+const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
+const MISSING_TOKEN_MESSAGE = '缺少 token；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>';
+
+function readConfig() {
+  try {
+    return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+  } catch {
+    return {};
+  }
+}
+
+function getRuntimeConfig() {
+  const config = readConfig();
+  return {
+    corpid: String(config.corpid || '').trim(),
+    token: String(config.token || '').trim(),
+    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
+    userId: String(config.userId || '').trim(),
+  };
+}
+
+function buildApiUrl(baseUrl, apiUrl) {
+  const apiPath = new URL(apiUrl).pathname;
+  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
+}
+
+function parseJsonArray(raw) {
+  if (Array.isArray(raw)) return raw;
+  const text = String(raw || '').trim();
+  if (!text) return null;
+  try {
+    const parsed = JSON.parse(text);
+    return Array.isArray(parsed) ? parsed : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+function makeErrorRow(code, msg) {
+  return [{ code, msg }];
+}
+
+cli({
+  site: 'xbb',
+  name: 'user-edit',
+  description: '编辑用户接口（businessType: -1）',
+  strategy: Strategy.PUBLIC,
+  access: 'write',
+  browser: false,
+  domain: 'proapi.xbongbong.com',
+  args: [
+    { name: 'id', type: 'int', help: '用户id（必填）' },
+    { name: 'name', type: 'str', help: '用户名称（必填）' },
+    { name: 'roleIds', type: 'str', help: '角色id列表，JSON数组字符串（必填）' },
+    { name: 'userDepInfoList', type: 'str', help: '部门信息列表，JSON数组字符串（必填）' },
+    { name: 'avatar', type: 'str', default: '', help: '头像（可选）' },
+    { name: 'position', type: 'str', default: '', help: '职位（可选）' },
+    { name: 'userId', type: 'str', default: '', help: '操作人id（可选）' },
+    { name: 'debug', type: 'bool', default: false, help: '输出请求体和返回体调试信息' },
+  ],
+  columns: ['code', 'msg'],
+  func: async function (kwargs) {
+    const debug = Boolean(kwargs.debug);
+    const { corpid, token, baseUrl, userId } = getRuntimeConfig();
+    const roleIds = parseJsonArray(kwargs.roleIds);
+    const userDepInfoList = parseJsonArray(kwargs.userDepInfoList);
+    const payload = { id: Number(kwargs.id || 0), name: String(kwargs.name || ''), corpid };
+    if (Array.isArray(roleIds)) payload.roleIds = roleIds;
+    if (Array.isArray(userDepInfoList)) payload.userDepInfoList = userDepInfoList;
+    if (String(kwargs.avatar || '').trim()) payload.avatar = String(kwargs.avatar);
+    if (String(kwargs.position || '').trim()) payload.position = String(kwargs.position);
+    if (kwargs.userId) payload.userId = String(kwargs.userId);
+    const requestBody = JSON.stringify(payload);
+    if (!payload.id) return makeErrorRow('NO_ID', '缺少 --id');
+    if (!payload.name) return makeErrorRow('NO_NAME', '缺少 --name');
+    if (!payload.corpid) return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>');
+    if (!Array.isArray(roleIds) || !roleIds.length) return makeErrorRow(roleIds === undefined ? 'INVALID_ROLEIDS' : 'NO_ROLEIDS', roleIds === undefined ? '--roleIds 必须是 JSON 数组字符串' : '缺少 --roleIds');
+    if (!Array.isArray(userDepInfoList) || !userDepInfoList.length) return makeErrorRow(userDepInfoList === undefined ? 'INVALID_USERDEPINFOLIST' : 'NO_USERDEPINFOLIST', userDepInfoList === undefined ? '--userDepInfoList 必须是 JSON 数组字符串' : '缺少 --userDepInfoList');
+    if (!token) return makeErrorRow('NO_TOKEN', MISSING_TOKEN_MESSAGE);
+    const sign = crypto.createHash('sha256').update(requestBody + token).digest('hex');
+    const headers = Object.assign({ 'Content-Type': 'application/json;charset=UTF-8', sign }, userId ? { userId } : {});
+    const apiUrl = buildApiUrl(baseUrl, API_URL);
+    if (debug) {
+      process.stderr.write(`[debug] URL: ${apiUrl}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${requestBody}\n`);
+    }
+    const resp = await fetch(apiUrl, { method: 'POST', headers, body: requestBody });
+    if (!resp.ok) return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`);
+    const data = await resp.json();
+    const responseBody = JSON.stringify(data);
+    if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
+    if (data.code !== 1) return makeErrorRow(data.code ?? '', data.msg ?? '未知错误');
+    return [{ code: data.code ?? '', msg: data.msg || '' }];
+  },
+});