@xbongbong/xbbcli 2.4.5 → 2.4.6

package/sign-in-list.js

@@ -1,34 +1,9 @@
-import crypto from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
 import { cli, Strategy } from './xbb-registry.js';
-import { readActiveConfig } from './xbb-config.js';
+import { getRuntimeConfig, requestGateway, createPagination } from './xbb-http.js';
 
-const CONFIG_FILE = path.join(os.homedir(), '.xbbcli', 'config.env');
-const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/signIn/list';
-const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
+const API_PATH = '/pro/v2/api/signIn/list';
 const MISSING_TOKEN_MESSAGE = '缺少 token；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>';
-let lastPagination = null;
-
-function readConfig() {
-  return readActiveConfig();
-}
-
-function getRuntimeConfig() {
-  const config = readConfig();
-  return {
-    corpid: String(config.corpid || '').trim(),
-    token: String(config.token || '').trim(),
-    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
-    userId: String(config.userId || '').trim(),
-  };
-}
-
-function buildApiUrl(baseUrl, defaultUrl) {
-  const apiPath = new URL(defaultUrl).pathname;
-  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
-}
+const pagination = createPagination();
 
 function parseArray(raw) {
   const text = String(raw ?? '').trim();
@@ -74,7 +49,7 @@ cli({
     { name: 'userId', type: 'str', default: '', help: '操作人id（可选）' },
     { name: 'signInUserId', type: 'str', default: '', help: '签到人userId（可选）' },
     { name: 'signInUserName', type: 'str', default: '', help: '签到人姓名精确匹配（可选）' },
-    { name: 'signInCustomerId', type: 'int', default: '', help: '签到客户id（可选）' },
+    { name: 'signInCustomerId', type: 'str', default: '', help: '签到客户id（可选）' },
     { name: 'signInUserIdIn', type: 'str', default: '', help: '签到人userId集合，JSON数组字符串（可选）' },
     { name: 'signInCustomerIdIn', type: 'str', default: '', help: '签到客户id集合，JSON数组字符串（可选）' },
     { name: 'country', type: 'str', default: '', help: '签到国家（可选）' },
@@ -92,41 +67,38 @@ cli({
     { name: 'outCity', type: 'str', default: '', help: '签退城市（可选）' },
     { name: 'outDistrict', type: 'str', default: '', help: '签退区县（可选）' },
     { name: 'outAddress', type: 'str', default: '', help: '签退详情地址（可选）' },
-    { name: 'status', type: 'int', default: '', help: '签到状态（可选）' },
-    { name: 'linkBusinessType', type: 'int', default: '', help: '签到对象业务类型（可选）' },
+    { name: 'status', type: 'str', default: '', help: '签到状态（可选）' },
+    { name: 'linkBusinessType', type: 'str', default: '', help: '签到对象业务类型（可选）' },
     { name: 'startOutTime', type: 'str', default: '', help: '开始签退时间（可选）' },
     { name: 'endOutTime', type: 'str', default: '', help: '结束签退时间（可选）' },
     { name: 'debug', type: 'bool', default: false, help: '输出请求体和返回体调试信息' },
     { name: 'raw', type: 'bool', default: false, help: '输出接口返回的原文' },
   ],
   columns: ['rank', 'userId', 'userName', 'customerId', 'customerName', 'status', 'inTime', 'outTime', 'address', 'outAddress', 'data', 'code', 'msg'],
-  footerExtra: () => (lastPagination ? `totalCount ${lastPagination.totalCount} / totalPage ${lastPagination.totalPage}` : undefined),
+  footerExtra: pagination.footerExtra,
   func: async (kwargs) => {
     const debug = Boolean(kwargs.debug);
     const { corpid, token, baseUrl, userId } = getRuntimeConfig();
     const payload = buildPayload(kwargs, corpid);
-    const body = JSON.stringify(payload);
     if (!payload.corpid) return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>');
     if (!token) return makeErrorRow('NO_TOKEN', MISSING_TOKEN_MESSAGE);
     if (String(kwargs.signInUserIdIn ?? '').trim() && !Array.isArray(parseArray(kwargs.signInUserIdIn))) return makeErrorRow('INVALID_SIGNINUSERIDIN', '--signInUserIdIn 必须是 JSON 数组字符串');
     if (String(kwargs.signInCustomerIdIn ?? '').trim() && !Array.isArray(parseArray(kwargs.signInCustomerIdIn))) return makeErrorRow('INVALID_SIGNINCUSTOMERIDIN', '--signInCustomerIdIn 必须是 JSON 数组字符串');
-    const sign = crypto.createHash('sha256').update(body + token).digest('hex');
-    const headers = Object.assign({ 'Content-Type': 'application/json;charset=UTF-8', sign }, userId ? { userId } : {});
-    const apiUrl = buildApiUrl(baseUrl, API_URL);
-    if (debug) {
-      process.stderr.write(`[debug] URL: ${apiUrl}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${body}\n`);
+    const gateway = await requestGateway({
+      baseUrl,
+      apiPath: API_PATH,
+      payload,
+      token,
+      userId,
+      debug,
+    });
+    if (!gateway.ok) return makeErrorRow(gateway.code, gateway.msg);
+    pagination.update(gateway.data);
+    if (kwargs.raw) return [{ raw: gateway.responseBody }];
+    if (gateway.data.code !== 1) {
+      return makeErrorRow(gateway.data.code ?? '', gateway.data.msg ?? '未知错误');
     }
-    const resp = await fetch(apiUrl, { method: 'POST', headers, body });
-    if (!resp.ok) return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`);
-    const data = await resp.json();
-    lastPagination = data?.code === 1 && data?.result?.totalCount != null && data?.result?.totalPage != null
-      ? { totalCount: data.result.totalCount, totalPage: data.result.totalPage }
-      : null;
-    const responseBody = JSON.stringify(data);
-    if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
-    if (kwargs.raw) return [{ raw: responseBody }];
-    if (data.code !== 1) return makeErrorRow(data.code ?? '', data.msg ?? '未知错误');
-    const list = Array.isArray(data.result?.signInList) ? data.result.signInList : [];
+    const list = Array.isArray(gateway.data.result?.signInList) ? gateway.data.result.signInList : [];
     if (!list.length) return makeErrorRow('NO_DATA', '接口成功，但 signInList 为空');
     return list.map((item, index) => ({ rank: index + 1, userId: item.userId || '', userName: item.userName || '', customerId: item.customerId || '', customerName: item.customerName || '', status: item.status ?? '', inTime: item.inTime || '', outTime: item.outTime || '', address: item.address || '', outAddress: item.outAddress || '', data: JSON.stringify(item || {}), code: '', msg: '' }));
   },

package/stage-get.js

@@ -1,34 +1,9 @@
-import crypto from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
 import { cli, Strategy } from './xbb-registry.js';
-import { readActiveConfig } from './xbb-config.js';
+import { getRuntimeConfig, requestGateway } from './xbb-http.js';
 
-const CONFIG_FILE = path.join(os.homedir(), '.xbbcli', 'config.env');
-const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/stage/get';
-const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
+const API_PATH = '/pro/v2/api/stage/get';
 const MISSING_TOKEN_MESSAGE = '缺少 token；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>';
 
-function readConfig() {
-  return readActiveConfig();
-}
-
-function getRuntimeConfig() {
-  const config = readConfig();
-  return {
-    corpid: String(config.corpid || '').trim(),
-    token: String(config.token || '').trim(),
-    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
-    userId: String(config.userId || '').trim(),
-  };
-}
-
-function buildApiUrl(baseUrl, apiUrl) {
-  const apiPath = new URL(apiUrl).pathname;
-  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
-}
-
 function makeErrorRow(code, msg) {
   return [{ stageProcessId: '', stageId: '', stageName: '', reasonText: '', reasonValue: '', code, msg }];
 }
@@ -61,26 +36,25 @@ cli({
       dataId: Number(kwargs.dataId || 0),
     };
     if (kwargs.userId) payload.userId = String(kwargs.userId);
-    const requestBody = JSON.stringify(payload);
     if (!payload.corpid) return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>');
     if (!payload.formId) return makeErrorRow('NO_FORMID', '缺少 --formId');
     if (!payload.businessType) return makeErrorRow('NO_BUSINESSTYPE', '缺少 --businessType');
     if (!payload.saasMark) return makeErrorRow('NO_SAASMARK', '缺少 --saasMark');
     if (!payload.dataId) return makeErrorRow('NO_DATAID', '缺少 --dataId');
     if (!token) return makeErrorRow('NO_TOKEN', MISSING_TOKEN_MESSAGE);
-    const sign = crypto.createHash('sha256').update(requestBody + token).digest('hex');
-    const headers = Object.assign({ 'Content-Type': 'application/json;charset=UTF-8', sign }, userId ? { userId } : {});
-    const apiUrl = buildApiUrl(baseUrl, API_URL);
-    if (debug) {
-      process.stderr.write(`[debug] URL: ${apiUrl}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${requestBody}\n`);
+    const gateway = await requestGateway({
+      baseUrl,
+      apiPath: API_PATH,
+      payload,
+      token,
+      userId,
+      debug,
+    });
+    if (!gateway.ok) return makeErrorRow(gateway.code, gateway.msg);
+    if (gateway.data.code !== 1) {
+      return makeErrorRow(gateway.data.code ?? '', gateway.data.msg ?? '未知错误');
     }
-    const resp = await fetch(apiUrl, { method: 'POST', headers, body: requestBody });
-    if (!resp.ok) return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`);
-    const data = await resp.json();
-    const responseBody = JSON.stringify(data);
-    if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
-    if (data.code !== 1) return makeErrorRow(data.code ?? '', data.msg ?? '未知错误');
-    const result = data.result || {};
+    const result = gateway.data.result || {};
     const stageList = Array.isArray(result.stageList) ? result.stageList : [];
     const reasonList = Array.isArray(result.reasonList) ? result.reasonList : [];
     const size = Math.max(stageList.length, reasonList.length, 1);
@@ -90,8 +64,8 @@ cli({
       stageName: stageList[index]?.stageName || '',
       reasonText: reasonList[index]?.text || '',
       reasonValue: reasonList[index]?.value || '',
-      code: data.code ?? '',
-      msg: data.msg || '',
+      code: gateway.data.code ?? '',
+      msg: gateway.data.msg || '',
     }));
   },
 });

package/stage-jump.js

@@ -1,34 +1,9 @@
-import crypto from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
 import { cli, Strategy } from './xbb-registry.js';
-import { readActiveConfig } from './xbb-config.js';
+import { getRuntimeConfig, requestGateway } from './xbb-http.js';
 
-const CONFIG_FILE = path.join(os.homedir(), '.xbbcli', 'config.env');
-const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/stage/jump';
-const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
+const API_PATH = '/pro/v2/api/stage/jump';
 const MISSING_TOKEN_MESSAGE = '缺少 token；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>';
 
-function readConfig() {
-  return readActiveConfig();
-}
-
-function getRuntimeConfig() {
-  const config = readConfig();
-  return {
-    corpid: String(config.corpid || '').trim(),
-    token: String(config.token || '').trim(),
-    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
-    userId: String(config.userId || '').trim(),
-  };
-}
-
-function buildApiUrl(baseUrl, apiUrl) {
-  const apiPath = new URL(apiUrl).pathname;
-  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
-}
-
 function makeErrorRow(code, msg) {
   return [{ dataId: '', resultCode: '', resultMsg: '', code, msg }];
 }
@@ -48,7 +23,7 @@ cli({
     { name: 'dataId', type: 'int', help: '表单数据id（必填）' },
     { name: 'toStageId', type: 'int', help: '目标阶段id（必填）' },
     { name: 'stageProcessId', type: 'int', help: '阶段流程id（必填）' },
-    { name: 'reasonId', type: 'int', default: '', help: '原因id（可选）' },
+    { name: 'reasonId', type: 'str', default: '', help: '原因id（可选）' },
     { name: 'memo', type: 'str', default: '', help: '备注（可选）' },
     { name: 'userId', type: 'str', default: '', help: '操作人id（可选）' },
     { name: 'debug', type: 'bool', default: false, help: '输出请求体和返回体调试信息' },
@@ -69,7 +44,6 @@ cli({
     if (kwargs.userId) payload.userId = String(kwargs.userId);
     if (String(kwargs.reasonId ?? '') !== '') payload.reasonId = Number(kwargs.reasonId);
     if (String(kwargs.memo ?? '') !== '') payload.memo = String(kwargs.memo);
-    const requestBody = JSON.stringify(payload);
 
     if (!payload.corpid) return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>');
     if (!payload.formId) return makeErrorRow('NO_FORMID', '缺少 --formId');
@@ -80,27 +54,19 @@ cli({
     if (!payload.stageProcessId) return makeErrorRow('NO_STAGEPROCESSID', '缺少 --stageProcessId');
     if (!token) return makeErrorRow('NO_TOKEN', MISSING_TOKEN_MESSAGE);
 
-    const sign = crypto.createHash('sha256').update(requestBody + token).digest('hex');
-    const headers = Object.assign({ 'Content-Type': 'application/json;charset=UTF-8', sign }, userId ? { userId } : {});
-    if (debug) {
-      process.stderr.write(`[debug] URL: ${buildApiUrl(baseUrl, API_URL)}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${requestBody}\n`);
-    }
-    const resp = await fetch(buildApiUrl(baseUrl, API_URL), {
-      method: 'POST',
-      headers,
-      body: requestBody,
+    const gateway = await requestGateway({
+      baseUrl,
+      apiPath: API_PATH,
+      payload,
+      token,
+      userId,
+      debug,
     });
-
-    if (!resp.ok) {
-      const errText = await resp.text();
-      if (debug) process.stderr.write(`[debug] ResponseBody: ${errText}\n`);
-      return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`);
+    if (!gateway.ok) return makeErrorRow(gateway.code, gateway.msg);
+    if (gateway.data.code !== 1) {
+      return makeErrorRow(gateway.data.code ?? '', gateway.data.msg ?? '未知错误');
     }
-    const data = await resp.json();
-    const responseBody = JSON.stringify(data);
-    if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
-    if (data.code !== 1) return makeErrorRow(data.code ?? '', data.msg ?? '未知错误');
-    const result = data.result || {};
-    return [{ dataId: result.dataId || payload.dataId || '', resultCode: result.code ?? '', resultMsg: result.msg || '', code: data.code ?? '', msg: data.msg || '' }];
+    const result = gateway.data.result || {};
+    return [{ dataId: result.dataId || payload.dataId || '', resultCode: result.code ?? '', resultMsg: result.msg || '', code: gateway.data.code ?? '', msg: gateway.data.msg || '' }];
   },
 });

package/supplier-add.js

@@ -1,33 +1,7 @@
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import crypto from 'node:crypto';
 import { cli, Strategy } from './xbb-registry.js';
-import { readActiveConfig } from './xbb-config.js';
+import { getRuntimeConfig, requestGateway } from './xbb-http.js';
 
-const CONFIG_DIR = path.join(os.homedir(), '.xbbcli');
-const CONFIG_FILE = path.join(CONFIG_DIR, 'config.env');
-const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/supplier/add';
-const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
-
-function readConfig() {
-  return readActiveConfig();
-}
-
-function getRuntimeConfig() {
-  const config = readConfig();
-  return {
-    corpid: String(config.corpid || '').trim(),
-    token: String(config.token || '').trim(),
-    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
-    userId: String(config.userId || '').trim(),
-  };
-}
-
-function buildApiUrl(baseUrl, defaultUrl) {
-  const apiPath = new URL(defaultUrl).pathname;
-  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
-}
+const API_PATH = '/pro/v2/api/supplier/add';
 
 function makeErrorRow(code, msg) {
   return [{
@@ -84,7 +58,6 @@ cli({
       payload.dataList = parsedDataList;
     }
 
-    const body = JSON.stringify(payload);
 
     if (!payload.corpid) {
       return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>');
@@ -99,41 +72,26 @@ cli({
       return makeErrorRow('INVALID_DATALIST', '--dataList 必须是 JSON 对象字符串');
     }
 
-    const sign = crypto.createHash('sha256').update(body + token).digest('hex');
-    const headers = Object.assign({
-      'Content-Type': 'application/json;charset=UTF-8',
-      sign,
-    }, userId ? { userId } : {});
-    const apiUrl = buildApiUrl(baseUrl, API_URL);
-    if (debug) {
-      process.stderr.write(`[debug] URL: ${apiUrl}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${body}\n`);
-    }
-    const resp = await fetch(apiUrl, {
-      method: 'POST',
-      headers,
-      body,
+    const gateway = await requestGateway({
+      baseUrl,
+      apiPath: API_PATH,
+      payload,
+      token,
+      userId,
+      debug,
     });
-
-    if (!resp.ok) {
-      const responseText = await resp.text();
-      if (debug) process.stderr.write(`[debug] ResponseBody: ${responseText}\n`);
-      return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`);
-    }
-
-    const data = await resp.json();
-    const responseBody = JSON.stringify(data);
-    if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
-    if (data.code !== 1) {
-      return makeErrorRow(data.code ?? '', data.msg ?? '未知错误');
+    if (!gateway.ok) return makeErrorRow(gateway.code, gateway.msg);
+    if (gateway.data.code !== 1) {
+      return makeErrorRow(gateway.data.code ?? '', gateway.data.msg ?? '未知错误');
     }
 
-    const result = data.result || {};
+    const result = gateway.data.result || {};
     return [{
       dataId: result.dataId || '',
       resultCode: result.code ?? '',
       resultMsg: result.msg || '',
-      code: data.code ?? '',
-      msg: data.msg || '',
+      code: gateway.data.code ?? '',
+      msg: gateway.data.msg || '',
     }];
   },
 });

package/token-del.js

@@ -127,7 +127,7 @@ async function delCompany(kwargs) {
 cli({
   site: 'xbb',
   name: 'token-del',
-  description: '删除指定的已保存公司配置，并保证剩余配置中仅且只有一个被启用；默认同时删除 XBB_* 环境变量',
+  description: '删除指定的已保存公司配置',
   strategy: Strategy.PUBLIC,
   access: 'write',
   browser: false,

package/token-list.js

@@ -57,20 +57,39 @@ function makeErrorRow(code, msg) {
 cli({
   site: 'xbb',
   name: 'token-list',
-  description: '列出本地保存的多家公司配置，并标记唯一启用的公司（enable=true）',
+  description: '列出本地保存的多家公司配置',
   strategy: Strategy.PUBLIC,
   access: 'read',
   browser: false,
   domain: 'proapi.xbongbong.com',
   args: [
     { name: 'showToken', type: 'bool', default: false, help: '显示完整 token；默认只显示脱敏预览' },
+    { name: 'raw', type: 'bool', default: false, help: '输出本地配置原文（token 仍按 --showToken 决定是否掩码）' },
+    { name: 'debug', type: 'bool', default: false, help: '输出配置路径等调试信息' },
   ],
   columns: ['enable', 'corpid', 'userId', 'baseurl', 'token', 'corpName', 'userName', 'code', 'msg', 'source'],
   func: async (kwargs) => {
     const showToken = Boolean(kwargs.showToken);
+    const debug = Boolean(kwargs.debug);
     const companies = readCompanies();
     const envConfig = readEnvConfig();
     const envPresent = hasEnvConfig(envConfig);
+    if (debug) {
+      process.stderr.write(`[debug] ConfigFile: ${CONFIG_FILE}\n[debug] CompanyCount: ${companies.length}\n`);
+    }
+
+    // token-list 无网络请求；--raw 输出本地配置原始结构（token 仍按 --showToken 决定是否掩码）
+    if (kwargs.raw) {
+      const rawCompanies = companies.map((item) => ({
+        ...item,
+        token: showToken ? String(item.token || '') : maskToken(item.token),
+      }));
+      const rawEnv = envPresent
+        ? { ...envConfig, token: showToken ? String(envConfig.token || '') : maskToken(envConfig.token) }
+        : null;
+      return [{ raw: JSON.stringify({ companies: rawCompanies, env: rawEnv }, null, 2) }];
+    }
+
     const rows = [];
 
     // 环境变量行：XBB_CORPID / XBB_TOKEN 有值就回显，source=env；仅供外部系统消费，业务命令不再读取

package/token-set.js

@@ -4,7 +4,7 @@ import { saveCompanyCredentials } from './xbb-token-store.js';
 cli({
   site: 'xbb',
   name: 'token-set',
-  description: '保存 xbb API token,corpid,formId清单 到本地配置文件，并缓存部门与员工清单(<corpid>.department-user.json)；其他命令需要意图识别或找formId时，优先查命令映射文件(<corpid>.command-map.md)',
+  description: '保存token,corpid,formId清单等文件 到本地，需意图识别或找formId时，优先查命令映射文件(<corpid>.command-map.md)',
   strategy: Strategy.PUBLIC,
   access: 'write',
   browser: false,

package/token-use.js

@@ -2,8 +2,6 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { cli, Strategy } from './xbb-registry.js';
-import { hasEnvConfig, persistEnvVars } from './xbb-config.js';
-import { resolveBaseUrl } from './xbb-token-store.js';
 
 const CONFIG_DIR = path.join(os.homedir(), '.xbbcli');
 const CONFIG_FILE = path.join(CONFIG_DIR, 'config.env');
@@ -68,8 +66,6 @@ async function useCompany(kwargs) {
     return createResult('error', '缺少 --corpid', '', '', '');
   }
 
-  const envPresent = hasEnvConfig();
-
   const companies = readCompanies();
   if (!companies.length) {
     return createResult('error', '缺少本地配置；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>', corpid, '', 0);
@@ -80,45 +76,16 @@ async function useCompany(kwargs) {
     return createResult('error', `未找到 corpid=${corpid} 的本地配置`, corpid, '', companies.length);
   }
 
-  const target = companies[index];
-  // XBB_* 有值时会同步覆盖环境变量，需要完整凭证：缺 token 时直接拒绝，避免残留上一家公司的 XBB_TOKEN
-  if (envPresent && !String(target.token || '').trim()) {
-    return createResult('error', `corpid=${corpid} 的本地配置缺少 token，无法同步到 XBB_* 环境变量；请先执行 xbbcli token-set --corpid ${corpid} --token <TOKEN> --userId <USERID>`, corpid, '', companies.length);
-  }
-
   const next = enableOnly(companies, index);
   writeCompanies(next);
 
-  const parts = [`已启用 corpid=${corpid}，其余公司已标记为 enable=false`];
-
-  // 环境变量中有值时把启用公司凭证同步写回 XBB_*（供外部系统消费，本 CLI 不再读取）
-  if (envPresent) {
-    try {
-      persistEnvVars({
-        corpid: target.corpid,
-        token: target.token,
-        // 条目缺少 baseurl 时按 corpid 规则推导，避免残留上一家公司的 XBB_BASEURL
-        baseurl: target.baseurl || resolveBaseUrl(target.corpid),
-        userId: target.userId,
-        corpName: target.corpName,
-        userName: target.userName,
-      });
-      const suffix = process.platform === 'win32'
-        ? '（Windows 需重开终端后才生效）'
-        : '（重新 source ~/.xbbcli/env.sh 后才生效）';
-      parts.push(`检测到环境变量 XBB_* 有值，已同步更新为该公司凭证（供外部系统使用，本 CLI 不读取）${suffix}`);
-    } catch (error) {
-      return createResult('partial', `已启用 corpid=${corpid}，但同步更新环境变量失败：${String(error.message || error)}`, corpid, 'true', next.length);
-    }
-  }
-
-  return createResult('ok', parts.join('；'), corpid, 'true', next.length);
+  return createResult('ok', `已启用 corpid=${corpid}，其余公司已标记为 enable=false`, corpid, 'true', next.length);
 }
 
 cli({
   site: 'xbb',
   name: 'token-use',
-  description: '切换当前启用的公司（enable），保证仅且只有一个公司被启用；XBB_* 环境变量有值时同步更新为该公司凭证（供外部系统使用，本 CLI 不读取）',
+  description: '切换当前启用的公司（enable），保证仅且只有一个公司被启用',
   strategy: Strategy.PUBLIC,
   access: 'write',
   browser: false,

package/user-add.js

@@ -1,34 +1,9 @@
-import crypto from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
 import { cli, Strategy } from './xbb-registry.js';
-import { readActiveConfig } from './xbb-config.js';
+import { getRuntimeConfig, requestGateway } from './xbb-http.js';
 
-const CONFIG_FILE = path.join(os.homedir(), '.xbbcli', 'config.env');
-const API_URL = 'https://proapi.xbongbong.com/pro/v2/api/user/add';
-const DEFAULT_BASE_URL = 'https://proapi.xbongbong.com';
+const API_PATH = '/pro/v2/api/user/add';
 const MISSING_TOKEN_MESSAGE = '缺少 token；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>';
 
-function readConfig() {
-  return readActiveConfig();
-}
-
-function getRuntimeConfig() {
-  const config = readConfig();
-  return {
-    corpid: String(config.corpid || '').trim(),
-    token: String(config.token || '').trim(),
-    baseUrl: String(config.baseurl || DEFAULT_BASE_URL).trim(),
-    userId: String(config.userId || '').trim(),
-  };
-}
-
-function buildApiUrl(baseUrl, apiUrl) {
-  const apiPath = new URL(apiUrl).pathname;
-  return `${baseUrl.replace(/\/+$/, '')}${apiPath}`;
-}
-
 function parseJsonArray(raw) {
   if (Array.isArray(raw)) return raw;
   const text = String(raw || '').trim();
@@ -77,24 +52,24 @@ cli({
     if (String(kwargs.position || '').trim()) payload.position = String(kwargs.position);
     if (String(kwargs.email || '').trim()) payload.email = String(kwargs.email);
     if (kwargs.userId) payload.userId = String(kwargs.userId);
-    const requestBody = JSON.stringify(payload);
     if (!payload.name) return makeErrorRow('NO_NAME', '缺少 --name');
     if (!payload.mobile) return makeErrorRow('NO_MOBILE', '缺少 --mobile');
     if (!payload.corpid) return makeErrorRow('NO_CORPID', '缺少本地 corpid；请先执行 xbbcli token-set --corpid <CORPID> --token <TOKEN> --userId <USERID>');
     if (!Array.isArray(roleIds) || !roleIds.length) return makeErrorRow(roleIds === undefined ? 'INVALID_ROLEIDS' : 'NO_ROLEIDS', roleIds === undefined ? '--roleIds 必须是 JSON 数组字符串' : '缺少 --roleIds');
     if (!Array.isArray(userDepInfoList) || !userDepInfoList.length) return makeErrorRow(userDepInfoList === undefined ? 'INVALID_USERDEPINFOLIST' : 'NO_USERDEPINFOLIST', userDepInfoList === undefined ? '--userDepInfoList 必须是 JSON 数组字符串' : '缺少 --userDepInfoList');
     if (!token) return makeErrorRow('NO_TOKEN', MISSING_TOKEN_MESSAGE);
-    const sign = crypto.createHash('sha256').update(requestBody + token).digest('hex');
-    const headers = Object.assign({ 'Content-Type': 'application/json;charset=UTF-8', sign }, userId ? { userId } : {});
-    if (debug) {
-      process.stderr.write(`[debug] URL: ${buildApiUrl(baseUrl, API_URL)}\n[debug] Headers: ${JSON.stringify(headers)}\n[debug] RequestBody: ${requestBody}\n`);
+    const gateway = await requestGateway({
+      baseUrl,
+      apiPath: API_PATH,
+      payload,
+      token,
+      userId,
+      debug,
+    });
+    if (!gateway.ok) return makeErrorRow(gateway.code, gateway.msg);
+    if (gateway.data.code !== 1) {
+      return makeErrorRow(gateway.data.code ?? '', gateway.data.msg ?? '未知错误');
     }
-    const resp = await fetch(buildApiUrl(baseUrl, API_URL), { method: 'POST', headers, body: requestBody });
-    if (!resp.ok) return makeErrorRow(resp.status, `HTTP ${resp.status} ${resp.statusText}`);
-    const data = await resp.json();
-    const responseBody = JSON.stringify(data);
-    if (debug) process.stderr.write(`[debug] ResponseBody: ${responseBody}\n`);
-    if (data.code !== 1) return makeErrorRow(data.code ?? '', data.msg ?? '未知错误');
-    return [{ code: data.code ?? '', msg: data.msg || '' }];
+    return [{ code: gateway.data.code ?? '', msg: gateway.data.msg || '' }];
   },
 });