@xopcai/xopc 0.0.309 → 0.0.312

package/dist/src/connectors/china-catalog.js

@@ -1,97 +1,92 @@
 //#region src/connectors/china-catalog.ts
-const FEISHU_MCP_VERSION = "0.5.1";
 const DINGTALK_MCP_VERSION = "1.1.21";
 const CHINA_CONNECTORS = [
 	{
 		id: "feishu-workspace",
-		version: FEISHU_MCP_VERSION,
+		version: "1.0.96",
 		displayName: "飞书办公",
-		description: "连接飞书文档、知识库、日历、消息和多维表格。",
+		description: "连接飞书账号，搜索和读取文档、查询日程和联系人，并按权限创建日程。",
 		category: "docs",
-		kind: "mcp",
+		kind: "cli",
 		source: "builtin",
-		capabilities: [
-			"tools",
-			"runtime.mcp.stdio",
-			"auth.apiKey"
-		],
+		capabilities: ["tools"],
 		benefits: ["understand", "act"],
 		tags: [
 			"中国",
+			"Feishu",
+			"Lark",
 			"飞书",
-			"文档",
-			"知识库",
 			"日历",
-			"多维表格"
+			"文档",
+			"文件",
+			"联系人"
 		],
 		branding: {
 			logoUrl: "/channel-icons/feishu.svg",
 			source: "builtin"
 		},
-		verificationLevel: "verified",
-		auth: { mode: "apiKey" },
-		setup: {
-			links: [{
-				label: "前往飞书开放平台创建应用",
-				href: "https://open.feishu.cn/app",
-				external: true
-			}],
-			secrets: [{
-				key: "appId",
-				label: "App ID",
-				description: "在飞书开放平台的应用凭证页复制。",
-				required: true
-			}, {
-				key: "appSecret",
-				label: "App Secret",
-				description: "与 App ID 同一凭证页，仅保存在本机凭据存储。",
-				required: true
-			}],
-			config: [{
-				key: "tools",
-				label: "启用工具",
-				type: "string",
-				required: true,
-				defaultValue: "preset.light",
-				description: "飞书 MCP 工具预设或逗号分隔的工具列表。"
-			}]
-		},
+		verificationLevel: "beta",
+		auth: { mode: "cli" },
+		setup: {},
 		runtime: {
-			type: "mcp",
-			serverId: "feishu_workspace",
-			localPackage: {
-				registry: "npm",
-				name: "@larksuiteoapi/lark-mcp",
-				version: FEISHU_MCP_VERSION
-			},
-			serverTemplate: {
-				command: "npx",
-				args: [
-					"-y",
-					`@larksuiteoapi/lark-mcp@${FEISHU_MCP_VERSION}`,
-					"mcp"
-				],
-				env: {
-					APP_ID: "{{secrets.appId}}",
-					APP_SECRET: "{{secrets.appSecret}}",
-					LARK_TOOLS: "{{config.tools}}",
-					LARK_DOMAIN: "https://open.feishu.cn",
-					LARK_TOKEN_MODE: "auto"
-				}
-			}
+			type: "cli",
+			adapterId: "lark",
+			adapterVersion: "1",
+			binaryVersion: "1.0.96"
 		},
 		permissions: {
+			localExec: true,
 			data: [
+				"calendar",
 				"documents",
-				"communications",
-				"calendar"
+				"contacts"
 			],
-			networkDomains: ["open.feishu.cn"],
+			networkDomains: ["open.feishu.cn"]
+		},
+		integrationStrategy: {
+			lane: "native",
+			workload: "core",
+			preferred: true
+		}
+	},
+	{
+		id: "wecom-workspace",
+		version: "1.3.0",
+		displayName: "企业微信办公",
+		description: "扫码连接企业微信，搜索和读取文档、查询联系人和待办，并按权限创建待办。",
+		category: "docs",
+		kind: "cli",
+		source: "builtin",
+		capabilities: ["tools"],
+		benefits: ["understand", "act"],
+		tags: [
+			"中国",
+			"WeCom",
+			"企业微信",
+			"文档",
+			"联系人",
+			"待办"
+		],
+		verificationLevel: "beta",
+		auth: { mode: "cli" },
+		setup: {},
+		runtime: {
+			type: "cli",
+			adapterId: "wecom",
+			adapterVersion: "1",
+			binaryVersion: "1.3.0"
+		},
+		permissions: {
 			localExec: true,
-			filesystem: []
+			data: [
+				"documents",
+				"contacts",
+				"tasks"
+			],
+			networkDomains: ["qyapi.weixin.qq.com"]
 		},
 		integrationStrategy: {
-			lane: "mcp",
+			lane: "native",
 			workload: "core",
 			preferred: true
 		}
@@ -186,61 +181,53 @@ const CHINA_CONNECTORS = [
 		}
 	},
 	{
-		id: "wps-cloud-docs",
-		version: "2.0.0",
-		displayName: "WPS 365 云文档",
-		description: "通过 WPS 官方 MCP 搜索云文档、读取内容与评论并管理分享权限。",
+		id: "wps365-workspace",
+		version: "0.3.6",
+		displayName: "WPS 365",
+		description: "连接 WPS 365 企业账号，查看和搜索云文档、日程及邮件。当前仅支持读取。",
 		category: "docs",
-		kind: "mcp",
+		kind: "cli",
 		source: "builtin",
-		capabilities: [
-			"tools",
-			"runtime.mcp.streamableHttp",
-			"auth.apiKey"
-		],
-		benefits: ["understand", "act"],
+		capabilities: ["tools"],
+		benefits: ["understand"],
 		tags: [
 			"中国",
 			"WPS",
+			"WPS365",
+			"金山",
+			"金山文档",
 			"云文档",
-			"知识库"
+			"日历",
+			"邮箱"
 		],
 		branding: {
 			logoUrl: "/connector-icons/wps-docs.svg",
 			source: "builtin"
 		},
-		verificationLevel: "verified",
-		auth: { mode: "apiKey" },
-		setup: {
-			links: [{
-				label: "查看 WPS 用户 Access Token 获取流程",
-				href: "https://open.wps.cn/documents/app-integration-dev/wps365/server/certification-authorization/user-authorization/flow",
-				external: true
-			}],
-			secrets: [{
-				key: "accessToken",
-				label: "用户 Access Token",
-				description: "需先创建 WPS 开放平台应用并完成用户授权。",
-				required: true
-			}]
-		},
+		verificationLevel: "beta",
+		auth: { mode: "cli" },
+		setup: { links: [{
+			label: "WPS 365 企业授权与权限说明",
+			href: "https://open.wps.cn/documents/wps365-cli",
+			external: true
+		}] },
 		runtime: {
-			type: "mcp",
-			serverId: "wps_cloud_docs",
-			serverTemplate: {
-				url: "https://openapi.wps.cn/mcp/v2/kso-yundoc/message",
-				transport: "streamable-http",
-				headers: { Authorization: "Bearer {{secrets.accessToken}}" }
-			}
+			type: "cli",
+			adapterId: "wps365",
+			adapterVersion: "1",
+			binaryVersion: "0.3.6"
 		},
 		permissions: {
-			data: ["documents"],
-			networkDomains: ["openapi.wps.cn"],
-			localExec: false,
-			filesystem: []
+			localExec: true,
+			data: [
+				"documents",
+				"calendar",
+				"email"
+			],
+			networkDomains: ["openapi.wps.cn", "open.wps.cn"]
 		},
 		integrationStrategy: {
-			lane: "mcp",
+			lane: "native",
 			workload: "core",
 			preferred: true
 		}
@@ -304,126 +291,6 @@ const CHINA_CONNECTORS = [
 			workload: "core",
 			preferred: true
 		}
-	},
-	{
-		id: "wps-calendar",
-		version: "2.0.0",
-		displayName: "WPS 365 日历",
-		description: "通过 WPS 官方 MCP 查询日程、管理参与人并创建会议安排。",
-		category: "automation",
-		kind: "mcp",
-		source: "builtin",
-		capabilities: [
-			"tools",
-			"runtime.mcp.streamableHttp",
-			"auth.apiKey"
-		],
-		benefits: ["understand", "act"],
-		tags: [
-			"中国",
-			"WPS",
-			"日历",
-			"日程"
-		],
-		branding: {
-			logoUrl: "/connector-icons/wps-calendar.svg",
-			source: "builtin"
-		},
-		verificationLevel: "verified",
-		auth: { mode: "apiKey" },
-		setup: {
-			links: [{
-				label: "查看 WPS 用户 Access Token 获取流程",
-				href: "https://open.wps.cn/documents/app-integration-dev/wps365/server/certification-authorization/user-authorization/flow",
-				external: true
-			}],
-			secrets: [{
-				key: "accessToken",
-				label: "用户 Access Token",
-				description: "需先创建 WPS 开放平台应用并完成用户授权。",
-				required: true
-			}]
-		},
-		runtime: {
-			type: "mcp",
-			serverId: "wps_calendar",
-			serverTemplate: {
-				url: "https://openapi.wps.cn/mcp/v2/kso-calendar/message",
-				transport: "streamable-http",
-				headers: { Authorization: "Bearer {{secrets.accessToken}}" }
-			}
-		},
-		permissions: {
-			data: ["calendar"],
-			networkDomains: ["openapi.wps.cn"],
-			localExec: false,
-			filesystem: []
-		},
-		integrationStrategy: {
-			lane: "mcp",
-			workload: "core",
-			preferred: true
-		}
-	},
-	{
-		id: "wps-mail",
-		version: "2.0.0",
-		displayName: "WPS 365 邮箱",
-		description: "通过 WPS 官方 MCP 搜索邮件、读取邮件并创建或发送草稿。",
-		category: "automation",
-		kind: "mcp",
-		source: "builtin",
-		capabilities: [
-			"tools",
-			"runtime.mcp.streamableHttp",
-			"auth.apiKey"
-		],
-		benefits: ["understand", "act"],
-		tags: [
-			"中国",
-			"WPS",
-			"邮箱",
-			"邮件"
-		],
-		branding: {
-			logoUrl: "/connector-icons/wps-mail.svg",
-			source: "builtin"
-		},
-		verificationLevel: "verified",
-		auth: { mode: "apiKey" },
-		setup: {
-			links: [{
-				label: "查看 WPS 用户 Access Token 获取流程",
-				href: "https://open.wps.cn/documents/app-integration-dev/wps365/server/certification-authorization/user-authorization/flow",
-				external: true
-			}],
-			secrets: [{
-				key: "accessToken",
-				label: "用户 Access Token",
-				description: "需先创建 WPS 开放平台应用并完成用户授权。",
-				required: true
-			}]
-		},
-		runtime: {
-			type: "mcp",
-			serverId: "wps_mail",
-			serverTemplate: {
-				url: "https://openapi.wps.cn/mcp/v2/kso-mail/message",
-				transport: "streamable-http",
-				headers: { Authorization: "Bearer {{secrets.accessToken}}" }
-			}
-		},
-		permissions: {
-			data: ["email"],
-			networkDomains: ["openapi.wps.cn"],
-			localExec: false,
-			filesystem: []
-		},
-		integrationStrategy: {
-			lane: "mcp",
-			workload: "core",
-			preferred: true
-		}
 	}
 ];
 //#endregion

package/dist/src/connectors/cli/adapterRegistry.d.ts

@@ -0,0 +1,4 @@
+import type { CliAdapter } from './types.js';
+export declare function getCliAdapter(id: string): CliAdapter;
+/** Register a trusted packaged protocol adapter; manifests cannot supply executable code. */
+export declare function registerCliAdapter(adapter: CliAdapter): void;

package/dist/src/connectors/cli/adapterRegistry.js

@@ -0,0 +1,26 @@
+import { larkAdapter } from "./adapters/lark.js";
+import { wps365Adapter } from "./adapters/wps365.js";
+import { wecomAdapter } from "./adapters/wecom.js";
+//#region src/connectors/cli/adapterRegistry.ts
+const adapters = new Map([
+	larkAdapter,
+	wecomAdapter,
+	wps365Adapter
+].map((adapter) => [adapter.id, adapter]));
+function getCliAdapter(id) {
+	const adapter = adapters.get(id);
+	if (!adapter) throw new Error(`Unknown CLI adapter: ${id}`);
+	return adapter;
+}
+/** Register a trusted packaged protocol adapter; manifests cannot supply executable code. */
+function registerCliAdapter(adapter) {
+	if (!/^[a-z][a-z0-9-]*$/.test(adapter.id) || adapters.has(adapter.id)) throw new Error("Invalid or duplicate CLI adapter.");
+	if (![
+		adapter.version,
+		adapter.binaryVersion,
+		adapter.executable
+	].every((value) => /^[a-zA-Z0-9_.-]+$/.test(value) && value !== "..")) throw new Error("Invalid CLI adapter version or executable.");
+	adapters.set(adapter.id, adapter);
+}
+//#endregion
+export { getCliAdapter, registerCliAdapter };

package/dist/src/connectors/cli/adapters/lark.d.ts

@@ -0,0 +1,2 @@
+import type { CliAdapter } from '../types.js';
+export declare const larkAdapter: CliAdapter;

package/dist/src/connectors/cli/adapters/lark.js

@@ -0,0 +1,143 @@
+import { CliProtocolError, actionRevision, closedSchema, object, parseJson } from "../protocol.js";
+import { larkShortcutArgs, larkShortcuts } from "./larkShortcuts.js";
+import { LARK_DISTRIBUTIONS } from "../distributions.js";
+//#region src/connectors/cli/adapters/lark.ts
+const curatedActions = {
+	"docs.search": "read",
+	"docs.fetch": "read",
+	"calendar.calendars.list": "read",
+	"calendar.events.instance_view": "read",
+	"calendar.events.get": "read",
+	"calendar.events.create": "write",
+	"drive.files.list": "read",
+	"drive.metas.batch_query": "read",
+	"contact.user_profiles.batch_query": "read"
+};
+function decodeLoginResult(output) {
+	const events = [];
+	for (const text of [output.stdout, output.stderr]) try {
+		events.push(object(JSON.parse(text)));
+	} catch {
+		for (const line of text.split("\n")) try {
+			events.push(object(JSON.parse(line)));
+		} catch {}
+	}
+	const complete = events.find((event) => event.event === "authorization_complete");
+	if (output.exitCode === 0 || output.exitCode === 3 && complete && typeof complete.user_open_id === "string" && complete.user_open_id.length > 0 && (complete.warning && typeof complete.warning === "object" ? object(complete.warning).type : void 0) === "missing_scope" && Array.isArray(complete.missing) && complete.missing.length > 0 && Array.isArray(complete.granted)) return;
+	const error = (events.find((event) => event.event === "authorization_failed") ?? events.find((event) => event.ok === false))?.error;
+	const message = typeof error === "string" ? error : error && typeof error === "object" ? object(error).message : void 0;
+	const detail = typeof message === "string" ? message.replace(/https?:\/\/[^\s"'<>]+/g, "[URL]").replace(/((?:[a-z_]*(?:token|secret|password|code)|authorization)\s*["']?\s*[:=]\s*["']?)[^\s"',;]+/gi, "$1[REDACTED]").replace(/[\r\n\x00-\x1f]+/g, " ").slice(0, 500) : "No structured error was returned.";
+	throw new Error(`Lark login failed (exit ${output.exitCode}): ${detail}`);
+}
+const larkAdapter = {
+	id: "lark",
+	version: "1",
+	binaryVersion: "1.0.96",
+	executable: "lark-cli",
+	distributions: LARK_DISTRIBUTIONS,
+	configEnvironment: "LARKSUITE_CLI_CONFIG_DIR",
+	dataEnvironment: "LARKSUITE_CLI_DATA_DIR",
+	curatedActions,
+	staticActions: larkShortcuts,
+	schemaArgs: (id) => ["schema", id],
+	decodeSchema(id, value) {
+		const row = object(value);
+		const meta = object(row._meta);
+		if (!curatedActions[id] || typeof row.name !== "string" || row.name.replaceAll(" ", ".") !== id) throw new Error("Unexpected Lark action schema.");
+		if (!Array.isArray(meta.access_tokens) || !meta.access_tokens.includes("user")) throw new Error("Lark action does not support user identity.");
+		const inputSchema = closedSchema(row.inputSchema);
+		return {
+			id,
+			description: String(row.description ?? id),
+			scope: curatedActions[id],
+			inputSchema,
+			anyScopes: Array.isArray(meta.scopes) ? meta.scopes.filter((x) => typeof x === "string") : [],
+			requiredScopes: Array.isArray(meta.required_scopes) ? meta.required_scopes.filter((x) => typeof x === "string") : [],
+			revision: actionRevision(value)
+		};
+	},
+	actionArgs(action, input) {
+		if (larkShortcuts[action.id]) return larkShortcutArgs(action, input);
+		const [service, ...segments] = action.id.split(".");
+		const method = segments.pop();
+		const args = [
+			service,
+			segments.join("."),
+			method,
+			"--as",
+			"user",
+			"--format",
+			"json"
+		];
+		for (const [key, value] of Object.entries(input)) {
+			if (!["params", "data"].includes(key)) throw new Error(`Unsupported Lark argument section: ${key}`);
+			args.push(`--${key}`, JSON.stringify(value));
+		}
+		return args;
+	},
+	decodeResult(output) {
+		const row = object(parseJson(output.exitCode === 0 ? output.stdout : output.stderr));
+		if (typeof row.ok !== "boolean") throw new CliProtocolError("Missing Lark result status.");
+		if (row.ok !== true) {
+			const error = row.error && typeof row.error === "object" ? object(row.error) : {};
+			throw new Error(String(error.message ?? "Lark command failed.").slice(0, 500));
+		}
+		return row.data;
+	},
+	statusArgs: [
+		"auth",
+		"status",
+		"--json",
+		"--verify"
+	],
+	decodeIdentity(output) {
+		const row = object(parseJson(output.stdout));
+		const user = object(object(row.identities).user);
+		if (output.exitCode !== 0 || user.available !== true || user.verified !== true || typeof user.openId !== "string" || typeof row.appId !== "string") throw new Error("Lark user authorization is not verified.");
+		return {
+			key: `${row.appId}:${user.openId}`,
+			label: String(user.userName ?? user.openId),
+			scopes: String(user.scope ?? "").split(/\s+/).filter(Boolean),
+			identity: {
+				appId: row.appId,
+				openId: user.openId,
+				name: user.userName,
+				kind: "user"
+			}
+		};
+	},
+	authorizationSteps: [{
+		initialOnly: true,
+		args: [
+			"config",
+			"init",
+			"--new"
+		],
+		challenge: "url",
+		urlHosts: [
+			"accounts.feishu.cn",
+			"open.feishu.cn",
+			"accounts.larksuite.com",
+			"open.larksuite.com"
+		]
+	}, {
+		decodeResult: decodeLoginResult,
+		urlField: "verification_uri_complete",
+		args: [
+			"auth",
+			"login",
+			"--domain",
+			"calendar,drive,contact,docs",
+			"--json"
+		],
+		challenge: "url",
+		urlHosts: [
+			"accounts.feishu.cn",
+			"open.feishu.cn",
+			"accounts.larksuite.com",
+			"open.larksuite.com"
+		]
+	}]
+};
+//#endregion
+export { larkAdapter };

package/dist/src/connectors/cli/adapters/larkShortcuts.d.ts

@@ -0,0 +1,3 @@
+import type { CliAction, JsonObject } from '../types.js';
+export declare const larkShortcuts: Record<string, CliAction>;
+export declare function larkShortcutArgs(action: CliAction, input: JsonObject): string[];

package/dist/src/connectors/cli/adapters/larkShortcuts.js

@@ -0,0 +1,64 @@
+import { actionRevision, closedSchema } from "../protocol.js";
+const larkShortcuts = Object.fromEntries(Object.entries({
+	"docs.search": {
+		description: "Search visible Lark documents. Pass the returned page token to retrieve the next page.",
+		required: ["query"],
+		properties: {
+			query: {
+				type: "string",
+				minLength: 1
+			},
+			page_size: {
+				type: "integer",
+				minimum: 1,
+				maximum: 20
+			},
+			page_token: { type: "string" }
+		}
+	},
+	"docs.fetch": {
+		description: "Read a Lark document by URL or token, optionally restricting content to its outline.",
+		required: ["doc"],
+		properties: {
+			doc: {
+				type: "string",
+				minLength: 1
+			},
+			scope: {
+				type: "string",
+				enum: ["full", "outline"]
+			}
+		}
+	}
+}).map(([id, schema]) => {
+	const inputSchema = closedSchema({
+		type: "object",
+		properties: schema.properties,
+		required: schema.required
+	});
+	return [id, {
+		id,
+		description: schema.description,
+		inputSchema,
+		scope: "read",
+		requiredScopes: [],
+		revision: actionRevision({
+			version: "1.0.96",
+			id,
+			inputSchema
+		})
+	}];
+}));
+function larkShortcutArgs(action, input) {
+	const args = [
+		"docs",
+		action.id === "docs.search" ? "+search" : "+fetch",
+		"--as",
+		"user"
+	];
+	if (action.id === "docs.search") args.push("--format", "json");
+	for (const [key, value] of Object.entries(input)) args.push(`--${key.replaceAll("_", "-")}`, String(value));
+	return args;
+}
+//#endregion
+export { larkShortcutArgs, larkShortcuts };

package/dist/src/connectors/cli/adapters/wecom.d.ts

@@ -0,0 +1,2 @@
+import type { CliAdapter } from '../types.js';
+export declare const wecomAdapter: CliAdapter;