@youzan-cloud/zan-saas-cli 0.0.0-stage → 0.1.0-beta.3

package/src/commands/native/org/staff/get/command.js

@@ -0,0 +1,148 @@
+'use strict';
+
+const { withTargetShopDefault } = require('../../../../../execution/target-shop-default');
+
+const { Command, Option } = require('commander');
+const schema = require('./schema.json');
+const { resolveTargetShop } = require('../../../../../execution/target-shop');
+const { readContext } = require('../../../../../identity/context');
+const { validateCommandValue } = require('../../../../../execution/command-schema');
+const { object } = require('../../../../../execution/query-api');
+const { createBoundShopQuery, failure, bindingPath } = require('../../../../../execution/shop-query');
+const { formatBeijingMilliseconds } = require('../../../../../execution/beijing-time');
+
+const command = 'org.staff.get';
+const reject = (category, stage, scope, state, facts) =>
+  failure(command, category, stage, scope, state, facts);
+
+function buildInput(options, context) {
+  let scope;
+  try {
+    scope = resolveTargetShop(options, context, command);
+  } catch (error) {
+    if (error.cliDetails?.stage === 'validation') error.cliDetails.stage = 'input';
+    throw error;
+  }
+  const state = readContext(context);
+  if (state.status === 'ready' && state.context.orgType !== 'shop') {
+    throw reject('permission', 'context', scope);
+  }
+  try {
+    if (typeof options.mobile !== 'string' || /[\x00-\x1f\x7f-\x9f]/.test(options.mobile)) {
+      throw new Error('invalid mobile');
+    }
+    const mobile = options.mobile.replace(/^ +| +$/g, '');
+    const include = options.include === undefined ? [] :
+      [...new Set(options.include.split(',').map(value => value.trim()))];
+    const input = { ...scope, mobile, include };
+    validateCommandValue(schema, 'input', input);
+    return input;
+  } catch {
+    throw reject('parameter', 'input', scope);
+  }
+}
+
+function previewFor(input) {
+  return { scope: { kdtId: input.kdtId }, requests: [
+    { stage: 'shop-binding', method: 'POST', path: bindingPath, body: {} },
+    { stage: 'staff', method: 'POST', path: schema.api.path, body: { account: '***' } }
+  ], selection: { include: input.include } };
+}
+
+function projectStaff(data, input, facts) {
+  const scope = { kdtId: input.kdtId };
+  const invalid = stage => reject('protocol', stage, scope, 'sent', facts);
+  if (!object(data) || !Number.isSafeInteger(data.kdt_id) || data.kdt_id < 1) {
+    throw invalid('staff-model');
+  }
+  if (data.kdt_id !== input.kdtId ||
+      (typeof data.account === 'string' && /^1\d{10}$/.test(data.account) && data.account !== input.mobile)) {
+    throw reject('scope_unresolved', 'staff-model', scope, 'sent', facts);
+  }
+  const staff = { staffId: data.yz_open_id, kdtId: data.kdt_id, status: data.status };
+  try {
+    for (const [field, source] of Object.entries({ staffNo: 'staff_no', name: 'name',
+      account: 'account', contactPhone: 'link_phone' })) {
+      if (data[source] !== undefined && data[source] !== null) staff[field] = data[source];
+    }
+    for (const [field, source] of Object.entries({ createdAt: 'create_time', updatedAt: 'update_time' })) {
+      if (data[source] !== undefined && data[source] !== null) {
+        staff[field] = formatBeijingMilliseconds(data[source]);
+      }
+    }
+    validateCommandValue(schema, 'output', { data: { staff } });
+  } catch {
+    throw invalid('staff-model');
+  }
+  if (input.include.includes('roles')) {
+    try {
+      if (!Array.isArray(data.roles)) throw new Error('invalid roles');
+      staff.roles = data.roles.map(role => {
+        if (!object(role)) throw new Error('invalid role');
+        return { roleId: role.role_id, ...(role.name === undefined || role.name === null ? {} : { name: role.name }) };
+      });
+      validateCommandValue(schema, 'output', { data: { staff } });
+    } catch {
+      throw invalid('staff-roles');
+    }
+  }
+  return { data: { staff } };
+}
+
+async function execute(input) {
+  const scope = { kdtId: input.kdtId };
+  const { read, binding } = await createBoundShopQuery(scope, command);
+  if (!Number.isSafeInteger(binding.data.role) || binding.data.role < 0) {
+    throw reject('protocol', 'shop-binding', scope, 'sent', binding.facts);
+  }
+  if (binding.data.role !== 0) {
+    throw reject('permission', 'shop-binding', scope, 'sent', binding.facts);
+  }
+  let staffResponse;
+  try {
+    staffResponse = await read(schema.api.path, { account: input.mobile }, 'staff', [0, 200]);
+  } catch (error) {
+    if (error.cliDetails?.category === 'business_rejected' &&
+        [error.cliDetails.businessCode, error.cliDetails.gatewayCode].some(code => String(code) === '232500001')) {
+      error.cliDetails.category = 'not_found';
+      error.message = '查询失败：not_found（staff）';
+    }
+    throw error;
+  }
+  return projectStaff(staffResponse.data, input, staffResponse.facts);
+}
+
+function createCommand({ context } = {}) {
+  return new Command('get')
+    .description('按登录账号手机号查询当前授权微商城单店的一个员工档案')
+    .allowExcessArguments(false)
+    .exitOverride(error => {
+      if (['commander.helpDisplayed', 'commander.version'].includes(error.code)) throw error;
+      throw reject('parameter', 'input');
+    })
+    .requiredOption('--mobile <phone>', '必填：员工登录账号手机号，11 位；不是联系人或客户手机号')
+    .option('--kdt-id <id>', '当前单店正安全整数；省略取上下文 shopId，不支持跨店或总部')
+    .option('--include <modules>', '仅 roles；逗号分隔去重，仅本地投影，不增加请求')
+    .addOption(new Option('--format <format>', 'json 或 pretty，仅改变缩进')
+      .choices(['json', 'pretty']).default('json'))
+    .option('--dry-run', '仅本地预览两步请求，手机号脱敏；不读凭证、不联网')
+    .addHelpText('after', '\n先核验凭证同店及单店组织角色，再查询员工；最多两请求，不重试或切店。\n单店角色不能证明微商城产品，适用性与权限由主接口和网关校验。\n时间为北京时间 YYYY-MM-DD HH:mm:ss.SSS，固定三位毫秒，按源 Unix 毫秒转换。\n角色关联不是完整权限或可授予性证明；失败不输出部分员工资料。\n契约：zan-saas schema org.staff.get --format json\n示例：zan-saas org staff get --mobile 13800000000 --include roles --dry-run')
+    .action(async options => {
+      const input = buildInput(options, context);
+      const preview = previewFor(input);
+      validateCommandValue(schema, 'preview', preview);
+      try {
+        const result = options.dryRun ? preview : await execute(input);
+        console.log(JSON.stringify(result, null, options.format === 'pretty' ? 2 : 0));
+      } catch (error) {
+        for (const field of ['businessCode', 'gatewayCode', 'trace_id', 'request_id']) {
+          if (String(error.cliDetails?.[field]).includes(input.mobile)) {
+            delete error.cliDetails[field];
+          }
+        }
+        throw error;
+      }
+    });
+}
+
+module.exports = { kind: 'atomic', risk: 'read', at: 'shop', createCommand: withTargetShopDefault(createCommand) };

package/src/commands/native/org/staff/get/schema.json

@@ -0,0 +1,114 @@
+{
+  "schemaVersion": 1,
+  "input": {
+    "type": "object", "required": ["kdtId", "mobile", "include"], "additionalProperties": false,
+    "properties": {
+      "kdtId": { "$ref": "#/definitions/shopId" },
+      "mobile": { "type": "string", "pattern": "^1[0-9]{10}$", "description": "员工登录账号手机号；仅去首尾普通空格，拒绝控制字符，不用联系人或客户号码。" },
+      "include": { "$ref": "#/definitions/include" }
+    }
+  },
+  "output": {
+    "type": "object", "required": ["data"], "additionalProperties": false,
+    "properties": {
+      "data": {
+        "type": "object", "required": ["staff"], "additionalProperties": false,
+        "properties": {
+          "staff": {
+            "type": "object", "required": ["staffId", "kdtId", "status"], "additionalProperties": false,
+            "properties": {
+              "staffId": { "type": "string", "pattern": "\\S", "description": "不透明员工标识；不能用管理账号、手机号、客户或上下文标识替代。" },
+              "kdtId": { "$ref": "#/definitions/shopId" },
+              "status": { "type": "string", "enum": ["ON", "OFF"], "description": "ON：员工启用；OFF：员工禁用。未知状态失败，不默认启用，不证明权限。" },
+              "staffNo": { "type": "string", "description": "员工编号，不是稳定主键；空串保留。" },
+              "name": { "type": "string" },
+              "account": { "type": "string", "description": "服务端账号原文，可脱敏；完整 11 位手机号必须与查询一致。" },
+              "contactPhone": { "type": "string", "description": "员工联系方式，不作为登录账号。" },
+              "createdAt": { "type": "string", "format": "beijing-date-time-ms", "$comment": "upstream-time:milliseconds", "description": "创建时间；北京时间 YYYY-MM-DD HH:mm:ss.SSS，固定三位毫秒。" },
+              "updatedAt": { "type": "string", "format": "beijing-date-time-ms", "$comment": "upstream-time:milliseconds", "description": "更新时间；北京时间 YYYY-MM-DD HH:mm:ss.SSS，固定三位毫秒；不要求晚于创建时间。" },
+              "roles": {
+                "type": "array", "description": "仅 include roles 时必需，允许空数组；保持顺序及重复项，不用其他角色关系补值。",
+                "items": {
+                  "type": "object", "required": ["roleId"], "additionalProperties": false,
+                  "properties": {
+                    "roleId": { "type": "integer", "minimum": 1, "maximum": 9007199254740991, "description": "当前店铺内角色标识，不是全局枚举或授权证明。" },
+                    "name": { "type": "string" }
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "preview": {
+    "type": "object", "required": ["scope", "requests", "selection"], "additionalProperties": false,
+    "properties": {
+      "scope": { "type": "object", "required": ["kdtId"], "additionalProperties": false, "properties": { "kdtId": { "$ref": "#/definitions/shopId" } } },
+      "requests": {
+        "type": "array", "minItems": 2, "maxItems": 2, "additionalItems": false,
+        "items": [
+          {
+            "type": "object", "required": ["stage", "method", "path", "body"], "additionalProperties": false,
+            "properties": {
+              "stage": { "const": "shop-binding" }, "method": { "const": "POST" },
+              "path": { "const": "youzan.shop.basic.get/3.0.0" },
+              "body": { "type": "object", "additionalProperties": false, "properties": {} }
+            }
+          },
+          {
+            "type": "object", "required": ["stage", "method", "path", "body"], "additionalProperties": false,
+            "properties": {
+              "stage": { "const": "staff" }, "method": { "const": "POST" },
+              "path": { "const": "youzan.shop.single.staff.get/1.0.0" },
+              "body": { "type": "object", "required": ["account"], "additionalProperties": false, "properties": { "account": { "const": "***" } } }
+            }
+          }
+        ]
+      },
+      "selection": { "type": "object", "required": ["include"], "additionalProperties": false, "properties": { "include": { "$ref": "#/definitions/include" } } }
+    }
+  },
+  "error": {
+    "type": "object", "required": ["success", "code", "message", "details"], "additionalProperties": false,
+    "properties": {
+      "success": { "const": false }, "code": { "const": -10001 }, "message": { "type": "string", "minLength": 1 },
+      "details": {
+        "type": "object", "required": ["category", "stage", "command", "targetScope", "requestState", "nextStep"], "additionalProperties": false,
+        "properties": {
+          "category": { "enum": ["parameter", "validation", "configuration", "authentication", "permission", "scope_unresolved", "transport", "http", "protocol", "business_rejected", "not_found"] },
+          "stage": { "enum": ["input", "context", "scope", "configuration", "shop-binding", "staff", "staff-model", "staff-roles", "transport", "http", "response"] },
+          "command": { "const": "org.staff.get" },
+          "targetScope": { "type": "object", "additionalProperties": false, "properties": { "kdtId": { "$ref": "#/definitions/shopId" } } },
+          "requestState": { "enum": ["not_sent", "sent", "unknown"] },
+          "nextStep": { "type": "string", "minLength": 1 },
+          "api": { "type": "string" }, "httpStatus": { "type": "integer" },
+          "businessCode": { "$ref": "#/definitions/diagnosticCode" },
+          "gatewayCode": { "$ref": "#/definitions/diagnosticCode" },
+          "trace_id": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,128}$" },
+          "request_id": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,128}$" }
+        }
+      }
+    }
+  },
+  "definitions": {
+    "shopId": { "type": "integer", "minimum": 1, "maximum": 9007199254740991, "description": "当前上下文同店正安全整数；上下文必须为 shop，凭证和员工资料均须属于该店。" },
+    "include": { "type": "array", "uniqueItems": true, "items": { "enum": ["roles"] } },
+    "diagnosticCode": { "anyOf": [ { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "string", "pattern": "^-?\\d{1,12}$" } ] }
+  },
+  "modules": {
+    "staff": { "base": true, "required": true, "upstreamPath": "data", "description": "有限员工档案；员工标识、店铺标识和状态必需。可选字段缺省或无值时省略。" },
+    "roles": { "base": false, "required": false, "upstreamPath": "data.roles", "description": "仅选择时校验并输出当前员工角色关联，无额外请求；不是角色目录或完整权限。" }
+  },
+  "api": { "method": "POST", "path": "youzan.shop.single.staff.get/1.0.0" },
+  "success": { "description": "已核实当前组织为凭证所属单店，员工资料属于同店，员工标识、状态及所有选定模块均有效后返回 data.staff。" },
+  "errors": { "description": "明确业务拒绝 232500001 为 not_found；231000407 不凭自由文案改为未找到。冲突成功信号协议失败。HTTP 401/403、传输中断 unknown 保留；失败 stdout 为空，stderr 单一脱敏信封，不返回部分结果。" },
+  "notes": [
+    "at=shop，仅声明微商城单店；role=0 只证明单店组织角色，产品适用与员工权限由主接口和网关校验。",
+    "最多两请求、同一基址/token 快照、10 秒超时、无重试或重定向；不扫描员工或补查类型。",
+    "dry-run 不读凭证不联网，预览中的账号固定掩码。",
+    "未选择角色时不校验其内容；仅返回本契约声明的员工字段。",
+    "员工标识缺失时失败；账号已脱敏时不宣称完整手机号已反向核验。"
+  ]
+}

package/src/commands/native/org/staff-role/get/command.js

@@ -0,0 +1,45 @@
+'use strict';
+
+const { withTargetShopDefault } = require('../../../../../execution/target-shop-default');
+
+const { Command, Option } = require('commander');
+const schema = require('./schema.json');
+const { validateCommandValue } = require('../../../../../execution/command-schema');
+const { failure } = require('../../../../../execution/shop-query');
+const { staffInput, staffPreview, readSingleShopStaff, staffRoles, redactStaffDiagnostics } = require('../../shared/single-staff');
+
+const command = 'org.staff-role.get';
+
+function createCommand({ context } = {}) {
+  return new Command('get')
+    .description('按登录账号手机号查询当前授权微商城单店员工的角色关联')
+    .allowExcessArguments(false)
+    .exitOverride(error => {
+      if (['commander.helpDisplayed', 'commander.version'].includes(error.code)) throw error;
+      throw failure(command, 'parameter', 'input');
+    })
+    .requiredOption('--mobile <phone>', '必填：员工登录账号手机号，11 位，不是客户或联系人手机号')
+    .option('--kdt-id <id>', '当前单店正安全整数；省略取上下文 shopId，不允许跨店或总部')
+    .addOption(new Option('--format <format>', 'json 或 pretty，仅改变缩进')
+      .choices(['json', 'pretty']).default('json'))
+    .option('--dry-run', '本地预览两步请求，手机号脱敏；不读凭证、不联网')
+    .addHelpText('after', '\n只返回当前员工的角色关联，不是角色目录、完整权限或可授予性证明。\n最多两请求，先核验凭证同店及单店组织角色，不重试、不扫描或切店。\n只有成功明确返回空角色数组才输出 []；缺失或错型失败。\n契约：zan-saas schema org.staff-role.get --format json\n示例：zan-saas org staff-role get --mobile 13800000000 --dry-run')
+    .action(async options => {
+      const input = staffInput(options, context, command, schema);
+      const preview = staffPreview(input);
+      validateCommandValue(schema, 'preview', preview);
+      try {
+        let result = preview;
+        if (!options.dryRun) {
+          const { staff, facts } = await readSingleShopStaff(input, command);
+          result = { data: { kdtId: staff.kdt_id, roles: staffRoles(staff, command, facts) } };
+          validateCommandValue(schema, 'output', result);
+        }
+        console.log(JSON.stringify(result, null, options.format === 'pretty' ? 2 : 0));
+      } catch (error) {
+        throw redactStaffDiagnostics(error, input.mobile);
+      }
+    });
+}
+
+module.exports = { kind: 'atomic', risk: 'read', at: 'shop', createCommand: withTargetShopDefault(createCommand) };

package/src/commands/native/org/staff-role/get/schema.json

@@ -0,0 +1,93 @@
+{
+  "schemaVersion": 1,
+  "input": {
+    "type": "object", "required": ["kdtId", "mobile"], "additionalProperties": false,
+    "properties": {
+      "kdtId": { "$ref": "#/definitions/shopId" },
+      "mobile": { "type": "string", "pattern": "^1[0-9]{10}$", "description": "员工登录账号手机号；仅去首尾普通空格，拒绝控制字符，不接受客户或联系人号码。" }
+    }
+  },
+  "output": {
+    "type": "object", "required": ["data"], "additionalProperties": false,
+    "properties": {
+      "data": {
+        "type": "object", "required": ["kdtId", "roles"], "additionalProperties": false,
+        "properties": {
+          "kdtId": { "$ref": "#/definitions/shopId" },
+          "roles": {
+            "type": "array", "description": "本次查询返回的员工角色关联；成功且明确为空才返回 []，不是角色目录或完整权限。",
+            "items": {
+              "type": "object", "required": ["roleId", "name"], "additionalProperties": false,
+              "properties": {
+                "roleId": { "type": "integer", "minimum": 1, "maximum": 9007199254740991, "description": "员工关联角色的标识；不是员工、管理账号或组织标识。" },
+                "name": { "type": "string", "description": "该角色的名称，按本次返回保留；不从名称推断权限。" }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "preview": {
+    "type": "object", "required": ["scope", "requests"], "additionalProperties": false,
+    "properties": {
+      "scope": { "type": "object", "required": ["kdtId"], "additionalProperties": false, "properties": { "kdtId": { "$ref": "#/definitions/shopId" } } },
+      "requests": {
+        "type": "array", "minItems": 2, "maxItems": 2, "additionalItems": false,
+        "items": [
+          {
+            "type": "object", "required": ["stage", "method", "path", "body"], "additionalProperties": false,
+            "properties": {
+              "stage": { "const": "shop-binding" }, "method": { "const": "POST" },
+              "path": { "const": "youzan.shop.basic.get/3.0.0" },
+              "body": { "type": "object", "additionalProperties": false, "properties": {} }
+            }
+          },
+          {
+            "type": "object", "required": ["stage", "method", "path", "body"], "additionalProperties": false,
+            "properties": {
+              "stage": { "const": "staff" }, "method": { "const": "POST" },
+              "path": { "const": "youzan.shop.single.staff.get/1.0.0" },
+              "body": { "type": "object", "required": ["account"], "additionalProperties": false, "properties": { "account": { "const": "***" } } }
+            }
+          }
+        ]
+      }
+    }
+  },
+  "error": {
+    "type": "object", "required": ["success", "code", "message", "details"], "additionalProperties": false,
+    "properties": {
+      "success": { "const": false }, "code": { "const": -10001 }, "message": { "type": "string", "minLength": 1 },
+      "details": {
+        "type": "object", "required": ["category", "stage", "command", "targetScope", "requestState", "nextStep"], "additionalProperties": false,
+        "properties": {
+          "category": { "enum": ["parameter", "validation", "configuration", "authentication", "permission", "scope_unresolved", "transport", "http", "protocol", "business_rejected"] },
+          "stage": { "enum": ["input", "context", "scope", "configuration", "shop-binding", "staff", "staff-model", "staff-roles", "transport", "http", "response"] },
+          "command": { "const": "org.staff-role.get" },
+          "targetScope": { "type": "object", "additionalProperties": false, "properties": { "kdtId": { "$ref": "#/definitions/shopId" } } },
+          "requestState": { "enum": ["not_sent", "sent", "unknown"] },
+          "nextStep": { "type": "string", "minLength": 1 },
+          "api": { "type": "string" }, "httpStatus": { "type": "integer" },
+          "businessCode": { "$ref": "#/definitions/diagnosticCode" }, "gatewayCode": { "$ref": "#/definitions/diagnosticCode" },
+          "trace_id": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,128}$" },
+          "request_id": { "type": "string", "pattern": "^[A-Za-z0-9_-]{1,128}$" }
+        }
+      }
+    }
+  },
+  "definitions": {
+    "shopId": { "type": "integer", "minimum": 1, "maximum": 9007199254740991, "description": "当前上下文微商城单店标识；凭证与返回的员工必须属于该店。" },
+    "diagnosticCode": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "string", "pattern": "^-?\\d{1,12}$" }] }
+  },
+  "modules": { "roles": { "base": true, "required": true, "upstreamPath": "data.roles", "description": "当前员工的角色关联，全部校验通过才输出。" } },
+  "api": { "method": "POST", "path": "youzan.shop.single.staff.get/1.0.0" },
+  "success": { "description": "同店及单店组织核验通过，查询成功且员工店铺与角色模型完整后返回 data；明确的空角色数组可成功。" },
+  "errors": { "description": "缺失、错型或冲突成功信号均失败；不会补成空角色。HTTP 401/403 保留认证或权限类别，断连状态为 unknown。失败 stdout 为空，stderr 为单一脱敏错误，不自动重试。" },
+  "notes": [
+    "仅当前授权微商城单店；单店组织角色不证明产品或员工权限，仍由主接口与网关校验。",
+    "最多两请求，使用同一基址和凭证快照；不扫描、跨店回退或自动重试。",
+    "dry-run 不读凭证、不联网，账号固定掩码；没有上下文时需要显式同店目标才能预览。",
+    "不提供角色筛选、角色目录、完整权限或可授予性判断。"
+  ]
+}

package/src/commands/native/org/unit/get/command.js

@@ -0,0 +1,131 @@
+'use strict';
+
+const { withTargetShopDefault } = require('../../../../../execution/target-shop-default');
+
+const { Command, Option } = require('commander');
+const schema = require('./schema.json');
+const { resolveTargetShop } = require('../../../../../execution/target-shop');
+const { readContext } = require('../../../../../identity/context');
+const { validateCommandValue } = require('../../../../../execution/command-schema');
+const { object } = require('../../../../../execution/query-api');
+const { createBoundShopQuery, failure, bindingPath } = require('../../../../../execution/shop-query');
+
+const command = 'org.unit.get';
+const configPath = 'youzan.shop.configs.get/2.0.0';
+const reject = (category, stage, scope, state, facts) =>
+  failure(command, category, stage, scope, state, facts);
+
+function buildInput(options, context) {
+  let scope;
+  try {
+    scope = resolveTargetShop(options, context, command);
+  } catch (error) {
+    if (error.cliDetails?.stage === 'validation') error.cliDetails.stage = 'input';
+    throw error;
+  }
+  const state = readContext(context);
+  if (state.status === 'ready' && String(scope.kdtId) !== state.context.shopId) {
+    throw reject('permission', 'scope', scope);
+  }
+  try {
+    const include = options.include === undefined ? [] :
+      [...new Set(options.include.split(',').map(value => value.trim()))];
+    const input = { ...scope, include };
+    validateCommandValue(schema, 'input', input);
+    return input;
+  } catch {
+    throw reject('parameter', 'input', scope);
+  }
+}
+
+function previewFor(input) {
+  const requests = [{ stage: 'unit-basic', method: 'POST', path: bindingPath, body: {} }];
+  if (input.include.includes('operation-status')) {
+    requests.push({ stage: 'operation-status', method: 'POST', path: configPath,
+      body: { keys: ['shop_operation_status'], node_kdt_ids: [input.kdtId] } });
+  }
+  return { scope: { kdtId: input.kdtId }, requests, selection: { include: input.include } };
+}
+
+function optionalFields(source, mapping) {
+  const result = {};
+  for (const [field, upstream] of Object.entries(mapping)) {
+    if (source[upstream] !== undefined && source[upstream] !== null) result[field] = source[upstream];
+  }
+  return result;
+}
+
+function projectUnit(data, include) {
+  const unit = { kdtId: data.sid, name: data.name, orgRole: data.role,
+    ...optionalFields(data, { rootKdtId: 'root_kdt_id', parentKdtId: 'parent_kdt_id',
+      lineOfBusiness: 'line_of_business', certType: 'cert_type', logo: 'logo',
+      intro: 'intro', url: 'url', physicalUrl: 'physical_url' }) };
+  if (include.includes('address')) {
+    if (!object(data.shop_address)) throw new Error('invalid address');
+    unit.address = { address: data.shop_address.address,
+      ...optionalFields(data.shop_address, { province: 'province', city: 'city', county: 'county',
+        countyId: 'county_id', lng: 'lng', lat: 'lat' }) };
+  }
+  if (include.includes('contact')) {
+    if (!object(data.customer_service_phone_number)) throw new Error('invalid contact');
+    unit.contact = { phoneNumber: data.customer_service_phone_number.phone_number,
+      ...optionalFields(data.customer_service_phone_number, { areaCode: 'area_code' }) };
+  }
+  validateCommandValue(schema, 'output', { data: { unit } });
+  return unit;
+}
+
+async function execute(input, preview) {
+  const scope = { kdtId: input.kdtId };
+  const { read, binding } = await createBoundShopQuery(scope, command, 'unit-basic');
+  let unit;
+  try {
+    unit = projectUnit(binding.data, input.include);
+  } catch {
+    throw reject('protocol', 'unit-model', scope, 'sent', binding.facts);
+  }
+  if (input.include.includes('operation-status')) {
+    const request = preview.requests[1];
+    const { data, facts } = await read(request.path, request.body, request.stage);
+    const invalid = category => reject(category, request.stage, scope, 'sent', facts);
+    if (!Array.isArray(data)) throw invalid('protocol');
+    if (data.some(row => !object(row) || !Number.isSafeInteger(row.node_kdt_id) || row.node_kdt_id < 1)) {
+      throw invalid('protocol');
+    }
+    const matches = data.filter(row => row.node_kdt_id === input.kdtId);
+    if (matches.length === 0) throw invalid('scope_unresolved');
+    if (matches.length !== 1) throw invalid('protocol');
+    const configs = matches[0].configs;
+    if (!object(configs) || typeof configs.shop_operation_status !== 'string' ||
+        !/^[0-3]$/.test(configs.shop_operation_status)) throw invalid('protocol');
+    unit.operationStatus = Number(configs.shop_operation_status);
+  }
+  const output = { data: { unit } };
+  validateCommandValue(schema, 'output', output);
+  return output;
+}
+
+function createCommand({ context } = {}) {
+  return new Command('get')
+    .description('查询当前授权组织的资料与可选运营状态，不支持临时切换到其他组织')
+    .allowExcessArguments(false)
+    .exitOverride(error => {
+      if (['commander.helpDisplayed', 'commander.version'].includes(error.code)) throw error;
+      throw reject('parameter', 'input');
+    })
+    .option('--kdt-id <id>', '当前组织正安全整数；省略取上下文 shopId，总部也不可跨目标')
+    .option('--include <modules>', '可选 address,contact,operation-status；逗号分隔')
+    .addOption(new Option('--format <format>', 'json 或 pretty，仅改变缩进')
+      .choices(['json', 'pretty']).default('json'))
+    .option('--dry-run', '仅本地预览有序请求；不读凭证、不联网')
+    .addHelpText('after', '\n默认一次请求；地址和电话不追加请求，运营状态最多追加一次。失败不输出部分资料。\n组织角色不是员工权限角色；不返回店铺类型、QQ、升级历史或任意配置。员工授权与产品支持以服务端为准。\n契约：zan-saas schema org.unit.get --format json\n示例：zan-saas org unit get --kdt-id 63077 --include address,operation-status --dry-run')
+    .action(async options => {
+      const input = buildInput(options, context);
+      const preview = previewFor(input);
+      validateCommandValue(schema, 'preview', preview);
+      const result = options.dryRun ? preview : await execute(input, preview);
+      console.log(JSON.stringify(result, null, options.format === 'pretty' ? 2 : 0));
+    });
+}
+
+module.exports = { kind: 'atomic', risk: 'read', at: 'all', createCommand: withTargetShopDefault(createCommand) };