@youzan-cloud/zan-saas-cli 0.0.0-stage → 0.1.0-beta.3

package/src/commands/native/privacy/field/decrypt/schema.json

@@ -0,0 +1,656 @@
+{
+  "schemaVersion": 1,
+  "input": {
+    "type": "object",
+    "description": "规范化业务输入。input-file 仅为有界文件或 stdin 来源；reason 裁首尾空白，其余业务文本不改写。根、object、values 项拒绝额外属性、null 及重复 JSON 成员。",
+    "additionalProperties": false,
+    "required": [
+      "kdtId",
+      "object",
+      "values",
+      "reason",
+      "format",
+      "dryRun"
+    ],
+    "properties": {
+      "kdtId": {
+        "$ref": "#/definitions/shopId"
+      },
+      "object": {
+        "$ref": "#/definitions/sourceObject"
+      },
+      "values": {
+        "type": "array",
+        "minItems": 1,
+        "maxItems": 3,
+        "description": "输入顺序即输出顺序；key 和 field 分别唯一，密文可相同。",
+        "items": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "key",
+            "field",
+            "ciphertext"
+          ],
+          "properties": {
+            "key": {
+              "$ref": "#/definitions/key"
+            },
+            "field": {
+              "$ref": "#/definitions/field"
+            },
+            "ciphertext": {
+              "type": "string",
+              "minLength": 1,
+              "maxLength": 16384,
+              "pattern": "^[^\\u0000-\\u001f\\u007f-\\u009f]+$",
+              "description": "原始密文，不 trim；实际 UTF-8 上限 16384 字节。外形不证明加密或授权，必须与源字段完全相等。"
+            }
+          }
+        }
+      },
+      "reason": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 200,
+        "pattern": "^[^\\u0000-\\u001f\\u007f-\\u009f\\u2028\\u2029]+$",
+        "description": "裁首尾空白后 1 至 200 个 Unicode 码点，无控制字符；不要填写个人信息，不提供权限。"
+      },
+      "format": {
+        "type": "string",
+        "enum": [
+          "json",
+          "pretty"
+        ],
+        "description": "json 为紧凑 JSON；pretty 仅增加缩进。"
+      },
+      "dryRun": {
+        "type": "boolean",
+        "description": "true 只做本地校验和计划，不读取凭证或联网；false 执行需真实受控 provider。"
+      }
+    }
+  },
+  "output": {
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+      "data"
+    ],
+    "properties": {
+      "data": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "values"
+        ],
+        "properties": {
+          "values": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 3,
+            "description": "全部选定字段通过来源、判密、完整解密及可靠审计后一次性交付；顺序和关联与输入相同。",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "key",
+                "field",
+                "value"
+              ],
+              "properties": {
+                "key": {
+                  "$ref": "#/definitions/key"
+                },
+                "field": {
+                  "$ref": "#/definitions/field"
+                },
+                "value": {
+                  "type": "string",
+                  "description": "平台成功返回的明文；空字符串原样保留，缺失、null 或非字符串整体拒绝。"
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "preview": {
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+      "plan"
+    ],
+    "properties": {
+      "plan": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "kdtId",
+          "object",
+          "fields",
+          "itemCount",
+          "maximumApiRequests",
+          "requiresSensitiveAuthorization"
+        ],
+        "properties": {
+          "kdtId": {
+            "$ref": "#/definitions/shopId"
+          },
+          "object": {
+            "$ref": "#/definitions/sourceObject"
+          },
+          "fields": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 3,
+            "uniqueItems": true,
+            "description": "本次选定的源字段，不含 key 或内容。",
+            "items": {
+              "$ref": "#/definitions/field"
+            }
+          },
+          "itemCount": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 3,
+            "description": "输入项数量。"
+          },
+          "maximumApiRequests": {
+            "const": 4,
+            "description": "最多四次有赞业务请求，不包括待接入的授权及审计请求。"
+          },
+          "requiresSensitiveAuthorization": {
+            "const": true,
+            "description": "必须完成员工字段权限、来源与可靠审计；计划不证明权限或对象存在。"
+          }
+        }
+      }
+    }
+  },
+  "error": {
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+      "success",
+      "code",
+      "message",
+      "details"
+    ],
+    "properties": {
+      "success": {
+        "const": false
+      },
+      "code": {
+        "const": -10001
+      },
+      "message": {
+        "type": "string",
+        "minLength": 1
+      },
+      "details": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "category",
+          "stage",
+          "command",
+          "targetScope",
+          "requestState",
+          "nextStep",
+          "errorVersion",
+          "recovery",
+          "execution"
+        ],
+        "properties": {
+          "category": {
+            "type": "string",
+            "description": "安全失败分类，不包含上游 message 或个人内容。"
+          },
+          "stage": {
+            "type": "string",
+            "enum": [
+              "input",
+              "scope",
+              "shop-binding",
+              "source-object",
+              "source-binding",
+              "privacy-authorization",
+              "verify",
+              "decrypt",
+              "audit",
+              "output-model",
+              "transport"
+            ],
+            "description": "失败所在阶段。"
+          },
+          "command": {
+            "const": "privacy.field.decrypt"
+          },
+          "targetScope": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "kdtId": {
+                "$ref": "#/definitions/shopId"
+              }
+            },
+            "description": "仅已校验的店铺 ID，不携带订单内容。"
+          },
+          "requestState": {
+            "type": "string",
+            "enum": [
+              "not_sent",
+              "sent",
+              "unknown"
+            ],
+            "description": "not_sent 尚未发出，sent 已收到响应，unknown 请求结果未知，不自动重放。"
+          },
+          "nextStep": {
+            "type": "string",
+            "minLength": 1
+          },
+          "api": {
+            "type": "string",
+            "minLength": 1
+          },
+          "httpStatus": {
+            "type": "integer"
+          },
+          "businessCode": {
+            "$ref": "#/definitions/diagnosticCode"
+          },
+          "gatewayCode": {
+            "$ref": "#/definitions/diagnosticCode"
+          },
+          "trace_id": {
+            "type": "string",
+            "pattern": "^[a-zA-Z0-9_-]{1,128}$"
+          },
+          "request_id": {
+            "type": "string",
+            "pattern": "^[a-zA-Z0-9_-]{1,128}$"
+          },
+          "errorVersion": {
+            "const": 2,
+            "description": "本命令采用错误诊断协议第二版。"
+          },
+          "issues": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 16,
+            "items": {
+              "$ref": "#/definitions/diagnosticIssue"
+            },
+            "description": "最多十六个已定位问题，不包含收到的原值。"
+          },
+          "issuesTruncated": {
+            "const": true,
+            "description": "问题超过返回上限，当前列表没有穷尽全部问题。"
+          },
+          "recovery": {
+            "$ref": "#/definitions/diagnosticRecovery",
+            "description": "受限的恢复说明，不会自动执行。"
+          },
+          "execution": {
+            "$ref": "#/definitions/diagnosticExecution",
+            "description": "整次调用的请求观察，独立于失败阶段的 requestState。"
+          }
+        }
+      }
+    }
+  },
+  "definitions": {
+    "shopId": {
+      "type": "string",
+      "pattern": "^[1-9][0-9]*$",
+      "description": "目标店铺正十进制安全整数，规范化保留字符串，不自动切店。"
+    },
+    "sourceObject": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "type",
+        "orderNo"
+      ],
+      "properties": {
+        "type": {
+          "const": "order",
+          "description": "order 为交易订单；未知对象类型拒绝。"
+        },
+        "orderNo": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "pattern": "^(?=.*[^\\s])[^\\u0000-\\u001f\\u007f-\\u009f]+$",
+          "description": "原始订单号，保留合法业务空格，不猜前缀或位数。"
+        }
+      }
+    },
+    "key": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 64,
+      "pattern": "^[a-z][a-z0-9-]*$",
+      "description": "本次唯一的结果关联标识，不是业务对象身份。"
+    },
+    "field": {
+      "type": "string",
+      "enum": [
+        "address.receiverName",
+        "address.receiverPhone",
+        "address.address"
+      ],
+      "description": "address.receiverName 为收货姓名；address.receiverPhone 为收货联系方式；address.address 为订单详细收货地址。未知字段拒绝，不接受任意 JSONPath。"
+    },
+    "diagnosticCode": {
+      "anyOf": [
+        {
+          "type": "integer"
+        },
+        {
+          "type": "string",
+          "pattern": "^-?[0-9]{1,12}$"
+        }
+      ],
+      "description": "原样保留安全错误码，不推测未知码含义。"
+    },
+    "diagnosticExpected": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [],
+      "properties": {
+        "type": {
+          "anyOf": [
+            {
+              "type": "string",
+              "description": "预期的 JSON 类型。"
+            },
+            {
+              "type": "array",
+              "items": {
+                "type": "string",
+                "description": "预期的 JSON 类型。"
+              }
+            }
+          ],
+          "description": "同版模型允许的类型。"
+        },
+        "enum": {
+          "type": "array",
+          "items": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "number"
+              },
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "null"
+              }
+            ],
+            "description": "契约声明的静态标量约束。"
+          },
+          "description": "同版模型允许的静态值。"
+        },
+        "const": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "number"
+            },
+            {
+              "type": "boolean"
+            },
+            {
+              "type": "null"
+            }
+          ],
+          "description": "契约声明的静态标量约束。"
+        },
+        "minimum": {
+          "type": "number",
+          "description": "包含的最小值。"
+        },
+        "maximum": {
+          "type": "number",
+          "description": "包含的最大值。"
+        },
+        "exclusiveMinimum": {
+          "type": "number",
+          "description": "不包含的最小值。"
+        },
+        "exclusiveMaximum": {
+          "type": "number",
+          "description": "不包含的最大值。"
+        },
+        "minLength": {
+          "type": "integer",
+          "description": "最少字符数。"
+        },
+        "maxLength": {
+          "type": "integer",
+          "description": "最多字符数。"
+        },
+        "minItems": {
+          "type": "integer",
+          "description": "最少元素数。"
+        },
+        "maxItems": {
+          "type": "integer",
+          "description": "最多元素数。"
+        },
+        "format": {
+          "type": "string",
+          "description": "同版模型声明的格式。"
+        },
+        "pattern": {
+          "type": "string",
+          "description": "同版模型声明的字符约束。"
+        },
+        "additionalProperties": {
+          "const": false,
+          "description": "对象拒绝契约以外的属性。"
+        },
+        "contains": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "const"
+          ],
+          "properties": {
+            "const": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "type": "number"
+                },
+                {
+                  "type": "boolean"
+                },
+                {
+                  "type": "null"
+                }
+              ],
+              "description": "契约声明的静态标量约束。"
+            }
+          }
+        },
+        "items": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "enum"
+          ],
+          "properties": {
+            "enum": {
+              "type": "array",
+              "items": {
+                "anyOf": [
+                  {
+                    "type": "string"
+                  },
+                  {
+                    "type": "number"
+                  },
+                  {
+                    "type": "boolean"
+                  },
+                  {
+                    "type": "null"
+                  }
+                ],
+                "description": "契约声明的静态标量约束。"
+              },
+              "description": "元素允许的静态值。"
+            }
+          }
+        }
+      }
+    },
+    "diagnosticIssue": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "source",
+        "reason"
+      ],
+      "properties": {
+        "source": {
+          "enum": [
+            "argv",
+            "input",
+            "context",
+            "output",
+            "preview"
+          ],
+          "description": "问题所属的参数、输入、上下文、结果或预览模型。"
+        },
+        "path": {
+          "type": "string",
+          "description": "对应模型中的 JSON Pointer；不含原始输入或动态字典键。"
+        },
+        "option": {
+          "type": "string",
+          "description": "可定位时给出的已注册 CLI 选项。"
+        },
+        "reason": {
+          "enum": [
+            "required",
+            "invalid_type",
+            "invalid_choice",
+            "out_of_range",
+            "invalid_format",
+            "conditional_required",
+            "constraint",
+            "unexpected_property",
+            "unknown_option",
+            "unknown_command",
+            "excess_arguments",
+            "missing_value"
+          ],
+          "description": "字段违反的约束类型，原始值不回显。"
+        },
+        "expected": {
+          "$ref": "#/definitions/diagnosticExpected",
+          "description": "同版契约的静态预期。"
+        },
+        "relatedPaths": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "description": "关联字段的 JSON Pointer。"
+          },
+          "description": "触发条件约束的关联字段。"
+        }
+      }
+    },
+    "diagnosticRecovery": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "action",
+        "automaticBusinessRetry"
+      ],
+      "properties": {
+        "action": {
+          "enum": [
+            "correct_input",
+            "complete_authentication",
+            "request_access_review",
+            "stop_and_inspect"
+          ],
+          "description": "依次表示修正本地输入、补认证、核对权限或停止核查；仅是说明，不执行操作或授予权限。"
+        },
+        "automaticBusinessRetry": {
+          "const": false,
+          "description": "不据此自动重放业务请求。"
+        }
+      }
+    },
+    "diagnosticExecution": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "requestState",
+        "coverage",
+        "observedAttempts"
+      ],
+      "properties": {
+        "requestState": {
+          "enum": [
+            "not_sent",
+            "sent",
+            "unknown"
+          ],
+          "description": "整次调用尚未发送、已有发送记录或无法排除未知请求；不代表业务完成。"
+        },
+        "coverage": {
+          "enum": [
+            "complete",
+            "partial"
+          ],
+          "description": "请求观察覆盖全部已接入路径，或存在未观测路径；部分覆盖不能声明零请求。"
+        },
+        "observedAttempts": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991,
+          "description": "本地已进入发送边界的观测次数下界，不是服务端执行次数。"
+        }
+      }
+    }
+  },
+  "api": {
+    "method": "POST",
+    "path": "youzan.cloud.secret.decrypt.single/1.0.0"
+  },
+  "success": {
+    "description": "同一原应用、店铺和订单字段来源，全部判密、解密、输出模型及可靠审计满足后，按输入关联一次性交付明文。当前生产 provider 未接入，不宣称真实披露可用。"
+  },
+  "errors": {
+    "exitCode": 1,
+    "stdout": "empty",
+    "stderr": "一条安全错误 JSON，末尾换行。",
+    "recovery": "停止并核对原店铺、对象、权限及审计记录，结果未知时不重放，不切换店铺、应用或身份。",
+    "diagnosticsVersion": 2
+  },
+  "notes": [
+    "--kdt-id 省略时使用本次有效上下文 shopId；显式提供的非法值不回退。两者都缺失时拒绝；目标范围、同店核验和服务端权限仍按本命令校验。",
+    "当前仅本地预览可直接使用，缺少员工字段明文授权、来源绑定和可靠审计的生产 provider；执行在任何业务请求前拒绝，不表示命令全部完成。",
+    "输入文件或 stdin 最多 64KiB；一笔订单一至三个字段，拒绝额外属性、重复 JSON 成员、重复 key/field 及非密文。",
+    "密文持有权、本地 userId、订单可读或应用 API 权限都不证明员工字段明文权限。",
+    "接入后最多四次顺序有赞业务请求，敏感链禁止应用初始化、重发、重定向、换店或身份；累计响应 10MiB，最终输出含换行 5MiB，超限无部分明文。",
+    "10800 可能未授权或次数用完；10500 保留处理失败事实，不猜根因。",
+    "不新增明文文件、剪贴板或缓存；stdout 可能被终端、重定向或 Agent 保存，不提供批量导出或第三方传输授权。",
+    "dry-run 零凭证零网络，计划不包含 key、密文或 reason，也不证明远端对象或授权。"
+  ]
+}

package/src/commands/native/privacy/shared/order-source.js

@@ -0,0 +1,33 @@
+'use strict';
+
+const { object } = require('../../../../execution/query-api');
+const { privacyError } = require('../../../../execution/privacy');
+
+const fields = Object.freeze({
+  'address.receiverName': 'receiver_name',
+  'address.receiverPhone': 'receiver_tel',
+  'address.address': 'delivery_address'
+});
+const orderPath = 'youzan.trade.get/4.0.2';
+
+async function loadOrderSource(input, read, context, command) {
+  const { data, facts } = await read(orderPath, { tid: input.object.orderNo }, 'source-object');
+  const full = data?.full_order_info;
+  const order = full?.order_info;
+  const validId = value => Number.isSafeInteger(value) && value > 0 ||
+    typeof value === 'string' && /^[1-9]\d*$/.test(value);
+  if (!object(order) || order.tid !== input.object.orderNo || !validId(order.node_kdt_id) ||
+      String(order.node_kdt_id) !== input.scope.kdtId ||
+      (Object.hasOwn(order, 'root_kdt_id') && (!validId(order.root_kdt_id) || String(order.root_kdt_id) !== context.hq))) {
+    throw privacyError(command, 'scope_unresolved', 'source-object', input.scope, 'sent', facts);
+  }
+  if (!object(full.address_info)) {
+    throw privacyError(command, 'source_mismatch', 'source-binding', input.scope, 'sent', facts);
+  }
+  return { sourceData: data, ciphertexts: input.fields.map(field => {
+    const source = fields[field];
+    return Object.hasOwn(full.address_info, source) ? full.address_info[source] : undefined;
+  }) };
+}
+
+module.exports = { fields, orderPath, loadOrderSource };