@youzan-cloud/zan-saas-cli 0.0.0-stage → 0.1.0-beta.4

package/src/commands/native/member/level/list/schema.json

@@ -0,0 +1,104 @@
+{
+  "schemaVersion": 1,
+  "api": { "method": "POST", "path": "youzan.scrm.level.list/3.0.0" },
+  "input": {
+    "type": "object",
+    "description": "参数及上下文补全后的业务输入，不是 CLI 接收的 JSON。format 和 dry-run 是调用控制，不进入业务模型。",
+    "additionalProperties": false,
+    "required": ["kdtId"],
+    "properties": {
+      "kdtId": { "$ref": "#/definitions/shopId" },
+      "levelType": { "type": "integer", "enum": [1, 2], "description": "1=免费等级，2=付费等级。省略依次读取两类。" }
+    }
+  },
+  "output": {
+    "type": "object", "additionalProperties": false, "required": ["data"],
+    "description": "所有必要类型成功后的当前目录；不提供历史或客户实际等级。",
+    "properties": {
+      "data": {
+        "type": "object", "additionalProperties": false, "required": ["levels"],
+        "description": "完整成功的本次查询结果。",
+        "properties": {
+          "levels": {
+            "type": "array", "maxItems": 2000,
+            "description": "默认先免费后付费，各类保持响应原序，保留禁用与零值。同类型 alias 不重复，跨类型可同名。不分页；明确成功空集合才返回 []，不承诺跨请求强一致快照。",
+            "items": {
+              "type": "object", "additionalProperties": false,
+              "required": ["level_alias", "name", "level_type", "level_value", "is_enabled"],
+              "properties": {
+                "level_alias": { "type": "string", "minLength": 1, "pattern": "\\S", "description": "完整等级别名，保留大小写；与类型组合引用定义，不是名称或数值 ID。" },
+                "name": { "type": "string", "description": "等级名称，明确空串保留。" },
+                "level_type": { "type": "integer", "enum": [1, 2], "description": "1=免费等级，2=付费等级，必须匹配本次请求类型。" },
+                "level_value": { "type": "integer", "minimum": -2147483648, "maximum": 2147483647, "description": "32位有符号等级值，保留0；不是定义 ID 或排序保证。" },
+                "is_enabled": { "type": "boolean", "description": "true=启用，false=禁用；禁用定义不被过滤。" },
+                "level_id": { "type": "string", "pattern": "^[1-9]\\d*$", "description": "源实际返回的正十进制等级定义 ID，无损转文本。源缺省时省略，不能用等级值或其它 ID 补造。缺失时不可用于需要数值定义 ID 的客户搜索。" },
+                "min_growth": { "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991, "description": "源返回的成长门槛，保留安全整数原值。未返回时省略，不能据此推算客户实际等级。" }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "preview": {
+    "type": "object", "additionalProperties": false, "required": ["scope", "requests"],
+    "description": "零凭证、零网络的本地目标及完整请求计划，不证明权限或实际目录数量。",
+    "properties": {
+      "scope": { "type": "object", "additionalProperties": false, "required": ["kdtId"], "description": "本次固定目标店铺。", "properties": { "kdtId": { "$ref": "#/definitions/shopId" } } },
+      "requests": {
+        "type": "array", "minItems": 2, "maxItems": 3,
+        "description": "先核验店铺，再请求指定类型一次或依次请求1、2；没有分页或动态请求。",
+        "items": {
+          "type": "object", "additionalProperties": false, "required": ["method", "path", "body"],
+          "properties": {
+            "method": { "const": "POST", "description": "请求方法。" },
+            "path": { "enum": ["youzan.shop.basic.get/3.0.0", "youzan.scrm.level.list/3.0.0"], "description": "店铺核验或等级目录请求的完整路径。" },
+            "body": { "type": "object", "additionalProperties": false, "description": "核验请求为空对象；目录请求仅含整数 level_type，不发送 kdt_id。", "properties": { "level_type": { "type": "integer", "enum": [1, 2], "description": "1=免费等级，2=付费等级。" } } }
+          },
+          "oneOf": [
+            { "properties": { "path": { "const": "youzan.shop.basic.get/3.0.0" }, "body": { "type": "object", "maxProperties": 0 } } },
+            { "properties": { "path": { "const": "youzan.scrm.level.list/3.0.0" }, "body": { "type": "object", "required": ["level_type"], "properties": { "level_type": { "type": "integer", "enum": [1, 2] } } } } }
+          ]
+        }
+      }
+    }
+  },
+  "error": {
+    "type": "object", "additionalProperties": false, "required": ["success", "code", "message", "details"],
+    "properties": {
+      "success": { "const": false, "description": "固定失败标记。" },
+      "code": { "const": -10001, "description": "统一 CLI 失败码。" },
+      "message": { "type": "string", "minLength": 1, "description": "受控说明，不回显源正文或自由消息。" },
+      "details": {
+        "type": "object", "additionalProperties": false,
+        "required": ["command", "category", "stage", "targetScope", "requestState", "nextStep"],
+        "properties": {
+          "command": { "const": "member.level.list", "description": "失败命令。" },
+          "category": { "enum": ["validation", "parameter", "configuration", "permission", "authentication", "scope_unresolved", "http", "business_rejected", "transport", "protocol", "limit"], "description": "validation=业务输入，parameter=argv，configuration=环境或上下文，permission=权限，authentication=认证，scope_unresolved=店铺不匹配，http=HTTP拒绝，business_rejected=业务拒绝，transport=传输未知，protocol=信封、字段或重复键错误，limit=数量或字节预算。" },
+          "stage": { "enum": ["input", "context", "configuration", "shop-binding", "levels", "output"], "description": "input=参数，context=上下文，configuration=凭证环境，shop-binding=店铺核验，levels=目录读取或模型，output=序列化。" },
+          "targetScope": { "type": "object", "additionalProperties": false, "description": "已验证目标，未知时为空对象。", "properties": { "kdtId": { "$ref": "#/definitions/shopId" } } },
+          "requestState": { "enum": ["not_sent", "sent", "unknown"], "description": "not_sent=失败请求未发送，sent=已收到响应但不证明成功，unknown=发送或响应结果不明。" },
+          "nextStep": { "type": "string", "minLength": 1, "description": "保持原目标和所选类型排查，不自动重试或切换身份。" },
+          "api": { "type": "string", "description": "实际失败请求的 API 名称及版本。" },
+          "httpStatus": { "type": "integer", "minimum": 100, "maximum": 599, "description": "已观察 HTTP 状态。" },
+          "businessCode": { "$ref": "#/definitions/diagnosticCode" },
+          "gatewayCode": { "$ref": "#/definitions/diagnosticCode" },
+          "trace_id": { "$ref": "#/definitions/traceId" },
+          "request_id": { "$ref": "#/definitions/traceId" }
+        }
+      }
+    }
+  },
+  "definitions": {
+    "shopId": { "type": "integer", "minimum": 1, "maximum": 9007199254740991, "description": "目标店铺安全正整数。省略 --kdt-id 时取有效上下文 shopId；显式非法值不得回退，非总部不得跨店。" },
+    "diagnosticCode": { "anyOf": [{ "type": "integer", "minimum": -9007199254740991, "maximum": 9007199254740991 }, { "type": "string", "pattern": "^-?\\d{1,12}$" }], "description": "白名单诊断码，安全整数或最多12位数字文本。" },
+    "traceId": { "type": "string", "pattern": "^[a-zA-Z0-9_-]{1,128}$", "description": "脱敏请求追踪标识，仅保留字母数字、下划线和连字符。" }
+  },
+  "success": { "description": "同一凭证及目标快照先通过店铺核验，所有必要类型成功且每条核心模型、可选已返回字段及复合定义键合法才成功。核心缺失或可选已返回 null、错型均失败。" },
+  "errors": { "description": "失败 stdout 为空，stderr 一份 JSON 加换行，退出1；任一必要请求失败不输出部分目录。不重试、不移除失败类型、不换源。" },
+  "notes": [
+    "默认3次业务请求，指定类型2次，包含一次店铺核验；默认两次计费目录调用，费用遵循应用合同。每请求10秒，累计原始响应10MiB，含换行最终输出5MiB，每类1000条、组合2000条。超预算整体失败，不截断。",
+    "真实执行需有效 userId、hq、shopId、orgType 四字段上下文及同店授权。无上下文仅允许显式合法目标的 dry-run；无效上下文始终拒绝。店铺核验、应用身份测试不证明员工 OAuth 或跨店权限。",
+    "目录是当前定义，不代表客户实际拥有等级。可用完整 alias 及类型调用 member level get；缺少 level_id 时不能据此构造客户搜索的 level_ids。未返回权益或历史不表示不存在。"
+  ]
+}

package/src/commands/native/member/membership/get/command.js

@@ -0,0 +1,78 @@
+'use strict';
+
+const { withTargetShopDefault } = require('../../../../../execution/target-shop-default');
+
+const { Command, Option } = require('commander');
+const schema = require('./schema.json');
+const { resolveTargetShop } = require('../../../../../execution/target-shop');
+const { validateCommandValue } = require('../../../../../execution/command-schema');
+const { object } = require('../../../../../execution/query-api');
+const { createShopQuery, failure, bindingPath } = require('../../../../../execution/shop-query');
+
+const command = 'member.membership.get';
+const reject = (category, stage, scope, state, facts) =>
+  failure(command, category, stage, scope, state, facts);
+
+function buildInput(options, context) {
+  const scope = resolveTargetShop(options, context, command);
+  let input;
+  try {
+    input = { ...scope, yzOpenId: options.yzOpenId.trim() };
+    validateCommandValue(schema, 'input', input);
+  } catch {
+    throw reject('parameter', 'input', scope);
+  }
+  return Object.freeze(input);
+}
+
+function previewFor(input) {
+  return {
+    method: 'POST', path: schema.api.path, body: { yz_open_ids: [input.yzOpenId] },
+    scope: { kdtId: input.kdtId },
+    prerequisites: [{ method: 'POST', path: bindingPath, body: {} }]
+  };
+}
+
+async function execute(input, preview) {
+  const scope = { kdtId: input.kdtId };
+  const read = await createShopQuery(scope, command);
+  const { data, facts } = await read(preview.path, preview.body, 'membership');
+  const invalid = category => reject(category, 'membership-model', scope, 'sent', facts);
+  if (!Array.isArray(data)) throw invalid('protocol');
+  if (data.length === 0) throw invalid('not_found');
+  if (data.length !== 1 || !object(data[0])) throw invalid('protocol');
+  const row = data[0];
+  if (typeof row.yz_open_id !== 'string') throw invalid('protocol');
+  if (row.yz_open_id !== input.yzOpenId) throw invalid('target_mismatch');
+  if (!object(row.label_info) || typeof row.label_info.is_member !== 'boolean') {
+    throw invalid('protocol');
+  }
+  const output = { data: { membership: { is_member: row.label_info.is_member } } };
+  validateCommandValue(schema, 'output', output);
+  return output;
+}
+
+function createCommand({ context } = {}) {
+  return new Command('get')
+    .description('查询一个客户明确的会员标记；未返回客户不能视为非会员')
+    .allowExcessArguments(false)
+    .exitOverride(error => {
+      if (['commander.helpDisplayed', 'commander.version'].includes(error.code)) throw error;
+      throw reject('parameter', 'input');
+    })
+    .requiredOption('--yz-open-id <id>', '必填：客户的 yzOpenId；不是手机号或员工 ID')
+    .option('--kdt-id <id>', '目标店铺正安全整数；省略取本次有效上下文 shopId，非总部不可跨店')
+    .addOption(new Option('--format <format>', 'json 或 pretty，仅改变缩进')
+      .choices(['json', 'pretty']).default('json'))
+    .option('--dry-run', '仅本地预览主请求与店铺核验请求；不读凭证、不联网')
+    .addHelpText('after', '\n输出：data.membership.is_member 为 Boolean。只支持已核实的微商城单店及连锁 D 总部/网店/合伙人；不承诺零售单店。\n执行需四字段上下文及同店铺授权凭证，先只读核验凭证店铺；不证明员工 OAuth。\n契约：zan-saas schema member.membership.get --format json\n示例：zan-saas member membership get --yz-open-id customer-1 --kdt-id 63077 --dry-run')
+    .action(async options => {
+      const input = buildInput(options, context);
+      const preview = previewFor(input);
+      validateCommandValue(schema, 'preview', preview);
+      const result = options.dryRun ? preview : await execute(input, preview);
+      console.log(JSON.stringify(result, null, options.format === 'pretty' ? 2 : 0));
+    });
+}
+
+module.exports = { kind: 'atomic', risk: 'read', at: 'all', createCommand: withTargetShopDefault(createCommand) };

package/src/commands/native/member/membership/get/schema.json

@@ -0,0 +1,283 @@
+{
+  "schemaVersion": 1,
+  "input": {
+    "type": "object",
+    "required": [
+      "kdtId",
+      "yzOpenId"
+    ],
+    "additionalProperties": false,
+    "properties": {
+      "kdtId": {
+        "$ref": "#/definitions/shopId"
+      },
+      "yzOpenId": {
+        "type": "string",
+        "minLength": 1,
+        "pattern": "^\\S(?:[\\s\\S]*\\S)?$",
+        "description": "去除首尾空白后的单个客户 yzOpenId，不是手机号、微信 openId 或员工 ID。"
+      }
+    },
+    "description": "CLI 解析参数并完成必要上下文补全后的业务输入；不是直接传入 CLI 的 JSON。原始选项、必填条件和默认值见 options。"
+  },
+  "output": {
+    "type": "object",
+    "required": [
+      "data"
+    ],
+    "additionalProperties": false,
+    "properties": {
+      "data": {
+        "type": "object",
+        "required": [
+          "membership"
+        ],
+        "additionalProperties": false,
+        "properties": {
+          "membership": {
+            "type": "object",
+            "required": [
+              "is_member"
+            ],
+            "additionalProperties": false,
+            "properties": {
+              "is_member": {
+                "type": "boolean",
+                "description": "匹配客户明确的会员标记；false 是明确非会员，空集合或缺字段不等于 false。"
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "preview": {
+    "type": "object",
+    "required": [
+      "method",
+      "path",
+      "body",
+      "scope",
+      "prerequisites"
+    ],
+    "additionalProperties": false,
+    "properties": {
+      "method": {
+        "const": "POST"
+      },
+      "path": {
+        "const": "youzan.scrm.customer.list.yzopenid/1.0.0"
+      },
+      "body": {
+        "type": "object",
+        "required": [
+          "yz_open_ids"
+        ],
+        "additionalProperties": false,
+        "properties": {
+          "yz_open_ids": {
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 1,
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          }
+        }
+      },
+      "scope": {
+        "type": "object",
+        "required": [
+          "kdtId"
+        ],
+        "additionalProperties": false,
+        "properties": {
+          "kdtId": {
+            "$ref": "#/definitions/shopId"
+          }
+        }
+      },
+      "prerequisites": {
+        "type": "array",
+        "minItems": 1,
+        "maxItems": 1,
+        "items": {
+          "type": "object",
+          "required": [
+            "method",
+            "path",
+            "body"
+          ],
+          "additionalProperties": false,
+          "properties": {
+            "method": {
+              "const": "POST"
+            },
+            "path": {
+              "const": "youzan.shop.basic.get/3.0.0"
+            },
+            "body": {
+              "type": "object",
+              "additionalProperties": false
+            }
+          }
+        }
+      }
+    }
+  },
+  "error": {
+    "type": "object",
+    "required": [
+      "success",
+      "code",
+      "message",
+      "details"
+    ],
+    "additionalProperties": false,
+    "properties": {
+      "success": {
+        "const": false
+      },
+      "code": {
+        "const": -10001
+      },
+      "message": {
+        "type": "string",
+        "minLength": 1
+      },
+      "details": {
+        "type": "object",
+        "required": [
+          "category",
+          "stage",
+          "command",
+          "targetScope",
+          "requestState",
+          "nextStep"
+        ],
+        "additionalProperties": false,
+        "properties": {
+          "category": {
+            "type": "string",
+            "enum": [
+              "validation",
+              "configuration",
+              "parameter",
+              "permission",
+              "authentication",
+              "scope_unresolved",
+              "transport",
+              "http",
+              "protocol",
+              "business_rejected",
+              "not_found",
+              "target_mismatch"
+            ]
+          },
+          "stage": {
+            "type": "string",
+            "enum": [
+              "validation",
+              "context",
+              "scope",
+              "input",
+              "configuration",
+              "shop-binding",
+              "membership",
+              "membership-model"
+            ]
+          },
+          "command": {
+            "const": "member.membership.get"
+          },
+          "targetScope": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "kdtId": {
+                "$ref": "#/definitions/shopId"
+              }
+            }
+          },
+          "requestState": {
+            "enum": [
+              "not_sent",
+              "sent",
+              "unknown"
+            ]
+          },
+          "nextStep": {
+            "type": "string",
+            "minLength": 1
+          },
+          "api": {
+            "type": "string"
+          },
+          "httpStatus": {
+            "type": "integer"
+          },
+          "businessCode": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "gatewayCode": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "trace_id": {
+            "type": "string"
+          },
+          "request_id": {
+            "type": "string"
+          }
+        }
+      }
+    }
+  },
+  "definitions": {
+    "shopId": {
+      "type": "integer",
+      "minimum": 1,
+      "maximum": 9007199254740991,
+      "description": "显式 --kdt-id 优先，否则取本次有效上下文 shopId。默认值是动态来源，不是授权证明；实际执行必须与同次凭证回读的店铺一致。"
+    }
+  },
+  "modules": {
+    "membership": {
+      "base": true,
+      "upstreamPath": "data[].label_info",
+      "required": true,
+      "description": "仅提取精确匹配目标客户的 Boolean is_member；不扁平化其他字段。"
+    }
+  },
+  "api": {
+    "method": "POST",
+    "path": "youzan.scrm.customer.list.yzopenid/1.0.0"
+  },
+  "success": {
+    "description": "店铺核验通过，唯一匹配目标客户且会员标记严格为 Boolean 后成功。"
+  },
+  "errors": {
+    "description": "失败 stdout 为空，stderr 为一份脱敏错误 JSON，退出码非零；不返回部分成功，不自动重试、切换身份或目标。按 error 模型及安全下一步处理。"
+  },
+  "notes": [
+    "只返回 data.membership.is_member，类型严格为 Boolean；不从其他字段推导入会状态。",
+    "空集合只表示本次未返回目标，不能解释为客户不存在或非会员；多条、缺字段或错型失败。",
+    "支持已核实的微商城单店、连锁 D 总部、网店及合伙人，不承诺零售全覆盖。",
+    "一次店铺核验和一次会员读取，不批量、不自动重试；核验失败不继续业务请求。",
+    "本地 --dry-run 不读取凭证、不联网；预览只证明构造计划，不证明对象存在或权限有效。真实执行仍需有效上下文及目标范围授权，at 声明不替代服务端授权。"
+  ]
+}

package/src/commands/native/order/commands.index.json

@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 3,
+  "domain": "order",
+  "businessCommands": [
+    {
+      "path": "order.order.get",
+      "kind": "atomic",
+      "risk": "read",
+      "availability": "available",
+      "at": "all",
+      "module": "order/order/get/command.js",
+      "fingerprint": "f418c43687be1a520d4ec877e01c36b2d3f4231ae0413423655c1923ba749e5a"
+    },
+    {
+      "path": "order.order.list",
+      "kind": "atomic",
+      "risk": "read",
+      "availability": "available",
+      "at": "all",
+      "module": "order/order/list/command.js",
+      "fingerprint": "e724052bb9918a03649b7d53188869d4279f871dc86428f32615da29c5378ae2"
+    },
+    {
+      "path": "order.order.scan",
+      "kind": "atomic",
+      "risk": "read",
+      "availability": "available",
+      "at": "all",
+      "module": "order/order/scan/command.js",
+      "fingerprint": "64e037283116df0e8862be7a01db999de0436c74dace75e688ec819f1adc026d"
+    }
+  ]
+}

package/src/commands/native/order/domain.json

@@ -0,0 +1,3 @@
+{
+  "description": "订单：交易订单、商品行与售后履约摘要"
+}

package/src/commands/native/order/order/get/command.js

@@ -0,0 +1,155 @@
+'use strict';
+
+const { withTargetShopDefault } = require('../../../../../execution/target-shop-default');
+
+const { Option } = require('commander');
+const { DiagnosticCommand } = require('../../../../../cli/diagnostic-command');
+const { inputIssue, withInputScope } = require('../../../../../execution/error-details');
+const { parseIncludeModules } = require('../../../../../execution/command-io');
+const { readContext } = require('../../../../../identity/context');
+const { queryDefinition, validateCommandValue } = require('../../../../../execution/command-schema');
+const { object } = require('../../../../../execution/query-api');
+const { discloseFields, validReason } = require('../../../../../execution/privacy');
+const { bindingPath, targetScope, createOrderQuery, reject, serialize } = require('../../shared/query');
+const projection = require('../../shared/projection');
+const schema = require('./schema.json');
+
+const command = 'order.order.get';
+const { includeModules } = queryDefinition(schema);
+const decryptFields = ['address.receiverName', 'address.receiverPhone', 'address.address'];
+
+function buildInput(options, context) {
+  const target = targetScope(options, context, command);
+  return withInputScope(target, () => normalizedInput(options, target));
+}
+
+function normalizedInput(options, target) {
+  const scope = Object.freeze({ ...target, orderNo: options.orderNo });
+  const input = {
+    scope, include: [...parseIncludeModules(options.include, includeModules, '/include')],
+    format: options.format, dryRun: options.dryRun === true
+  };
+  if (options.decrypt !== undefined) {
+    input.decrypt = [...parseIncludeModules(options.decrypt, decryptFields, '/decrypt')];
+    if (options.reason !== undefined) {
+      if (typeof options.reason !== 'string' || /[\p{Cc}\p{Zl}\p{Zp}]/u.test(options.reason)) {
+        throw inputIssue('/reason', 'invalid_format');
+      }
+      input.reason = options.reason.trim();
+      if (!validReason(input.reason)) throw inputIssue('/reason', 'invalid_format');
+    }
+  } else if (options.reason !== undefined) input.reason = options.reason;
+  validateCommandValue(schema, 'input', input);
+  return input;
+}
+
+function preview(input) {
+  const result = { requests: [
+    { method: 'POST', path: bindingPath, body: {} },
+    { method: 'POST', path: schema.api.path, body: { tid: input.scope.orderNo } }
+  ] };
+  if (input.decrypt) result.privacy = {
+    fields: input.decrypt, maximumApiRequests: 4, requiresSensitiveAuthorization: true
+  };
+  validateCommandValue(schema, 'preview', result);
+  return result;
+}
+
+function adapt(data, input, context, facts) {
+  const { scope } = input;
+  let output;
+  try {
+    if (!object(data) || !object(data.full_order_info)) throw new Error('missing order');
+    const full = data.full_order_info;
+    const order = projection.order(full.order_info);
+    if (order.orderNo !== scope.orderNo || order.kdtId !== scope.kdtId ||
+        (Object.hasOwn(order, 'rootKdtId') && order.rootKdtId !== context.hq)) {
+      throw reject(command, 'scope_unresolved', 'order', scope, 'sent', facts);
+    }
+    output = { data: { order, items: projection.items(full.orders), payment: projection.payment(full.pay_info) } };
+    for (const name of input.include) output.data[name] = projection.extension(name, data, full);
+    validateCommandValue(schema, 'output', output);
+  } catch (error) {
+    if (error.cliDetails) throw error;
+    throw reject(command, 'protocol', 'output-model', scope, 'sent', facts);
+  }
+  return output;
+}
+
+function disclosedOutput(result, input, context, facts) {
+  const output = adapt(result.sourceData, input, context, facts);
+  for (const { field, value } of result.values) output.data.address[field.slice('address.'.length)] = value;
+  validateCommandValue(schema, 'output', output);
+  serialize(output, input.format, command, input.scope);
+  return output;
+}
+
+function createCommand({ context, privacyProvider } = {}) {
+  return new DiagnosticCommand('get', { path: command, schema,
+    optionPaths: { '/scope/kdtId': 'kdtId', '/scope/orderNo': 'orderNo' } })
+    .description('读取单笔交易订单及选定的有限售后、履约摘要')
+    .allowExcessArguments(false)
+    .option('--kdt-id <id>', '目标店铺正安全整数；省略时使用当前上下文店铺')
+    .requiredOption('--order-no <no>', '必填：原始订单号，最多 128 字符；不限定前缀或位数')
+    .option('--include <modules>', `追加模块：${includeModules.join(', ')}；仅投影，不增加请求`)
+    .option('--decrypt <fields>', `显式解密：${decryptFields.join(', ')}；必须 include address`)
+    .option('--reason <text>', '仅解密时必填：1 至 200 个 Unicode 码点，无控制字符或换行，不含个人信息')
+    .addOption(new Option('--format <format>', 'json 或 pretty，仅改变缩进')
+      .choices(['json', 'pretty']).default('json'))
+    .option('--dry-run', '纯本地校验和两步计划，不读凭证、不联网')
+    .addHelpText('after', `
+固定返回 data.order、items、payment，include 只能追加模块，不能移除基础视图。
+订单号通常为 E/V/C 开头加 23 位数字，仅供核对；不按该格式拒绝输入或响应，不改写订单号。
+先用同一凭证核验店铺，再以 tid 读详情，最多两请求；核对订单号、node 店铺及已返回的 root 店铺。
+非总部目标须等于 context.shopId，总部也不跨凭证店铺；执行需要有效四字段上下文。
+ID 输出十进制字符串，交易行 oid 不是商品 ID。元金额仅无损补齐两位，不再除以 100。
+payment 是整单应付，realPayment 是实付，不扣退款或推导到账；按用户确认默认以 CNY 计价。
+基础 order 可返回支付时间 paidAt 和支付标记 isPaid；缺失不推断，零实付不等于未支付。
+金额保留两位小数字符串，不新增币种字段或换汇；该默认不是上游逐订单币种或官方保证。
+时间固定北京时间 YYYY-MM-DD HH:mm:ss.SSS，秒精度来源拒绝非零毫秒；发货空串原样保留。
+缺可选字段省略，实际零、false、空文本保留；已选模块缺失、null、错型均整体失败。
+售后仅本接口摘要，不证明资金到账；履约不含轨迹，不展开套餐 JSON 或查询关联详情。
+默认不主动解密。decrypt 只允许收货姓名、电话和详细地址，要求 include address 和 reason。
+选定字段全部判密、解密和可靠审计完成后原位返回；失败无部分明文，不将打星值当作可恢复的密文。
+解密最多四次有赞业务请求，禁用 1106 自动初始化及重发；预览只显示字段，不显示用途或密文。
+当前安装版尚未接通可信员工字段授权、来源绑定和可靠审计服务，实际解密拒绝；普通读取不受影响。
+累计响应上限 10MiB、最终 UTF-8 输出上限 5MiB，超限不裁切；不提供流式内存保证。
+不重试、重定向、切店或换身份；失败 stdout 为空，stderr 一份安全错误 JSON。
+执行需要有效的用户、组织与店铺上下文，可通过登录后选店或 ZAN_SAAS_CONTEXT 提供；目标范围和服务端授权按本命令契约校验，公共调用前置见 zan-saas skills read zan-saas-shared。
+应用 token 测试不证明员工 OAuth 或权限隔离。字段、枚举及边界见 zan-saas schema order.order.get。
+示例：zan-saas order order get --kdt-id 63077 --order-no E20261020201817054602016 --dry-run
+示例：zan-saas order order get --kdt-id 63077 --order-no E20261020201817054602016 --include aftersale,fulfillment
+`)
+    .action(async options => {
+      const state = readContext(context);
+      const input = buildInput(options, context);
+      const plan = preview(input);
+      let output = plan;
+      if (!input.dryRun) {
+        if (input.decrypt) {
+          let sourceFacts;
+          const result = await discloseFields({ scope: { kdtId: input.scope.kdtId },
+            object: { type: 'order', orderNo: input.scope.orderNo }, fields: input.decrypt, reason: input.reason }, {
+            command, allowedFields: decryptFields, provider: privacyProvider,
+            readSource: async read => {
+              const { data, facts } = await read(schema.api.path, { tid: input.scope.orderNo }, 'order');
+              sourceFacts = facts;
+              const sourceOutput = adapt(data, input, state.context, facts);
+              return { sourceData: data, values: input.decrypt.map(field => ({ field,
+                value: sourceOutput.data.address[field.slice('address.'.length)] })) };
+            },
+            validateResult: result => disclosedOutput(result, input, state.context, sourceFacts)
+          });
+          output = disclosedOutput(result, input, state.context, sourceFacts);
+        } else {
+          const read = await createOrderQuery(input.scope, command, { shopApp: false });
+          const request = plan.requests[1];
+          const { data, facts } = await read(request.path, request.body);
+          output = adapt(data, input, state.context, facts);
+        }
+      }
+      console.log(serialize(output, input.format, command, input.scope));
+    });
+}
+
+module.exports = { kind: 'atomic', risk: 'read', at: 'all', createCommand: withTargetShopDefault(createCommand) };