cyymall-cli 0.1.0 → 0.1.2

package/src/commands/order.js

@@ -1,327 +1,399 @@
-"use strict";
-
-const fs = require("fs");
-const crypto = require("crypto");
-const http = require("../http");
-const config = require("../config");
-const biz = require("../biz");
-
-function envelope(success, message, data, exitCode) {
-  const traceId = `local-${crypto.randomBytes(8).toString("hex")}`;
-  console.log(
-    JSON.stringify(
-      {
-        success,
-        code: success ? "OK" : "UPSTREAM_ERROR",
-        message,
-        data,
-        traceId,
-      },
-      null,
-      2,
-    ),
-  );
-  process.exit(exitCode ?? (success ? 0 : 2));
-}
-
-/**
- * @param {{ bodyFile?: string, bodyJson?: string }} opts
- */
-async function preSettle(opts) {
-  const cfg = config.loadConfig();
-  if (!cfg?.token) {
-    console.error("cyy: not logged in.");
-    process.exit(1);
-  }
-  let raw = opts.bodyJson;
-  if (opts.bodyFile) raw = fs.readFileSync(opts.bodyFile, "utf8");
-  if (!raw) {
-    console.error("cyy: provide --body-file or --body-json");
-    process.exit(1);
-  }
-  const url = http.moduleUrl("ORDER", "/app/order/preSettleOrder");
-  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
-  const { ok, json } = await http.request(url, {
-    method: "POST",
-    headers,
-    body: raw,
-  });
-  const success = ok && biz.isBizSuccess(json);
-  envelope(success, success ? "success" : "pre-settle failed", { upstream: json }, success ? 0 : 2);
-}
-
-/**
- * @param {{ bodyFile?: string, bodyJson?: string }} opts
- */
-async function confirm(opts) {
-  const cfg = config.loadConfig();
-  if (!cfg?.token) {
-    console.error("cyy: not logged in.");
-    process.exit(1);
-  }
-  let raw = opts.bodyJson;
-  if (opts.bodyFile) raw = fs.readFileSync(opts.bodyFile, "utf8");
-  if (!raw) {
-    console.error("cyy: provide --body-file or --body-json");
-    process.exit(1);
-  }
-  const url = http.moduleUrl("ORDER", "/app/order/confirmOrder");
-  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
-  const { ok, json } = await http.request(url, {
-    method: "POST",
-    headers,
-    body: raw,
-  });
-  const success = ok && biz.isBizSuccess(json);
-  envelope(success, success ? "success" : "confirm failed", { upstream: json }, success ? 0 : 2);
-}
-
-async function payUrl(opts) {
-  const cfg = config.loadConfig();
-  if (!cfg?.token) {
-    console.error("cyy: not logged in.");
-    process.exit(1);
-  }
-  const orderId = opts.orderId;
-  if (!orderId) {
-    console.error("cyy: --order-id required");
-    process.exit(1);
-  }
-
-  const url = http.moduleUrl("DEFAULT", "/member/getInfo/V2");
-  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
-  delete headers["Content-Type"];
-
-  const { ok, json } = await http.request(url, { method: "GET", headers, body: null });
-
-  let phone = String(cfg.phone || "");
-  let nick = "";
-  let img = "";
-  if (ok && biz.isBizSuccess(json) && json && typeof json === "object") {
-    const d = /** @type {{data?:Record<string,unknown>}} */ (json).data;
-    if (d) {
-      phone = String(d.memberPhone || phone);
-      nick = String(d.memberNick || "");
-      img = String(d.headerImg || "");
-    }
-  }
-
-  const siteId = cfg.site_id;
-  const shopId = cfg.shop_id;
-  const enc = encodeURIComponent;
-  const payUrlStr = `https://dhcmall.ifoodbuy.com/H5/#/replacePay?phone=${enc(phone)}&orderid=${enc(String(orderId))}&img=${enc(img)}&nick=${enc(nick)}&siteId=${siteId}&shopId=${shopId}&share=true`;
-
-  envelope(true, "success", { payUrl: payUrlStr, orderId }, 0);
-}
-
-/**
- * @param {object} opts
- */
-async function quick(opts) {
-  const cfg = config.loadConfig();
-  if (!cfg?.token) {
-    console.error("cyy: not logged in.");
-    process.exit(1);
-  }
-
-  const keyword = opts.keyword;
-  const quantity = Number(opts.quantity || 1);
-  const unit = opts.unit || "袋";
-  const shopId = Number(opts.shopId ?? cfg.shop_id);
-  const siteId = Number(opts.siteId ?? cfg.site_id);
-
-  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
-
-  // 1) Search
-  const searchUrl = http.moduleUrl("PRODUCT", "/app/product/getSkuList");
-  const searchBody = JSON.stringify({
-    pageNum: 1,
-    pageSize: 10,
-    shopId,
-    siteId,
-    spuName: keyword,
-    stockFlag: "0",
-  });
-  let r = await http.request(searchUrl, {
-    method: "POST",
-    headers,
-    body: searchBody,
-  });
-  if (!r.ok || !biz.isBizSuccess(r.json)) {
-    envelope(false, "search failed", { upstream: r.json }, 2);
-    return;
-  }
-  const list =
-    r.json &&
-    typeof r.json === "object" &&
-    r.json.data &&
-    typeof r.json.data === "object"
-      ? /** @type {{list?:unknown[]}} */ (r.json.data).list
-      : [];
-  const products = Array.isArray(list) ? list : [];
-  if (!products.length) {
-    envelope(false, "no products found", {}, 2);
-    return;
-  }
-
-  const product = /** @type {Record<string,unknown>} */ (products[0]);
-  const skuId = product.id;
-  const skuCode = product.skuCode;
-  const skuName = product.spuName;
-  const stockQty = product.stockAllQuantity ?? 0;
-  const promotionList = Array.isArray(product.promotionList) ? product.promotionList : [];
-
-  let price = 0;
-  let unitRate = 1;
-  for (const p of promotionList) {
-    const row = /** @type {Record<string,unknown>} */ (p);
-    if (row.skuSaleUnitName === unit) {
-      price = Number(row.salePrice || 0);
-      unitRate = Number(row.unitRate ?? 1);
-      break;
-    }
-  }
-  if (!price) {
-    envelope(
-      false,
-      `unit "${unit}" not found in promotionList`,
-      { availableUnits: promotionList.map((x) => /** @type {{skuSaleUnitName?:string}} */ (x).skuSaleUnitName) },
-      2,
-    );
-    return;
-  }
-
-  // 2) Cart
-  const cartBody = JSON.stringify({
-    cartItemList: [
-      {
-        skuCode,
-        skuName,
-        skuQty: quantity,
-        skuSaleUnit: unit,
-        listPrice: price,
-        salePrice: price,
-        unitRate,
-        selectFlag: true,
-      },
-    ],
-    cartModel: "append",
-    shopId,
-    siteId,
-  });
-  const cartUrl = http.moduleUrl("ORDER", "/app/order/cart");
-  r = await http.request(cartUrl, { method: "POST", headers, body: cartBody });
-  if (!r.ok || !biz.isBizSuccess(r.json)) {
-    envelope(false, "cart failed", { upstream: r.json }, 2);
-    return;
-  }
-  const cartData =
-    r.json && typeof r.json === "object" && "data" in r.json
-      ? /** @type {{data?:{cartItemList?:{addTime?:string}[]}}} */ (r.json).data
-      : undefined;
-  const addTime = cartData?.cartItemList?.[0]?.addTime;
-  if (!addTime) {
-    envelope(false, "missing addTime from cart response", { upstream: r.json }, 2);
-    return;
-  }
-
-  // 3) Pre-settle
-  const preBody = JSON.stringify({
-    headerVO: { shopId, siteId },
-    itemVOList: [
-      {
-        skuId,
-        skuCode,
-        skuName,
-        skuQty: quantity,
-        skuSaleUnit: unit,
-        salePrice: price,
-        listPrice: price,
-        unitRate,
-        addTime,
-        stockQty,
-        minSaleUnit: unit,
-        selectFlag: true,
-        status: 0,
-        canBuyFlag: true,
-      },
-    ],
-    balanceFlag: false,
-    userPointFlag: false,
-  });
-  const preUrl = http.moduleUrl("ORDER", "/app/order/preSettleOrder");
-  r = await http.request(preUrl, { method: "POST", headers, body: preBody });
-  if (!r.ok || !biz.isBizSuccess(r.json)) {
-    envelope(false, "pre-settle failed", { upstream: r.json }, 2);
-    return;
-  }
-  const pdata =
-    r.json && typeof r.json === "object" && r.json.data && typeof r.json.data === "object"
-      ? r.json.data
-      : null;
-  const preSettleId = pdata && /** @type {{preSettleId?:string}} */ (pdata).preSettleId;
-  const headerVO = pdata && /** @type {{headerVO?:unknown}} */ (pdata).headerVO;
-  const itemVOList = pdata && /** @type {{itemVOList?:unknown}} */ (pdata).itemVOList;
-  if (!preSettleId) {
-    envelope(false, "missing preSettleId", { upstream: r.json }, 2);
-    return;
-  }
-
-  // 4) Confirm
-  const confirmBody = JSON.stringify({
-    preSettleId,
-    headerVO,
-    itemVOList,
-    balanceFlag: false,
-    userPointFlag: false,
-    validateStockFlag: true,
-    repeatFlag: false,
-  });
-  const confirmUrl = http.moduleUrl("ORDER", "/app/order/confirmOrder");
-  r = await http.request(confirmUrl, { method: "POST", headers, body: confirmBody });
-  if (!r.ok || !biz.isBizSuccess(r.json)) {
-    envelope(false, "confirm failed", { upstream: r.json }, 2);
-    return;
-  }
-  const orderData =
-    r.json && typeof r.json === "object" && r.json.data && typeof r.json.data === "object"
-      ? r.json.data
-      : {};
-  const orderId = /** @type {{orderId?:string,payAmt?:unknown}} */ (orderData).orderId;
-  const payAmt = /** @type {{orderId?:string,payAmt?:unknown}} */ (orderData).payAmt;
-
-  // 5) Pay URL
-  const memberUrl = http.moduleUrl("DEFAULT", "/member/getInfo/V2");
-  const h2 = /** @type {Record<string,string>} */ ({ ...headers });
-  delete h2["Content-Type"];
-  const uinfo = await http.request(memberUrl, { method: "GET", headers: h2, body: null });
-  let phone = String(cfg.phone || "");
-  let nick = "";
-  let img = "";
-  if (uinfo.ok && biz.isBizSuccess(uinfo.json) && uinfo.json && typeof uinfo.json === "object") {
-    const d = /** @type {{data?:Record<string,unknown>}} */ (uinfo.json).data;
-    if (d) {
-      phone = String(d.memberPhone || phone);
-      nick = String(d.memberNick || "");
-      img = String(d.headerImg || "");
-    }
-  }
-  const enc = encodeURIComponent;
-  const payUrlStr = `https://dhcmall.ifoodbuy.com/H5/#/replacePay?phone=${enc(phone)}&orderid=${enc(String(orderId))}&img=${enc(img)}&nick=${enc(nick)}&siteId=${siteId}&shopId=${shopId}&share=true`;
-
-  envelope(
-    true,
-    "order placed",
-    {
-      product: skuName,
-      quantity,
-      unit,
-      orderId,
-      payAmt,
-      payUrl: payUrlStr,
-    },
-    0,
-  );
-}
-
-module.exports = { preSettle, confirm, payUrl, quick };
+"use strict";
+
+const fs = require("fs");
+const crypto = require("crypto");
+const http = require("../http");
+const config = require("../config");
+const biz = require("../biz");
+
+function envelope(success, message, data, exitCode) {
+  const traceId = `local-${crypto.randomBytes(8).toString("hex")}`;
+  console.log(
+    JSON.stringify(
+      {
+        success,
+        code: success ? "OK" : "UPSTREAM_ERROR",
+        message,
+        data,
+        traceId,
+      },
+      null,
+      2,
+    ),
+  );
+  process.exit(exitCode ?? (success ? 0 : 2));
+}
+
+/**
+ * @param {{ bodyFile?: string, bodyJson?: string }} opts
+ */
+async function preSettle(opts) {
+  const cfg = config.loadConfig();
+  if (!cfg?.token) {
+    console.error("cyy: not logged in.");
+    process.exit(1);
+  }
+  let raw = opts.bodyJson;
+  if (opts.bodyFile) raw = fs.readFileSync(opts.bodyFile, "utf8");
+  if (!raw) {
+    console.error("cyy: provide --body-file or --body-json");
+    process.exit(1);
+  }
+  const url = http.moduleUrl("ORDER", "/app/order/preSettleOrder");
+  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
+  const { ok, json } = await http.request(url, {
+    method: "POST",
+    headers,
+    body: raw,
+  });
+  const success = ok && biz.isBizSuccess(json);
+  envelope(success, success ? "success" : "pre-settle failed", { upstream: json }, success ? 0 : 2);
+}
+
+/**
+ * @param {{ bodyFile?: string, bodyJson?: string }} opts
+ */
+async function confirm(opts) {
+  const cfg = config.loadConfig();
+  if (!cfg?.token) {
+    console.error("cyy: not logged in.");
+    process.exit(1);
+  }
+  let raw = opts.bodyJson;
+  if (opts.bodyFile) raw = fs.readFileSync(opts.bodyFile, "utf8");
+  if (!raw) {
+    console.error("cyy: provide --body-file or --body-json");
+    process.exit(1);
+  }
+  const url = http.moduleUrl("ORDER", "/app/order/confirmOrder");
+  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
+  const { ok, json } = await http.request(url, {
+    method: "POST",
+    headers,
+    body: raw,
+  });
+  const success = ok && biz.isBizSuccess(json);
+  envelope(success, success ? "success" : "confirm failed", { upstream: json }, success ? 0 : 2);
+}
+
+async function payUrl(opts) {
+  const cfg = config.loadConfig();
+  if (!cfg?.token) {
+    console.error("cyy: not logged in.");
+    process.exit(1);
+  }
+  const orderId = opts.orderId;
+  if (!orderId) {
+    console.error("cyy: --order-id required");
+    process.exit(1);
+  }
+
+  const url = http.moduleUrl("DEFAULT", "/member/getInfo/V2");
+  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
+  delete headers["Content-Type"];
+
+  const { ok, json } = await http.request(url, { method: "GET", headers, body: null });
+
+  let phone = String(cfg.phone || "");
+  let nick = "";
+  let img = "";
+  if (ok && biz.isBizSuccess(json) && json && typeof json === "object") {
+    const d = /** @type {{data?:Record<string,unknown>}} */ (json).data;
+    if (d) {
+      phone = String(d.memberPhone || phone);
+      nick = String(d.memberNick || "");
+      img = String(d.headerImg || "");
+    }
+  }
+
+  const siteId = cfg.site_id;
+  const shopId = cfg.shop_id;
+  const enc = encodeURIComponent;
+  const payUrlStr = `https://dhcmall.ifoodbuy.com/H5/#/replacePay?phone=${enc(phone)}&orderid=${enc(String(orderId))}&img=${enc(img)}&nick=${enc(nick)}&siteId=${siteId}&shopId=${shopId}&share=true`;
+
+  envelope(true, "success", { payUrl: payUrlStr, orderId }, 0);
+}
+
+/**
+ * @param {object} opts
+ */
+async function quick(opts) {
+  const cfg = config.loadConfig();
+  if (!cfg?.token) {
+    console.error("cyy: not logged in.");
+    process.exit(1);
+  }
+
+  const keyword = opts.keyword;
+  const quantity = Number(opts.quantity || 1);
+  const unit = opts.unit || "袋";
+  const shopId = Number(opts.shopId ?? cfg.shop_id);
+  const siteId = Number(opts.siteId ?? cfg.site_id);
+
+  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
+
+  // 1) Search
+  const searchUrl = http.moduleUrl("PRODUCT", "/app/product/getSkuList");
+  const searchBody = JSON.stringify({
+    pageNum: 1,
+    pageSize: 10,
+    shopId,
+    siteId,
+    spuName: keyword,
+    stockFlag: "0",
+  });
+  let r = await http.request(searchUrl, {
+    method: "POST",
+    headers,
+    body: searchBody,
+  });
+  if (!r.ok || !biz.isBizSuccess(r.json)) {
+    envelope(false, "search failed", { upstream: r.json }, 2);
+    return;
+  }
+  const list =
+    r.json &&
+    typeof r.json === "object" &&
+    r.json.data &&
+    typeof r.json.data === "object"
+      ? /** @type {{list?:unknown[]}} */ (r.json.data).list
+      : [];
+  const products = Array.isArray(list) ? list : [];
+  if (!products.length) {
+    envelope(false, "no products found", {}, 2);
+    return;
+  }
+
+  const product = /** @type {Record<string,unknown>} */ (products[0]);
+  const skuId = product.id;
+  const skuCode = product.skuCode;
+  const skuName = product.spuName;
+  const stockQty = product.stockAllQuantity ?? 0;
+  const promotionList = Array.isArray(product.promotionList) ? product.promotionList : [];
+
+  let price = 0;
+  let unitRate = 1;
+  for (const p of promotionList) {
+    const row = /** @type {Record<string,unknown>} */ (p);
+    if (row.skuSaleUnitName === unit) {
+      price = Number(row.salePrice || 0);
+      unitRate = Number(row.unitRate ?? 1);
+      break;
+    }
+  }
+  if (!price) {
+    envelope(
+      false,
+      `unit "${unit}" not found in promotionList`,
+      { availableUnits: promotionList.map((x) => /** @type {{skuSaleUnitName?:string}} */ (x).skuSaleUnitName) },
+      2,
+    );
+    return;
+  }
+
+  // 2) Cart
+  const cartBody = JSON.stringify({
+    cartItemList: [
+      {
+        skuCode,
+        skuName,
+        skuQty: quantity,
+        skuSaleUnit: unit,
+        listPrice: price,
+        salePrice: price,
+        unitRate,
+        selectFlag: true,
+      },
+    ],
+    cartModel: "append",
+    shopId,
+    siteId,
+  });
+  const cartUrl = http.moduleUrl("ORDER", "/app/order/cart");
+  r = await http.request(cartUrl, { method: "POST", headers, body: cartBody });
+  if (!r.ok || !biz.isBizSuccess(r.json)) {
+    envelope(false, "cart failed", { upstream: r.json }, 2);
+    return;
+  }
+  const cartData =
+    r.json && typeof r.json === "object" && "data" in r.json
+      ? /** @type {{data?:{cartItemList?:{addTime?:string}[]}}} */ (r.json).data
+      : undefined;
+  const addTime = cartData?.cartItemList?.[0]?.addTime;
+  if (!addTime) {
+    envelope(false, "missing addTime from cart response", { upstream: r.json }, 2);
+    return;
+  }
+
+  // 3) Pre-settle
+  const preBody = JSON.stringify({
+    headerVO: { shopId, siteId },
+    itemVOList: [
+      {
+        skuId,
+        skuCode,
+        skuName,
+        skuQty: quantity,
+        skuSaleUnit: unit,
+        salePrice: price,
+        listPrice: price,
+        unitRate,
+        addTime,
+        stockQty,
+        minSaleUnit: unit,
+        selectFlag: true,
+        status: 0,
+        canBuyFlag: true,
+      },
+    ],
+    balanceFlag: false,
+    userPointFlag: false,
+  });
+  const preUrl = http.moduleUrl("ORDER", "/app/order/preSettleOrder");
+  r = await http.request(preUrl, { method: "POST", headers, body: preBody });
+  if (!r.ok || !biz.isBizSuccess(r.json)) {
+    envelope(false, "pre-settle failed", { upstream: r.json }, 2);
+    return;
+  }
+  const pdata =
+    r.json && typeof r.json === "object" && r.json.data && typeof r.json.data === "object"
+      ? r.json.data
+      : null;
+  const preSettleId = pdata && /** @type {{preSettleId?:string}} */ (pdata).preSettleId;
+  const headerVO = pdata && /** @type {{headerVO?:unknown}} */ (pdata).headerVO;
+  const itemVOList = pdata && /** @type {{itemVOList?:unknown}} */ (pdata).itemVOList;
+  if (!preSettleId) {
+    envelope(false, "missing preSettleId", { upstream: r.json }, 2);
+    return;
+  }
+
+  // 4) Confirm
+  const confirmBody = JSON.stringify({
+    preSettleId,
+    headerVO,
+    itemVOList,
+    balanceFlag: false,
+    userPointFlag: false,
+    validateStockFlag: true,
+    repeatFlag: false,
+  });
+  const confirmUrl = http.moduleUrl("ORDER", "/app/order/confirmOrder");
+  r = await http.request(confirmUrl, { method: "POST", headers, body: confirmBody });
+  if (!r.ok || !biz.isBizSuccess(r.json)) {
+    envelope(false, "confirm failed", { upstream: r.json }, 2);
+    return;
+  }
+  const orderData =
+    r.json && typeof r.json === "object" && r.json.data && typeof r.json.data === "object"
+      ? r.json.data
+      : {};
+  const orderId = /** @type {{orderId?:string,payAmt?:unknown}} */ (orderData).orderId;
+  const payAmt = /** @type {{orderId?:string,payAmt?:unknown}} */ (orderData).payAmt;
+
+  // 5) Pay URL
+  const memberUrl = http.moduleUrl("DEFAULT", "/member/getInfo/V2");
+  const h2 = /** @type {Record<string,string>} */ ({ ...headers });
+  delete h2["Content-Type"];
+  const uinfo = await http.request(memberUrl, { method: "GET", headers: h2, body: null });
+  let phone = String(cfg.phone || "");
+  let nick = "";
+  let img = "";
+  if (uinfo.ok && biz.isBizSuccess(uinfo.json) && uinfo.json && typeof uinfo.json === "object") {
+    const d = /** @type {{data?:Record<string,unknown>}} */ (uinfo.json).data;
+    if (d) {
+      phone = String(d.memberPhone || phone);
+      nick = String(d.memberNick || "");
+      img = String(d.headerImg || "");
+    }
+  }
+  const enc = encodeURIComponent;
+  const payUrlStr = `https://dhcmall.ifoodbuy.com/H5/#/replacePay?phone=${enc(phone)}&orderid=${enc(String(orderId))}&img=${enc(img)}&nick=${enc(nick)}&siteId=${siteId}&shopId=${shopId}&share=true`;
+
+  envelope(
+    true,
+    "order placed",
+    {
+      product: skuName,
+      quantity,
+      unit,
+      orderId,
+      payAmt,
+      payUrl: payUrlStr,
+    },
+    0,
+  );
+}
+
+/**
+ * 订单分页列表（与 App `OrderQeq` / `NetConfig.QUERY_PAGE` 一致）。
+ * @param {{ page?: string, pageSize?: string, status?: string, shopId?: string, objectCode?: string, all?: boolean, shopKeyword?: string }} opts
+ */
+async function list(opts) {
+  const cfg = config.loadConfig();
+  if (!cfg?.token) {
+    console.error("cyy: not logged in.");
+    process.exit(1);
+  }
+  const shopId = opts.shopId != null && opts.shopId !== "" ? Number(opts.shopId) : Number(cfg.shop_id);
+  if (!Number.isFinite(shopId)) {
+    console.error("cyy: shopId missing (set shop_id in config or pass --shop-id)");
+    process.exit(1);
+  }
+  const pageNum = Math.max(1, parseInt(String(opts.page ?? "1"), 10) || 1);
+  const pageSize = Math.max(1, Math.min(100, parseInt(String(opts.pageSize ?? "10"), 10) || 10));
+  const objectCode = parseInt(String(opts.objectCode ?? "1"), 10) || 1;
+  const status = opts.status != null ? String(opts.status) : "";
+  const queryAllFlag = Boolean(opts.all);
+  const shopKeyWord = opts.shopKeyword != null ? String(opts.shopKeyword) : "";
+
+  const bodyObj = {
+    pageNum,
+    pageSize,
+    shopId,
+    status,
+    queryAllFlag,
+    objectCode,
+    shopKeyWord,
+  };
+  const url = http.moduleUrl("DEFAULT", "/order/queryPage");
+  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
+  const { ok, json } = await http.request(url, {
+    method: "POST",
+    headers,
+    body: JSON.stringify(bodyObj),
+  });
+  const success = ok && biz.isBizSuccess(json);
+  envelope(success, success ? "success" : "order list failed", { upstream: json }, success ? 0 : 2);
+}
+
+/**
+ * 取消订单（与 App `OrderReq` / `cancelOrder` 一致）。
+ * @param {{ orderId?: string, childId?: string }} opts
+ */
+async function cancel(opts) {
+  const cfg = config.loadConfig();
+  if (!cfg?.token) {
+    console.error("cyy: not logged in.");
+    process.exit(1);
+  }
+  const orderId = opts.orderId;
+  if (!orderId) {
+    console.error("cyy: --order-id required");
+    process.exit(1);
+  }
+  const bodyObj = /** @type {Record<string, unknown>} */ ({ orderId: String(orderId) });
+  if (opts.childId != null && String(opts.childId) !== "") {
+    bodyObj.childId = String(opts.childId);
+  }
+  const url = http.moduleUrl("ORDER", "/app/order/cancelOrder");
+  const headers = /** @type {Record<string,string>} */ (http.buildAuthHeaders(cfg));
+  const { ok, json } = await http.request(url, {
+    method: "POST",
+    headers,
+    body: JSON.stringify(bodyObj),
+  });
+  const success = ok && biz.isBizSuccess(json);
+  envelope(success, success ? "success" : "cancel order failed", { upstream: json }, success ? 0 : 2);
+}
+
+module.exports = { preSettle, confirm, payUrl, quick, list, cancel };