helixlife-expert-cli 0.1.0

package/README.md

@@ -0,0 +1,159 @@
+# helixlife-expert-cli
+
+解螺旋 5.0 后台体系 · **科研专家合集** CLI。一个 npm 包提供六个专家命名空间，Skill 按专家拆分后单独交付，从而对外只暴露当前专家。
+
+不包含会员兑换。
+
+> **Skill 与 CLI 已分离**：`cli/skills/`（含各 `SKILL.md` 与 `references/`）不随本 npm 包发布。发给业务部门的是 Skill 目录，不是改 CLI 安装包。
+
+## 安装
+
+```bash
+npm install -g helixlife-expert-cli
+# 请求凭证由外部环境写入 ~/.config/helixlife/user-access-token.txt，本 CLI 不提供授权/鉴权命令
+helixlife-expert upgrade             # 检查并按需升级到 npm 最新版
+```
+
+Token 与接口基址配置位于 `~/.config/helixlife/`：
+
+- 配置：`~/.config/helixlife/config.json`
+- Token：`~/.config/helixlife/user-access-token.txt`
+
+与解螺旋其他 CLI 共用同一目录下的凭证文件。本 CLI **不提供** `auth login` / `auth status` / `auth logout`。
+
+## 环境地址
+
+默认使用生产基址。可通过本地配置覆盖 `api` / `agent_api`（完整 URL，原样使用）：
+
+```bash
+helixlife-expert config                              # 查看当前生效地址
+helixlife-expert config set api https://api.example.com
+helixlife-expert config set agent_api https://agent.example.com
+```
+
+## 本地开发
+
+```bash
+npm install
+npm run build
+npm link
+helixlife-expert --version
+```
+
+常用脚本：
+
+```bash
+npm run dev           # 直接跑 TypeScript 入口
+npm run typecheck     # 类型检查
+npm test              # 单元测试
+npm run sync:skills   # 将共用环境说明同步到各 Skill 的 references/common.md
+```
+
+## 发布
+
+在仓库根目录执行：
+
+```bash
+npm publish
+```
+
+`prepublishOnly` 会自动执行 `npm run build`。发布内容仅含 `cli/bin` 与 `cli/dist`，不含 `cli/skills/`。
+
+## Skill 交付
+
+> **发布约定**：本仓库 npm 包**不含** Skill。Agent 侧以 `cli/skills/` 下的目录为入口；替换 Agent 侧 Skill 目录即可，**不必**为此升 CLI 版本。
+
+授权 / 安装 / 升级 / 错误码的正文只维护在 `cli/skills/_fragments/common.md`。修改后执行 `npm run sync:skills`，拷贝到各 Skill 的 `references/common.md`。`_fragments` **不要**发给业务部门。
+
+### 只提供某一个专家
+
+只拷贝对应的一个文件夹，例如 Meta 分析专家：
+
+```
+cli/skills/helixlife-expert-meta/
+├── SKILL.md
+└── references/
+    ├── common.md      # 安装 / 授权 / 错误处理（自包含）
+    └── meta.md        # 本专家细则
+```
+
+该 Skill 写死只允许 `helixlife-expert meta …`，即使合集 CLI 里还有其他专家命令，Agent 也不会去调。
+
+| 专家 | Skill 目录 |
+| ---- | ---------- |
+| Meta 分析 | `cli/skills/helixlife-expert-meta/` |
+| 基金写作 | `cli/skills/helixlife-expert-fund/` |
+| SCI 写作 | `cli/skills/helixlife-expert-sci/` |
+| 数据分析 | `cli/skills/helixlife-expert-analysis/` |
+| 文献调研 | `cli/skills/helixlife-expert-literature/` |
+| 课题方案 | `cli/skills/helixlife-expert-proposal/` |
+
+### 提供全部专家
+
+拷贝 `cli/skills/` 下所有 `helixlife-expert-*` 目录（主 Skill + 六个专家 Skill），不要包含 `_fragments`。
+
+```
+cli/skills/
+├── helixlife-expert-cli/          # 全量路由入口
+├── helixlife-expert-meta/
+├── helixlife-expert-fund/
+├── helixlife-expert-sci/
+├── helixlife-expert-analysis/
+├── helixlife-expert-literature/
+└── helixlife-expert-proposal/
+```
+
+主 Skill 做意图路由，命中后只读对应专家 Skill；专家 Skill 的 description 收窄到本领域。
+
+## 目录结构
+
+```
+helixlife-expert-cli/
+├── package.json
+└── cli/
+    ├── bin/helixlife-expert.js
+    ├── dist/
+    ├── src/
+    │   ├── core/            # 共用基础设施（api / config / token）
+    │   └── modules/
+    │       ├── upgrade/
+    │       ├── shared/        # 跨专家共用（结果包装器、workflow-app 调用层）
+    │       ├── meta/
+    │       ├── fund/          # 含 nsfc（国自然）与 clinical（临床申请书）两个工作台
+    │       ├── sci/
+    │       ├── analysis/
+    │       ├── literature/
+    │       └── proposal/
+    ├── tests/
+    └── skills/              # 本地开发用，不随 npm 发布
+```
+
+## 命令命名空间
+
+| 模块 | 命令示例 | 状态 |
+| ---- | -------- | ---- |
+| 升级 | `helixlife-expert upgrade` | 已实现 |
+| 配置 | `helixlife-expert config` | 已实现 |
+| 工作台探测 | `helixlife-expert site-configs` | 已实现（工作台类专家业务前置硬门禁） |
+| Meta 分析 | `helixlife-expert meta workflow create` | 已实现（选题/检索/筛选/抽提/统计/写作六步全流程） |
+| 基金写作 | `helixlife-expert fund nsfc hypothesis create` | 已实现（国自然四步 + 临床申请书三步） |
+| SCI 写作 | `helixlife-expert sci outline create` | 已实现（拟定主题/确认提纲/生成全文三步流程） |
+| 数据分析 | `helixlife-expert analysis info` | 已实现（经外部仙桃 xt CLI 执行，共用本地凭证） |
+| 文献调研 | `helixlife-expert literature workflow run` | 已实现（信息调研/结构化拆解/文献阅读/研究假设四工作流） |
+| 课题方案 | `helixlife-expert proposal clinical run` | 已实现（基础研究经外部 newidea CLI；临床研究五工作流 + 生信方案） |
+
+Meta 分析专家迁移自 `helixlife-service-cli` 的 `workbench meta`，命令树为 `meta workflow|topic|picos|criteria|retrieve|screening|extraction|analysis|writing`。进入任何 Meta 业务命令前必须先通过 `helixlife-expert site-configs --format=json` 探测（细则见 `cli/skills/helixlife-expert-meta/references/meta.md`）。
+
+SCI 写作专家迁移自 `helixlife-service-cli` 的 `workbench sci`，命令树为 `sci template list` / `sci outline create` / `sci outline confirm create` / `sci article download`；docx 导出走 Newidea 接口（固定基址 `https://paas-api.newidea.pro`，不读本地配置）。同样须先通过 `site-configs` 探测（细则见 `cli/skills/helixlife-expert-sci/references/sci.md`）。
+
+基金写作专家迁移自 `helixlife-service-cli` 的 `workbench nsfc`（国自然申请书：假说 → 确认 → 提纲 → 全文四步）与 `workbench clinical`（临床申请书：选题评估 → 四要素 → 全文三步），命令树为 `fund nsfc …` 与 `fund clinical …` 两个子命名空间；技术路线图/假说机制图渲染与 docx 导出均走 Newidea 接口。同样须先通过 `site-configs` 探测（细则见 `cli/skills/helixlife-expert-fund/references/nsfc.md` 与 `references/clinical.md`）。
+
+文献调研专家提供四个工作流（`WF01` 信息调研、`WF02` 结构化拆解、`WF03` 文献阅读、`WF04` 研究假设），命令树为 `literature workflow list|params|run`。四者均为「`params` 取动态表单 → `run` 填参执行」两步式，表单字段由后端实时返回，CLI 不做本地映射。主线为 WF01 → WF02 → WF04，工作流间数据由 Agent 串联，CLI 不隐式串。该专家不走 `site-configs` 门禁（细则见 `cli/skills/helixlife-expert-literature/references/literature.md`）。
+
+数据分析专家不在本 CLI 内实现业务命令：分析/绘图经外部仙桃 CLI（`xt`，npm：`@helixlife-ai/xiantao`）执行，与本 CLI 共用 `~/.config/helixlife/` 凭证文件，按需被动安装；Skill 细则见 `cli/skills/helixlife-expert-analysis/references/`（路由索引 + 393 项冻结目录 + 执行手册）。**禁止**执行 `xt login` / `xt status`。
+
+课题方案专家先做基础 / 临床 / 生信三方向识别（证据不唯一时由 Skill 弹选择器兜底）。基础研究业务经外部 newidea CLI（`newidea`，npm：`@helixlife-ai/newidea`）执行，与本 CLI 共用 `~/.config/helixlife/` 凭证文件，按需被动安装（命令不存在再 `npm install -g @helixlife-ai/newidea@latest`）；Agent 直接调用 `newidea invocation start` / `invocation process`，成功后交付 ZIP 下载链接，不落盘、不解压。**禁止**执行 `newidea login` / `newidea status` / `newidea logout`。
+
+临床研究与生信方案由本 CLI 直接调用工作流接口，与文献调研共用 `shared/workflow-app` 调用层，同为「`params` 取动态表单 → `run` 填参执行」两步式。临床命令树为 `proposal clinical list|params|run`，五个 source（`diagnostic-study` 诊断、`prognosis-study` 预后、`treatment-trial` 疗效试验、`treatment-cohort` 疗效队列、`etiology-study` 病因）的研究目的字段已被后端锁成单一选项，因而 source 即等价于研究目的，疗效方向需再按研究设计二选一；生信为单一工作流 `bioinfo-planner`，命令树 `proposal bioinfo params|run`，不设 `--source`；该方向在 Skill 侧多一步套路定位，冻结目录 `bioinfo-pattern-catalog-v1.json`（67 条，含一句话概述与数据层面），由 `references/bioinfo-patterns.md` 做召回索引与可行性核对，CLI 本身不解析该目录。临床表单声明 `output_text` 与 `output_reference` 两路输出，实测后端通常只回 `output_text`（参考文献并在正文末章），渲染层对缺失的已声明输出直接跳过。该专家不走 `site-configs` 门禁（细则见 `cli/skills/helixlife-expert-proposal/references/proposal.md`）。
+
+Meta / 基金（国自然）模块额外引入运行时依赖：`@resvg/resvg-js`（SVG→PNG）、`docx`（Word 导出）、`pdf-lib`（PDF 导出）。

package/cli/bin/helixlife-expert.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+// npm bin 入口 shim，加载编译后的 dist/index.js
+import "../dist/index.js";

package/cli/dist/core/api/client.d.ts

@@ -0,0 +1,31 @@
+import { type SseDataPayload } from "./sse.js";
+export interface RequestOptions {
+    method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
+    params?: Record<string, string | number | boolean | undefined>;
+    body?: unknown;
+    headers?: Record<string, string>;
+    baseUrl?: string;
+    signal?: AbortSignal;
+    transformResponse?: (data: unknown) => unknown;
+}
+export interface BinaryResponse {
+    buffer: Buffer;
+    contentType: string | null;
+    filename?: string;
+}
+export declare class ApiClient {
+    private resolveToken;
+    private buildUrl;
+    private buildHeaders;
+    private assertOkResponse;
+    private resolveForbiddenMessage;
+    private send;
+    request<T>(path: string, options?: RequestOptions): Promise<T>;
+    requestBinary(path: string, options?: RequestOptions & {
+        baseUrl?: string;
+    }): Promise<BinaryResponse>;
+    requestSse(path: string, options: RequestOptions, onEvent: (payload: SseDataPayload) => void): Promise<void>;
+    private handleBlobResponse;
+    private extractFilenameFromContentDisposition;
+}
+//# sourceMappingURL=client.d.ts.map

package/cli/dist/core/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/core/api/client.ts"],"names":[],"mappings":"AAQA,OAAO,EAAkB,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AAM/D,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IAGrB,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;CAChD;AAGD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAeD,qBAAa,SAAS;IAEpB,OAAO,CAAC,YAAY;IAYpB,OAAO,CAAC,QAAQ;IAkBhB,OAAO,CAAC,YAAY;YAiBN,gBAAgB;IAwB9B,OAAO,CAAC,uBAAuB;YAsBjB,IAAI;IAmCZ,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,CAAC,CAAC;IA0BlE,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAc,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAClD,OAAO,CAAC,cAAc,CAAC;IAQpB,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,GACzC,OAAO,CAAC,IAAI,CAAC;YA6CF,kBAAkB;IAehC,OAAO,CAAC,qCAAqC;CAa9C"}

package/cli/dist/core/api/client.js

@@ -0,0 +1,183 @@
+// 后台 API 请求客户端：统一附加 Token、平台头、超时与 401 处理
+import { helixlifeError, helixlifeErrorCode, NOT_AUTHENTICATED_MESSAGE, TOKEN_EXPIRED_MESSAGE, } from "../errors.js";
+import { getDefaultBaseUrl } from "../types/config.js";
+import { parseSseStream } from "./sse.js";
+import { loadTokenFromFile } from "../token/index.js";
+import { getPackageVersion } from "../version.js";
+import { DEFAULT_REQUEST_TIMEOUT_MS, fetchWithTimeout } from "./http.js";
+// 当前安装的 CLI 版本（来自本包 package.json，不是 npm 最新版）
+const CLI_VERSION = getPackageVersion();
+// 前台通用请求头，与 vip.helixlife.cn 浏览器调用保持一致
+const PLATFORM_HEADERS = {
+    platform: "pc",
+    source: "PC",
+    website: "helixlife-ai",
+    "User-Agent": `helix-cli/${CLI_VERSION}`,
+    "X-Client-Version": CLI_VERSION,
+};
+// 封装后台 API 调用：自动附加 Token 与 baseUrl（环境地址由编译期 config.ts 决定）
+export class ApiClient {
+    // 校验并返回本地 token：无凭证直接抛 E1001，避免无凭证请求打到后台
+    resolveToken() {
+        const token = loadTokenFromFile();
+        if (!token) {
+            throw new helixlifeError(helixlifeErrorCode.NOT_AUTHENTICATED, NOT_AUTHENTICATED_MESSAGE);
+        }
+        return token;
+    }
+    // 构建带 query 参数的完整 URL
+    buildUrl(path, baseUrl, params) {
+        const url = new URL(path, baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`);
+        if (params) {
+            for (const [key, value] of Object.entries(params)) {
+                // 允许空字符串 query 参数（如 CSL 搜索 key="" 首屏加载）
+                if (value !== undefined) {
+                    url.searchParams.set(key, String(value));
+                }
+            }
+        }
+        return url;
+    }
+    // 合并平台通用头、调用方附加头与 Authorization
+    buildHeaders(token, extra, options) {
+        const headers = {
+            ...PLATFORM_HEADERS,
+            ...extra,
+        };
+        if (!options?.omitJsonContentType && !headers["Content-Type"]) {
+            headers["Content-Type"] = "application/json";
+        }
+        headers.Authorization = `Bearer ${token}`;
+        return headers;
+    }
+    // 校验 HTTP 响应状态：401 视为凭证无效；403 解开后端文案（含购买链接）为 E1005
+    async assertOkResponse(response) {
+        if (response.status === 401) {
+            throw new helixlifeError(helixlifeErrorCode.TOKEN_EXPIRED, TOKEN_EXPIRED_MESSAGE);
+        }
+        if (response.status === 403) {
+            const text = await response.text().catch(() => "");
+            throw new helixlifeError(helixlifeErrorCode.PERMISSION_DENIED, this.resolveForbiddenMessage(text, response.statusText));
+        }
+        if (!response.ok) {
+            const text = await response.text().catch(() => "");
+            throw new helixlifeError(helixlifeErrorCode.REQUEST_FAILED, `请求失败 (${response.status}): ${text || response.statusText}`);
+        }
+    }
+    // 403 优先使用后端 message（已含购买链接），解析失败再回退原始正文
+    resolveForbiddenMessage(text, statusText) {
+        const fallback = `请求失败 (403): ${text || statusText}`;
+        if (!text) {
+            return fallback;
+        }
+        try {
+            const body = JSON.parse(text);
+            const message = (typeof body.message === "string" && body.message.trim()) ||
+                (typeof body.msg === "string" && body.msg.trim()) ||
+                "";
+            return message || fallback;
+        }
+        catch {
+            return fallback;
+        }
+    }
+    // REST / 二进制请求的共用骨架：校验 token、拼 URL、组装头与请求体，发起带超时请求并校验状态。
+    // 无本地 token 抛 E1001，遇 401 抛 E1004，遇 403 抛 E1005。
+    async send(path, options) {
+        const token = this.resolveToken();
+        const baseUrl = options.baseUrl ?? getDefaultBaseUrl();
+        const url = this.buildUrl(path, baseUrl, options.params);
+        // FormData 由 fetch 自动设置 boundary，不可手动写 Content-Type
+        const isFormData = typeof FormData !== "undefined" && options.body instanceof FormData;
+        const headers = this.buildHeaders(token, { Accept: "application/json", ...options.headers }, { omitJsonContentType: isFormData });
+        const response = await fetchWithTimeout(url.toString(), {
+            method: options.method ?? "GET",
+            headers,
+            body: options.body === undefined
+                ? undefined
+                : isFormData
+                    ? options.body
+                    : JSON.stringify(options.body),
+        }, DEFAULT_REQUEST_TIMEOUT_MS);
+        await this.assertOkResponse(response);
+        return response;
+    }
+    // 发起 REST 请求并解析 JSON 响应
+    async request(path, options = {}) {
+        const response = await this.send(path, options);
+        if (response.status === 204) {
+            return undefined;
+        }
+        const text = await response.text();
+        let data;
+        try {
+            data = JSON.parse(text);
+        }
+        catch {
+            throw new helixlifeError(helixlifeErrorCode.INVALID_RESPONSE, `响应不是有效 JSON，请检查后台地址与接口路径是否正确`);
+        }
+        if (options.transformResponse) {
+            return options.transformResponse(data);
+        }
+        return data;
+    }
+    // 发起二进制请求（multipart 上传或 blob 下载），可指定独立 baseUrl
+    async requestBinary(path, options = {}) {
+        const response = await this.send(path, options);
+        return this.handleBlobResponse(response);
+    }
+    // 发起 SSE 流式请求，逐条回调 data: JSON 事件。
+    // 注意：SSE 用于工作台流式生成，单次可能持续数分钟且中途长时间无事件，
+    // 因此不设超时/空闲看门狗，避免误杀正常的长耗时生成。
+    async requestSse(path, options, onEvent) {
+        const token = this.resolveToken();
+        const url = this.buildUrl(path, options.baseUrl ?? getDefaultBaseUrl(), options.params);
+        const headers = this.buildHeaders(token, {
+            Accept: "text/event-stream",
+            ...options.headers,
+        });
+        let response;
+        try {
+            response = await fetch(url.toString(), {
+                method: options.method ?? "POST",
+                headers,
+                signal: options.signal,
+                body: options.body !== undefined ? JSON.stringify(options.body) : undefined,
+            });
+        }
+        catch (error) {
+            if (error instanceof Error && error.name === "AbortError") {
+                throw error;
+            }
+            throw new helixlifeError(helixlifeErrorCode.NETWORK_ERROR, "网络请求失败，请检查后台服务是否可用");
+        }
+        await this.assertOkResponse(response);
+        if (!response.body) {
+            throw new helixlifeError(helixlifeErrorCode.INVALID_RESPONSE, "SSE 响应体为空");
+        }
+        await parseSseStream(response.body, onEvent);
+    }
+    // Keep blob filename handling aligned with the frontend service/base.ts helper.
+    async handleBlobResponse(response) {
+        const contentType = response.headers.get("content-type");
+        const disposition = response.headers.get("content-disposition") ?? "";
+        const filename = this.extractFilenameFromContentDisposition(disposition);
+        const arrayBuffer = await response.arrayBuffer();
+        return {
+            buffer: Buffer.from(arrayBuffer),
+            contentType,
+            filename,
+        };
+    }
+    extractFilenameFromContentDisposition(disposition) {
+        const filenameStar = disposition.split("filename*=utf-8''")[1];
+        if (filenameStar) {
+            return decodeURIComponent(filenameStar.split(";")[0].replace(/"/g, ""));
+        }
+        const filenameMatch = disposition.match(/filename="?([^";]+)"?/i);
+        return filenameMatch?.[1]
+            ? decodeURIComponent(filenameMatch[1].replace(/"/g, ""))
+            : undefined;
+    }
+}
+//# sourceMappingURL=client.js.map

package/cli/dist/core/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/core/api/client.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAuB,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAsBzE,6CAA6C;AAC7C,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;AAExC,uCAAuC;AACvC,MAAM,gBAAgB,GAA2B;IAC/C,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,cAAc;IACvB,YAAY,EAAE,aAAa,WAAW,EAAE;IACxC,kBAAkB,EAAE,WAAW;CAChC,CAAC;AAEF,0DAA0D;AAC1D,MAAM,OAAO,SAAS;IACpB,yCAAyC;IACjC,YAAY;QAClB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,iBAAiB,EACpC,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sBAAsB;IACd,QAAQ,CACd,IAAY,EACZ,OAAe,EACf,MAA8D;QAE9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;QAC3E,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,wCAAwC;gBACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gCAAgC;IACxB,YAAY,CAClB,KAAa,EACb,KAA6B,EAC7B,OAA2C;QAE3C,MAAM,OAAO,GAA2B;YACtC,GAAG,gBAAgB;YACnB,GAAG,KAAK;SACT,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,mBAAmB,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mDAAmD;IAC3C,KAAK,CAAC,gBAAgB,CAAC,QAAkB;QAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,aAAa,EAChC,qBAAqB,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,iBAAiB,EACpC,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,CACxD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,cAAc,EACjC,SAAS,QAAQ,CAAC,MAAM,MAAM,IAAI,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yCAAyC;IACjC,uBAAuB,CAAC,IAAY,EAAE,UAAkB;QAC9D,MAAM,QAAQ,GAAG,eAAe,IAAI,IAAI,UAAU,EAAE,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG3B,CAAC;YACF,MAAM,OAAO,GACX,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACzD,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjD,EAAE,CAAC;YACL,OAAO,OAAO,IAAI,QAAQ,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,iDAAiD;IACzC,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,OAAuB;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAEzD,oDAAoD;QACpD,MAAM,UAAU,GACd,OAAO,QAAQ,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,YAAY,QAAQ,CAAC;QAEtE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAC/B,KAAK,EACL,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,EAClD,EAAE,mBAAmB,EAAE,UAAU,EAAE,CACpC,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,GAAG,CAAC,QAAQ,EAAE,EACd;YACE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;YAC/B,OAAO;YACP,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,UAAU;oBACV,CAAC,CAAE,OAAO,CAAC,IAAiB;oBAC5B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;SACrC,EACD,0BAA0B,CAC3B,CAAC;QAEF,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wBAAwB;IACxB,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,UAA0B,EAAE;QACzD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAEhD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,SAAc,CAAC;QACxB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,IAAO,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,gBAAgB,EACnC,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAM,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,aAAa,CACjB,IAAY,EACZ,UAAiD,EAAE;QAEnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,kCAAkC;IAClC,uCAAuC;IACvC,6BAA6B;IAC7B,KAAK,CAAC,UAAU,CACd,IAAY,EACZ,OAAuB,EACvB,OAA0C;QAE1C,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CACvB,IAAI,EACJ,OAAO,CAAC,OAAO,IAAI,iBAAiB,EAAE,EACtC,OAAO,CAAC,MAAM,CACf,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE;YACvC,MAAM,EAAE,mBAAmB;YAC3B,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC,CAAC;QAEH,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBACrC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM;gBAChC,OAAO;gBACP,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aACxE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,aAAa,EAChC,oBAAoB,CACrB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAEtC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,gBAAgB,EACnC,WAAW,CACZ,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,kBAAkB,CAC9B,QAAkB;QAElB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,qCAAqC,CAAC,WAAW,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAEjD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;YAChC,WAAW;YACX,QAAQ;SACT,CAAC;IACJ,CAAC;IAEO,qCAAqC,CAC3C,WAAmB;QAEnB,MAAM,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,kBAAkB,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAClE,OAAO,aAAa,EAAE,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;CACF"}

package/cli/dist/core/api/http.d.ts

@@ -0,0 +1,3 @@
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 60000;
+export declare function fetchWithTimeout(url: string, init: RequestInit, timeoutMs: number): Promise<Response>;
+//# sourceMappingURL=http.d.ts.map

package/cli/dist/core/api/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/core/api/http.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAGjD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,CAAC,CAmBnB"}

package/cli/dist/core/api/http.js

@@ -0,0 +1,22 @@
+// 带超时的 fetch 封装，供 REST 请求与授权接口统一复用
+import { helixlifeError, helixlifeErrorCode } from "../errors.js";
+// 普通 REST / 授权类请求的默认整体超时（毫秒）
+export const DEFAULT_REQUEST_TIMEOUT_MS = 60_000;
+// 带超时的 fetch：超时或网络失败统一映射为 helixlifeError(NETWORK_ERROR)，避免网络挂起时长时间无响应
+export async function fetchWithTimeout(url, init, timeoutMs) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return await fetch(url, { ...init, signal: controller.signal });
+    }
+    catch {
+        if (controller.signal.aborted) {
+            throw new helixlifeError(helixlifeErrorCode.NETWORK_ERROR, "请求超时，请检查网络或稍后重试");
+        }
+        throw new helixlifeError(helixlifeErrorCode.NETWORK_ERROR, "网络请求失败，请检查后台服务是否可用");
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=http.js.map

package/cli/dist/core/api/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/core/api/http.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElE,6BAA6B;AAC7B,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAEjD,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,IAAiB,EACjB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,aAAa,EAChC,iBAAiB,CAClB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,aAAa,EAChC,oBAAoB,CACrB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/cli/dist/core/api/response.d.ts

@@ -0,0 +1,48 @@
+export interface ApiEnvelope<T> {
+    success?: boolean;
+    data?: T;
+    message?: string;
+    [key: string]: unknown;
+}
+export interface ApiErrorEnvelope {
+    success: false;
+    message?: string;
+    data?: {
+        msg?: string;
+        code?: string | number;
+        [key: string]: unknown;
+    };
+    [key: string]: unknown;
+}
+/**
+ * 统一 API 响应解析
+ * - 成功时返回 data
+ * - 失败时抛出 helixlifeError 并携带业务错误信息
+ */
+export declare function unwrapResponse<T>(response: ApiEnvelope<T>): T;
+/**
+ * 解析业务响应并返回 data。
+ * 与 unwrapResponse 的区别：success 省略（undefined）视为成功，
+ * 适配不返回 success 字段的接口（AI 应用 tools/workflow/record 等）。
+ * @param action 失败时拼入错误信息的动作名（如「获取应用详情」）
+ */
+export declare function unwrapApiData<T>(response: ApiEnvelope<T>, action: string): T;
+/**
+ * 解析可能二次嵌套（data.data）的业务响应：内层 data 存在则取内层，否则取外层。
+ * 等价于旧代码 `unwrapApiData(res).data ?? (unwrapApiData(res) as T)`。
+ * @param action 失败时拼入错误信息的动作名
+ */
+export declare function unwrapNestedApiData<T>(response: ApiEnvelope<{
+    data?: T;
+} | T>, action: string): T;
+/**
+ * 从嵌套 data.data 结构中提取值（用于 JOVA 订单等场景）
+ */
+export declare function extractNestedData<T>(response: ApiEnvelope<ApiEnvelope<T>>): T;
+/**
+ * 从响应中提取订单 ID（用于 JOVA 订单场景）
+ */
+export declare function extractOrderId(response: ApiEnvelope<ApiEnvelope<{
+    order_id?: string;
+}>>): string;
+//# sourceMappingURL=response.d.ts.map

package/cli/dist/core/api/response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.d.ts","sourceRoot":"","sources":["../../../src/core/api/response.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAGD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,KAAK,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAgB7D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAc5E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,QAAQ,EAAE,WAAW,CAAC;IAAE,IAAI,CAAC,EAAE,CAAC,CAAA;CAAE,GAAG,CAAC,CAAC,EACvC,MAAM,EAAE,MAAM,GACb,CAAC,CASH;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CA0B7E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,WAAW,CAAC,WAAW,CAAC;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,GACxD,MAAM,CAUR"}

package/cli/dist/core/api/response.js

@@ -0,0 +1,84 @@
+import { helixlifeError, helixlifeErrorCode } from "../errors.js";
+/**
+ * 统一 API 响应解析
+ * - 成功时返回 data
+ * - 失败时抛出 helixlifeError 并携带业务错误信息
+ */
+export function unwrapResponse(response) {
+    if (!response.success) {
+        const errorMessage = response.data?.msg ||
+            response.message ||
+            response.message ||
+            "请求失败";
+        throw new helixlifeError(helixlifeErrorCode.REQUEST_FAILED, errorMessage);
+    }
+    if (response.data === undefined) {
+        throw new helixlifeError(helixlifeErrorCode.INVALID_RESPONSE, "响应数据为空");
+    }
+    return response.data;
+}
+/**
+ * 解析业务响应并返回 data。
+ * 与 unwrapResponse 的区别：success 省略（undefined）视为成功，
+ * 适配不返回 success 字段的接口（AI 应用 tools/workflow/record 等）。
+ * @param action 失败时拼入错误信息的动作名（如「获取应用详情」）
+ */
+export function unwrapApiData(response, action) {
+    if (response.success === false) {
+        throw new helixlifeError(helixlifeErrorCode.REQUEST_FAILED, response.message || `${action}失败`);
+    }
+    if (response.data === undefined) {
+        throw new helixlifeError(helixlifeErrorCode.INVALID_RESPONSE, `${action}响应缺少 data 字段`);
+    }
+    return response.data;
+}
+/**
+ * 解析可能二次嵌套（data.data）的业务响应：内层 data 存在则取内层，否则取外层。
+ * 等价于旧代码 `unwrapApiData(res).data ?? (unwrapApiData(res) as T)`。
+ * @param action 失败时拼入错误信息的动作名
+ */
+export function unwrapNestedApiData(response, action) {
+    const payload = unwrapApiData(response, action);
+    if (payload && typeof payload === "object" && "data" in payload) {
+        const inner = payload.data;
+        if (inner != null) {
+            return inner;
+        }
+    }
+    return payload;
+}
+/**
+ * 从嵌套 data.data 结构中提取值（用于 JOVA 订单等场景）
+ */
+export function extractNestedData(response) {
+    if (!response.success) {
+        const errorMessage = response.data?.msg ||
+            response.message ||
+            "请求失败";
+        throw new helixlifeError(helixlifeErrorCode.REQUEST_FAILED, errorMessage);
+    }
+    if (response.data === undefined) {
+        throw new helixlifeError(helixlifeErrorCode.INVALID_RESPONSE, "响应数据为空");
+    }
+    const inner = response.data;
+    if (typeof inner === "object" && inner !== null && "data" in inner) {
+        const nested = inner.data;
+        if (nested === undefined) {
+            throw new helixlifeError(helixlifeErrorCode.INVALID_RESPONSE, "嵌套响应数据为空");
+        }
+        return nested;
+    }
+    return inner;
+}
+/**
+ * 从响应中提取订单 ID（用于 JOVA 订单场景）
+ */
+export function extractOrderId(response) {
+    const inner = extractNestedData(response);
+    const orderId = inner?.order_id;
+    if (typeof orderId === "string" && orderId) {
+        return orderId;
+    }
+    throw new helixlifeError(helixlifeErrorCode.INVALID_RESPONSE, "响应缺少 order_id");
+}
+//# sourceMappingURL=response.js.map

package/cli/dist/core/api/response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response.js","sourceRoot":"","sources":["../../../src/core/api/response.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAsBlE;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAI,QAAwB;IACxD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,YAAY,GACf,QAAwC,CAAC,IAAI,EAAE,GAAG;YAClD,QAAwC,CAAC,OAAO;YACjD,QAAQ,CAAC,OAAO;YAChB,MAAM,CAAC;QACT,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,gBAAgB,EACnC,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAI,QAAwB,EAAE,MAAc;IACvE,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,cAAc,EACjC,QAAQ,CAAC,OAAO,IAAI,GAAG,MAAM,IAAI,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,gBAAgB,EACnC,GAAG,MAAM,cAAc,CACxB,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAuC,EACvC,MAAc;IAEd,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;QAChE,MAAM,KAAK,GAAI,OAAwB,CAAC,IAAI,CAAC;QAC7C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,OAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAI,QAAqC;IACxE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,YAAY,GACf,QAAwC,CAAC,IAAI,EAAE,GAAG;YACnD,QAAQ,CAAC,OAAO;YAChB,MAAM,CAAC;QACT,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,gBAAgB,EACnC,QAAQ,CACT,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACnE,MAAM,MAAM,GAAI,KAAwB,CAAC,IAAI,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,gBAAgB,EACnC,UAAU,CACX,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAqB,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAyD;IAEzD,MAAM,KAAK,GAAG,iBAAiB,CAAwB,QAAQ,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,CAAC;IAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,cAAc,CACtB,kBAAkB,CAAC,gBAAgB,EACnC,eAAe,CAChB,CAAC;AACJ,CAAC"}

package/cli/dist/core/api/sse.d.ts

@@ -0,0 +1,6 @@
+export interface SseDataPayload {
+    event?: string;
+    [key: string]: unknown;
+}
+export declare function parseSseStream(body: ReadableStream<Uint8Array>, onEvent: (payload: SseDataPayload) => void): Promise<void>;
+//# sourceMappingURL=sse.d.ts.map

package/cli/dist/core/api/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/core/api/sse.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAGD,wBAAsB,cAAc,CAClC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,EAChC,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,GACzC,OAAO,CAAC,IAAI,CAAC,CA2Df"}

package/cli/dist/core/api/sse.js

@@ -0,0 +1,60 @@
+// 从 SSE 原始字节流逐条解析 data: JSON 事件
+export async function parseSseStream(body, onEvent) {
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = "";
+    const dispatchLine = (line) => {
+        if (!line.startsWith("data: ")) {
+            return;
+        }
+        const raw = line.slice(6).trim();
+        if (!raw || raw === "[DONE]") {
+            return;
+        }
+        let payload;
+        try {
+            payload = JSON.parse(raw);
+        }
+        catch {
+            // 仅忽略非 JSON 的 SSE 行，避免中断整段流
+            return;
+        }
+        // onEvent 内部（如后端 error 事件抛错）必须向上传播；
+        // 若在此吞掉，后端 error 事件会被静默忽略、最终产出空内容（偶发空正文根因之一）
+        onEvent(payload);
+    };
+    try {
+        // 按 SSE 规范以空行分隔事件块
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done) {
+                break;
+            }
+            buffer += decoder.decode(value, { stream: true });
+            const chunks = buffer.split("\n\n");
+            buffer = chunks.pop() ?? "";
+            for (const chunk of chunks) {
+                for (const line of chunk.split("\n")) {
+                    dispatchLine(line);
+                }
+            }
+        }
+        // 处理流结束时缓冲区残留的最后一条事件
+        if (buffer.trim()) {
+            for (const line of buffer.split("\n")) {
+                dispatchLine(line);
+            }
+        }
+    }
+    finally {
+        // 无论正常结束还是 onEvent 抛错（如后端 error 事件），都取消底层流并释放
+        // undici socket，避免进程退出时 libuv 句柄断言崩溃（Windows src\win\async.c）。
+        try {
+            await reader.cancel();
+        }
+        catch {
+            /* 取消失败不影响主流程 */
+        }
+    }
+}
+//# sourceMappingURL=sse.js.map