larkin 0.2.70

package/dist/app/official-lark-cli.cjs

@@ -0,0 +1,138 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OFFICIAL_LARK_CLI_INSTALL = exports.OFFICIAL_LARK_CLI_VERSION = void 0;
+exports.probeOfficialLarkCli = probeOfficialLarkCli;
+exports.resolveOfficialLarkCli = resolveOfficialLarkCli;
+exports.installOfficialLarkCli = installOfficialLarkCli;
+exports.ensureOfficialLarkCliForSetup = ensureOfficialLarkCliForSetup;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+exports.OFFICIAL_LARK_CLI_VERSION = "1.0.79";
+exports.OFFICIAL_LARK_CLI_INSTALL = `npm install --global @larksuite/cli@${exports.OFFICIAL_LARK_CLI_VERSION}`;
+function loginShellPath(dependencies) {
+    const env = dependencies.env ?? process.env;
+    const shell = dependencies.shell || env.SHELL || "/bin/sh";
+    const result = (dependencies.spawn ?? node_child_process_1.spawnSync)(shell, ["-lc", "command -v lark-cli 2>/dev/null"], {
+        encoding: "utf8", env,
+    });
+    if (result.status !== 0 || result.error)
+        return null;
+    const candidate = String(result.stdout || "").split(/\r?\n/).map((line) => line.trim()).find(Boolean) || "";
+    return node_path_1.default.isAbsolute(candidate) ? node_path_1.default.resolve(candidate) : null;
+}
+function compatibleVersion(version) {
+    const parse = (value) => {
+        const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(value);
+        return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
+    };
+    const actual = parse(version);
+    const minimum = parse(exports.OFFICIAL_LARK_CLI_VERSION);
+    if (!actual)
+        return false;
+    return actual[0] > minimum[0] || (actual[0] === minimum[0]
+        && (actual[1] > minimum[1] || (actual[1] === minimum[1] && actual[2] >= minimum[2])));
+}
+function officialPackage(executable) {
+    let resolved;
+    try {
+        resolved = node_fs_1.default.realpathSync(executable);
+    }
+    catch {
+        return null;
+    }
+    let directory = node_path_1.default.dirname(resolved);
+    while (directory !== node_path_1.default.dirname(directory)) {
+        const manifestFile = node_path_1.default.join(directory, "package.json");
+        try {
+            const manifest = JSON.parse(node_fs_1.default.readFileSync(manifestFile, "utf8"));
+            const bin = typeof manifest.bin === "string" ? manifest.bin : manifest.bin?.["lark-cli"];
+            if (manifest.name === "@larksuite/cli" && typeof manifest.version === "string" && /^\d+\.\d+\.\d+$/.test(manifest.version) && bin) {
+                const packageRoot = node_fs_1.default.realpathSync(directory);
+                const requested = node_path_1.default.resolve(packageRoot, bin);
+                const relative = node_path_1.default.relative(packageRoot, requested);
+                if ((relative === "" || (!relative.startsWith(`..${node_path_1.default.sep}`) && relative !== ".."))
+                    && node_fs_1.default.realpathSync(requested) === resolved) {
+                    return { command: node_path_1.default.resolve(executable), argsPrefix: [], version: manifest.version };
+                }
+            }
+        }
+        catch { /* Continue towards the filesystem root. */ }
+        directory = node_path_1.default.dirname(directory);
+    }
+    return null;
+}
+function probeOfficialLarkCli(dependencies = {}) {
+    const executable = loginShellPath(dependencies);
+    if (!executable)
+        return {
+            state: "missing",
+            reason: "真实 login shell 找不到官方 lark-cli",
+            nextAction: `运行 larkin setup，并确认执行：${exports.OFFICIAL_LARK_CLI_INSTALL}`,
+        };
+    const command = officialPackage(executable);
+    if (!command)
+        return {
+            state: "conflict",
+            reason: `真实 login shell 的 lark-cli 不是兼容的官方 @larksuite/cli ${exports.OFFICIAL_LARK_CLI_VERSION}: ${executable}`,
+            nextAction: "移除或调整冲突入口后重新运行 larkin setup",
+        };
+    if (!compatibleVersion(command.version))
+        return {
+            state: "outdated",
+            reason: `真实 login shell 的官方 @larksuite/cli ${command.version} 低于最低兼容版本 ${exports.OFFICIAL_LARK_CLI_VERSION}`,
+            nextAction: `升级：${exports.OFFICIAL_LARK_CLI_INSTALL}`,
+        };
+    const version = (dependencies.spawn ?? node_child_process_1.spawnSync)(command.command, ["--version"], {
+        encoding: "utf8", env: dependencies.env ?? process.env,
+    });
+    if (version.status !== 0 || version.error || !String(version.stdout || "").includes(command.version))
+        return {
+            state: "outdated",
+            reason: `官方 lark-cli 版本执行验证失败: ${command.command}`,
+            nextAction: `重新安装：${exports.OFFICIAL_LARK_CLI_INSTALL}`,
+        };
+    const bindHelp = (dependencies.spawn ?? node_child_process_1.spawnSync)(command.command, ["config", "bind", "--help"], {
+        encoding: "utf8", env: dependencies.env ?? process.env,
+    });
+    const bindText = `${bindHelp.stdout || ""}\n${bindHelp.stderr || ""}`;
+    if (bindHelp.status !== 0 || bindHelp.error || !/--source/.test(bindText) || !/lark-channel/.test(bindText) || !/--identity/.test(bindText))
+        return {
+            state: "conflict",
+            reason: `官方 lark-cli 缺少 lark-channel bot-only bind 能力: ${command.command}`,
+            nextAction: `升级：${exports.OFFICIAL_LARK_CLI_INSTALL}`,
+        };
+    return { state: "ready", command };
+}
+function resolveOfficialLarkCli(dependencies = {}) {
+    const result = probeOfficialLarkCli(dependencies);
+    if (result.state !== "ready")
+        throw new Error(`${result.reason}；${result.nextAction}`);
+    return result.command;
+}
+function installOfficialLarkCli(dependencies = {}) {
+    const run = dependencies.spawn ?? node_child_process_1.spawnSync;
+    const result = run("npm", ["install", "--global", `@larksuite/cli@${exports.OFFICIAL_LARK_CLI_VERSION}`], {
+        encoding: "utf8", env: dependencies.env ?? process.env, stdio: "inherit",
+    });
+    if (result.status !== 0 || result.error)
+        throw new Error(`官方 lark-cli 安装失败（exit=${result.status ?? "none"}）`);
+    return resolveOfficialLarkCli(dependencies);
+}
+async function ensureOfficialLarkCliForSetup(input) {
+    const probe = probeOfficialLarkCli(input);
+    if (probe.state === "ready")
+        return { command: probe.command, installed: false };
+    if (probe.state === "conflict")
+        throw new Error(`${probe.reason}；${probe.nextAction}`);
+    if (!input.interactive) {
+        throw new Error(`${probe.reason}；非交互 setup 不会安装或升级依赖。请在终端运行 larkin setup，并确认：${exports.OFFICIAL_LARK_CLI_INSTALL}`);
+    }
+    if (!await input.confirmInstall(exports.OFFICIAL_LARK_CLI_INSTALL)) {
+        throw new Error("未获得明确同意；没有安装官方 lark-cli，也没有写入 Agent 配置");
+    }
+    return { command: installOfficialLarkCli(input), installed: true };
+}

package/dist/app/official-lark-cli.mjs

@@ -0,0 +1,128 @@
+import { spawnSync } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+export const OFFICIAL_LARK_CLI_VERSION = "1.0.79";
+export const OFFICIAL_LARK_CLI_INSTALL = `npm install --global @larksuite/cli@${OFFICIAL_LARK_CLI_VERSION}`;
+function loginShellPath(dependencies) {
+    const env = dependencies.env ?? process.env;
+    const shell = dependencies.shell || env.SHELL || "/bin/sh";
+    const result = (dependencies.spawn ?? spawnSync)(shell, ["-lc", "command -v lark-cli 2>/dev/null"], {
+        encoding: "utf8", env,
+    });
+    if (result.status !== 0 || result.error)
+        return null;
+    const candidate = String(result.stdout || "").split(/\r?\n/).map((line) => line.trim()).find(Boolean) || "";
+    return path.isAbsolute(candidate) ? path.resolve(candidate) : null;
+}
+function compatibleVersion(version) {
+    const parse = (value) => {
+        const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(value);
+        return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
+    };
+    const actual = parse(version);
+    const minimum = parse(OFFICIAL_LARK_CLI_VERSION);
+    if (!actual)
+        return false;
+    return actual[0] > minimum[0] || (actual[0] === minimum[0]
+        && (actual[1] > minimum[1] || (actual[1] === minimum[1] && actual[2] >= minimum[2])));
+}
+function officialPackage(executable) {
+    let resolved;
+    try {
+        resolved = fs.realpathSync(executable);
+    }
+    catch {
+        return null;
+    }
+    let directory = path.dirname(resolved);
+    while (directory !== path.dirname(directory)) {
+        const manifestFile = path.join(directory, "package.json");
+        try {
+            const manifest = JSON.parse(fs.readFileSync(manifestFile, "utf8"));
+            const bin = typeof manifest.bin === "string" ? manifest.bin : manifest.bin?.["lark-cli"];
+            if (manifest.name === "@larksuite/cli" && typeof manifest.version === "string" && /^\d+\.\d+\.\d+$/.test(manifest.version) && bin) {
+                const packageRoot = fs.realpathSync(directory);
+                const requested = path.resolve(packageRoot, bin);
+                const relative = path.relative(packageRoot, requested);
+                if ((relative === "" || (!relative.startsWith(`..${path.sep}`) && relative !== ".."))
+                    && fs.realpathSync(requested) === resolved) {
+                    return { command: path.resolve(executable), argsPrefix: [], version: manifest.version };
+                }
+            }
+        }
+        catch { /* Continue towards the filesystem root. */ }
+        directory = path.dirname(directory);
+    }
+    return null;
+}
+export function probeOfficialLarkCli(dependencies = {}) {
+    const executable = loginShellPath(dependencies);
+    if (!executable)
+        return {
+            state: "missing",
+            reason: "真实 login shell 找不到官方 lark-cli",
+            nextAction: `运行 larkin setup，并确认执行：${OFFICIAL_LARK_CLI_INSTALL}`,
+        };
+    const command = officialPackage(executable);
+    if (!command)
+        return {
+            state: "conflict",
+            reason: `真实 login shell 的 lark-cli 不是兼容的官方 @larksuite/cli ${OFFICIAL_LARK_CLI_VERSION}: ${executable}`,
+            nextAction: "移除或调整冲突入口后重新运行 larkin setup",
+        };
+    if (!compatibleVersion(command.version))
+        return {
+            state: "outdated",
+            reason: `真实 login shell 的官方 @larksuite/cli ${command.version} 低于最低兼容版本 ${OFFICIAL_LARK_CLI_VERSION}`,
+            nextAction: `升级：${OFFICIAL_LARK_CLI_INSTALL}`,
+        };
+    const version = (dependencies.spawn ?? spawnSync)(command.command, ["--version"], {
+        encoding: "utf8", env: dependencies.env ?? process.env,
+    });
+    if (version.status !== 0 || version.error || !String(version.stdout || "").includes(command.version))
+        return {
+            state: "outdated",
+            reason: `官方 lark-cli 版本执行验证失败: ${command.command}`,
+            nextAction: `重新安装：${OFFICIAL_LARK_CLI_INSTALL}`,
+        };
+    const bindHelp = (dependencies.spawn ?? spawnSync)(command.command, ["config", "bind", "--help"], {
+        encoding: "utf8", env: dependencies.env ?? process.env,
+    });
+    const bindText = `${bindHelp.stdout || ""}\n${bindHelp.stderr || ""}`;
+    if (bindHelp.status !== 0 || bindHelp.error || !/--source/.test(bindText) || !/lark-channel/.test(bindText) || !/--identity/.test(bindText))
+        return {
+            state: "conflict",
+            reason: `官方 lark-cli 缺少 lark-channel bot-only bind 能力: ${command.command}`,
+            nextAction: `升级：${OFFICIAL_LARK_CLI_INSTALL}`,
+        };
+    return { state: "ready", command };
+}
+export function resolveOfficialLarkCli(dependencies = {}) {
+    const result = probeOfficialLarkCli(dependencies);
+    if (result.state !== "ready")
+        throw new Error(`${result.reason}；${result.nextAction}`);
+    return result.command;
+}
+export function installOfficialLarkCli(dependencies = {}) {
+    const run = dependencies.spawn ?? spawnSync;
+    const result = run("npm", ["install", "--global", `@larksuite/cli@${OFFICIAL_LARK_CLI_VERSION}`], {
+        encoding: "utf8", env: dependencies.env ?? process.env, stdio: "inherit",
+    });
+    if (result.status !== 0 || result.error)
+        throw new Error(`官方 lark-cli 安装失败（exit=${result.status ?? "none"}）`);
+    return resolveOfficialLarkCli(dependencies);
+}
+export async function ensureOfficialLarkCliForSetup(input) {
+    const probe = probeOfficialLarkCli(input);
+    if (probe.state === "ready")
+        return { command: probe.command, installed: false };
+    if (probe.state === "conflict")
+        throw new Error(`${probe.reason}；${probe.nextAction}`);
+    if (!input.interactive) {
+        throw new Error(`${probe.reason}；非交互 setup 不会安装或升级依赖。请在终端运行 larkin setup，并确认：${OFFICIAL_LARK_CLI_INSTALL}`);
+    }
+    if (!await input.confirmInstall(OFFICIAL_LARK_CLI_INSTALL)) {
+        throw new Error("未获得明确同意；没有安装官方 lark-cli，也没有写入 Agent 配置");
+    }
+    return { command: installOfficialLarkCli(input), installed: true };
+}

package/dist/app/pi-auth-cli.mjs

@@ -0,0 +1,67 @@
+import * as larkinConfig from "../platform/config.mjs";
+import { beginBuiltinPiCredentialTransaction, createOfficialPiCredentialRuntime, createOfficialPiLogoutRuntime, logoutOfficialPiProvider, officialPiAuthStatus, } from "../runtime/pi-official-auth.mjs";
+const APP_ID = /^cli_[A-Za-z0-9]+$/;
+function flag(args, name) {
+    const index = args.indexOf(name);
+    return index >= 0 ? args[index + 1] : undefined;
+}
+export async function main(args = process.argv.slice(2), env = process.env) {
+    const action = args[0] || "status";
+    const json = args.includes("--json");
+    const requestedAgent = flag(args, "--agent");
+    let index = action === "logout" ? 2 : 1;
+    let valid = action === "status" || action === "logout";
+    while (valid && index < args.length) {
+        const argument = args[index];
+        if (argument === "--json" && action === "status") {
+            index += 1;
+            continue;
+        }
+        if (argument === "--agent" && args[index + 1]) {
+            index += 2;
+            continue;
+        }
+        valid = false;
+    }
+    if (!valid) {
+        throw new Error("Usage: larkin pi-auth status [--agent <App ID>] [--json] | larkin pi-auth logout <provider> [--agent <App ID>]");
+    }
+    const loaded = larkinConfig.loadConfig(env);
+    const agentId = requestedAgent || loaded.config.activeAgent || undefined;
+    if (!agentId || !APP_ID.test(agentId))
+        throw new Error("请用 --agent <App ID> 选择 Agent");
+    const agent = loaded.config.agents[agentId];
+    if (!agent)
+        throw new Error(`Agent ${agentId} 不存在`);
+    if (agent.runtime !== "pi" || agent.piDistribution !== "builtin")
+        throw new Error(`Agent ${agentId} 不是内置 Pi`);
+    if (action === "status") {
+        const runtime = await createOfficialPiCredentialRuntime(loaded.configDir, agentId);
+        const statuses = await officialPiAuthStatus(runtime);
+        if (json)
+            console.log(JSON.stringify({ agentId, credentials: statuses }));
+        else if (statuses.length === 0)
+            console.log(`Agent ${agentId} 尚无已配置的官方 Pi credential`);
+        else {
+            console.log(`Agent ${agentId} 官方 Pi credential：`);
+            for (const entry of statuses)
+                console.log(`  ${entry.providerName} (${entry.providerId}): ${entry.credentialType}/${entry.source}${entry.stored ? " [stored]" : " [ambient]"}`);
+        }
+        return;
+    }
+    const providerId = args[1];
+    if (!providerId || providerId.startsWith("--") || !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(providerId)) {
+        throw new Error("logout 需要安全的 provider ID");
+    }
+    const transaction = beginBuiltinPiCredentialTransaction(loaded.configDir, agentId);
+    try {
+        const runtime = await createOfficialPiLogoutRuntime(loaded.configDir, agentId);
+        await logoutOfficialPiProvider(runtime, providerId);
+        transaction.commit();
+    }
+    catch (error) {
+        transaction.rollback();
+        throw error;
+    }
+    console.log(`Agent ${agentId} 已退出 ${providerId}；其他 provider 未修改`);
+}