vps-work 2.4.1 → 2.5.1

package/dist/shared/im-org-tree/index.js

@@ -0,0 +1,200 @@
+/**
+ * IM 通讯录组织架构：部门列表口径与树构建（vps-service / im-desktop 共用）。
+ * 数据源以 `/v1/im/org/departments` 返回的 VPS 原生企业组织为准。
+ */
+/** 身份同步占位部门在通讯录中的展示名，与 vps_org_units.unit_key=unassigned 对应。 */
+export const UNASSIGNED_ORG_DEPARTMENT_NAME = '未分配部门';
+/** 通讯录不展示身份同步占位部门。 */
+export function isUnassignedDirectoryDepartment(department) {
+    return department.name.trim() === UNASSIGNED_ORG_DEPARTMENT_NAME
+        || department.complete_name?.trim() === UNASSIGNED_ORG_DEPARTMENT_NAME;
+}
+export function excludeUnassignedDirectoryDepartments(departments) {
+    return departments.filter((department) => !isUnassignedDirectoryDepartment(department));
+}
+export function imOrgDepartmentDisplayName(department) {
+    const name = department.name.trim();
+    if (name) {
+        return name;
+    }
+    const complete = department.complete_name?.trim();
+    if (complete) {
+        return complete;
+    }
+    return `部门 ${department.department_id}`;
+}
+export function sortImOrgDepartmentsByName(a, b) {
+    return imOrgDepartmentDisplayName(a).localeCompare(imOrgDepartmentDisplayName(b), 'zh-CN');
+}
+/** 通讯录口径：去掉本部门及全部子部门都没有在职人员的节点。 */
+export function filterImOrgDepartmentsWithSubtreeStaff(departments) {
+    const byId = new Map();
+    const childrenByParent = new Map();
+    for (const dept of departments) {
+        byId.set(dept.department_id, dept);
+        const parentId = dept.parent_id;
+        if (parentId !== null) {
+            const siblings = childrenByParent.get(parentId) ?? [];
+            siblings.push(dept.department_id);
+            childrenByParent.set(parentId, siblings);
+        }
+    }
+    const subtreeTotals = new Map();
+    const computeSubtreeTotal = (departmentId) => {
+        const cached = subtreeTotals.get(departmentId);
+        if (cached !== undefined) {
+            return cached;
+        }
+        const dept = byId.get(departmentId);
+        if (!dept) {
+            return 0;
+        }
+        let total = dept.employee_count;
+        for (const childId of childrenByParent.get(departmentId) ?? []) {
+            total += computeSubtreeTotal(childId);
+        }
+        subtreeTotals.set(departmentId, total);
+        return total;
+    };
+    for (const dept of departments) {
+        computeSubtreeTotal(dept.department_id);
+    }
+    return departments.filter((dept) => (subtreeTotals.get(dept.department_id) ?? 0) > 0);
+}
+/**
+ * 构建森林：父节点不在当前列表中的部门提升为根（与 IM 通讯录一致）。
+ */
+export function buildImOrgDepartmentForest(departments) {
+    const nodes = new Map();
+    for (const department of departments) {
+        nodes.set(department.department_id, {
+            department,
+            children: [],
+            subtreeEmployeeCount: 0,
+        });
+    }
+    const roots = [];
+    for (const node of nodes.values()) {
+        const parentId = node.department.parent_id;
+        const parent = parentId !== null ? nodes.get(parentId) : undefined;
+        if (parent) {
+            parent.children.push(node);
+        }
+        else {
+            roots.push(node);
+        }
+    }
+    const fillSubtreeCount = (node) => {
+        node.subtreeEmployeeCount =
+            node.department.employee_count +
+                node.children.reduce((sum, child) => sum + fillSubtreeCount(child), 0);
+        return node.subtreeEmployeeCount;
+    };
+    roots.sort((a, b) => sortImOrgDepartmentsByName(a.department, b.department));
+    const sortRecursive = (items) => {
+        items.sort((a, b) => sortImOrgDepartmentsByName(a.department, b.department));
+        for (const item of items) {
+            sortRecursive(item.children);
+        }
+    };
+    sortRecursive(roots);
+    roots.forEach(fillSubtreeCount);
+    return roots;
+}
+/** 企业根名称与公司名重复时，这一级只是容器：有下级则提升子部门，没有则不再单独占一层。 */
+export function flattenDuplicateCompanyRoot(forest, companyName) {
+    const company = companyName.trim();
+    if (!company)
+        return { forest, collapsedRoots: [] };
+    const collapsedRoots = [];
+    const next = [];
+    for (const node of forest) {
+        const name = node.department.name.trim();
+        const path = node.department.complete_name?.trim() || name;
+        const sameCompany = name === company && (path === company || path === name);
+        if (!sameCompany) {
+            next.push(node);
+            continue;
+        }
+        collapsedRoots.push(node);
+        next.push(...node.children);
+    }
+    return { forest: next, collapsedRoots };
+}
+function matchesImOrgDepartmentKeyword(department, keyword) {
+    const q = keyword.trim().toLowerCase();
+    if (!q) {
+        return true;
+    }
+    const haystack = [
+        department.department_id,
+        department.parent_id,
+        department.name,
+        department.complete_name,
+        department.employee_count,
+    ]
+        .join(' ')
+        .toLowerCase();
+    return haystack.includes(q);
+}
+export function filterImOrgDepartmentForestByKeyword(nodes, keyword) {
+    if (!keyword.trim()) {
+        return nodes;
+    }
+    const filtered = [];
+    for (const node of nodes) {
+        const childMatches = filterImOrgDepartmentForestByKeyword(node.children, keyword);
+        if (matchesImOrgDepartmentKeyword(node.department, keyword) || childMatches.length > 0) {
+            filtered.push({
+                department: node.department,
+                subtreeEmployeeCount: node.subtreeEmployeeCount,
+                children: childMatches.length > 0 ? childMatches : node.children,
+            });
+        }
+    }
+    return filtered;
+}
+export function collectImOrgDepartmentForestIds(nodes) {
+    const ids = [];
+    const walk = (items) => {
+        for (const node of items) {
+            ids.push(node.department.department_id);
+            walk(node.children);
+        }
+    };
+    walk(nodes);
+    return ids;
+}
+export function buildImOrgDepartmentChildrenIndex(departments) {
+    const childrenByParent = new Map();
+    const knownIds = new Set(departments.map((dept) => dept.department_id));
+    for (const department of departments) {
+        const parentId = department.parent_id;
+        if (parentId === null || !knownIds.has(parentId)) {
+            continue;
+        }
+        const siblings = childrenByParent.get(parentId) ?? [];
+        siblings.push(department.department_id);
+        childrenByParent.set(parentId, siblings);
+    }
+    return childrenByParent;
+}
+export function resolveImOrgDepartmentSubtreeScope(childrenByParent, selectedDepartmentIds) {
+    if (!selectedDepartmentIds.length) {
+        return new Set();
+    }
+    const scope = new Set();
+    const walk = (departmentId) => {
+        if (scope.has(departmentId)) {
+            return;
+        }
+        scope.add(departmentId);
+        for (const childId of childrenByParent.get(departmentId) ?? []) {
+            walk(childId);
+        }
+    };
+    for (const departmentId of selectedDepartmentIds) {
+        walk(departmentId);
+    }
+    return scope;
+}

package/dist/vps-work.cjs

@@ -18246,17 +18246,17 @@ var require_dns = __commonJS({
         const timestamp = Date.now();
         const records2 = { records: { 4: null, 6: null } };
         let minTTL = this.#maxTTL;
-        for (const record3 of addresses2) {
-          record3.timestamp = timestamp;
-          if (typeof record3.ttl === "number") {
-            record3.ttl = Math.min(record3.ttl, this.#maxTTL);
-            minTTL = Math.min(minTTL, record3.ttl);
+        for (const record4 of addresses2) {
+          record4.timestamp = timestamp;
+          if (typeof record4.ttl === "number") {
+            record4.ttl = Math.min(record4.ttl, this.#maxTTL);
+            minTTL = Math.min(minTTL, record4.ttl);
           } else {
-            record3.ttl = this.#maxTTL;
+            record4.ttl = this.#maxTTL;
           }
-          const familyRecords = records2.records[record3.family] ?? { ips: [] };
-          familyRecords.ips.push(record3);
-          records2.records[record3.family] = familyRecords;
+          const familyRecords = records2.records[record4.family] ?? { ips: [] };
+          familyRecords.ips.push(record4);
+          records2.records[record4.family] = familyRecords;
         }
         this.storage.set(origin.hostname, records2, { ttl: minTTL });
       }
@@ -54875,14 +54875,14 @@ function collaborationTurnFromHistory(out, requestId) {
     if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) continue;
     const envelope = metadata[HARNESS_COLLABORATION_KIND];
     if (!envelope || typeof envelope !== "object" || Array.isArray(envelope)) continue;
-    const record3 = envelope;
-    const turn = Number(record3.turn);
-    if (record3.request_id !== requestId || record3.type !== "request" && record3.type !== "response" || !Number.isInteger(turn) || turn <= 0) continue;
+    const record4 = envelope;
+    const turn = Number(record4.turn);
+    if (record4.request_id !== requestId || record4.type !== "request" && record4.type !== "response" || !Number.isInteger(turn) || turn <= 0) continue;
     return {
       body: typeof message.body === "string" ? message.body : "",
       messageId: typeof message.id === "string" ? message.id : "",
       turn,
-      type: record3.type
+      type: record4.type
     };
   }
   return null;
@@ -55373,6 +55373,11 @@ async function parseJson2(res) {
 }
 async function hermesRequest(method, path3, opts = {}) {
   const base = resolveHermesAgentAdminUrl(opts.baseUrl);
+  const target = new URL(base);
+  const trusted = new URL(resolveHermesAgentAdminUrl());
+  if (target.origin !== trusted.origin || target.username || target.password || target.search || target.hash || target.pathname !== "/") {
+    throw new VertuError("Hermes \u8BF7\u6C42\u76EE\u6807\u4E0D\u53D7\u4FE1\u4EFB\uFF1B\u8BF7\u7531\u5BBF\u4E3B\u914D\u7F6E\u670D\u52A1\u5730\u5740\uFF0C\u4E0D\u80FD\u901A\u8FC7\u4E34\u65F6\u53C2\u6570\u8F6C\u53D1\u51ED\u636E\u3002");
+  }
   const res = await (0, import_undici5.request)(`${base}${path3}`, {
     method,
     headers: headers2(),
@@ -58375,8 +58380,8 @@ function printResult(opts, result) {
   console.log(typeof result === "string" ? result : JSON.stringify(result));
 }
 function outputRows(value) {
-  const record3 = asRecord2(value);
-  const rows2 = record3 ? record3.rows : void 0;
+  const record4 = asRecord2(value);
+  const rows2 = record4 ? record4.rows : void 0;
   return Array.isArray(rows2) ? rows2.filter((row) => asRecord2(row) !== null) : [];
 }
 function isValidateOnly2(opts) {
@@ -58407,31 +58412,31 @@ function findIdentityRecord(payload) {
       continue;
     }
     seen.add(current);
-    const record3 = asRecord2(current);
-    if (!record3) {
+    const record4 = asRecord2(current);
+    if (!record4) {
       continue;
     }
-    if ("employee_id" in record3 || "employeeId" in record3 || "manager_id" in record3 || "managerEmployeeId" in record3 || "user_id" in record3 || "employee" in record3 || "manager" in record3) {
-      return record3;
+    if ("employee_id" in record4 || "employeeId" in record4 || "manager_id" in record4 || "managerEmployeeId" in record4 || "user_id" in record4 || "employee" in record4 || "manager" in record4) {
+      return record4;
     }
     for (const key of ["result", "data", "payload", "context", "user", "userinfo"]) {
-      if (key in record3) {
-        queue.push(record3[key]);
+      if (key in record4) {
+        queue.push(record4[key]);
       }
     }
   }
   return {};
 }
 function extractHrIdentity(payload) {
-  const record3 = findIdentityRecord(payload);
-  const employee = asRecord2(record3.employee);
-  const manager = asRecord2(record3.manager);
+  const record4 = findIdentityRecord(payload);
+  const employee = asRecord2(record4.employee);
+  const manager = asRecord2(record4.manager);
   return {
-    employeeId: numberValue(record3.employee_id) ?? numberValue(record3.employeeId) ?? numberValue(employee?.id),
-    employeeName: stringValue(record3.employee_name) ?? stringValue(record3.employeeName) ?? stringValue(employee?.name) ?? stringValue(record3.name),
-    managerEmployeeId: numberValue(record3.manager_id) ?? numberValue(record3.manager_employee_id) ?? numberValue(record3.managerEmployeeId) ?? numberValue(manager?.id),
-    managerName: stringValue(record3.manager_name) ?? stringValue(record3.managerName) ?? stringValue(manager?.name),
-    managerUserId: numberValue(record3.manager_user_id) ?? numberValue(record3.managerUserId) ?? numberValue(manager?.user_id) ?? numberValue(manager?.userId)
+    employeeId: numberValue(record4.employee_id) ?? numberValue(record4.employeeId) ?? numberValue(employee?.id),
+    employeeName: stringValue(record4.employee_name) ?? stringValue(record4.employeeName) ?? stringValue(employee?.name) ?? stringValue(record4.name),
+    managerEmployeeId: numberValue(record4.manager_id) ?? numberValue(record4.manager_employee_id) ?? numberValue(record4.managerEmployeeId) ?? numberValue(manager?.id),
+    managerName: stringValue(record4.manager_name) ?? stringValue(record4.managerName) ?? stringValue(manager?.name),
+    managerUserId: numberValue(record4.manager_user_id) ?? numberValue(record4.managerUserId) ?? numberValue(manager?.user_id) ?? numberValue(manager?.userId)
   };
 }
 async function fetchCurrentHrIdentity(opts, cmd) {
@@ -58531,8 +58536,8 @@ function dataViewRows(value) {
   return outputRows(value);
 }
 function dataViewTotalRows(value) {
-  const record3 = asRecord2(value);
-  const pagination = asRecord2(record3?.pagination);
+  const record4 = asRecord2(value);
+  const pagination = asRecord2(record4?.pagination);
   return numberValue(pagination?.total_rows) ?? 0;
 }
 function addHeadcountOptions(cmd) {
@@ -58899,8 +58904,8 @@ function asRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 function rows(value) {
-  const record3 = asRecord3(value);
-  const raw = record3 ? record3.rows : void 0;
+  const record4 = asRecord3(value);
+  const raw = record4 ? record4.rows : void 0;
   return Array.isArray(raw) ? raw.filter((row) => asRecord3(row) !== null) : [];
 }
 function num(value) {
@@ -59310,9 +59315,9 @@ function asRecord4(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
 function remoteMessage(value, fallback) {
-  const record3 = asRecord4(value);
+  const record4 = asRecord4(value);
   for (const key of ["message", "error", "statusText"]) {
-    const candidate = record3?.[key];
+    const candidate = record4?.[key];
     if (typeof candidate === "string" && candidate.trim()) return candidate.trim();
   }
   return fallback;
@@ -60968,8 +60973,8 @@ function printMutationPreview(opts, method, endpoint, body) {
   });
 }
 function decorateEvents(payload, scope, range, calendarId) {
-  const record3 = asRecord5(payload) ?? {};
-  const calendars = recordArray(record3.calendars);
+  const record4 = asRecord5(payload) ?? {};
+  const calendars = recordArray(record4.calendars);
   const calendarNames = new Map(
     calendars.flatMap((calendar) => {
       const id = typeof calendar.id === "string" ? calendar.id : "";
@@ -60979,7 +60984,7 @@ function decorateEvents(payload, scope, range, calendarId) {
   if (calendarId && !calendarNames.has(calendarId)) {
     throw new VertuError(`\u65E5\u5386\u4E0D\u5B58\u5728\u6216\u65E0\u6743\u67E5\u770B\uFF1A${calendarId}`);
   }
-  const rows2 = recordArray(record3.events).filter((event) => !calendarId || event.calendar_id === calendarId).map((event) => ({
+  const rows2 = recordArray(record4.events).filter((event) => !calendarId || event.calendar_id === calendarId).map((event) => ({
     ...event,
     calendar_name: typeof event.calendar_id === "string" ? calendarNames.get(event.calendar_id) ?? null : null
   }));
@@ -62058,12 +62063,12 @@ function buildPath2(path3, query2) {
 }
 function errorMessage3(payload, statusCode) {
   if (typeof payload === "object" && payload !== null) {
-    const record3 = payload;
-    if (typeof record3["error"] === "string") {
-      return record3["error"];
+    const record4 = payload;
+    if (typeof record4["error"] === "string") {
+      return record4["error"];
     }
-    if (typeof record3["message"] === "string") {
-      return record3["message"];
+    if (typeof record4["message"] === "string") {
+      return record4["message"];
     }
   }
   return `HTTP ${statusCode}`;
@@ -64840,6 +64845,199 @@ function buildExecCommand() {
   });
 }
 
+// src/core/mcp-client.ts
+var PROTOCOL = "2025-03-26";
+var MAX_RESPONSE_BYTES = 8 * 1024 * 1024;
+var record3 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+function rpcResult(value, id) {
+  const rpc = record3(value);
+  if (rpc.id !== id) return void 0;
+  if (rpc.error) throw new VertuError("MCP \u8BF7\u6C42\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u5DE5\u5177\u53C2\u6570\u548C\u670D\u52A1\u7AEF\u6388\u6743\u3002");
+  if (!("result" in rpc)) throw new VertuError("MCP \u8FD4\u56DE\u4E86\u65E0\u6548\u54CD\u5E94\u3002");
+  return record3(rpc.result);
+}
+async function readResult(response, id) {
+  const reader = response.body?.getReader();
+  if (!reader) throw new VertuError("MCP \u8FD4\u56DE\u4E86\u7A7A\u54CD\u5E94\u3002");
+  const sse = response.headers.get("content-type")?.includes("text/event-stream");
+  const decoder = new TextDecoder();
+  let buffer = "";
+  let size = 0;
+  try {
+    while (true) {
+      const chunk = await reader.read();
+      if (chunk.done) {
+        buffer += decoder.decode();
+        break;
+      }
+      size += chunk.value.byteLength;
+      if (size > MAX_RESPONSE_BYTES) throw new VertuError("MCP \u7ED3\u679C\u8FC7\u5927\uFF0C\u8BF7\u7F29\u5C0F\u67E5\u8BE2\u8303\u56F4\u3002");
+      buffer += decoder.decode(chunk.value, { stream: true });
+      if (sse) {
+        let boundary;
+        while (boundary = /\r?\n\r?\n/.exec(buffer)) {
+          const frame = buffer.slice(0, boundary.index);
+          buffer = buffer.slice(boundary.index + boundary[0].length);
+          const data = frame.split(/\r?\n/).filter((line) => line.startsWith("data:")).map((line) => line.slice(5).replace(/^ /, "")).join("\n");
+          if (!data) continue;
+          const result = rpcResult(JSON.parse(data), id);
+          if (result) return result;
+        }
+      }
+    }
+    if (!sse) {
+      const result = rpcResult(JSON.parse(buffer), id);
+      if (result) return result;
+    }
+    throw new VertuError("MCP \u672A\u8FD4\u56DE\u5339\u914D\u7684\u8BF7\u6C42\u7ED3\u679C\u3002");
+  } finally {
+    await reader.cancel().catch(() => {
+    });
+  }
+}
+async function runMcp(endpoint, authorizationHeaders, allowedTools, operation) {
+  let sessionId;
+  let protocol = PROTOCOL;
+  let nextId = 0;
+  const headers3 = () => ({
+    ...authorizationHeaders,
+    "content-type": "application/json",
+    accept: "application/json, text/event-stream",
+    "mcp-protocol-version": protocol,
+    ...sessionId ? { "mcp-session-id": sessionId } : {}
+  });
+  const send = async (method, params, notification = false) => {
+    const id = ++nextId;
+    const response = await fetch(endpoint, {
+      method: "POST",
+      headers: headers3(),
+      redirect: "error",
+      signal: AbortSignal.timeout(6e4),
+      body: JSON.stringify({ jsonrpc: "2.0", ...notification ? {} : { id }, method, params })
+    });
+    if (!response.ok) {
+      await response.body?.cancel();
+      throw new VertuError(`MCP \u8BF7\u6C42\u88AB\u62D2\u7EDD\u6216\u670D\u52A1\u4E0D\u53EF\u7528\uFF08HTTP ${response.status}\uFF09\u3002`, { statusCode: response.status });
+    }
+    if (method === "initialize") sessionId = response.headers.get("mcp-session-id") || void 0;
+    if (notification) {
+      await response.body?.cancel();
+      return {};
+    }
+    return readResult(response, id);
+  };
+  try {
+    const initialized = await send("initialize", {
+      protocolVersion: PROTOCOL,
+      capabilities: {},
+      clientInfo: { name: "vps-work", version: "1" }
+    });
+    if (initialized.protocolVersion !== PROTOCOL) throw new VertuError("MCP \u534F\u8BAE\u7248\u672C\u4E0D\u517C\u5BB9\u3002");
+    protocol = initialized.protocolVersion;
+    await send("notifications/initialized", void 0, true);
+    const tools2 = [];
+    const cursors = /* @__PURE__ */ new Set();
+    let cursor;
+    do {
+      const page = await send("tools/list", cursor ? { cursor } : {});
+      if (!Array.isArray(page.tools)) throw new VertuError("MCP \u5DE5\u5177\u76EE\u5F55\u65E0\u6548\u3002");
+      tools2.push(...page.tools.map(record3).filter((tool) => allowedTools.has(String(tool.name))));
+      cursor = typeof page.nextCursor === "string" && page.nextCursor ? page.nextCursor : void 0;
+      if (cursor && (cursors.has(cursor) || cursors.size >= 100)) throw new VertuError("MCP \u5DE5\u5177\u76EE\u5F55\u5206\u9875\u5F02\u5E38\u3002");
+      if (cursor) cursors.add(cursor);
+    } while (cursor);
+    if (!operation) return { tools: tools2 };
+    if (!tools2.some((tool) => tool.name === operation.tool)) throw new VertuError("\u5F53\u524D MCP \u672A\u5F00\u653E\u8BE5\u5DE5\u5177\u3002");
+    const result = await send("tools/call", { name: operation.tool, arguments: operation.arguments });
+    if (result.isError === true) throw new VertuError("MCP \u5DE5\u5177\u6267\u884C\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u53C2\u6570\u3001SQL \u548C\u670D\u52A1\u7AEF\u6388\u6743\u3002");
+    return result;
+  } catch (error) {
+    if (error instanceof VertuError) throw error;
+    throw new VertuError("MCP \u901A\u4FE1\u5931\u8D25\uFF0C\u8BF7\u68C0\u67E5\u7F51\u7EDC\u548C\u670D\u52A1\u72B6\u6001\u3002");
+  } finally {
+    if (sessionId) {
+      await fetch(endpoint, { method: "DELETE", headers: headers3(), redirect: "error", signal: AbortSignal.timeout(5e3) }).then((response) => response.body?.cancel()).catch(() => {
+      });
+    }
+  }
+}
+
+// src/core/aisales-mcp-client.ts
+var TENANT = "00000000-0000-4000-8000-000000000001";
+var TOOL_NAMES = /* @__PURE__ */ new Set(["business.resolve_subject", "business.catalog", "business.query", "business.compare", "business.get_evidence", "business.explain_metric", "sales.operation_summary", "sales.customer_cohort", "sales.customer_journey"]);
+async function listAiSalesServices() {
+  const base = resolveVpsServiceUrl().replace(/\/+$/, "");
+  const headers3 = vpsServiceAuthHeaders(base);
+  if (!headers3.authorization) throw new VertuError("\u9700\u8981\u5F53\u524D\u8D26\u53F7\u7684 VPS \u767B\u5F55\u51ED\u636E\u3002");
+  const response = await fetch(`${base}/v1/tenant/mcp/services`, {
+    headers: headers3,
+    redirect: "error",
+    signal: AbortSignal.timeout(15e3)
+  });
+  if (!response.ok) {
+    await response.body?.cancel();
+    throw new VertuError(`\u65E0\u6CD5\u8BFB\u53D6\u4F01\u4E1A MCP \u6388\u6743\uFF08HTTP ${response.status}\uFF09\u3002`);
+  }
+  const catalog = await response.json();
+  if (catalog.tenant_id !== TENANT) throw new VertuError("vertu-aisales \u4EC5\u5BF9\u83B7\u6388\u6743\u7684 VERTU \u4F01\u4E1A\u6210\u5458\u5F00\u653E\u3002");
+  return (Array.isArray(catalog.items) ? catalog.items : []).filter((item) => item.capability === "vertu-aisales" && /^[0-9a-f-]{36}$/i.test(item.id)).map((item) => ({ id: item.id, name: item.name || "VERTU AI Sales" }));
+}
+async function runAiSalesMcp(operation, serviceId) {
+  if (operation && !TOOL_NAMES.has(operation.tool)) throw new VertuError("\u672A\u77E5\u7684 VERTU AI Sales \u5DE5\u5177\uFF0C\u8BF7\u5148\u8FD0\u884C vps-work vertu-aisales tools\u3002");
+  const services = (await listAiSalesServices()).filter((item) => !serviceId || item.id === serviceId);
+  if (services.length !== 1) throw new VertuError(services.length ? "\u5B58\u5728\u591A\u4E2A AI Sales \u670D\u52A1\uFF0C\u8BF7\u8FD0\u884C vps-work vertu-aisales services\uFF0C\u518D\u7528 --service-id \u6307\u5B9A\u5B9E\u4F8B\u3002" : "\u5F53\u524D\u8D26\u53F7\u6CA1\u6709\u53EF\u7528\u7684 vertu-aisales \u670D\u52A1\uFF0C\u8BF7\u7531\u7BA1\u7406\u5458\u5728\u4F01\u4E1A MCP \u540E\u53F0\u5F00\u901A\u3002");
+  const base = resolveVpsServiceUrl().replace(/\/+$/, "");
+  return runMcp(`${base}/v1/tenant/mcp/services/${services[0].id}`, vpsServiceAuthHeaders(base), TOOL_NAMES, operation);
+}
+
+// src/commands/vertu-aisales.ts
+function buildVertuAiSalesCommand() {
+  const command = new Command("vertu-aisales").description("VERTU \u5BA2\u6237\u6C9F\u901A\u67E5\u8BE2\uFF08\u5F53\u524D\u4F01\u4E1A\u548C\u5458\u5DE5\u6570\u636E\u6388\u6743\uFF09");
+  command.command("services").description("\u5217\u51FA\u5F53\u524D\u8D26\u53F7\u53EF\u7528\u7684 AI Sales \u670D\u52A1\u5B9E\u4F8B").action(async () => console.log(JSON.stringify({ items: await listAiSalesServices() }, null, 2)));
+  command.command("tools").description("\u53D1\u73B0\u53EF\u8C03\u7528\u5DE5\u5177\u548C\u53C2\u6570 schema").option("--service-id <id>", "\u4F01\u4E1A MCP \u670D\u52A1\u5B9E\u4F8B ID").action(async (opts) => console.log(JSON.stringify(await runAiSalesMcp(void 0, opts.serviceId), null, 2)));
+  command.command("call").description("\u8C03\u7528 AINativeSales \u9500\u552E\u53EA\u8BFB\u5DE5\u5177\uFF1B\u5148\u53D1\u73B0\u4E1A\u52A1\u5BF9\u8C61\u4E0E\u6307\u6807").requiredOption("--tool <name>", "tools \u8FD4\u56DE\u7684\u5DE5\u5177\u540D").option("--args <json>", "JSON \u5BF9\u8C61\uFF0C\u652F\u6301 @file / @-", "{}").option("--service-id <id>", "\u4F01\u4E1A MCP \u670D\u52A1\u5B9E\u4F8B ID").action(async (opts) => {
+    const raw = await expandAtFileToken(opts.args, "--args");
+    let args;
+    try {
+      args = JSON.parse(raw);
+    } catch {
+      throw new VertuError("--args \u5FC5\u987B\u662F JSON \u5BF9\u8C61\u3002");
+    }
+    if (!args || typeof args !== "object" || Array.isArray(args)) throw new VertuError("--args \u5FC5\u987B\u662F JSON \u5BF9\u8C61\u3002");
+    console.log(JSON.stringify(await runAiSalesMcp({ tool: opts.tool, arguments: args }, opts.serviceId), null, 2));
+  });
+  return command;
+}
+
+// src/core/erp-mcp-client.ts
+var tools = /* @__PURE__ */ new Set(["erp-query", "erp-list-tables", "erp-table-columns"]);
+async function runErpMcp(operation, baseUrl4) {
+  if (operation && !tools.has(operation.tool)) throw new VertuError("\u4EC5\u652F\u6301 ERP \u53EA\u8BFB\u5DE5\u5177\uFF0C\u8BF7\u5148\u8FD0\u884C vps-work vertu-erp tools\u3002");
+  const reply = await hermesRequest("POST", "/hermes-console/api/platform-tools/vertu-erp", { baseUrl: baseUrl4, body: operation ? { action: "call", tool: operation.tool, arguments: operation.arguments } : { action: "tools" } });
+  if (!reply.result || typeof reply.result !== "object") throw new VertuError("ERP \u670D\u52A1\u54CD\u5E94\u65E0\u6548\u3002");
+  return reply.result;
+}
+
+// src/commands/vertu-erp.ts
+function buildVertuErpCommand() {
+  const command = new Command("vertu-erp").description("\u4F7F\u7528\u5F53\u524D\u8D26\u53F7\u83B7\u6388\u6743\u7684 ERP MCP\uFF08\u53EA\u8BFB\uFF0C\u4E0D\u81EA\u52A8\u63D0\u6743\uFF09");
+  command.command("tools").description("\u5217\u51FA ERP \u5DE5\u5177\u53CA\u5B9E\u65F6\u53C2\u6570 schema").option("--hermes-base-url <url>", "Hermes \u670D\u52A1\u6839\u5730\u5740").action(async (opts) => {
+    console.log(JSON.stringify(await runErpMcp(void 0, opts.hermesBaseUrl), null, 2));
+  });
+  command.command("call").description("\u8C03\u7528 ERP \u53EA\u8BFB\u5DE5\u5177\uFF1B\u53C2\u6570\u4EE5 tools \u8FD4\u56DE\u7684 schema \u4E3A\u51C6").requiredOption("--tool <name>", "erp-query / erp-list-tables / erp-table-columns").option("--args <json>", "JSON \u53C2\u6570\u5BF9\u8C61\uFF0C\u652F\u6301 @file \u6216 @-\uFF08\u6807\u51C6\u8F93\u5165\uFF09", "{}").option("--hermes-base-url <url>", "Hermes \u670D\u52A1\u6839\u5730\u5740").action(async (opts) => {
+    const raw = await expandAtFileToken(opts.args, "--args");
+    let args;
+    try {
+      args = JSON.parse(raw);
+    } catch {
+      throw new VertuError("--args \u5FC5\u987B\u662F JSON \u5BF9\u8C61\u3002");
+    }
+    if (!args || typeof args !== "object" || Array.isArray(args)) throw new VertuError("--args \u5FC5\u987B\u662F JSON \u5BF9\u8C61\u3002");
+    console.log(JSON.stringify(await runErpMcp({ tool: opts.tool, arguments: args }, opts.hermesBaseUrl), null, 2));
+  });
+  return command;
+}
+
 // src/commands/cli-install.ts
 var import_node_child_process2 = require("child_process");
 function assertNodeEngine() {
@@ -64923,6 +65121,8 @@ function buildCliRootHelpAfter() {
     "USAGE:",
     `    ${b} catalog [--domain sales]`,
     `    ${b} exec --skill <key> --script <key> [--param k=v]`,
+    `    ${b} vertu-aisales tools | vertu-aisales call --tool <name> --args @params.json`,
+    `    ${b} vertu-erp tools | vertu-erp call --tool <name> --args @params.json`,
     `    ${b} <domain> +<shortcut> [options]`,
     `    ${b} auth <subcommand> [options]`,
     "",
@@ -65132,7 +65332,7 @@ function rewriteLongFlag(tok) {
 }
 
 // src/bin/vps-work.ts
-var PKG_VERSION = "2.4.1" ? "2.4.1" : "0.0.0-dev";
+var PKG_VERSION = "2.5.1" ? "2.5.1" : "0.0.0-dev";
 function smartFlagSuggest(flag, candidates) {
   if (!flag.startsWith("--") || flag.length < 4) return "";
   const word = flag.slice(2);
@@ -65261,6 +65461,8 @@ async function main() {
   program2.addCommand(buildPopupCommand());
   program2.addCommand(buildCatalogCommand());
   program2.addCommand(buildExecCommand());
+  program2.addCommand(buildVertuErpCommand());
+  program2.addCommand(buildVertuAiSalesCommand());
   program2.addCommand(buildSkillCommand());
   const userArgv = normalizeSnakeFlags(process.argv.slice(2));
   const fullArgv = [...process.argv.slice(0, 2), ...userArgv];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vps-work",
-  "version": "2.4.1",
+  "version": "2.5.1",
   "description": "VPS Work CLI - tenant-aware domain shortcuts and bundled agent skills for Cursor / Claude Code / Trae.",
   "license": "MIT",
   "author": "he-linyan",

package/scripts/package-desktop-runtime.mjs

@@ -0,0 +1,43 @@
+// Build first: npm run build. Signing key is a file outside the repository.
+// VPS_WORK_RELEASE_KEY_FILE, VPS_WORK_RELEASE_KEY_ID, VPS_WORK_MIN_DESKTOP
+// and VPS_WORK_RUNTIME_OUTPUT are required. This script never publishes.
+import { createHash, createPrivateKey, sign } from 'node:crypto';
+import { readFile, readdir, mkdir, writeFile } from 'node:fs/promises';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const root = resolve(dirname(fileURLToPath(import.meta.url)), '..');
+const required = name => { const value = process.env[name]; if (!value) throw Error(`Missing ${name}`); return value; };
+const keyFile = required('VPS_WORK_RELEASE_KEY_FILE'), keyId = required('VPS_WORK_RELEASE_KEY_ID');
+const minDesktop = required('VPS_WORK_MIN_DESKTOP'), output = resolve(required('VPS_WORK_RUNTIME_OUTPUT'));
+const pkg = JSON.parse(await readFile(join(root, 'package.json'), 'utf8'));
+if (![pkg.version, minDesktop].every(value => /^\d+\.\d+\.\d+$/.test(value))) throw Error('Stable versions required');
+const files = {};
+const add = async path => {
+  const bytes = await readFile(join(root, path)), text = bytes.toString('utf8');
+  if (!Buffer.from(text).equals(bytes)) throw Error(`Runtime bundle only supports UTF-8 files: ${path}`);
+  files[path] = text;
+};
+const walk = async path => {
+  for (const entry of (await readdir(join(root, path), { withFileTypes: true })).sort((a,b) => a.name.localeCompare(b.name))) {
+    if (entry.isSymbolicLink()) throw Error('Runtime symlinks are not allowed');
+    if (entry.isDirectory()) await walk(`${path}/${entry.name}`);
+    else await add(`${path}/${entry.name}`);
+  }
+};
+for (const path of ['dist/vps-work.cjs', 'dist/office-runtime.cjs', 'dist/OFFICE-LICENSE', 'dist/OFFICE-NOTICE', 'package.json', '.well-known/skills/index.json']) await add(path);
+await walk('skills');
+const index = JSON.parse(files['.well-known/skills/index.json']);
+for (const skill of index.skills) for (const path of skill.files) if (!files[path]) throw Error(`Missing indexed skill file: ${path}`);
+const bundle = Buffer.from(JSON.stringify({ files }));
+if (bundle.length > 24 * 1024 * 1024) throw Error('Runtime exceeds desktop limit');
+const sha256 = createHash('sha256').update(bundle).digest('hex');
+const name = `vps-work-${pkg.version}-${sha256}.json`;
+const payload = Buffer.from(JSON.stringify({ product: 'vps-work', version: pkg.version, minDesktop, minNode: '20.0.0',
+  url: `https://vps-download.vertu.cn/app-releases/tools/vps-work/${name}`, sha256, bytes: bundle.length }));
+const key = createPrivateKey(await readFile(keyFile));
+if (key.asymmetricKeyType !== 'ed25519') throw Error('Ed25519 signing key required');
+const envelope = { payload: payload.toString('base64'), signature: sign(null, payload, key).toString('base64'), keyId };
+await mkdir(output, { recursive: true });
+await writeFile(join(output, name), bundle);
+await writeFile(join(output, 'stable.json'), JSON.stringify(envelope, null, 2));
+console.log(`Prepared ${name} and stable.json. Upload the immutable bundle first, then stable.json. Nothing was published.`);