vps-work 2.4.1 → 2.5.1

package/dist/packages/vps-work/src/commands/auth/list.js

@@ -0,0 +1,50 @@
+import { Command } from 'commander';
+import { vpsServiceConfigFilePath } from '../../core/paths.js';
+import { readVertuAgentEnvFromProcess } from '../../core/vertu-agent-env.js';
+import { loadStoredAgentKey, resolveVpsAuthState } from '../../core/vps-service-auth.js';
+import { readVpsServiceConfig } from '../../core/vps-service-config.js';
+export function buildAuthListCommand() {
+    return new Command('list')
+        .description('列出本机已配置的 VPS 认证身份。')
+        .option('--json', '输出 JSON')
+        .action(async (opts) => {
+        const vps = await readVpsServiceConfig();
+        if (!vps.agentAppKey && vps.baseUrl && vps.agentAppId) {
+            vps.agentAppKey = await loadStoredAgentKey(vps.baseUrl, vps.agentAppId);
+        }
+        const env = readVertuAgentEnvFromProcess();
+        const vpsState = resolveVpsAuthState(vps, env);
+        const vpsEntry = vps.baseUrl
+            ? {
+                kind: 'vps-service',
+                base_url: vps.baseUrl,
+                login: vpsState.login,
+                session_active: vpsState.active,
+                auth_mode: vpsState.mode,
+                agent_app_id: vpsState.agentAppId,
+                config: vpsServiceConfigFilePath(),
+            }
+            : null;
+        const payload = { vps: vpsEntry };
+        if (opts.json) {
+            console.log(JSON.stringify(payload, null, 2));
+            return;
+        }
+        if (vpsEntry) {
+            const modeLabel = vpsEntry.auth_mode === 'session'
+                ? '账号会话'
+                : vpsEntry.auth_mode === 'agent'
+                    ? '智能体密钥'
+                    : '无/过期';
+            console.log('Vertu');
+            console.log(`  地址      ${vpsEntry.base_url}`);
+            console.log(`  账号      ${vpsEntry.login ?? '—'}`);
+            console.log(`  凭证      ${modeLabel}`);
+            console.log(`  智能体    ${vpsEntry.agent_app_id ?? '—'}`);
+            console.log('');
+        }
+        if (!vpsEntry) {
+            console.log('暂无本地认证配置。Agent/Bot/Hermes 请检查宿主注入的 app_key；仅人工用户可交互执行 vps-work auth login。');
+        }
+    });
+}

package/dist/packages/vps-work/src/commands/auth/scopes.js

@@ -0,0 +1,17 @@
+import { Command } from 'commander';
+import { fetchVpsUserScopes } from '../../core/vps-auth-scopes.js';
+import { resolveVpsServiceUrl } from '../../core/sales-query-client.js';
+export function buildAuthScopesCommand() {
+    return new Command('scopes')
+        .description('查询当前用户已授权的 API scope（resource:action，类似 lark-cli auth scopes）。')
+        .option('--base-url <url>', 'Vertu 服务地址')
+        .option('--json', '输出 JSON（默认开启）', true)
+        .action(async (opts, cmd) => {
+        const merged = cmd.optsWithGlobals();
+        const serviceUrl = resolveVpsServiceUrl(opts.baseUrl ?? merged.baseUrl);
+        console.error('Querying user scopes...\n');
+        const payload = await fetchVpsUserScopes(serviceUrl);
+        const { ok: _ok, ...view } = payload;
+        console.log(JSON.stringify(view, null, 2));
+    });
+}

package/dist/packages/vps-work/src/commands/auth/status.js

@@ -0,0 +1,127 @@
+import { Command } from 'commander';
+import { VertuError } from '../../core/errors.js';
+import { publicBusinessErrorMessage } from '../../core/public-result.js';
+import { vpsServiceConfigFilePath } from '../../core/paths.js';
+import { readVertuAgentEnvFromProcess } from '../../core/vertu-agent-env.js';
+import { fetchVpsServiceMe, loadStoredAgentKey, resolveVpsAuthState, } from '../../core/vps-service-auth.js';
+import { readVpsServiceConfig } from '../../core/vps-service-config.js';
+import { resolveVpsServiceUrl } from '../../core/sales-query-client.js';
+function authModeLabel(mode) {
+    if (mode === 'session') {
+        return '账号会话';
+    }
+    if (mode === 'agent') {
+        return '智能体密钥';
+    }
+    return '未登录';
+}
+/**
+ * `auth status`：查看当前 Vertu 登录身份、凭证类型（账号会话 / 智能体密钥）与有效性。
+ *
+ * 鉴权统一由 VPS 服务处理；scope 列表请用 `auth scopes`，
+ * 单个 scope 校验请用 `auth check`。
+ */
+export function buildAuthStatusCommand() {
+    return new Command('status')
+        .description('查看当前登录状态、凭证类型与有效性；scope 列表请用 auth scopes。')
+        .option('--json', '输出 JSON')
+        .action(async (opts) => {
+        const cfg = await readVpsServiceConfig();
+        if (!cfg.agentAppKey && cfg.baseUrl && cfg.agentAppId) {
+            cfg.agentAppKey = await loadStoredAgentKey(cfg.baseUrl, cfg.agentAppId);
+        }
+        const env = readVertuAgentEnvFromProcess();
+        const state = resolveVpsAuthState(cfg, env);
+        const effectiveBaseUrl = resolveVpsServiceUrl();
+        if (!effectiveBaseUrl || !state.active) {
+            if (opts.json) {
+                console.log(JSON.stringify({ logged_in: false }, null, 2));
+                return;
+            }
+            throw new VertuError('未认证。Agent/Bot/Hermes 请检查宿主注入的 app_key（Hermes 必须使用 app_id=vertu-hermes-agent）；仅人工用户可交互执行 `vps-work auth login`。');
+        }
+        let me = null;
+        let credentialError = null;
+        if (state.token) {
+            try {
+                me = await fetchVpsServiceMe(effectiveBaseUrl, state.token);
+            }
+            catch (error) {
+                credentialError = publicBusinessErrorMessage(error instanceof Error ? error.message : String(error));
+                /* 服务不可达时跳过身份明细，仍展示本地凭证信息 */
+            }
+        }
+        const credentialRejected = credentialError ? /HTTP (401|403)\b/.test(credentialError) : false;
+        const department = me?.departmentPath ?? me?.departmentName ?? null;
+        const expiresLabel = state.mode === 'agent' && state.neverExpires ? '长效（永不过期）' : state.expiresAt;
+        if (opts.json) {
+            console.log(JSON.stringify({
+                logged_in: state.active,
+                auth_mode: state.mode,
+                base_url: effectiveBaseUrl,
+                configured_base_url: cfg.baseUrl ?? null,
+                login: state.login,
+                user_id: me?.userId ?? null,
+                tenant_id: me?.tenantId ?? null,
+                tenant_name: me?.tenantName ?? null,
+                tenant_type: me?.tenantType ?? null,
+                membership_id: me?.membershipId ?? null,
+                membership_role: me?.membershipRole ?? null,
+                product_profile: me?.productProfile ?? null,
+                session_active: state.active,
+                server_authorized: Boolean(me),
+                credential_rejected: credentialRejected,
+                credential_error: credentialError,
+                expires_at: state.expiresAt,
+                never_expires: state.neverExpires,
+                agent_app_id: state.agentAppId,
+                employee_name: me?.employeeName ?? null,
+                department,
+                role: me?.role ?? null,
+                config: vpsServiceConfigFilePath(),
+            }, null, 2));
+            return;
+        }
+        console.log('VPS');
+        console.log(`  地址    : ${effectiveBaseUrl}`);
+        if (cfg.baseUrl && cfg.baseUrl.replace(/\/+$/, '') !== effectiveBaseUrl.replace(/\/+$/, '')) {
+            console.log(`  配置地址: ${cfg.baseUrl}（已被环境变量覆盖）`);
+        }
+        console.log(`  账号    : ${state.login ?? '—'}`);
+        console.log(`  凭证    : ${authModeLabel(state.mode)}`);
+        if (me?.employeeName) {
+            console.log(`  姓名    : ${me.employeeName}`);
+        }
+        if (department) {
+            console.log(`  部门    : ${department}`);
+        }
+        if (me?.tenantName || me?.tenantType) {
+            console.log(`  企业    : ${me.tenantName ?? '—'}（${me.tenantType ?? 'unknown'}）`);
+        }
+        if (me?.membershipRole) {
+            console.log(`  成员角色: ${me.membershipRole}`);
+        }
+        if (me?.productProfile) {
+            console.log(`  产品包  : ${me.productProfile}`);
+        }
+        if (me?.role) {
+            console.log(`  角色    : ${me.role}`);
+        }
+        if (credentialRejected) {
+            console.log('  状态    : 服务端已拒绝该凭证；Agent/Bot/Hermes 请联系管理员刷新宿主 app_key，人工用户请交互重新登录');
+        }
+        else if (credentialError) {
+            console.log(`  状态    : 本地凭证存在，服务端验证失败（${credentialError}）`);
+        }
+        if (expiresLabel) {
+            console.log(`  过期    : ${expiresLabel}`);
+        }
+        if (state.agentAppId) {
+            console.log(`  智能体  : ${state.agentAppId}`);
+        }
+        if (cfg.apiKey?.trim()) {
+            console.log('  API Key : 已配置（服务级）');
+        }
+        console.log(`  配置    : ${vpsServiceConfigFilePath()}`);
+    });
+}

package/dist/packages/vps-work/src/commands/auth/tenants.js

@@ -0,0 +1,35 @@
+import { Command } from 'commander';
+import { VertuError } from '../../core/errors.js';
+import { readVertuAgentEnvFromProcess } from '../../core/vertu-agent-env.js';
+import { fetchVpsServiceTenants, loadStoredAgentKey, resolveVpsAuthState, } from '../../core/vps-service-auth.js';
+import { readVpsServiceConfig } from '../../core/vps-service-config.js';
+import { resolveVpsServiceUrl } from '../../core/sales-query-client.js';
+/** 列出当前账号加入的企业，供人工或 Agent 在执行前确认身份。 */
+export function buildAuthTenantsCommand() {
+    return new Command('tenants')
+        .description('列出当前账号可切换的企业')
+        .option('--json', '机读输出')
+        .action(async (opts) => {
+        const cfg = await readVpsServiceConfig();
+        if (!cfg.agentAppKey && cfg.baseUrl && cfg.agentAppId) {
+            cfg.agentAppKey = await loadStoredAgentKey(cfg.baseUrl, cfg.agentAppId);
+        }
+        const state = resolveVpsAuthState(cfg, readVertuAgentEnvFromProcess());
+        if (!state.active || !state.token) {
+            throw new VertuError('未认证。请先 `vps-work auth login` 或检查宿主注入的 app_key。');
+        }
+        const tenants = await fetchVpsServiceTenants(resolveVpsServiceUrl(), state.token);
+        if (opts.json) {
+            console.log(JSON.stringify({ tenants }, null, 2));
+            return;
+        }
+        if (tenants.length === 0) {
+            console.log('当前账号没有可用企业。');
+            return;
+        }
+        for (const tenant of tenants) {
+            const mark = tenant.active ? '*' : ' ';
+            console.log(`${mark} ${tenant.name}  ${tenant.type}  ${tenant.id}  ${tenant.role}`);
+        }
+    });
+}

package/dist/packages/vps-work/src/commands/auth/use.js

@@ -0,0 +1,40 @@
+import { Command } from 'commander';
+import { VertuError } from '../../core/errors.js';
+import { DEFAULT_AGENT_APP_ID, VERTU_APP_ID_ENV, readVertuAgentEnvFromProcess } from '../../core/vertu-agent-env.js';
+import { bindVpsServiceAgentCredential, loadStoredAgentKey, persistVpsServiceAgentCredential, persistVpsServiceSession, pickVpsServiceUserInfo, resolveVpsAuthState, switchVpsServiceTenant, } from '../../core/vps-service-auth.js';
+import { readVpsServiceConfig } from '../../core/vps-service-config.js';
+import { resolveVpsServiceUrl } from '../../core/sales-query-client.js';
+/** 切换当前 membership；Agent 不得用 --tenant 冒充，只能由宿主或人工执行。 */
+export function buildAuthUseCommand() {
+    return new Command('use')
+        .description('切换当前企业身份（人工或宿主执行；Agent 不得自行换企业）')
+        .requiredOption('--tenant <id>', '目标企业 UUID')
+        .action(async (opts) => {
+        const env = readVertuAgentEnvFromProcess();
+        if (env.appKey?.trim()) {
+            throw new VertuError('当前是宿主注入的 Agent 凭证，禁止在命令行切换企业。请由宿主按企业重新注入 app_key。');
+        }
+        const cfg = await readVpsServiceConfig();
+        if (!cfg.agentAppKey && cfg.baseUrl && cfg.agentAppId) {
+            cfg.agentAppKey = await loadStoredAgentKey(cfg.baseUrl, cfg.agentAppId);
+        }
+        const state = resolveVpsAuthState(cfg, env);
+        if (state.mode !== 'session' || !state.token) {
+            throw new VertuError('切换企业需要账号会话。请先 `vps-work auth login`。');
+        }
+        const base = resolveVpsServiceUrl();
+        const session = await switchVpsServiceTenant(base, state.token, opts.tenant.trim());
+        await persistVpsServiceSession(base, session);
+        const user = pickVpsServiceUserInfo(session.user);
+        console.log(`已切换到：${user.tenantName ?? opts.tenant}（${user.tenantType ?? 'unknown'}）`);
+        const appId = cfg.agentAppId ?? process.env[VERTU_APP_ID_ENV]?.trim() ?? DEFAULT_AGENT_APP_ID;
+        try {
+            const bound = await bindVpsServiceAgentCredential(base, session.token, appId);
+            await persistVpsServiceAgentCredential(base, bound);
+            console.log(`Agent 密钥已按新企业轮换：${bound.appId}`);
+        }
+        catch (error) {
+            console.warn(`Agent 绑定跳过：${error.message}`);
+        }
+    });
+}

package/dist/packages/vps-work/src/commands/calendar/index.js

@@ -0,0 +1,7 @@
+import { Command } from 'commander';
+import { attachCalendarShortcuts } from './shortcuts.js';
+export function buildCalendarCommand() {
+    const calendar = new Command('calendar').description('日程与日历：我的日程、人员日程、指定日历和多人忙闲。');
+    attachCalendarShortcuts(calendar);
+    return calendar;
+}