vps-work 2.5.1 → 2.7.0

package/dist/packages/vps-work/src/commands/auth/list.js

@@ -1,50 +0,0 @@
-import { Command } from 'commander';
-import { vpsServiceConfigFilePath } from '../../core/paths.js';
-import { readVertuAgentEnvFromProcess } from '../../core/vertu-agent-env.js';
-import { loadStoredAgentKey, resolveVpsAuthState } from '../../core/vps-service-auth.js';
-import { readVpsServiceConfig } from '../../core/vps-service-config.js';
-export function buildAuthListCommand() {
-    return new Command('list')
-        .description('列出本机已配置的 VPS 认证身份。')
-        .option('--json', '输出 JSON')
-        .action(async (opts) => {
-        const vps = await readVpsServiceConfig();
-        if (!vps.agentAppKey && vps.baseUrl && vps.agentAppId) {
-            vps.agentAppKey = await loadStoredAgentKey(vps.baseUrl, vps.agentAppId);
-        }
-        const env = readVertuAgentEnvFromProcess();
-        const vpsState = resolveVpsAuthState(vps, env);
-        const vpsEntry = vps.baseUrl
-            ? {
-                kind: 'vps-service',
-                base_url: vps.baseUrl,
-                login: vpsState.login,
-                session_active: vpsState.active,
-                auth_mode: vpsState.mode,
-                agent_app_id: vpsState.agentAppId,
-                config: vpsServiceConfigFilePath(),
-            }
-            : null;
-        const payload = { vps: vpsEntry };
-        if (opts.json) {
-            console.log(JSON.stringify(payload, null, 2));
-            return;
-        }
-        if (vpsEntry) {
-            const modeLabel = vpsEntry.auth_mode === 'session'
-                ? '账号会话'
-                : vpsEntry.auth_mode === 'agent'
-                    ? '智能体密钥'
-                    : '无/过期';
-            console.log('Vertu');
-            console.log(`  地址      ${vpsEntry.base_url}`);
-            console.log(`  账号      ${vpsEntry.login ?? '—'}`);
-            console.log(`  凭证      ${modeLabel}`);
-            console.log(`  智能体    ${vpsEntry.agent_app_id ?? '—'}`);
-            console.log('');
-        }
-        if (!vpsEntry) {
-            console.log('暂无本地认证配置。Agent/Bot/Hermes 请检查宿主注入的 app_key；仅人工用户可交互执行 vps-work auth login。');
-        }
-    });
-}

package/dist/packages/vps-work/src/commands/auth/scopes.js

@@ -1,17 +0,0 @@
-import { Command } from 'commander';
-import { fetchVpsUserScopes } from '../../core/vps-auth-scopes.js';
-import { resolveVpsServiceUrl } from '../../core/sales-query-client.js';
-export function buildAuthScopesCommand() {
-    return new Command('scopes')
-        .description('查询当前用户已授权的 API scope（resource:action，类似 lark-cli auth scopes）。')
-        .option('--base-url <url>', 'Vertu 服务地址')
-        .option('--json', '输出 JSON（默认开启）', true)
-        .action(async (opts, cmd) => {
-        const merged = cmd.optsWithGlobals();
-        const serviceUrl = resolveVpsServiceUrl(opts.baseUrl ?? merged.baseUrl);
-        console.error('Querying user scopes...\n');
-        const payload = await fetchVpsUserScopes(serviceUrl);
-        const { ok: _ok, ...view } = payload;
-        console.log(JSON.stringify(view, null, 2));
-    });
-}

package/dist/packages/vps-work/src/commands/auth/status.js

@@ -1,127 +0,0 @@
-import { Command } from 'commander';
-import { VertuError } from '../../core/errors.js';
-import { publicBusinessErrorMessage } from '../../core/public-result.js';
-import { vpsServiceConfigFilePath } from '../../core/paths.js';
-import { readVertuAgentEnvFromProcess } from '../../core/vertu-agent-env.js';
-import { fetchVpsServiceMe, loadStoredAgentKey, resolveVpsAuthState, } from '../../core/vps-service-auth.js';
-import { readVpsServiceConfig } from '../../core/vps-service-config.js';
-import { resolveVpsServiceUrl } from '../../core/sales-query-client.js';
-function authModeLabel(mode) {
-    if (mode === 'session') {
-        return '账号会话';
-    }
-    if (mode === 'agent') {
-        return '智能体密钥';
-    }
-    return '未登录';
-}
-/**
- * `auth status`：查看当前 Vertu 登录身份、凭证类型（账号会话 / 智能体密钥）与有效性。
- *
- * 鉴权统一由 VPS 服务处理；scope 列表请用 `auth scopes`，
- * 单个 scope 校验请用 `auth check`。
- */
-export function buildAuthStatusCommand() {
-    return new Command('status')
-        .description('查看当前登录状态、凭证类型与有效性；scope 列表请用 auth scopes。')
-        .option('--json', '输出 JSON')
-        .action(async (opts) => {
-        const cfg = await readVpsServiceConfig();
-        if (!cfg.agentAppKey && cfg.baseUrl && cfg.agentAppId) {
-            cfg.agentAppKey = await loadStoredAgentKey(cfg.baseUrl, cfg.agentAppId);
-        }
-        const env = readVertuAgentEnvFromProcess();
-        const state = resolveVpsAuthState(cfg, env);
-        const effectiveBaseUrl = resolveVpsServiceUrl();
-        if (!effectiveBaseUrl || !state.active) {
-            if (opts.json) {
-                console.log(JSON.stringify({ logged_in: false }, null, 2));
-                return;
-            }
-            throw new VertuError('未认证。Agent/Bot/Hermes 请检查宿主注入的 app_key（Hermes 必须使用 app_id=vertu-hermes-agent）；仅人工用户可交互执行 `vps-work auth login`。');
-        }
-        let me = null;
-        let credentialError = null;
-        if (state.token) {
-            try {
-                me = await fetchVpsServiceMe(effectiveBaseUrl, state.token);
-            }
-            catch (error) {
-                credentialError = publicBusinessErrorMessage(error instanceof Error ? error.message : String(error));
-                /* 服务不可达时跳过身份明细，仍展示本地凭证信息 */
-            }
-        }
-        const credentialRejected = credentialError ? /HTTP (401|403)\b/.test(credentialError) : false;
-        const department = me?.departmentPath ?? me?.departmentName ?? null;
-        const expiresLabel = state.mode === 'agent' && state.neverExpires ? '长效（永不过期）' : state.expiresAt;
-        if (opts.json) {
-            console.log(JSON.stringify({
-                logged_in: state.active,
-                auth_mode: state.mode,
-                base_url: effectiveBaseUrl,
-                configured_base_url: cfg.baseUrl ?? null,
-                login: state.login,
-                user_id: me?.userId ?? null,
-                tenant_id: me?.tenantId ?? null,
-                tenant_name: me?.tenantName ?? null,
-                tenant_type: me?.tenantType ?? null,
-                membership_id: me?.membershipId ?? null,
-                membership_role: me?.membershipRole ?? null,
-                product_profile: me?.productProfile ?? null,
-                session_active: state.active,
-                server_authorized: Boolean(me),
-                credential_rejected: credentialRejected,
-                credential_error: credentialError,
-                expires_at: state.expiresAt,
-                never_expires: state.neverExpires,
-                agent_app_id: state.agentAppId,
-                employee_name: me?.employeeName ?? null,
-                department,
-                role: me?.role ?? null,
-                config: vpsServiceConfigFilePath(),
-            }, null, 2));
-            return;
-        }
-        console.log('VPS');
-        console.log(`  地址    : ${effectiveBaseUrl}`);
-        if (cfg.baseUrl && cfg.baseUrl.replace(/\/+$/, '') !== effectiveBaseUrl.replace(/\/+$/, '')) {
-            console.log(`  配置地址: ${cfg.baseUrl}（已被环境变量覆盖）`);
-        }
-        console.log(`  账号    : ${state.login ?? '—'}`);
-        console.log(`  凭证    : ${authModeLabel(state.mode)}`);
-        if (me?.employeeName) {
-            console.log(`  姓名    : ${me.employeeName}`);
-        }
-        if (department) {
-            console.log(`  部门    : ${department}`);
-        }
-        if (me?.tenantName || me?.tenantType) {
-            console.log(`  企业    : ${me.tenantName ?? '—'}（${me.tenantType ?? 'unknown'}）`);
-        }
-        if (me?.membershipRole) {
-            console.log(`  成员角色: ${me.membershipRole}`);
-        }
-        if (me?.productProfile) {
-            console.log(`  产品包  : ${me.productProfile}`);
-        }
-        if (me?.role) {
-            console.log(`  角色    : ${me.role}`);
-        }
-        if (credentialRejected) {
-            console.log('  状态    : 服务端已拒绝该凭证；Agent/Bot/Hermes 请联系管理员刷新宿主 app_key，人工用户请交互重新登录');
-        }
-        else if (credentialError) {
-            console.log(`  状态    : 本地凭证存在，服务端验证失败（${credentialError}）`);
-        }
-        if (expiresLabel) {
-            console.log(`  过期    : ${expiresLabel}`);
-        }
-        if (state.agentAppId) {
-            console.log(`  智能体  : ${state.agentAppId}`);
-        }
-        if (cfg.apiKey?.trim()) {
-            console.log('  API Key : 已配置（服务级）');
-        }
-        console.log(`  配置    : ${vpsServiceConfigFilePath()}`);
-    });
-}

package/dist/packages/vps-work/src/commands/auth/tenants.js

@@ -1,35 +0,0 @@
-import { Command } from 'commander';
-import { VertuError } from '../../core/errors.js';
-import { readVertuAgentEnvFromProcess } from '../../core/vertu-agent-env.js';
-import { fetchVpsServiceTenants, loadStoredAgentKey, resolveVpsAuthState, } from '../../core/vps-service-auth.js';
-import { readVpsServiceConfig } from '../../core/vps-service-config.js';
-import { resolveVpsServiceUrl } from '../../core/sales-query-client.js';
-/** 列出当前账号加入的企业，供人工或 Agent 在执行前确认身份。 */
-export function buildAuthTenantsCommand() {
-    return new Command('tenants')
-        .description('列出当前账号可切换的企业')
-        .option('--json', '机读输出')
-        .action(async (opts) => {
-        const cfg = await readVpsServiceConfig();
-        if (!cfg.agentAppKey && cfg.baseUrl && cfg.agentAppId) {
-            cfg.agentAppKey = await loadStoredAgentKey(cfg.baseUrl, cfg.agentAppId);
-        }
-        const state = resolveVpsAuthState(cfg, readVertuAgentEnvFromProcess());
-        if (!state.active || !state.token) {
-            throw new VertuError('未认证。请先 `vps-work auth login` 或检查宿主注入的 app_key。');
-        }
-        const tenants = await fetchVpsServiceTenants(resolveVpsServiceUrl(), state.token);
-        if (opts.json) {
-            console.log(JSON.stringify({ tenants }, null, 2));
-            return;
-        }
-        if (tenants.length === 0) {
-            console.log('当前账号没有可用企业。');
-            return;
-        }
-        for (const tenant of tenants) {
-            const mark = tenant.active ? '*' : ' ';
-            console.log(`${mark} ${tenant.name}  ${tenant.type}  ${tenant.id}  ${tenant.role}`);
-        }
-    });
-}

package/dist/packages/vps-work/src/commands/auth/use.js

@@ -1,40 +0,0 @@
-import { Command } from 'commander';
-import { VertuError } from '../../core/errors.js';
-import { DEFAULT_AGENT_APP_ID, VERTU_APP_ID_ENV, readVertuAgentEnvFromProcess } from '../../core/vertu-agent-env.js';
-import { bindVpsServiceAgentCredential, loadStoredAgentKey, persistVpsServiceAgentCredential, persistVpsServiceSession, pickVpsServiceUserInfo, resolveVpsAuthState, switchVpsServiceTenant, } from '../../core/vps-service-auth.js';
-import { readVpsServiceConfig } from '../../core/vps-service-config.js';
-import { resolveVpsServiceUrl } from '../../core/sales-query-client.js';
-/** 切换当前 membership；Agent 不得用 --tenant 冒充，只能由宿主或人工执行。 */
-export function buildAuthUseCommand() {
-    return new Command('use')
-        .description('切换当前企业身份（人工或宿主执行；Agent 不得自行换企业）')
-        .requiredOption('--tenant <id>', '目标企业 UUID')
-        .action(async (opts) => {
-        const env = readVertuAgentEnvFromProcess();
-        if (env.appKey?.trim()) {
-            throw new VertuError('当前是宿主注入的 Agent 凭证，禁止在命令行切换企业。请由宿主按企业重新注入 app_key。');
-        }
-        const cfg = await readVpsServiceConfig();
-        if (!cfg.agentAppKey && cfg.baseUrl && cfg.agentAppId) {
-            cfg.agentAppKey = await loadStoredAgentKey(cfg.baseUrl, cfg.agentAppId);
-        }
-        const state = resolveVpsAuthState(cfg, env);
-        if (state.mode !== 'session' || !state.token) {
-            throw new VertuError('切换企业需要账号会话。请先 `vps-work auth login`。');
-        }
-        const base = resolveVpsServiceUrl();
-        const session = await switchVpsServiceTenant(base, state.token, opts.tenant.trim());
-        await persistVpsServiceSession(base, session);
-        const user = pickVpsServiceUserInfo(session.user);
-        console.log(`已切换到：${user.tenantName ?? opts.tenant}（${user.tenantType ?? 'unknown'}）`);
-        const appId = cfg.agentAppId ?? process.env[VERTU_APP_ID_ENV]?.trim() ?? DEFAULT_AGENT_APP_ID;
-        try {
-            const bound = await bindVpsServiceAgentCredential(base, session.token, appId);
-            await persistVpsServiceAgentCredential(base, bound);
-            console.log(`Agent 密钥已按新企业轮换：${bound.appId}`);
-        }
-        catch (error) {
-            console.warn(`Agent 绑定跳过：${error.message}`);
-        }
-    });
-}

package/dist/packages/vps-work/src/commands/calendar/index.js

@@ -1,7 +0,0 @@
-import { Command } from 'commander';
-import { attachCalendarShortcuts } from './shortcuts.js';
-export function buildCalendarCommand() {
-    const calendar = new Command('calendar').description('日程与日历：我的日程、人员日程、指定日历和多人忙闲。');
-    attachCalendarShortcuts(calendar);
-    return calendar;
-}