weaver-work-cli 0.1.1 → 0.1.4

package/dist/shortcuts/fna/operations/loan.js

@@ -0,0 +1,195 @@
+import { fnaPartialError, fnaValidationError, isFnaNetworkError } from '../errors.js';
+import { fnaSuccess, READ, schemaOf, SCHEMA_INTEGER_POSITIVE, SCHEMA_STRING_NONEMPTY, WRITE } from './types.js';
+import { compact, fingerprint, normalizeWeaTable, requireConfirm, requireRemindRows, summarizeRemindRows, toPositiveInt, unwrapData, verifyLease } from './shared.js';
+const CONTINUATION_TTL_SECONDS = 600;
+const LOAN_MENU_FIELDS = {
+    menuCode: { ...SCHEMA_STRING_NONEMPTY, description: '菜单编码，如 fesx_fna_borrowingManagement（与环境核对）' },
+    permissionSetCode: { ...SCHEMA_STRING_NONEMPTY, description: '权限集编码，如 fesx_fna_borrowingManagement.default（与环境核对）' },
+    departmentId: { type: 'string', description: '部门 ID，为空查全部' },
+};
+/**
+ * 借款管理：首页汇总（管理员，只读）。
+ * POST /api/fna/expense/loanManagementMenu/mainPage
+ * data: dhk（待还款）、hkz（还款中）的 { amount, costType, count }；amount 为格式化字符串。
+ */
+const fnaLoanMainPage = {
+    name: 'fna.loan.main.page',
+    resource: 'loan',
+    method: 'loan.main.page',
+    action: 'fna.loan.main.page',
+    summary: '借款管理首页汇总（全公司待还款/还款中金额与笔数，需管理员登录）',
+    capability: 'loan',
+    risk: READ,
+    inputSchema: schemaOf({
+        ...LOAN_MENU_FIELDS,
+        borrowingStatus: { type: 'string', description: '借款状态，如 waitReimbursement（待还款）' },
+    }, { description: '借款管理：首页汇总（body 可为空；建议带 menuCode/permissionSetCode）' }),
+    handler: async (args, { host }) => {
+        const body = compact({
+            borrowingStatus: args.borrowingStatus,
+            departmentId: args.departmentId,
+            menuCode: args.menuCode,
+            permissionSetCode: args.permissionSetCode,
+        });
+        const response = await host.request({
+            method: 'POST',
+            path: '/api/fna/expense/loanManagementMenu/mainPage',
+            body,
+        });
+        const summary = unwrapData(response);
+        return fnaSuccess('fna.loan.main.page', {
+            dhk: summary?.dhk ?? null,
+            hkz: summary?.hkz ?? null,
+            note: 'amount 为格式化字符串（元），count 为笔数；menuCode/permissionSetCode 环境相关，示例值需与环境核对',
+        });
+    },
+};
+/**
+ * 借款管理：首页列表（管理员，只读）。
+ * POST /api/fna/expense/loanManagementMenu/mainPageList
+ * 必填 current/pageSize/menuCode/permissionSetCode；rows 优先返回 displayData（金额已格式化、createTime 为字符串）。
+ */
+const fnaLoanMainList = {
+    name: 'fna.loan.main.list',
+    resource: 'loan',
+    method: 'loan.main.list',
+    action: 'fna.loan.main.list',
+    summary: '借款管理首页列表（全员借款单分页，需管理员登录）：返回 displayData 行（含 id/workflowId，可回传提醒还款）',
+    capability: 'loan',
+    risk: READ,
+    inputSchema: schemaOf({
+        current: { ...SCHEMA_INTEGER_POSITIVE, description: '当前页码（必填）' },
+        pageSize: { ...SCHEMA_INTEGER_POSITIVE, description: '每页条数（必填）' },
+        ...LOAN_MENU_FIELDS,
+        isBatchConfirmRepaymentSearch: { type: 'boolean', description: '是否批量确认还款搜索' },
+    }, { required: ['current', 'pageSize', 'menuCode', 'permissionSetCode'], description: '借款管理：首页列表' }),
+    handler: async (args, { host }) => {
+        const current = toPositiveInt(args.current, 'current');
+        const pageSize = toPositiveInt(args.pageSize, 'pageSize');
+        if (current === undefined)
+            throw fnaValidationError('current_required', 'current 必填（正整数页码）');
+        if (pageSize === undefined)
+            throw fnaValidationError('page_size_required', 'pageSize 必填（正整数每页条数）');
+        if (!args.menuCode || !args.permissionSetCode) {
+            throw fnaValidationError('menu_code_required', 'menuCode 与 permissionSetCode 必填（借款管理菜单编码，与环境核对）');
+        }
+        const body = compact({
+            current,
+            pageSize,
+            isBatchConfirmRepaymentSearch: args.isBatchConfirmRepaymentSearch,
+            departmentId: args.departmentId,
+            menuCode: args.menuCode,
+            permissionSetCode: args.permissionSetCode,
+        });
+        const response = await host.request({
+            method: 'POST',
+            path: '/api/fna/expense/loanManagementMenu/mainPageList',
+            body,
+        });
+        const table = normalizeWeaTable(unwrapData(response), { current, pageSize });
+        return fnaSuccess('fna.loan.main.list', table, {
+            hint: '提醒还款请取 rows 中 displayData 行原样回传（fna.loan.remind.repay.prepare）；金额展示以 displayData 为准，data 行金额为原始精度',
+        });
+    },
+};
+/**
+ * 借款管理：提醒还款 prepare（写操作）。
+ * 只做本地校验与预览（条数/借款人/剩余待还合计），不发送提醒；签发 continuation 绑定行指纹。
+ */
+const fnaLoanRemindRepayPrepare = {
+    name: 'fna.loan.remind.repay.prepare',
+    resource: 'loan',
+    method: 'loan.remind.repay.prepare',
+    action: 'fna.loan.remind.repay.prepare',
+    summary: '提醒还款（准备）：传入 mainPageList 的 displayData 行，校验并生成预览与 continuation，不发送提醒',
+    capability: 'loan',
+    risk: WRITE,
+    requiresConfirmation: true,
+    inputSchema: schemaOf({
+        type: { type: 'string', description: '提醒类型，默认 batchRemindReimbursement' },
+        data: {
+            type: 'array',
+            items: { type: 'object', description: 'mainPageList 返回的 displayData 行（原样回传）' },
+            minItems: 1,
+            description: '提醒还款记录列表（最多 200 条）',
+        },
+    }, { required: ['data'], description: '借款管理：提醒还款（准备）' }),
+    handler: async (args, { host, continuation }) => {
+        const rows = requireRemindRows(args.data);
+        const session = await host.getSession();
+        const summary = summarizeRemindRows(rows);
+        const token = await continuation.issue({
+            operation: 'fna.loan.remind.repay.apply',
+            baseUrl: session.baseUrl,
+            profile: session.profile,
+            userId: session.userId,
+            fingerprint: fingerprint(rows),
+            count: rows.length,
+        }, CONTINUATION_TTL_SECONDS * 1000);
+        return fnaSuccess('fna.loan.remind.repay.prepare', {
+            status: 'AWAITING_CONFIRMATION',
+            preview: {
+                ...summary,
+                action: '向借款人发送还款提醒通知',
+                hint: '向用户展示条数、借款人、剩余待还合计并获得明确确认后，再调用 fna.loan.remind.repay.apply',
+            },
+            continuation: token,
+            expiresInSeconds: CONTINUATION_TTL_SECONDS,
+        });
+    },
+};
+/**
+ * 借款管理：提醒还款 apply（写操作，需用户明确确认）。
+ * 校验 confirm=true 与 continuation；行集合指纹须与 prepare 一致；POST 后网络中断按不确定结果处理，禁止自动重试。
+ */
+const fnaLoanRemindRepayApply = {
+    name: 'fna.loan.remind.repay.apply',
+    resource: 'loan',
+    method: 'loan.remind.repay.apply',
+    action: 'fna.loan.remind.repay.apply',
+    summary: '提醒还款（执行）：需 confirm=true 与 prepare 返回的 continuation，行集合与 prepare 一致才会发送提醒',
+    capability: 'loan',
+    risk: WRITE,
+    requiresConfirmation: true,
+    inputSchema: schemaOf({
+        type: { type: 'string', description: '提醒类型，默认 batchRemindReimbursement' },
+        data: { type: 'array', items: { type: 'object' }, minItems: 1, description: '与 prepare 相同的 displayData 行' },
+        confirm: { const: true },
+        continuation: { type: 'string', minLength: 1 },
+    }, { required: ['data', 'confirm', 'continuation'], description: '借款管理：提醒还款（执行）' }),
+    handler: async (args, env) => {
+        requireConfirm(args, 'fna.loan.remind.repay.apply');
+        const rows = requireRemindRows(args.data);
+        const lease = await verifyLease(args, 'fna.loan.remind.repay.apply', env);
+        if (fingerprint(rows) !== lease.fingerprint || rows.length !== lease.count) {
+            throw fnaValidationError('target_changed', '提醒记录与 prepare 时的快照不一致，请重新执行 prepare');
+        }
+        const body = { type: args.type ?? 'batchRemindReimbursement', data: rows };
+        let response;
+        try {
+            response = await env.host.request({
+                method: 'POST',
+                path: '/api/fna/expense/loanManagementMenu/remindRepay',
+                body,
+            });
+        }
+        catch (error) {
+            if (isFnaNetworkError(error)) {
+                throw fnaPartialError('提醒还款请求发送后连接中断，是否已发送不确定，禁止自动重试；可通过 fna.loan.main.list 回查或重新 prepare 确认', { attempted: { count: rows.length } }, { stage: 'loan.remindRepay' });
+            }
+            throw error;
+        }
+        const message = response?.data?.msg ?? '提醒还款成功';
+        return fnaSuccess('fna.loan.remind.repay.apply', {
+            msg: message,
+            remindedCount: rows.length,
+            note: '本接口只发送还款提醒，不改变借款/还款金额状态',
+        });
+    },
+};
+export const loanOperations = [
+    fnaLoanMainPage,
+    fnaLoanMainList,
+    fnaLoanRemindRepayPrepare,
+    fnaLoanRemindRepayApply,
+];

package/dist/shortcuts/fna/operations/registry.js

@@ -0,0 +1,35 @@
+import { fnaValidationError } from '../errors.js';
+import { budgetOperations } from './budget.js';
+import { expenseCenterOperations } from './expense-center.js';
+import { loanOperations } from './loan.js';
+import { invoiceWriteOffOperations } from './invoice-writeoff.js';
+function buildRegistry() {
+    const registry = new Map();
+    const definitions = [
+        ...budgetOperations,
+        ...expenseCenterOperations,
+        ...loanOperations,
+        ...invoiceWriteOffOperations,
+    ];
+    for (const definition of definitions) {
+        if (registry.has(definition.name)) {
+            throw new Error(`duplicate fna operation: ${definition.name}`);
+        }
+        registry.set(definition.name, definition);
+    }
+    return registry;
+}
+const fnaOperationRegistry = buildRegistry();
+export function fnaOperationDefinitions() {
+    return [...fnaOperationRegistry.values()];
+}
+export function getFnaOperation(operation) {
+    const definition = fnaOperationRegistry.get(operation);
+    if (!definition) {
+        throw fnaValidationError('operation_unknown', `齐业成费控不支持操作：${operation}`);
+    }
+    return definition;
+}
+export function hasFnaOperation(operation) {
+    return fnaOperationRegistry.has(operation);
+}

package/dist/shortcuts/fna/operations/shared.js

@@ -0,0 +1,210 @@
+import { createHash } from 'node:crypto';
+import { fnaConfirmationError, fnaValidationError } from '../errors.js';
+/** 原型污染防护：禁止出现在输入对象中的键。 */
+const FORBIDDEN_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+export function asObject(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw fnaValidationError('input_not_object', '输入必须是 JSON 对象');
+    }
+    return value;
+}
+export function assertNoForbiddenKeys(input) {
+    for (const key of Object.keys(input)) {
+        if (FORBIDDEN_KEYS.has(key)) {
+            throw fnaValidationError('forbidden_key', `输入包含非法字段：${key}`);
+        }
+    }
+}
+const DATE_PATTERN = /^\d{4}-\d{2}-\d{2}$/;
+function isRealDate(value) {
+    const [year, month, day] = value.split('-').map(Number);
+    if (month < 1 || month > 12)
+        return false;
+    const daysInMonth = new Date(Date.UTC(year, month, 0)).getUTCDate();
+    return day >= 1 && day <= daysInMonth;
+}
+export function assertDate(value, field) {
+    if (typeof value !== 'string' || !DATE_PATTERN.test(value)) {
+        throw fnaValidationError('date_invalid', `${field} 必须是 YYYY-MM-DD 格式`);
+    }
+    if (!isRealDate(value)) {
+        throw fnaValidationError('date_invalid', `${field} 不是合法日期（月份需 01-12，日期需在该月有效范围内）：${value}`);
+    }
+    return value;
+}
+/** 校验可选日期区间：startDate/endDate 必须成对且 start <= end。 */
+export function assertDateRange(args, startField = 'startDate', endField = 'endDate') {
+    const start = args[startField];
+    const end = args[endField];
+    if ((start === undefined || start === null) !== (end === undefined || end === null)) {
+        throw fnaValidationError('date_range_incomplete', `${startField} 与 ${endField} 必须成对提供`);
+    }
+    if (start === undefined || start === null)
+        return {};
+    const startDate = assertDate(start, startField);
+    const endDate = assertDate(end, endField);
+    if (startDate > endDate) {
+        throw fnaValidationError('date_range_invalid', `${startField} 不得晚于 ${endField}`);
+    }
+    return { start: startDate, end: endDate };
+}
+export function toPositiveInt(value, field) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    const numeric = Number(value);
+    if (!Number.isFinite(numeric)) {
+        throw fnaValidationError('number_invalid', `${field} 必须是数字`);
+    }
+    const truncated = Math.trunc(numeric);
+    if (truncated !== numeric || truncated <= 0) {
+        throw fnaValidationError('number_invalid', `${field} 必须是正整数`);
+    }
+    return truncated;
+}
+/**
+ * 把 ID 类字段归一化为 JSON 数字（Long 语义）。
+ * FNA 部分接口（费用中心借款查询实测）只接受数字 ID，字符串会静默返回空 data。
+ * 超过 2^53 的巨型 ID 无法被 JS 数字精确表达，返回 Number 会丢精度，此时保留字符串
+ * 并在结果说明中提示人工核验（真实环境 requestId 一般在安全整数内）。
+ */
+export function numericId(value, field) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw fnaValidationError('id_invalid', `${field} 必须是数字 ID`);
+        return value;
+    }
+    const text = String(value).trim();
+    if (!/^\d+$/.test(text)) {
+        throw fnaValidationError('id_invalid', `${field} 必须是数字 ID`);
+    }
+    const numeric = Number(text);
+    return Number.isSafeInteger(numeric) ? numeric : text;
+}
+/** 取出响应中的业务 data。 */
+export function unwrapData(response) {
+    if (!response || typeof response !== 'object')
+        return response;
+    return response.data;
+}
+/** 金额字符串安全转 float（非法或空回退 0）。 */
+export function toAmount(value) {
+    if (value === undefined || value === null || value === '')
+        return 0;
+    const numeric = Number(String(value).replace(/,/g, ''));
+    return Number.isFinite(numeric) ? numeric : 0;
+}
+export function compact(body) {
+    for (const key of Object.keys(body)) {
+        if (body[key] === undefined)
+            delete body[key];
+    }
+    return body;
+}
+/** 内容指纹：写操作 continuation 绑定目标快照。 */
+export function fingerprint(value) {
+    return createHash('sha256').update(JSON.stringify(value ?? null)).digest('hex').slice(0, 32);
+}
+/** apply 阶段必须先有用户显式确认。 */
+export function requireConfirm(args, action) {
+    if (args.confirm !== true) {
+        throw fnaConfirmationError(action, { hint: '重新调用时传入 confirm=true 与 prepare 返回的 continuation' });
+    }
+}
+/** 校验 continuation 与当前登录上下文一致，避免切换租户/账号后误执行写操作。 */
+export async function verifyLease(args, action, env) {
+    const lease = await env.continuation.verify(args.continuation, action);
+    const session = await env.host.getSession();
+    if (lease.baseUrl !== session.baseUrl || lease.profile !== session.profile || lease.userId !== session.userId) {
+        throw fnaValidationError('context_mismatch', '确认上下文已变化（租户或登录账号不同），请重新执行 prepare');
+    }
+    return lease;
+}
+const MAX_ROWS = 200;
+const MAX_ROWS_BYTES = 80 * 1024;
+/**
+ * 校验借款提醒行（displayData 行对象原样回传）。
+ * 每行必须含 id（数字字符串）与 workflowId（数字字符串），防止凭空构造。
+ */
+export function requireRemindRows(value) {
+    if (!Array.isArray(value) || value.length === 0) {
+        throw fnaValidationError('rows_empty', 'data 必须是非空数组（mainPageList 返回的 displayData 行）');
+    }
+    if (value.length > MAX_ROWS) {
+        throw fnaValidationError('rows_too_many', `一次最多提醒 ${MAX_ROWS} 条记录`);
+    }
+    const rows = value;
+    for (let index = 0; index < rows.length; index += 1) {
+        const row = rows[index];
+        if (!row || typeof row !== 'object' || Array.isArray(row)) {
+            throw fnaValidationError('rows_invalid', `data[${index}] 必须是对象（displayData 行）`);
+        }
+        const id = String(row.id ?? '');
+        const workflowId = String(row.workflowId ?? row.workflowid ?? '');
+        if (!/^\d+$/.test(id) || !/^\d+$/.test(workflowId)) {
+            throw fnaValidationError('rows_invalid', `data[${index}] 缺少合法 id 与 workflowId，无法定位借款记录`);
+        }
+    }
+    const serialized = JSON.stringify(rows);
+    if (Buffer.byteLength(serialized, 'utf8') > MAX_ROWS_BYTES) {
+        throw fnaValidationError('rows_too_large', '提醒记录过大，请分批处理');
+    }
+    return rows;
+}
+/** 汇总借款提醒行：条数、借款人、剩余待还合计、记录 ID。 */
+export function summarizeRemindRows(rows) {
+    const borrowers = [...new Set(rows.map((row) => String(row.jkrPersonName || row.createPerson || row.userId || '').trim()).filter(Boolean))];
+    const totalDhk = rows.reduce((sum, row) => sum + toAmount(row.dhkAmount), 0);
+    const ids = rows.map((row) => String(row.id));
+    return {
+        count: rows.length,
+        borrowers,
+        totalDhkAmount: totalDhk.toFixed(2),
+        ids,
+    };
+}
+/**
+ * 归一化 WeaTable 分页表格响应（借款列表/发票核销列表同构）：
+ * 统一输出 total/current/pageSize/hasMore/pageUid/pageSizeFromPageUid/columns/operates/rows，
+ * rows 优先取 displayData（金额已格式化、时间已转字符串），否则取 data。
+ */
+export function normalizeWeaTable(table, defaults) {
+    const payload = table ?? {};
+    const displayRows = Array.isArray(payload.displayData) ? payload.displayData : null;
+    const rawRows = Array.isArray(payload.data) ? payload.data : [];
+    return {
+        pageUid: payload.pageUid ?? '',
+        total: payload.total ?? 0,
+        current: payload.current ?? defaults.current,
+        pageSize: payload.pageSize ?? defaults.pageSize,
+        hasMore: payload.hasMore ?? false,
+        pageSizeFromPageUid: payload.pageSizeFromPageUid ?? defaults.pageSize,
+        columns: Array.isArray(payload.columns) ? payload.columns : [],
+        operates: Array.isArray(payload.operates) ? payload.operates : [],
+        rows: displayRows ?? rawRows,
+    };
+}
+/**
+ * 校验催票 requestids（writeOffList 返回行的 requestId / id）。
+ * 只允许数字字符串，防止凭空构造或混入非流程 ID。
+ */
+export function requireRequestIds(value) {
+    if (!Array.isArray(value) || value.length === 0) {
+        throw fnaValidationError('requestids_empty', 'requestids 必须是非空数组（writeOffList 返回行的 requestId）');
+    }
+    if (value.length > MAX_ROWS) {
+        throw fnaValidationError('requestids_too_many', `一次最多催票 ${MAX_ROWS} 条记录`);
+    }
+    const ids = value.map((item, index) => {
+        if (item === undefined || item === null || item === '') {
+            throw fnaValidationError('requestids_invalid', `requestids[${index}] 不能为空`);
+        }
+        const text = String(item).trim();
+        if (!/^\d+$/.test(text)) {
+            throw fnaValidationError('requestids_invalid', `requestids[${index}] 必须是数字流程 ID`);
+        }
+        return text;
+    });
+    return ids;
+}

package/dist/shortcuts/fna/operations/types.js

@@ -0,0 +1,25 @@
+export const READ = 'read';
+export const WRITE = 'write';
+export function fnaSuccess(action, data, meta) {
+    const payload = { ok: true, action, data };
+    if (meta && Object.keys(meta).length > 0)
+        payload.meta = meta;
+    return payload;
+}
+/** 构造「对象类型 + 严格禁止额外字段」的 JSON Schema。 */
+export function schemaOf(properties, options = {}) {
+    return {
+        type: 'object',
+        additionalProperties: false,
+        properties,
+        ...(options.required?.length ? { required: options.required } : {}),
+        ...(options.description ? { description: options.description } : {}),
+    };
+}
+export const SCHEMA_INTEGER_POSITIVE = { type: 'integer', minimum: 1 };
+export const SCHEMA_NUMBER_POSITIVE = { type: 'number', exclusiveMinimum: 0 };
+export const SCHEMA_DATE = { type: 'string', pattern: '^\\d{4}-\\d{2}-\\d{2}$' };
+export const SCHEMA_ID = { oneOf: [{ type: 'integer' }, { type: 'string', pattern: '^\\d+$' }] };
+export const SCHEMA_ID_LIST = { type: 'array', items: SCHEMA_ID };
+export const SCHEMA_STRING_LIST = { type: 'array', items: { type: 'string' } };
+export const SCHEMA_STRING_NONEMPTY = { type: 'string', minLength: 1 };

package/dist/shortcuts/fna/operations.js

@@ -0,0 +1,19 @@
+import { getFnaOperation } from './operations/registry.js';
+import { assertNoForbiddenKeys, asObject } from './operations/shared.js';
+export async function executeFnaOperation(operation, rawInput, context) {
+    const definition = getFnaOperation(operation);
+    const input = asObject(rawInput);
+    assertNoForbiddenKeys(input);
+    const host = {
+        request(request) {
+            return context.host.request({
+                ...request,
+                operation: request.operation || operation,
+            });
+        },
+        getSession() {
+            return context.host.getSession();
+        },
+    };
+    return definition.handler(input, { ...context, host });
+}

package/dist/shortcuts/hrm/errors.js

@@ -0,0 +1,38 @@
+import { CliError, ExitCode } from '../../core/errors.js';
+export class HrmCliError extends CliError {
+    type;
+    subtype;
+    code;
+    retryable;
+    stage;
+    details;
+    constructor(type, subtype, message, options = {}) {
+        super(message, options.exitCode ?? ExitCode.InternalError);
+        this.name = 'HrmCliError';
+        this.type = type;
+        this.subtype = subtype;
+        this.code = options.code;
+        this.retryable = options.retryable ?? false;
+        this.stage = options.stage;
+        this.details = options.details;
+    }
+}
+export function hrmValidationError(subtype, message, details) {
+    return new HrmCliError('validation', subtype, message, {
+        details,
+        exitCode: ExitCode.UsageError,
+    });
+}
+export function hrmAuthError(subtype, message, details) {
+    return new HrmCliError('authentication', subtype, message, {
+        details,
+        exitCode: ExitCode.AuthError,
+    });
+}
+export function hrmNetworkError(subtype, message, options = {}) {
+    return new HrmCliError('network', subtype, message, {
+        ...options,
+        retryable: options.retryable ?? true,
+        exitCode: ExitCode.NetworkError,
+    });
+}