weaver-work-cli 0.1.1 → 0.1.4

package/dist/shortcuts/hrm/host.js

@@ -0,0 +1,156 @@
+import { requireE10Session } from '../../internal/e10/context.js';
+import { getActiveProfile } from '../../internal/e10/auth/session.js';
+import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
+import { HrmCliError, hrmAuthError, hrmNetworkError, hrmValidationError } from './errors.js';
+function inferProfile(ctx) {
+    const options = ctx.getGlobalOptions();
+    return options.profile || getActiveProfile();
+}
+/**
+ * HRM 接口统一 WeaResult 响应契约：code=200 成功；403 未开启开关 / 400 参数错误 /
+ * 404 不存在即使 HTTP 200 也视为业务失败。
+ */
+export function isBusinessSuccess(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    if (value.code !== undefined && value.code !== null)
+        return Number(value.code) === 200;
+    if (typeof value.status === 'boolean')
+        return value.status;
+    return false;
+}
+export function businessMessage(value) {
+    if (!value || typeof value !== 'object')
+        return '泛微接口返回业务失败';
+    const candidates = [value.msg, value.message, value.data?.message];
+    for (const item of candidates) {
+        if (typeof item === 'string' && item.trim())
+            return item;
+    }
+    return '泛微接口返回业务失败';
+}
+function businessCode(value) {
+    if (!value || typeof value !== 'object')
+        return undefined;
+    const code = value.code ?? value.status;
+    if (typeof code === 'string' || typeof code === 'number')
+        return code;
+    return undefined;
+}
+function assertPath(requestPath) {
+    if (typeof requestPath !== 'string' || !requestPath.startsWith('/') || requestPath.startsWith('//')) {
+        throw hrmValidationError('path_invalid', '请求路径必须是相对绝对路径');
+    }
+    if (/^https?:/i.test(requestPath) || /[\r\n]/.test(requestPath) || requestPath.includes('/../')) {
+        throw hrmValidationError('path_invalid', '请求路径不允许跨域或路径逃逸');
+    }
+    if (!requestPath.startsWith('/api/')) {
+        throw hrmValidationError('path_not_allowed', '组织管理只能调用 /api/ 路径');
+    }
+}
+function omitEmptyQueryValues(query) {
+    if (!query)
+        return undefined;
+    return Object.fromEntries(Object.entries(query).filter(([, value]) => value !== '' && value !== undefined));
+}
+function mapRuntimeNetworkError(error) {
+    if (error instanceof E10ApiError && error.type === 'network') {
+        throw hrmNetworkError(error.subtype, error.message, {
+            retryable: error.retryable,
+            details: error.details,
+        });
+    }
+    throw error;
+}
+export function createHrmHost(ctx, dependencies = {}) {
+    let e10Session = null;
+    let sessionContext = null;
+    const requireSession = dependencies.requireSession || requireE10Session;
+    async function ensureSession() {
+        if (!e10Session) {
+            e10Session = await requireSession(ctx);
+            sessionContext = {
+                baseUrl: e10Session.getBaseUrl(),
+                profile: inferProfile(ctx),
+                userId: e10Session.userId,
+                tenantKey: e10Session.tenantKey,
+                eteamsId: e10Session.eteamsId,
+            };
+        }
+        return e10Session;
+    }
+    async function getSession() {
+        await ensureSession();
+        return sessionContext;
+    }
+    async function runtime() {
+        return createE10RequestRuntime(ctx, await ensureSession(), {
+            interceptors: dependencies.interceptors,
+            fetch: dependencies.fetch,
+        });
+    }
+    async function request(request) {
+        const { method, path, query, body, operation, headers: extraHeaders = {}, timeoutMs = 30_000 } = request;
+        assertPath(path);
+        // HRM 接口必须带 HRM 页面上下文（Referer），否则网关长时间无响应（实测防坑 2026-08）。
+        // 默认 /hrm/main；orgCard/positionCard 等场景由 operation 通过 headers 覆盖。
+        const session = await getSession();
+        const referer = extraHeaders.Referer || `${session.baseUrl}/hrm/main`;
+        const resolvedMethod = method || (body === undefined ? 'GET' : 'POST');
+        let response;
+        try {
+            response = await (await runtime()).requestJson({
+                module: 'hrm',
+                operation,
+                method: resolvedMethod,
+                path,
+                query: omitEmptyQueryValues(query),
+                body,
+                headers: { 'X-Requested-With': 'XMLHttpRequest', Referer: referer, ...extraHeaders },
+                timeoutMs,
+            });
+        }
+        catch (error) {
+            mapRuntimeNetworkError(error);
+        }
+        if (response.status === 401 || response.status === 302) {
+            throw hrmAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            if (response.status < 200 || response.status >= 300) {
+                throw new HrmCliError('api', 'http_error', `泛微接口 HTTP ${response.status}`, {
+                    code: response.status,
+                    details: { status: response.status },
+                    exitCode: 1,
+                });
+            }
+            throw hrmNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw new HrmCliError('api', 'http_error', `泛微接口 HTTP ${response.status}`, {
+                code: response.status,
+                details: { status: response.status, message: businessMessage(response.value) },
+                exitCode: 1,
+            });
+        }
+        if (!isBusinessSuccess(response.value)) {
+            const code = businessCode(response.value);
+            const message = businessMessage(response.value);
+            // 403 = AI 开放接口 / HRM 读权限未开启，提示明确处置而非盲目重试。
+            if (code === 403) {
+                throw new HrmCliError('api', 'permission_denied', message || '当前租户未开启组织管理读接口，请联系管理员开启后再试', {
+                    code,
+                    details: { code, message },
+                    exitCode: 1,
+                });
+            }
+            throw new HrmCliError('api', 'business_error', message, {
+                code,
+                details: { code, message },
+                exitCode: 1,
+            });
+        }
+        return response.value;
+    }
+    return { request, getSession };
+}

package/dist/shortcuts/hrm/index.js

@@ -0,0 +1,111 @@
+import { readFile } from 'node:fs/promises';
+import { ExitCode, isCliError, toErrorEnvelope } from '../../core/errors.js';
+import { createHrmHost } from './host.js';
+import { hrmManifest } from './manifest.js';
+import { executeHrmOperation } from './operations.js';
+import { hrmValidationError } from './errors.js';
+function asOptions(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    return Buffer.concat(chunks).toString('utf8');
+}
+/**
+ * Windows PowerShell 的管道与 Set-Content -Encoding utf8 会在内容前写入 UTF-8 BOM，
+ * 且可能重复写入多次；JSON.parse 不接受前导 BOM，必须先剥离。
+ */
+function stripBom(value) {
+    return value.replace(/^\uFEFF+/, '');
+}
+export async function inputFrom(options, extra = {}) {
+    const opts = asOptions(options);
+    let input = {};
+    if (opts.input && opts.inputJson) {
+        throw hrmValidationError('input_conflict', '不能同时传 --input 和 --input-json');
+    }
+    if (opts.inputJson) {
+        input = parseJsonInput(String(opts.inputJson), '--input-json');
+    }
+    if (opts.input) {
+        let raw;
+        try {
+            raw = stripBom(opts.input === '-' ? await readStdin() : await readFile(String(opts.input), 'utf8'));
+        }
+        catch {
+            throw hrmValidationError('input_unreadable', `无法读取 --input：${String(opts.input)}`);
+        }
+        input = parseJsonInput(raw, '--input');
+    }
+    return {
+        ...input,
+        ...Object.fromEntries(Object.entries(extra).filter(([, value]) => value !== undefined && value !== '')),
+    };
+}
+function parseJsonInput(raw, label) {
+    try {
+        const parsed = JSON.parse(stripBom(raw));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            throw new Error('input must be an object');
+        }
+        return parsed;
+    }
+    catch {
+        throw hrmValidationError('input_invalid', `${label} 不是合法 JSON 对象`);
+    }
+}
+export function successEnvelope(operation, result) {
+    return {
+        schemaVersion: 1,
+        ok: true,
+        operation,
+        data: result.data === undefined ? null : result.data,
+        ...(result.meta ? { meta: result.meta } : {}),
+        warnings: [],
+    };
+}
+function failureEnvelope(error) {
+    const structured = error;
+    return {
+        schemaVersion: 1,
+        ok: false,
+        error: toErrorEnvelope(error),
+    };
+}
+async function executeAndPrint(ctx, operation, input) {
+    try {
+        const result = await executeHrmOperation(operation, input, {
+            ctx,
+            host: createHrmHost(ctx),
+        });
+        ctx.output.write(successEnvelope(operation, result), { json: true });
+    }
+    catch (error) {
+        console.error(JSON.stringify(failureEnvelope(error), null, 2));
+        process.exitCode = isCliError(error) ? error.exitCode : ExitCode.GeneralError;
+    }
+}
+export const hrmShortcut = {
+    name: 'hrm',
+    description: '泛微E10组织管理（员工/组织/岗位查询）CLI',
+    category: 'shortcut',
+    register({ program, action }) {
+        const hrm = program.command('hrm').description('泛微E10组织管理（员工查询/组织架构/岗位查询）');
+        hrm.command('schema')
+            .description('Print hrm operation manifest for agents')
+            .action(action((ctx) => {
+            ctx.output.write(hrmManifest, { json: true });
+        }));
+        hrm.command('run')
+            .description('Run an hrm operation with JSON input')
+            .argument('<operation>', 'operation name, e.g. hrm.employee.query')
+            .option('--input <path>', 'JSON input file, or - for stdin')
+            .option('--input-json <json>', 'inline JSON input object')
+            .action(action(async (ctx, operation, options) => {
+            await executeAndPrint(ctx, String(operation), await inputFrom(options));
+        }));
+    },
+};

package/dist/shortcuts/hrm/manifest.js

@@ -0,0 +1,32 @@
+import { hrmOperationDefinitions } from './operations/registry.js';
+/**
+ * 代理商查询（containsDls=true）禁用边界：仅泛微自用系统域名支持（自用域名白名单），
+ * 客户/其他环境禁止触发。未实现，不得编造或绕过。
+ */
+const DLS_WITHHELD = ['hrm.employee.dls'];
+function buildOperations() {
+    return hrmOperationDefinitions().map((definition) => ({
+        name: definition.name,
+        resource: definition.resource,
+        summary: definition.summary,
+        risk: definition.risk,
+        inputSchema: definition.inputSchema,
+    }));
+}
+export const hrmManifest = {
+    schemaVersion: 1,
+    name: 'hrm',
+    title: '泛微E10组织管理（员工/组织/岗位查询）',
+    version: '0.1.0',
+    host: 'e10-hrm',
+    status: 'builtin',
+    sourceSkill: 'weaver-e10-hrm',
+    capabilities: ['employee', 'org', 'position'],
+    operations: buildOperations(),
+    withheldOperations: [
+        ...DLS_WITHHELD.map((name) => ({
+            name,
+            reason: '代理商查询（containsDls=true）仅泛微自用系统域名支持（自用域名白名单），客户/其他环境禁止触发；未实现，不得编造或绕过。',
+        })),
+    ],
+};

package/dist/shortcuts/hrm/operations/employee.js

@@ -0,0 +1,338 @@
+import { hrmValidationError } from '../errors.js';
+import { READ, SCHEMA_ID, SCHEMA_ID_LIST, SCHEMA_PAGE, hrmSuccess, schemaOf, } from './types.js';
+import { browserBaseBody, inferEmployeeField, orgLink, personLink, resolveDepartmentIdByName, toNumber, toPositiveInt, toStringIdList, } from './shared.js';
+const EMPLOYEE_STATUS = ['normal', '6'];
+const SUBORDINATE_SCOPE = ['direct', 'indirect', 'all'];
+const SUBORDINATE_BYID_SCOPE = ['direct', 'indirect'];
+/** 手机号脱敏：3 位前缀 + **** + 末 4 位（与 hrm-cli.mjs 一致）。 */
+function maskPhone(p) {
+    const s = p ? String(p) : '';
+    return (s && s.length >= 7) ? s.slice(0, 3) + '****' + s.slice(-4) : s;
+}
+/** 列表接口行 → 精简人员行（附人员卡片 link + 部门卡片 deptLink）。 */
+function formatMember(r, baseUrl) {
+    const deptId = r.departmentId != null && r.departmentId !== '' ? String(r.departmentId) : '';
+    return {
+        name: r.name,
+        id: r.id,
+        userid: r.userid,
+        cid: r.cid,
+        department: r.department,
+        departmentId: deptId,
+        position: r.position,
+        mobile: maskPhone(r.mobile),
+        statusCode: r.statusCode,
+        link: personLink(baseUrl, r.id),
+        deptLink: deptId ? orgLink(baseUrl, deptId) : '',
+    };
+}
+/** 批量详情行 → 精简人员行。 */
+function formatBatch(u, baseUrl) {
+    const deptId = u.departmentId != null && u.departmentId !== '' ? String(u.departmentId) : '';
+    return {
+        name: u.name,
+        id: u.id,
+        jobNum: u.jobNum,
+        department: u.department,
+        departmentId: deptId,
+        subCompany: u.subCompany,
+        position: u.position,
+        mobile: maskPhone(u.mobile),
+        imCid: u.imCid,
+        link: personLink(baseUrl, u.id),
+        deptLink: deptId ? orgLink(baseUrl, deptId) : '',
+    };
+}
+/** 员工浏览收敛条件解析：显式字段优先，其次 keyword 自动推断；空条件抛 empty_condition。 */
+function resolveEmployeeCondition(args) {
+    const explicit = ['email', 'mobile', 'job_num', 'username'].find((k) => {
+        const v = args[k];
+        return v !== undefined && v !== null && String(v).trim() !== '';
+    });
+    if (explicit)
+        return { field: explicit, value: String(args[explicit]).trim() };
+    const keyword = args.keyword === undefined ? '' : String(args.keyword).trim();
+    if (!keyword) {
+        throw hrmValidationError('empty_condition', '员工查询必须携带至少一个收敛条件：keyword（自动推断）或 username/job_num/mobile/email 之一');
+    }
+    const inferred = inferEmployeeField(keyword);
+    return { field: inferred.key, value: inferred.value };
+}
+/** 员工浏览 / 下属查询的 formDatas 组织键空算子占位。 */
+function memberFormDatasBase() {
+    return {
+        subcompany: [{ subcompanyOpt: 'in' }],
+        department: [{ departmentOpt: 'in' }],
+        role: [{ roleOpt: 'in' }],
+        position: [{ positionOpt: 'in' }],
+        superior: [{ superiorOpt: 'in' }],
+    };
+}
+const employeeQuery = {
+    name: 'hrm.employee.query',
+    resource: 'employee',
+    method: 'employee.query',
+    action: 'hrm.employee.query',
+    summary: '按工号/姓名/手机/邮箱（keyword 自动推断或显式字段）查询员工；默认在职，status 传 ["6"] 查离职',
+    risk: READ,
+    inputSchema: schemaOf({
+        keyword: { type: 'string', description: '查询关键词，自动推断：含 @→邮箱；11 位纯数字→手机；纯数字或字母开头含数字→工号；其余→姓名（模糊）' },
+        username: { type: 'string', description: '姓名（模糊匹配）' },
+        job_num: { type: 'string', description: '工号（模糊匹配）' },
+        mobile: { type: 'string', description: '手机号（模糊匹配）' },
+        email: { type: 'string', description: '邮箱（模糊匹配）' },
+        status: { type: 'array', items: { type: 'string', enum: [...EMPLOYEE_STATUS] }, description: '默认 ["normal"] 在职；["6"] 离职。不能单独作为收敛条件' },
+        ...SCHEMA_PAGE,
+    }),
+    handler: async (args, { host }) => {
+        const { field, value } = resolveEmployeeCondition(args);
+        const status = Array.isArray(args.status) && args.status.length > 0 ? args.status : ['normal'];
+        const statusText = status.map((s) => {
+            const text = String(s);
+            if (!EMPLOYEE_STATUS.includes(text)) {
+                throw hrmValidationError('enum_invalid', `status 取值必须是 ${EMPLOYEE_STATUS.join(' / ')} 之一`);
+            }
+            return text;
+        });
+        const formDatas = {
+            ...memberFormDatasBase(),
+            status: [{ statusSelect: statusText }],
+            [field]: [{ [`${field}Opt`]: 'in', [`${field}Input`]: value }],
+        };
+        const body = {
+            ...browserBaseBody(),
+            cmd: 'all',
+            formDatas,
+            quickSearchDatas: {},
+            type: 'and',
+            containsNoneAccount: false,
+            containsPartTimeEmployee: false,
+            containsDls: false,
+        };
+        const current = toPositiveInt(args.current, 'current');
+        const pageSize = toNumber(args.pageSize, 'pageSize');
+        if (current !== undefined)
+            body.current = current;
+        if (pageSize !== undefined)
+            body.pageSize = pageSize;
+        const session = await host.getSession();
+        const baseUrl = session.baseUrl.replace(/\/+$/, '');
+        const countResp = await host.request({ method: 'POST', path: '/api/hrm/common/browser/count/resource', body });
+        const dataResp = await host.request({ method: 'POST', path: '/api/hrm/common/browser/data/resource', body });
+        const total = Number(countResp?.data?.total ?? 0);
+        const rawRows = dataResp?.data?.data ?? [];
+        const rows = rawRows.map((r) => formatMember(r, baseUrl));
+        const lookingNormal = statusText.includes('normal');
+        const hint = lookingNormal && rows.length === 0
+            ? `在职员工未查到「${value}」；若为离职人员，请用 status=["6"] 再查`
+            : undefined;
+        return hrmSuccess('hrm.employee.query', {
+            rows,
+            total,
+            ...(hint ? { hint } : {}),
+        }, { current: current ?? 1, pageSize: pageSize ?? 200 });
+    },
+};
+const employeeBatch = {
+    name: 'hrm.employee.batch',
+    resource: 'employee',
+    method: 'employee.batch',
+    action: 'hrm.employee.batch',
+    summary: '按人员 id 列表批量查询精简详情（每批 ≤100 自动分批，不含部门/岗位/上级名称）',
+    risk: READ,
+    inputSchema: schemaOf({
+        ids: { ...SCHEMA_ID_LIST, description: '人员 id 列表（长整型按字符串）' },
+    }, { required: ['ids'] }),
+    handler: async (args, { host }) => {
+        const ids = toStringIdList(args.ids, 'ids');
+        if (!ids || ids.length === 0) {
+            throw hrmValidationError('ids_required', 'ids 必填且不能为空');
+        }
+        const session = await host.getSession();
+        const baseUrl = session.baseUrl.replace(/\/+$/, '');
+        const collected = [];
+        for (let i = 0; i < ids.length; i += 100) {
+            const resp = await host.request({
+                method: 'POST',
+                path: '/api/hrm/common/getEmployeeByIds',
+                body: { userIdList: ids.slice(i, i + 100), externalIdList: [] },
+                headers: { devtype: '5' },
+            });
+            const userList = resp?.data?.userList ?? [];
+            collected.push(...userList);
+        }
+        const rows = collected.map((r) => formatBatch(r, baseUrl));
+        return hrmSuccess('hrm.employee.batch', { rows, total: rows.length });
+    },
+};
+const employeeDetail = {
+    name: 'hrm.employee.detail',
+    resource: 'employee',
+    method: 'employee.detail',
+    action: 'hrm.employee.detail',
+    summary: '按人员 id 取资料名片（头像/是否管理员/管理者类型/在线状态）；不含姓名/工号/部门/手机',
+    risk: READ,
+    inputSchema: schemaOf({ id: SCHEMA_ID }, { required: ['id'] }),
+    handler: async (args, { host }) => {
+        const id = String(args.id).trim();
+        if (!id)
+            throw hrmValidationError('id_required', 'id 必填');
+        const resp = await host.request({ method: 'GET', path: '/api/hrm/profile/get', query: { id } });
+        const data = resp?.data ?? {};
+        const session = await host.getSession();
+        const baseUrl = session.baseUrl.replace(/\/+$/, '');
+        return hrmSuccess('hrm.employee.detail', { ...data, link: personLink(baseUrl, id) });
+    },
+};
+const subordinateMine = {
+    name: 'hrm.subordinate.mine',
+    resource: 'employee',
+    method: 'subordinate.mine',
+    action: 'hrm.subordinate.mine',
+    summary: '查当前登录人的下属（all 所有/direct 直接/indirect 间接），基于当前会话身份',
+    risk: READ,
+    inputSchema: schemaOf({
+        scope: { type: 'string', enum: [...SUBORDINATE_SCOPE], description: '默认 all；direct 直接 / indirect 间接 / all 所有' },
+        ...SCHEMA_PAGE,
+    }),
+    handler: async (args, { host }) => {
+        const scope = args.scope === undefined ? 'all' : String(args.scope);
+        const subSelected = { direct: 'directSubordinate', indirect: 'indirectSubordinate', all: 'allSubordinate' }[scope] ?? 'allSubordinate';
+        const body = {
+            ...browserBaseBody(),
+            cmd: 'mySubordinate',
+            subSelected,
+            companyId: '1',
+            formDatas: {},
+            quickSearchDatas: {},
+            type: 'and',
+            containsNoneAccount: true,
+            containsPartTimeEmployee: false,
+        };
+        const current = toPositiveInt(args.current, 'current');
+        const pageSize = toNumber(args.pageSize, 'pageSize');
+        if (current !== undefined)
+            body.current = current;
+        if (pageSize !== undefined)
+            body.pageSize = pageSize;
+        const session = await host.getSession();
+        const baseUrl = session.baseUrl.replace(/\/+$/, '');
+        const countResp = await host.request({ method: 'POST', path: '/api/hrm/common/browser/count/resource', body });
+        const dataResp = await host.request({ method: 'POST', path: '/api/hrm/common/browser/data/resource', body });
+        const total = Number(countResp?.data?.total ?? 0);
+        const rawRows = dataResp?.data?.data ?? [];
+        const rows = rawRows.map((r) => formatMember(r, baseUrl));
+        return hrmSuccess('hrm.subordinate.mine', { rows, total, scope }, { current: current ?? 1, pageSize: pageSize ?? 200 });
+    },
+};
+const subordinateById = {
+    name: 'hrm.subordinate.by-id',
+    resource: 'employee',
+    method: 'subordinate.by-id',
+    action: 'hrm.subordinate.by-id',
+    summary: '按目标人员 id 查其直接/间接下属（无需切换会话）；所有下属 = direct + indirect 两次并集',
+    risk: READ,
+    inputSchema: schemaOf({
+        id: SCHEMA_ID,
+        scope: { type: 'string', enum: [...SUBORDINATE_BYID_SCOPE], description: '默认 direct；direct 直接 / indirect 间接' },
+        pageNo: SCHEMA_ID,
+        pageSize: SCHEMA_ID,
+    }, { required: ['id'] }),
+    handler: async (args, { host }) => {
+        const id = String(args.id).trim();
+        if (!id)
+            throw hrmValidationError('id_required', 'id 必填');
+        const scope = args.scope === undefined ? 'direct' : String(args.scope);
+        const path = scope === 'indirect'
+            ? `/api/bs/hrm/user/myIndirectSubordinates/${id}`
+            : `/api/bs/hrm/user/myDirectSubordinates/${id}`;
+        const pageNo = toPositiveInt(args.pageNo, 'pageNo') ?? 1;
+        const pageSize = toNumber(args.pageSize, 'pageSize') ?? 10;
+        const session = await host.getSession();
+        const baseUrl = session.baseUrl.replace(/\/+$/, '');
+        const resp = await host.request({
+            method: 'GET',
+            path,
+            query: { id, pageNo, pageSize, virtualId: '', isMobile: 'false' },
+            headers: { Referer: `${baseUrl}/hrm/addressbook/department` },
+        });
+        const page = resp?.data?.page ?? {};
+        const rawRows = Array.isArray(page.result) ? page.result : [];
+        const rows = rawRows.map((r) => ({
+            id: r.id ?? r.employeeId,
+            name: r.name ?? r.username,
+            pinyin: r.pinyin,
+            telephone: r.telephone,
+            sex: r.sex,
+            personnelStatus: r.personnelStatus,
+            department: r.department,
+            position: r.position,
+            superior: r.superior,
+            link: personLink(baseUrl, r.id ?? r.employeeId),
+        }));
+        return hrmSuccess('hrm.subordinate.by-id', {
+            rows,
+            total: Number(page.totalCount ?? rows.length),
+            scope,
+            page: {
+                pageNo,
+                pageSize,
+                hasNext: page.hasNext ?? false,
+                totalPages: page.totalPages ?? 1,
+            },
+        });
+    },
+};
+const deptMembers = {
+    name: 'hrm.dept.members',
+    resource: 'employee',
+    method: 'dept.members',
+    action: 'hrm.dept.members',
+    summary: '查某部门/分部下的直接成员（部门名或 id；部门名需唯一，重名改用 id）',
+    risk: READ,
+    inputSchema: schemaOf({
+        dept: { type: 'string', description: '部门/分部名称（需唯一）或组织节点 id' },
+        ...SCHEMA_PAGE,
+    }, { required: ['dept'] }),
+    handler: async (args, { host }) => {
+        const raw = args.dept === undefined ? '' : String(args.dept).trim();
+        if (!raw)
+            throw hrmValidationError('dept_required', 'dept 必填');
+        // 纯数字视为组织 id，否则按部门名称精确定位（重名报 dept_ambiguous）。
+        const deptId = /^\d+$/.test(raw) ? raw : String((await resolveDepartmentIdByName(host, raw)).id);
+        const body = {
+            ...browserBaseBody(),
+            secretLevel: '',
+            cmd: 'teams',
+            leftTreeSelectedId: deptId,
+            formDatas: {
+                username: [{ usernameOpt: 'in' }],
+                status: [{ statusSelect: ['normal'] }],
+                subcompany: [{ subcompanyOpt: 'in' }],
+                department: [{ departmentOpt: 'in' }],
+                role: [{ roleOpt: 'in' }],
+                position: [{ positionOpt: 'in' }],
+            },
+        };
+        const current = toPositiveInt(args.current, 'current');
+        const pageSize = toNumber(args.pageSize, 'pageSize') ?? 200;
+        if (current !== undefined)
+            body.current = current;
+        if (pageSize !== undefined)
+            body.pageSize = pageSize;
+        const resp = await host.request({ method: 'POST', path: '/api/mail/base/common/browser/data/resource', body });
+        const rawRows = resp?.data?.data ?? [];
+        const session = await host.getSession();
+        const baseUrl = session.baseUrl.replace(/\/+$/, '');
+        const rows = rawRows.map((r) => formatMember(r, baseUrl));
+        return hrmSuccess('hrm.dept.members', { dept: { id: deptId }, rows, total: rows.length }, { current: current ?? 1, pageSize: pageSize ?? 200 });
+    },
+};
+export const hrmEmployeeOperations = [
+    employeeQuery,
+    employeeBatch,
+    employeeDetail,
+    subordinateMine,
+    subordinateById,
+    deptMembers,
+];