weaver-work-cli 0.1.1 → 0.1.4

package/dist/shortcuts/mail/operations/mail-template.js

@@ -0,0 +1,170 @@
+import { mailValidationError } from '../errors.js';
+import { WRITE, mailSuccess, schemaOf, SCHEMA_STRING } from './types.js';
+const CONTINUATION_TTL_MS = 600_000;
+const TEMPLATE_SCHEMA = schemaOf({
+    id: SCHEMA_STRING,
+    templateType: SCHEMA_STRING,
+    subject: SCHEMA_STRING,
+    mailSubject: SCHEMA_STRING,
+    clobContent: SCHEMA_STRING,
+    templateDesc: SCHEMA_STRING,
+    defaultUse: SCHEMA_STRING,
+    contentId: SCHEMA_STRING,
+    confirm: { type: 'boolean' },
+    continuation: SCHEMA_STRING,
+}, { description: '模板保存（prepare/apply）' });
+function buildTemplateBody(args) {
+    const subject = String(args.subject || '').trim();
+    const clobContent = String(args.clobContent || '').trim();
+    if (!subject)
+        throw new Error('subject（模板主题）必填');
+    if (!clobContent)
+        throw new Error('clobContent（Base64 编码的 HTML 内容）必填');
+    const body = {
+        templateType: args.templateType ? String(args.templateType) : 'personal',
+        subject,
+        mailSubject: args.mailSubject ? String(args.mailSubject) : subject,
+        clobContent,
+        templateDesc: args.templateDesc ? String(args.templateDesc) : '',
+        defaultUse: args.defaultUse !== undefined ? Number(args.defaultUse) : 0,
+        contentId: args.contentId ? String(args.contentId) : 'null',
+        id: 'null',
+        templateFile: [],
+    };
+    if (args.id)
+        body.id = String(args.id);
+    return body;
+}
+const opTemplateSavePrepare = {
+    name: 'mail.template.save.prepare',
+    resource: 'mail/base/setting/template/saveMailTemplate',
+    method: 'POST',
+    action: 'mail.template.save.prepare',
+    summary: '新增模板（prepare，不保存）',
+    risk: WRITE,
+    requiresConfirmation: true,
+    inputSchema: TEMPLATE_SCHEMA,
+    async handler(args, env) {
+        const body = buildTemplateBody(args);
+        const session = await env.host.getSession();
+        const continuation = await env.continuation.issue({
+            operation: 'mail.template.save.apply',
+            baseUrl: session.baseUrl,
+            profile: session.profile,
+            userId: session.userId,
+            body,
+        }, CONTINUATION_TTL_MS);
+        return mailSuccess('mail.template.save.prepare', {
+            subject: body.subject,
+            templateType: body.templateType,
+            defaultUse: body.defaultUse,
+            tip: '确认后以 mail template save --apply --continuation <token> --yes 执行保存',
+        }, { continuation });
+    },
+};
+const opTemplateSaveApply = {
+    name: 'mail.template.save.apply',
+    resource: 'mail/base/setting/template/saveMailTemplate',
+    method: 'POST',
+    action: 'mail.template.save.apply',
+    summary: '执行新增模板',
+    risk: WRITE,
+    requiresConfirmation: true,
+    inputSchema: TEMPLATE_SCHEMA,
+    async handler(args, env) {
+        if (args.confirm !== true)
+            throw new Error('mail.template.save.apply 必须传入 confirm=true 与 prepare 返回的 continuation');
+        if (!args.continuation)
+            throw new Error('mail.template.save.apply 必须传入 prepare 返回的 continuation');
+        const lease = await env.continuation.verify(String(args.continuation), 'mail.template.save.apply');
+        const session = await env.host.getSession();
+        if (lease.baseUrl !== session.baseUrl || lease.profile !== session.profile || lease.userId !== session.userId) {
+            throw mailValidationError('context_mismatch', '确认上下文已变化（租户或登录账号不同），请重新执行 prepare');
+        }
+        const value = (await env.host.request({ path: '/api/mail/base/setting/template/saveMailTemplate', method: 'POST', body: lease.body }));
+        return mailSuccess('mail.template.save.apply', { id: value?.data ?? 'SUCCESS' }, {});
+    },
+};
+const opTemplateUpdate = {
+    name: 'mail.template.update',
+    resource: 'mail/base/setting/template/updateMailTemplate',
+    method: 'POST',
+    action: 'mail.template.update',
+    summary: '编辑模板（GET 全量 + 保存）',
+    risk: WRITE,
+    inputSchema: schemaOf({
+        id: { type: 'string', description: '模板 id' },
+        subject: SCHEMA_STRING,
+        clobContent: SCHEMA_STRING,
+        templateDesc: SCHEMA_STRING,
+        defaultUse: SCHEMA_STRING,
+        templateType: SCHEMA_STRING,
+    }, { required: ['id'], description: '编辑模板' }),
+    async handler(args, env) {
+        const id = String(args.id || '').trim();
+        if (!id)
+            throw new Error('id（模板 id）必填');
+        const info = (await env.host.request({
+            path: '/api/mail/base/setting/template/getMailTemplateInfo',
+            method: 'POST',
+            form: { id, fromModule: 'mail' },
+        }));
+        const cur = info?.data || {};
+        const body = {
+            id,
+            templateType: args.templateType ? String(args.templateType) : (cur.templateType ?? 'personal'),
+            mailSubject: args.mailSubject ? String(args.mailSubject) : (cur.mailSubject ?? ''),
+            subject: args.subject ? String(args.subject) : (cur.subject ?? ''),
+            clobContent: args.clobContent ? String(args.clobContent) : (cur.clobContent ?? ''),
+            templateDesc: args.templateDesc ? String(args.templateDesc) : (cur.templateDesc ?? ''),
+            defaultUse: args.defaultUse !== undefined ? Number(args.defaultUse) : (cur.defaultUse ?? 0),
+            contentId: cur.contentId ?? 'null',
+            templateFile: cur.templateFile ?? [],
+        };
+        if (!body.subject)
+            throw new Error('模板主题为空（原值缺失且未提供 subject）');
+        if (!body.clobContent)
+            throw new Error('模板内容为空（原值缺失且未提供 clobContent）');
+        const value = (await env.host.request({ path: '/api/mail/base/setting/template/updateMailTemplate', method: 'POST', body }));
+        return mailSuccess('mail.template.update', value?.data ?? 'SUCCESS', { id });
+    },
+};
+const opTemplateDelete = {
+    name: 'mail.template.delete',
+    resource: 'mail/base/setting/template/deleteMailTemplate',
+    method: 'POST',
+    action: 'mail.template.delete',
+    summary: '删除模板',
+    risk: WRITE,
+    inputSchema: schemaOf({ id: { type: 'string', description: '模板 id' } }, { required: ['id'], description: '删除模板' }),
+    async handler(args, env) {
+        const id = String(args.id || '').trim();
+        if (!id)
+            throw new Error('id（模板 id）必填');
+        const value = (await env.host.request({ path: '/api/mail/base/setting/template/deleteMailTemplate', method: 'POST', body: { id } }));
+        return mailSuccess('mail.template.delete', value?.data ?? 'SUCCESS', { id });
+    },
+};
+const opTemplateDefault = {
+    name: 'mail.template.default',
+    resource: 'mail/base/setting/template/defaultMailTemplate',
+    method: 'POST',
+    action: 'mail.template.default',
+    summary: '设为默认模板',
+    risk: WRITE,
+    inputSchema: schemaOf({ id: { type: 'string', description: '模板 id' } }, { required: ['id'], description: '设默认模板' }),
+    async handler(args, env) {
+        const id = String(args.id || '').trim();
+        if (!id)
+            throw new Error('id（模板 id）必填');
+        const value = (await env.host.request({ path: '/api/mail/base/setting/template/defaultMailTemplate', method: 'POST', body: { id } }));
+        return mailSuccess('mail.template.default', value?.data ?? 'SUCCESS', { id });
+    },
+};
+export const mailTemplateOperations = [
+    opTemplateSavePrepare,
+    opTemplateSaveApply,
+    opTemplateUpdate,
+    opTemplateDelete,
+    opTemplateDefault,
+];

package/dist/shortcuts/mail/operations/registry.js

@@ -0,0 +1,41 @@
+import { mailValidationError } from '../errors.js';
+import { mailReadOperations } from './mail-read.js';
+import { mailSendOperations } from './mail-send.js';
+import { mailManageOperations } from './mail-manage.js';
+import { mailContactsOperations } from './mail-contacts.js';
+import { mailTemplateOperations } from './mail-template.js';
+import { mailSignOperations } from './mail-sign.js';
+import { mailBlacklistOperations } from './mail-blacklist.js';
+function buildRegistry() {
+    const registry = new Map();
+    const definitions = [
+        ...mailReadOperations,
+        ...mailSendOperations,
+        ...mailManageOperations,
+        ...mailContactsOperations,
+        ...mailTemplateOperations,
+        ...mailSignOperations,
+        ...mailBlacklistOperations,
+    ];
+    for (const definition of definitions) {
+        if (registry.has(definition.name)) {
+            throw new Error(`duplicate mail operation: ${definition.name}`);
+        }
+        registry.set(definition.name, definition);
+    }
+    return registry;
+}
+const mailOperationRegistry = buildRegistry();
+export function mailOperationDefinitions() {
+    return [...mailOperationRegistry.values()];
+}
+export function getMailOperation(operation) {
+    const definition = mailOperationRegistry.get(operation);
+    if (!definition) {
+        throw mailValidationError('operation_unknown', `邮件模块不支持操作：${operation}`);
+    }
+    return definition;
+}
+export function hasMailOperation(operation) {
+    return mailOperationRegistry.has(operation);
+}

package/dist/shortcuts/mail/operations/shared.js

@@ -0,0 +1,64 @@
+import { mailValidationError } from '../errors.js';
+const FORBIDDEN_KEYS = new Set(['__proto__', 'constructor', 'prototype']);
+export function asObject(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw mailValidationError('input_not_object', '输入必须是 JSON 对象');
+    }
+    return value;
+}
+export function assertNoForbiddenKeys(input) {
+    for (const key of Object.keys(input)) {
+        if (FORBIDDEN_KEYS.has(key)) {
+            throw mailValidationError('forbidden_key', `输入包含非法字段：${key}`);
+        }
+    }
+}
+/** 移除值为 undefined 的键，避免把空值写进请求体。 */
+export function compact(body) {
+    for (const key of Object.keys(body)) {
+        if (body[key] === undefined)
+            delete body[key];
+    }
+    return body;
+}
+export function toNumber(value, field) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    const numeric = Number(value);
+    if (!Number.isFinite(numeric)) {
+        throw mailValidationError('number_invalid', `${field} 必须是数字`);
+    }
+    return numeric;
+}
+export function toPositiveInt(value, field) {
+    if (value === undefined || value === null || value === '')
+        return undefined;
+    const numeric = Number(value);
+    if (!Number.isFinite(numeric)) {
+        throw mailValidationError('number_invalid', `${field} 必须是数字`);
+    }
+    const truncated = Math.trunc(numeric);
+    if (truncated !== numeric || truncated <= 0) {
+        throw mailValidationError('number_invalid', `${field} 必须是正整数`);
+    }
+    return truncated;
+}
+/** ID 归一化为 string[]（部分接口要求字符串 id，19 位 id 必须保持字符串防精度丢失）。 */
+export function toStringIdList(value, field) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (!Array.isArray(value))
+        throw mailValidationError('id_list_invalid', `${field} 必须是 ID 数组`);
+    return value.map((item, index) => {
+        if (item === undefined || item === null || item === '') {
+            throw mailValidationError('id_list_invalid', `${field}[${index}] 不能为空`);
+        }
+        return String(item);
+    });
+}
+/** 取响应中的业务数据。 */
+export function unwrapData(response) {
+    if (!response || typeof response !== 'object')
+        return response;
+    return response.data;
+}

package/dist/shortcuts/mail/operations/types.js

@@ -0,0 +1,27 @@
+export const READ = 'read';
+export const WRITE = 'write';
+export function mailSuccess(action, data, meta) {
+    const payload = { ok: true, action, data };
+    if (meta && Object.keys(meta).length > 0)
+        payload.meta = meta;
+    return payload;
+}
+/** 构造「对象类型 + 严格禁止额外字段」的 JSON Schema。 */
+export function schemaOf(properties, options = {}) {
+    return {
+        type: 'object',
+        additionalProperties: false,
+        properties,
+        ...(options.required?.length ? { required: options.required } : {}),
+        ...(options.description ? { description: options.description } : {}),
+    };
+}
+export const SCHEMA_STRING = { type: 'string' };
+export const SCHEMA_STRING_LIST = { type: 'array', items: { type: 'string' } };
+export const SCHEMA_INTEGER = { type: 'integer' };
+export const SCHEMA_BOOLEAN = { type: 'boolean' };
+export const SCHEMA_POSITIVE_INT = { type: 'integer', minimum: 1 };
+export const SCHEMA_ID = {
+    oneOf: [{ type: 'integer' }, { type: 'string', pattern: '^\\d+$' }],
+};
+export const SCHEMA_ID_LIST = { type: 'array', items: SCHEMA_ID };

package/dist/shortcuts/mail/operations.js

@@ -0,0 +1,19 @@
+import { getMailOperation } from './operations/registry.js';
+import { assertNoForbiddenKeys, asObject } from './operations/shared.js';
+export async function executeMailOperation(operation, rawInput, context) {
+    const definition = getMailOperation(operation);
+    const input = asObject(rawInput);
+    assertNoForbiddenKeys(input);
+    const host = {
+        request(request) {
+            return context.host.request({
+                ...request,
+                operation: request.operation || operation,
+            });
+        },
+        getSession() {
+            return context.host.getSession();
+        },
+    };
+    return definition.handler(input, { ...context, host });
+}

package/dist/shortcuts/plan/continuation.js

@@ -0,0 +1,70 @@
+import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { resolve } from 'node:path';
+import { planValidationError } from './errors.js';
+export function planStateRoot(ctx) {
+    const configured = ctx?.config?.path();
+    if (configured)
+        return resolve(configured, '..');
+    return process.env.WEAVER_WORK_CLI_HOME || process.env.WORK_CLI_HOME || resolve(homedir(), '.weaver-work-cli');
+}
+async function loadKey(ctx) {
+    const keysDir = resolve(planStateRoot(ctx), 'keys');
+    const filename = resolve(keysDir, 'plan-continuation.key');
+    await mkdir(keysDir, { recursive: true, mode: 0o700 });
+    if (existsSync(filename))
+        return readFile(filename);
+    const key = randomBytes(32);
+    try {
+        await writeFile(filename, key, { flag: 'wx', mode: 0o600 });
+        if (process.platform !== 'win32')
+            await chmod(filename, 0o600).catch(() => undefined);
+        return key;
+    }
+    catch {
+        return readFile(filename);
+    }
+}
+function encode(value) {
+    return Buffer.from(JSON.stringify(value)).toString('base64url');
+}
+function signature(payload, key) {
+    return createHmac('sha256', key).update(payload).digest('base64url');
+}
+export function createPlanContinuationSigner(ctx) {
+    return {
+        async issue(payload, ttlMs = 10 * 60_000) {
+            const issuedAt = Date.now();
+            const body = encode({ ...payload, issuedAt, expiresAt: issuedAt + ttlMs });
+            const sig = signature(body, await loadKey(ctx));
+            return `${body}.${sig}`;
+        },
+        async verify(token, expectedOperation) {
+            if (typeof token !== 'string' || !token.includes('.')) {
+                throw planValidationError('continuation_invalid', 'continuation 无效');
+            }
+            const [body, provided] = token.split('.');
+            const expected = signature(body, await loadKey(ctx));
+            const valid = provided.length === expected.length
+                && timingSafeEqual(Buffer.from(provided), Buffer.from(expected));
+            if (!valid)
+                throw planValidationError('continuation_invalid', 'continuation 签名校验失败');
+            let value;
+            try {
+                value = JSON.parse(Buffer.from(body, 'base64url').toString('utf8'));
+            }
+            catch {
+                throw planValidationError('continuation_invalid', 'continuation 内容无法解析');
+            }
+            if (value.operation !== expectedOperation) {
+                throw planValidationError('continuation_mismatch', 'continuation 不属于当前操作');
+            }
+            if (!Number.isSafeInteger(value.expiresAt) || value.expiresAt < Date.now()) {
+                throw planValidationError('continuation_expired', 'continuation 已过期');
+            }
+            return value;
+        },
+    };
+}

package/dist/shortcuts/plan/errors.js

@@ -0,0 +1,70 @@
+import { CliError, ExitCode } from '../../core/errors.js';
+export class PlanCliError extends CliError {
+    type;
+    subtype;
+    code;
+    retryable;
+    stage;
+    details;
+    partialData;
+    constructor(type, subtype, message, options = {}) {
+        super(message, options.exitCode ?? ExitCode.InternalError);
+        this.name = 'PlanCliError';
+        this.type = type;
+        this.subtype = subtype;
+        this.code = options.code;
+        this.retryable = options.retryable ?? false;
+        this.stage = options.stage;
+        this.details = options.details;
+        this.partialData = options.partialData;
+    }
+}
+export function planValidationError(subtype, message, details) {
+    return new PlanCliError('validation', subtype, message, {
+        details,
+        exitCode: ExitCode.UsageError,
+    });
+}
+export function planAuthError(subtype, message, details) {
+    return new PlanCliError('authentication', subtype, message, {
+        details,
+        exitCode: ExitCode.AuthError,
+    });
+}
+export function planNetworkError(subtype, message, options = {}) {
+    return new PlanCliError('network', subtype, message, {
+        ...options,
+        retryable: options.retryable ?? true,
+        exitCode: ExitCode.NetworkError,
+    });
+}
+export function planApiError(subtype, message, details) {
+    return new PlanCliError('api', subtype, message, {
+        details,
+        exitCode: ExitCode.GeneralError,
+    });
+}
+export function planConfirmationError(action, details) {
+    return new PlanCliError('confirmation', 'required', '该操作需要明确确认', {
+        details: { action, ...details },
+        exitCode: ExitCode.ConfirmationRequired,
+    });
+}
+/** 当前接口链路不支持该能力：不是输入错误，而是源资料未提供该链路的实现依据。 */
+export function planUnsupportedError(subtype, message, details) {
+    return new PlanCliError('policy', subtype, message, {
+        details,
+        exitCode: ExitCode.PolicyError,
+    });
+}
+export function planPartialError(message, partialData, details) {
+    return new PlanCliError('partial', 'write_uncertain', message, {
+        details,
+        partialData,
+        exitCode: ExitCode.Partial,
+    });
+}
+/** 按结构化错误的 type 判定类型（不依赖类实例，兼容包装过的错误对象）。 */
+export function isPlanErrorType(error, type) {
+    return Boolean(error && typeof error === 'object' && error.type === type);
+}

package/dist/shortcuts/plan/host.js

@@ -0,0 +1,180 @@
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { getActiveProfile } from '../../internal/e10/auth/session.js';
+import { requireE10Session } from '../../internal/e10/context.js';
+import { E10ApiError, createE10RequestRuntime } from '../../internal/e10/request-runtime.js';
+import { planStateRoot } from './continuation.js';
+import { PlanCliError, planAuthError, planNetworkError, planValidationError } from './errors.js';
+function inferProfile(ctx) {
+    const options = ctx.getGlobalOptions();
+    return options.profile || getActiveProfile();
+}
+function cacheFilename(root, key) {
+    const digest = createHash('sha256').update(key).digest('hex').slice(0, 40);
+    return resolve(root, 'cache', 'plan', `${digest}.json`);
+}
+async function readCacheFile(root, key) {
+    const file = cacheFilename(root, key);
+    if (!existsSync(file))
+        return undefined;
+    try {
+        const parsed = JSON.parse(await readFile(file, 'utf8'));
+        if (parsed.key !== key)
+            return undefined;
+        if (typeof parsed.expiresAt === 'number' && parsed.expiresAt < Date.now())
+            return undefined;
+        return parsed.value;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function writeCacheFile(root, key, value, ttlMs) {
+    const file = cacheFilename(root, key);
+    await mkdir(resolve(file, '..'), { recursive: true });
+    const payload = {
+        key,
+        value,
+        expiresAt: ttlMs === undefined ? null : Date.now() + ttlMs,
+        updatedAt: new Date().toISOString(),
+    };
+    await writeFile(file, `${JSON.stringify(payload)}\n`, 'utf8');
+}
+/** 统一业务错误消息提取。 */
+export function businessMessage(value) {
+    if (!value || typeof value !== 'object')
+        return '泛微接口返回业务失败';
+    const candidates = [
+        value.msg,
+        value.message,
+        value.resultMsg,
+        value.datajson?.message,
+        value.datajson?.msg,
+    ];
+    for (const item of candidates) {
+        if (typeof item === 'string' && item.trim())
+            return item;
+    }
+    return '泛微接口返回业务失败';
+}
+/** ebuilder datajson 结构成功判定：`datajson.status === true`（兼容字符串 "true"）。 */
+export function isDatajsonSuccess(value) {
+    const status = value?.datajson?.status;
+    return status === true || status === 'true';
+}
+/** 标准版标记型成功判定：`status` 为 "1" / 1 / true。 */
+export function isFlagSuccess(value) {
+    const status = value?.status;
+    return status === '1' || status === 1 || status === true;
+}
+/** 提醒类接口成功判定：`code === 200` 且非 `status === false`。 */
+export function isWeaverCodeSuccess(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    if (Number(value.code) !== 200)
+        return false;
+    return value.status !== false && value.status !== 'false';
+}
+function assertPath(requestPath) {
+    if (typeof requestPath !== 'string' || !requestPath.startsWith('/') || requestPath.startsWith('//')) {
+        throw planValidationError('path_invalid', '请求路径必须是相对绝对路径');
+    }
+    if (/^https?:/i.test(requestPath) || /[\r\n]/.test(requestPath) || requestPath.includes('/../')) {
+        throw planValidationError('path_invalid', '请求路径不允许跨域或路径逃逸');
+    }
+    if (!requestPath.startsWith('/api/')) {
+        throw planValidationError('path_not_allowed', '计划报告模块只能调用 /api/ 路径');
+    }
+}
+function omitEmptyQueryValues(query) {
+    if (!query)
+        return undefined;
+    return Object.fromEntries(Object.entries(query).filter(([, value]) => value !== '' && value !== undefined && value !== null));
+}
+function mapRuntimeNetworkError(error) {
+    if (error instanceof E10ApiError && error.type === 'network') {
+        throw planNetworkError(error.subtype, error.message, {
+            retryable: error.retryable,
+            details: error.details,
+        });
+    }
+    throw error;
+}
+export function createPlanHost(ctx, dependencies = {}) {
+    let e10Session = null;
+    let sessionContext = null;
+    const requireSession = dependencies.requireSession || requireE10Session;
+    const cacheRoot = planStateRoot(ctx);
+    async function ensureSession() {
+        if (!e10Session) {
+            e10Session = await requireSession(ctx);
+            sessionContext = {
+                baseUrl: e10Session.getBaseUrl(),
+                profile: inferProfile(ctx),
+                userId: e10Session.userId,
+                tenantKey: e10Session.tenantKey,
+                eteamsId: e10Session.eteamsId,
+            };
+        }
+        return e10Session;
+    }
+    async function getSession() {
+        await ensureSession();
+        return sessionContext;
+    }
+    async function runtime() {
+        return createE10RequestRuntime(ctx, await ensureSession(), {
+            interceptors: dependencies.interceptors,
+            fetch: dependencies.fetch,
+        });
+    }
+    async function request(request) {
+        const { method, path, query, body, operation, timeoutMs = 30_000 } = request;
+        assertPath(path);
+        let response;
+        try {
+            response = await (await runtime()).requestJson({
+                module: 'plan',
+                operation,
+                method: (method || 'POST').toUpperCase(),
+                path,
+                query: omitEmptyQueryValues(query),
+                body,
+                headers: { 'X-Requested-With': 'XMLHttpRequest' },
+                timeoutMs,
+            });
+        }
+        catch (error) {
+            mapRuntimeNetworkError(error);
+        }
+        if (response.status === 401 || response.status === 302) {
+            throw planAuthError('session_expired', 'E10 登录态已失效，请先向用户确认 E10 登录域名，再运行 weaver-work-cli auth login --base-url <域名> 完成登录', { httpStatus: response.status });
+        }
+        if (response.parseError) {
+            throw planNetworkError('protocol', `接口返回不是合法 JSON（HTTP ${response.status}）`, { retryable: false });
+        }
+        if (response.status === 404) {
+            throw new PlanCliError('api', 'endpoint_not_found', `接口返回 404，当前环境可能未安装「计划报告」相关应用或接口（${path}）`, {
+                code: response.status,
+                details: { path },
+                exitCode: 1,
+            });
+        }
+        if (response.status < 200 || response.status >= 300) {
+            throw new PlanCliError('api', 'http_error', `泛微接口 HTTP ${response.status}`, {
+                code: response.status,
+                details: { status: response.status, message: businessMessage(response.value) },
+                exitCode: 1,
+            });
+        }
+        return response.value;
+    }
+    return {
+        request,
+        getSession,
+        getCache: (key) => readCacheFile(cacheRoot, key),
+        setCache: (key, value, ttlMs) => writeCacheFile(cacheRoot, key, value, ttlMs),
+    };
+}